./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2082787024 <...> Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. execve("./syz-executor2082787024", ["./syz-executor2082787024"], 0x7fff32fef1b0 /* 10 vars */) = 0 brk(NULL) = 0x555571cf2000 brk(0x555571cf2d00) = 0x555571cf2d00 arch_prctl(ARCH_SET_FS, 0x555571cf2380) = 0 set_tid_address(0x555571cf2650) = 296 set_robust_list(0x555571cf2660, 24) = 0 rseq(0x555571cf2ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2082787024", 4096) = 28 getrandom("\x75\xa7\x99\x12\xa8\xc5\x67\xb0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555571cf2d00 brk(0x555571d13d00) = 0x555571d13d00 brk(0x555571d14000) = 0x555571d14000 mprotect(0x7f39d9e96000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x555571cf2660, 24) = 0 [pid 296] <... clone resumed>, child_tidptr=0x555571cf2650) = 297 [pid 297] mkdir("./syzkaller.01XtRZ", 0700 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... mkdir resumed>) = 0 [pid 296] <... clone resumed>, child_tidptr=0x555571cf2650) = 298 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] chmod("./syzkaller.01XtRZ", 0777) = 0 [pid 296] <... clone resumed>, child_tidptr=0x555571cf2650) = 299 [pid 297] chdir("./syzkaller.01XtRZ") = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] unshare(CLONE_NEWPID) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... clone resumed>, child_tidptr=0x555571cf2650) = 300 [pid 297] <... clone resumed>, child_tidptr=0x555571cf2650) = 301 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x555571cf2660, 24) = 0 [pid 298] mkdir("./syzkaller.CkHHrz", 0700) = 0 [pid 298] chmod("./syzkaller.CkHHrz", 0777) = 0 [pid 298] chdir("./syzkaller.CkHHrz") = 0 [pid 298] unshare(CLONE_NEWPID) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 302 ./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x555571cf2660, 24) = 0 [pid 299] mkdir("./syzkaller.BuRNRq", 0700) = 0 [pid 299] chmod("./syzkaller.BuRNRq", 0777) = 0 [pid 299] chdir("./syzkaller.BuRNRq") = 0 [pid 299] unshare(CLONE_NEWPID) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 303 ./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x555571cf2660, 24) = 0 [pid 300] mkdir("./syzkaller.U70EcW", 0700) = 0 [pid 300] chmod("./syzkaller.U70EcW", 0777) = 0 [pid 300] chdir("./syzkaller.U70EcW") = 0 [pid 300] unshare(CLONE_NEWPID) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 304 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x555571cf2660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] getppid() = 0 [pid 301] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 301] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 301] unshare(CLONE_NEWNS) = 0 [pid 301] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 301] unshare(CLONE_NEWCGROUP) = 0 [pid 301] unshare(CLONE_NEWUTS) = 0 [pid 301] unshare(CLONE_SYSVSEM) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] getpid() = 1 [pid 301] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] set_robust_list(0x555571cf2660, 24 [pid 303] set_robust_list(0x555571cf2660, 24 [pid 304] set_robust_list(0x555571cf2660, 24 [pid 302] <... set_robust_list resumed>) = 0 [pid 303] <... set_robust_list resumed>) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... set_robust_list resumed>) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... unshare resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "0 65535", 7) = 7 [pid 301] close(3) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "100000", 6) = 6 [pid 301] close(3) = 0 [pid 301] mkdir("./syz-tmp", 0777) = 0 [pid 301] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 301] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 301] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 301] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 301] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 301] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 302] <... prctl resumed>) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] <... prctl resumed>) = 0 [pid 302] getppid( [pid 301] <... mount resumed>) = 0 [pid 304] <... prctl resumed>) = 0 [pid 303] getppid( [pid 302] <... getppid resumed>) = 0 [pid 301] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 302] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 303] <... getppid resumed>) = 0 [pid 304] getppid() = 0 [pid 303] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 301] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 301] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 301] chdir("/") = 0 [pid 301] umount2("./pivot", MNT_DETACH [pid 304] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 304] unshare(CLONE_NEWNS) = 0 [pid 304] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 304] unshare(CLONE_NEWCGROUP) = 0 [pid 304] unshare(CLONE_NEWUTS) = 0 [pid 304] unshare(CLONE_SYSVSEM) = 0 [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] getpid() = 1 [pid 304] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 303] <... prlimit64 resumed>NULL) = 0 [pid 302] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 304] <... mount resumed>) = 0 [pid 303] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] <... umount2 resumed>) = 0 [pid 304] mkdir("./syz-tmp/newroot", 0777 [pid 301] chroot("./newroot" [pid 304] <... mkdir resumed>) = 0 [pid 301] <... chroot resumed>) = 0 [pid 301] chdir("/") = 0 [pid 304] mkdir("./syz-tmp/newroot/dev", 0700 [pid 301] mkdir("/dev/gadgetfs", 0777 [pid 304] <... mkdir resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 304] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 304] mkdir("./syz-tmp/newroot/proc", 0700 [pid 301] <... mount resumed>) = -1 ENODEV (No such device) [pid 304] <... mkdir resumed>) = 0 [pid 304] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 301] mkdir("/dev/binderfs", 0777) = 0 [pid 304] <... mount resumed>) = 0 [pid 301] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 304] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 301] <... mount resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 304] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 304] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 304] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 304] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 304] <... mount resumed>) = 0 [pid 304] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] mkdir("./0", 0777 [pid 304] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 304] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 304] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 304] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 2 [pid 304] chdir("/") = 0 [pid 304] umount2("./pivot", MNT_DETACH [pid 303] <... prlimit64 resumed>NULL) = 0 [pid 303] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 303] unshare(CLONE_NEWNS) = 0 [pid 303] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 303] unshare(CLONE_NEWCGROUP) = 0 [pid 303] unshare(CLONE_NEWUTS) = 0 [pid 303] unshare(CLONE_SYSVSEM) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] getpid() = 1 [pid 303] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 304] <... umount2 resumed>) = 0 [pid 302] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, ./strace-static-x86_64: Process 305 attached NULL) = 0 [pid 302] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 305] set_robust_list(0x555571cf2660, 24 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 304] chroot("./newroot" [pid 303] <... unshare resumed>) = 0 [pid 304] <... chroot resumed>) = 0 [pid 304] chdir("/") = 0 [pid 304] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 304] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [ 23.691491][ T36] audit: type=1400 audit(1752387971.109:66): avc: denied { mounton } for pid=301 comm="syz-executor208" path="/root/syzkaller.01XtRZ/syz-tmp" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 23.716962][ T36] audit: type=1400 audit(1752387971.109:67): avc: denied { mount } for pid=301 comm="syz-executor208" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [pid 304] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 304] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 304] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 304] mkdir("./0", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 2 [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "0 65535", 7) = 7 [pid 303] close(3) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "100000", 6) = 6 [pid 303] close(3) = 0 [pid 303] mkdir("./syz-tmp", 0777) = 0 [pid 303] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 303] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 303] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 303] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 303] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 303] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 303] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 303] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 303] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 303] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 303] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 303] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 303] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 303] chdir("/") = 0 [pid 303] umount2("./pivot", MNT_DETACH [pid 305] <... set_robust_list resumed>) = 0 [pid 305] chdir("./0") = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 executing program [pid 305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 305] write(1, "executing program\n", 18) = 18 [pid 305] getpid() = 2 [pid 305] pidfd_open(2, 0) = 3 [pid 305] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 305] umount2(".", MNT_DETACH [pid 302] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 302] unshare(CLONE_NEWNS) = 0 [pid 302] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 302] unshare(CLONE_NEWCGROUP) = 0 [pid 302] unshare(CLONE_NEWUTS) = 0 [pid 302] unshare(CLONE_SYSVSEM) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 306 attached [pid 303] <... umount2 resumed>) = 0 [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 303] chroot("./newroot" [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] <... chroot resumed>) = 0 [pid 303] chdir("/" [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 303] <... chdir resumed>) = 0 [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 303] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 303] <... mount resumed>) = -1 ENODEV (No such device) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] mkdir("/dev/binderfs", 0777 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 303] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 302] getpid() = 1 [pid 302] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 303] mkdir("./0", 0777 [pid 302] <... capset resumed>) = 0 [pid 302] unshare(CLONE_NEWNET [pid 303] <... mkdir resumed>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 2 [pid 302] <... unshare resumed>) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "0 65535", 7) = 7 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 307 attached [pid 306] set_robust_list(0x555571cf2660, 24 [pid 305] <... umount2 resumed>) = 0 [pid 305] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 ENOENT (No such file or directory) [ 23.740207][ T36] audit: type=1400 audit(1752387971.109:68): avc: denied { mounton } for pid=301 comm="syz-executor208" path="/root/syzkaller.01XtRZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 23.766573][ T36] audit: type=1400 audit(1752387971.109:69): avc: denied { mount } for pid=301 comm="syz-executor208" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [pid 305] chdir("./bus") = -1 ENOENT (No such file or directory) [ 23.789139][ T36] audit: type=1400 audit(1752387971.109:70): avc: denied { mounton } for pid=301 comm="syz-executor208" path="/root/syzkaller.01XtRZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 23.791082][ T305] ======================================================= [ 23.791082][ T305] WARNING: The mand mount option has been deprecated and [ 23.791082][ T305] and is ignored by this kernel. Remove the mand [ 23.791082][ T305] option from the mount to silence this warning. [pid 305] mkdirat(AT_FDCWD, "./file0", 072) = 0 [pid 305] mkdir("./file1", 000) = 0 [pid 305] mkdir("./bus", 000) = 0 [pid 305] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 307] set_robust_list(0x555571cf2660, 24 [pid 306] <... set_robust_list resumed>) = 0 [pid 307] <... set_robust_list resumed>) = 0 [pid 306] chdir("./0" [pid 302] <... openat resumed>) = 3 [pid 307] chdir("./0") = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 307] write(1, "executing program\n", 18executing program ) = 18 [pid 307] getpid() = 2 [pid 307] pidfd_open(2, 0) = 3 [pid 307] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 307] umount2(".", MNT_DETACH [pid 306] <... chdir resumed>) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 306] write(1, "executing program\n", 18) = 18 [pid 306] getpid() = 2 [pid 306] pidfd_open(2, 0) = 3 [pid 306] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 306] umount2(".", MNT_DETACH [pid 302] write(3, "100000", 6) = 6 [pid 302] close(3) = 0 [pid 302] mkdir("./syz-tmp", 0777) = 0 [pid 302] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 302] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 302] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 302] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 302] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 302] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 302] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 302] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 302] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 302] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 302] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 302] chdir("/") = 0 [ 23.791082][ T305] ======================================================= [ 23.816530][ T36] audit: type=1400 audit(1752387971.119:71): avc: denied { mounton } for pid=301 comm="syz-executor208" path="/root/syzkaller.01XtRZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 23.851558][ T305] overlayfs: failed to clone upperpath [pid 302] umount2("./pivot", MNT_DETACH [pid 305] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 305] close(3) = 0 [pid 305] close(4) = -1 EBADF (Bad file descriptor) [pid 305] close(5) = -1 EBADF (Bad file descriptor) [pid 305] close(6) = -1 EBADF (Bad file descriptor) [pid 305] close(7) = -1 EBADF (Bad file descriptor) [pid 305] close(8) = -1 EBADF (Bad file descriptor) [pid 305] close(9) = -1 EBADF (Bad file descriptor) [pid 305] close(10) = -1 EBADF (Bad file descriptor) [pid 305] close(11) = -1 EBADF (Bad file descriptor) [pid 305] close(12) = -1 EBADF (Bad file descriptor) [pid 305] close(13) = -1 EBADF (Bad file descriptor) [pid 305] close(14) = -1 EBADF (Bad file descriptor) [pid 305] close(15) = -1 EBADF (Bad file descriptor) [pid 305] close(16) = -1 EBADF (Bad file descriptor) [pid 305] close(17) = -1 EBADF (Bad file descriptor) [pid 305] close(18) = -1 EBADF (Bad file descriptor) [pid 305] close(19) = -1 EBADF (Bad file descriptor) [pid 305] close(20) = -1 EBADF (Bad file descriptor) [pid 305] close(21) = -1 EBADF (Bad file descriptor) [pid 305] close(22) = -1 EBADF (Bad file descriptor) [pid 305] close(23) = -1 EBADF (Bad file descriptor) [pid 305] close(24) = -1 EBADF (Bad file descriptor) [pid 305] close(25) = -1 EBADF (Bad file descriptor) [pid 305] close(26) = -1 EBADF (Bad file descriptor) [pid 305] close(27) = -1 EBADF (Bad file descriptor) [pid 305] close(28) = -1 EBADF (Bad file descriptor) [pid 305] close(29) = -1 EBADF (Bad file descriptor) [pid 305] exit_group(0) = ? [pid 305] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./0/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./0") = 0 [pid 301] mkdir("./1", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 308 attached , child_tidptr=0x555571cf2650) = 3 [pid 308] set_robust_list(0x555571cf2660, 24) = 0 [pid 308] chdir("./1") = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] write(1, "executing program\n", 18executing program ) = 18 [pid 308] getpid() = 3 [pid 308] pidfd_open(3, 0) = 3 [pid 308] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 308] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 308] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 ENOENT (No such file or directory) [pid 307] <... umount2 resumed>) = 0 [pid 302] <... umount2 resumed>) = 0 [pid 308] chdir("./bus") = -1 ENOENT (No such file or directory) [pid 308] mkdirat(AT_FDCWD, "./file0", 072 [pid 307] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 306] <... umount2 resumed>) = 0 [pid 308] <... mkdirat resumed>) = 0 [pid 302] chroot("./newroot" [pid 307] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 308] mkdir("./file1", 000 [pid 307] chdir("./bus" [pid 306] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 302] <... chroot resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 307] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 302] chdir("/" [pid 307] mkdirat(AT_FDCWD, "./file0", 072 [pid 302] <... chdir resumed>) = 0 [pid 308] mkdir("./bus", 000 [pid 306] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 308] <... mkdir resumed>) = 0 [pid 302] mkdir("/dev/gadgetfs", 0777 [pid 306] chdir("./bus" [pid 308] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 306] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 302] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 302] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 302] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 302] mkdir("./0", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 2 ./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x555571cf2660, 24) = 0 [pid 309] chdir("./0") = 0 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] setpgid(0, 0) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] symlink("/dev/binderfs", "./binderfs") = 0 [pid 309] write(1, "executing program\n", 18) = 18 [pid 309] getpid() = 2 [pid 309] pidfd_open(2, 0) = 3 [pid 309] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 309] umount2(".", MNT_DETACH [pid 307] <... mkdirat resumed>) = 0 [pid 307] mkdir("./file1", 000) = 0 [pid 307] mkdir("./bus", 000) = 0 [pid 307] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,"executing program [pid 309] <... umount2 resumed>) = 0 [pid 306] mkdirat(AT_FDCWD, "./file0", 072 [pid 309] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 ENOENT (No such file or directory) [pid 309] chdir("./bus") = -1 ENOENT (No such file or directory) [pid 309] mkdirat(AT_FDCWD, "./file0", 072) = 0 [pid 309] mkdir("./file1", 000) = 0 [pid 309] mkdir("./bus", 000) = 0 [ 23.878736][ T36] audit: type=1400 audit(1752387971.119:72): avc: denied { unmount } for pid=301 comm="syz-executor208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.904049][ T36] audit: type=1400 audit(1752387971.139:73): avc: denied { mounton } for pid=301 comm="syz-executor208" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 23.931501][ T308] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 23.934932][ T307] overlayfs: failed to clone upperpath [pid 309] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 306] <... mkdirat resumed>) = 0 [pid 306] mkdir("./file1", 000) = 0 [pid 306] mkdir("./bus", 000) = 0 [pid 306] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 309] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 309] close(3) = 0 [pid 309] close(4) = -1 EBADF (Bad file descriptor) [pid 309] close(5) = -1 EBADF (Bad file descriptor) [pid 309] close(6) = -1 EBADF (Bad file descriptor) [pid 309] close(7) = -1 EBADF (Bad file descriptor) [pid 309] close(8) = -1 EBADF (Bad file descriptor) [pid 309] close(9) = -1 EBADF (Bad file descriptor) [pid 309] close(10) = -1 EBADF (Bad file descriptor) [pid 309] close(11) = -1 EBADF (Bad file descriptor) [pid 309] close(12) = -1 EBADF (Bad file descriptor) [pid 309] close(13) = -1 EBADF (Bad file descriptor) [pid 309] close(14) = -1 EBADF (Bad file descriptor) [pid 309] close(15) = -1 EBADF (Bad file descriptor) [pid 309] close(16) = -1 EBADF (Bad file descriptor) [pid 309] close(17) = -1 EBADF (Bad file descriptor) [pid 309] close(18) = -1 EBADF (Bad file descriptor) [pid 309] close(19) = -1 EBADF (Bad file descriptor) [pid 309] close(20) = -1 EBADF (Bad file descriptor) [pid 309] close(21) = -1 EBADF (Bad file descriptor) [pid 309] close(22) = -1 EBADF (Bad file descriptor) [pid 309] close(23) = -1 EBADF (Bad file descriptor) [pid 309] close(24) = -1 EBADF (Bad file descriptor) [pid 309] close(25) = -1 EBADF (Bad file descriptor) [pid 309] close(26) = -1 EBADF (Bad file descriptor) [pid 309] close(27) = -1 EBADF (Bad file descriptor) [pid 309] close(28) = -1 EBADF (Bad file descriptor) [pid 309] close(29) = -1 EBADF (Bad file descriptor) [pid 309] exit_group(0) = ? [pid 309] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 307] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... mount resumed>) = 0 [pid 306] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 307] close(3 [pid 308] close(3 [pid 307] <... close resumed>) = 0 [pid 306] close(3 [pid 308] <... close resumed>) = 0 [pid 307] close(4 [pid 306] <... close resumed>) = 0 [pid 308] close(4 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(5 [pid 306] close(4 [pid 308] close(5 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(6 [pid 306] close(5 [pid 308] close(6 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(7 [pid 306] close(6 [pid 308] close(7 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(8 [pid 306] close(7 [pid 308] close(8 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(9 [pid 306] close(8 [pid 308] close(9) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(10 [pid 307] close(10 [pid 306] close(9 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(11 [pid 307] close(11 [pid 306] close(10 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(12 [pid 307] close(12 [pid 306] close(11 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(13 [pid 307] close(13 [pid 306] close(12 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(14 [pid 307] close(14 [pid 306] close(13 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(15 [pid 307] close(15 [pid 306] close(14 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(16 [pid 307] close(16 [pid 306] close(15 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(17 [pid 307] close(17 [pid 306] close(16 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(18 [pid 307] close(18 [pid 306] close(17 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(19 [pid 307] close(19 [pid 306] close(18 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(20 [pid 307] close(20 [pid 306] close(19 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(21 [pid 307] close(21 [pid 306] close(20 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(22 [pid 307] close(22 [pid 306] close(21 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(23 [pid 307] close(23 [pid 306] close(22 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(24 [pid 307] close(24 [pid 306] close(23 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(25 [pid 307] close(25 [pid 306] close(24 [pid 302] <... restart_syscall resumed>) = 0 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(26 [pid 307] close(26 [pid 306] close(25 [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] close(27 [pid 307] close(27 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(26 [pid 302] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 308] close(28 [pid 307] close(28 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(27 [pid 308] close(29 [pid 307] close(29 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(28 [pid 308] exit_group(0 [pid 307] exit_group(0 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... exit_group resumed>) = ? [pid 307] <... exit_group resumed>) = ? [pid 306] close(29 [pid 302] <... openat resumed>) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 307] +++ exited with 0 +++ [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] +++ exited with 0 +++ [pid 302] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 306] exit_group(0 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... exit_group resumed>) = ? [pid 303] restart_syscall(<... resuming interrupted clone ...> [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 303] <... restart_syscall resumed>) = 0 [pid 302] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] +++ exited with 0 +++ [pid 302] unlink("./0/binderfs" [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 303] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... unlink resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] getdents64(3, [pid 301] <... restart_syscall resumed>) = 0 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] close(3 [pid 303] <... openat resumed>) = 3 [pid 302] <... close resumed>) = 0 [pid 302] rmdir("./0" [pid 303] newfstatat(3, "", [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./1", 0777 [pid 303] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 303] getdents64(3, [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 310 attached [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./0/binderfs", [pid 301] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 303] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... openat resumed>) = 3 [pid 303] unlink("./0/binderfs" [pid 301] newfstatat(3, "", [pid 303] <... unlink resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 310] set_robust_list(0x555571cf2660, 24 [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 3 [pid 303] getdents64(3, [pid 301] getdents64(3, [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 310] <... set_robust_list resumed>) = 0 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] close(3) = 0 [pid 301] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] chdir("./1") = 0 [pid 303] rmdir("./0" [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] <... rmdir resumed>) = 0 [pid 301] newfstatat(AT_FDCWD, "./1/binderfs", [pid 310] <... prctl resumed>) = 0 [pid 303] mkdir("./1", 0777 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 310] setpgid(0, 0 [pid 303] <... mkdir resumed>) = 0 [pid 310] <... setpgid resumed>) = 0 [pid 301] unlink("./1/binderfs" [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... unlink resumed>) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] getdents64(3, ./strace-static-x86_64: Process 311 attached 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 310] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] close(3 [pid 311] set_robust_list(0x555571cf2660, 24 [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 3 [pid 301] <... close resumed>) = 0 [pid 311] <... set_robust_list resumed>) = 0 [pid 301] rmdir("./1" [pid 311] chdir("./1" [pid 301] <... rmdir resumed>) = 0 [pid 311] <... chdir resumed>) = 0 [pid 301] mkdir("./2", 0777 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... mkdir resumed>) = 0 [pid 311] <... prctl resumed>) = 0 [pid 311] setpgid(0, 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] <... setpgid resumed>) = 0 [pid 310] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 312 attached [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... symlink resumed>) = 0 [pid 312] set_robust_list(0x555571cf2660, 24executing program [pid 310] write(1, "executing program\n", 18 [pid 312] <... set_robust_list resumed>) = 0 [pid 311] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 4 [pid 312] chdir("./2" [pid 310] <... write resumed>) = 18 [pid 312] <... chdir resumed>) = 0 [pid 311] symlink("/dev/binderfs", "./binderfs" [pid 310] getpid( [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 311] <... symlink resumed>) = 0 [pid 310] <... getpid resumed>) = 3 [pid 312] <... prctl resumed>) = 0 executing program [pid 312] setpgid(0, 0 [pid 311] write(1, "executing program\n", 18 [pid 310] pidfd_open(3, 0 [pid 312] <... setpgid resumed>) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 311] <... write resumed>) = 18 [pid 310] <... pidfd_open resumed>) = 3 [pid 311] getpid( [pid 312] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 311] <... getpid resumed>) = 3 [pid 311] pidfd_open(3, 0 [pid 310] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 312] symlink("/dev/binderfs", "./binderfs" [pid 311] <... pidfd_open resumed>) = 3 [pid 310] <... setns resumed>) = 0 [pid 312] <... symlink resumed>) = 0 [pid 311] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 312] write(1, "executing program\n", 18 [pid 311] <... setns resumed>) = 0 [pid 310] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 310] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULLexecuting program [pid 312] <... write resumed>) = 18 [pid 311] umount2(".", MNT_DETACH [pid 312] getpid( [pid 311] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... getpid resumed>) = 4 [pid 311] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 312] pidfd_open(4, 0 [pid 310] <... mount resumed>) = 0 [pid 312] <... pidfd_open resumed>) = 3 [pid 311] <... mount resumed>) = 0 [pid 312] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 310] chdir("./bus") = 0 [pid 310] mkdirat(AT_FDCWD, "./file0", 072 [pid 312] <... setns resumed>) = 0 [pid 311] chdir("./bus" [pid 312] umount2(".", MNT_DETACH [pid 311] <... chdir resumed>) = 0 [pid 312] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 311] mkdirat(AT_FDCWD, "./file0", 072 [pid 312] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 310] <... mkdirat resumed>) = 0 [pid 310] mkdir("./file1", 000) = 0 [pid 312] <... mount resumed>) = 0 [pid 310] mkdir("./bus", 000 [pid 312] chdir("./bus" [pid 311] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 311] mkdir("./file1", 000 [pid 312] <... chdir resumed>) = 0 [pid 311] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 310] <... mkdir resumed>) = 0 [pid 311] mkdir("./bus", 000 [pid 310] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 312] mkdirat(AT_FDCWD, "./file0", 072 [pid 311] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 311] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] <... openat resumed>) = 3 [pid 312] <... mkdirat resumed>) = 0 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [ 23.938894][ T308] overlayfs: failed to set xattr on upper [ 23.946168][ T309] overlayfs: failed to clone upperpath [ 23.950190][ T308] overlayfs: ...falling back to redirect_dir=nofollow. [ 23.957378][ T306] overlayfs: failed to clone upperpath [ 23.962083][ T308] overlayfs: ...falling back to uuid=null. [pid 304] getdents64(3, executing program 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 304] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./0/binderfs") = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./0") = 0 [pid 304] mkdir("./1", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 3 ./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x555571cf2660, 24) = 0 [pid 313] chdir("./1") = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 313] write(1, "executing program\n", 18) = 18 [pid 313] getpid() = 3 [pid 313] pidfd_open(3, 0) = 3 [pid 313] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 313] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 313] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = 0 [pid 313] chdir("./bus") = 0 [pid 313] mkdirat(AT_FDCWD, "./file0", 072 [pid 312] mkdir("./file1", 000 [pid 313] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 312] <... mkdir resumed>) = 0 [pid 313] mkdir("./file1", 000 [pid 312] mkdir("./bus", 000 [pid 313] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 312] <... mkdir resumed>) = 0 [pid 312] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 313] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 313] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 310] <... mount resumed>) = -1 EACCES (Permission denied) [pid 313] <... mount resumed>) = -1 EACCES (Permission denied) [pid 312] <... mount resumed>) = -1 EACCES (Permission denied) [pid 313] close(3 [pid 311] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 313] <... close resumed>) = 0 [pid 311] close(3 [pid 313] close(4 [pid 311] <... close resumed>) = 0 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(4 [pid 313] close(5) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(6 [pid 311] close(5 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(7 [pid 311] close(6 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(8 [pid 311] close(7 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(9) = -1 EBADF (Bad file descriptor) [pid 311] close(8 [pid 313] close(10 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(9 [pid 313] close(11 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(10 [pid 313] close(12 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(11 [pid 313] close(13 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(12 [pid 313] close(14 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(15 [pid 311] close(13 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(16 [pid 311] close(14 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(17 [pid 311] close(15 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(18 [pid 311] close(16 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(19 [pid 311] close(17 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(20 [pid 311] close(18 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(21 [pid 311] close(19 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(22 [pid 311] close(20 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(23 [pid 311] close(21 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(24 [pid 311] close(22 [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] close(25 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(23 [pid 313] close(26 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(24 [pid 313] close(27 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(25 [pid 313] close(28 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(26 [pid 313] close(29 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 313] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(27 [pid 313] exit_group(0 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(28) = -1 EBADF (Bad file descriptor) [pid 313] <... exit_group resumed>) = ? [pid 311] close(29 [pid 312] close(3 [pid 310] close(3 [pid 312] <... close resumed>) = 0 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = 0 [pid 313] +++ exited with 0 +++ [pid 312] close(4 [pid 311] exit_group(0 [pid 310] close(4 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 312] close(5 [pid 311] <... exit_group resumed>) = ? [pid 310] close(5 [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] +++ exited with 0 +++ [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(6 [pid 312] close(6 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] close(7 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] restart_syscall(<... resuming interrupted clone ...> [pid 310] close(8 [pid 312] close(7 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(8) = -1 EBADF (Bad file descriptor) [pid 310] close(9 [pid 312] close(9 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(10 [pid 310] close(10 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(11 [pid 310] close(11 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(12 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(12 [pid 312] close(13) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(14 [pid 310] close(13 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(15 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(14 [pid 312] close(16 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(15 [pid 312] close(17) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(18 [pid 310] close(16 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(19 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(17 [pid 312] close(20) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(21 [pid 310] close(18 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(22) = -1 EBADF (Bad file descriptor) [pid 310] close(19 [pid 312] close(23 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(20 [pid 312] close(24 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(21 [pid 312] close(25 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(22 [pid 312] close(26) = -1 EBADF (Bad file descriptor) [pid 312] close(27) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(28 [pid 310] close(23 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(29 [pid 310] close(24 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] exit_group(0) = ? [pid 310] close(25) = -1 EBADF (Bad file descriptor) [pid 310] close(26) = -1 EBADF (Bad file descriptor) [pid 310] close(27) = -1 EBADF (Bad file descriptor) [pid 312] +++ exited with 0 +++ [pid 310] close(28) = -1 EBADF (Bad file descriptor) [pid 310] close(29) = -1 EBADF (Bad file descriptor) [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 310] exit_group(0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 310] <... exit_group resumed>) = ? [pid 310] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 304] <... restart_syscall resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... openat resumed>) = 3 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./2/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./2" [pid 304] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 303] <... restart_syscall resumed>) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 304] <... openat resumed>) = 3 [pid 301] mkdir("./3", 0777 [pid 304] newfstatat(3, "", [pid 301] <... mkdir resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 314 attached [pid 304] getdents64(3, [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 304] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] <... openat resumed>) = 3 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(3, "", [pid 304] newfstatat(AT_FDCWD, "./1/binderfs", [pid 303] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] getdents64(3, [pid 304] unlink("./1/binderfs" [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 314] set_robust_list(0x555571cf2660, 24 [pid 303] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 5 [pid 314] <... set_robust_list resumed>) = 0 [pid 304] <... unlink resumed>) = 0 [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] chdir("./3" [pid 304] getdents64(3, [pid 303] newfstatat(AT_FDCWD, "./1/binderfs", [pid 314] <... chdir resumed>) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... prctl resumed>) = 0 [pid 304] close(3 [pid 303] unlink("./1/binderfs" [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... close resumed>) = 0 [pid 303] <... unlink resumed>) = 0 [pid 314] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 314] symlink("/dev/binderfs", "./binderfs"executing program [pid 304] rmdir("./1" [pid 303] getdents64(3, [pid 314] <... symlink resumed>) = 0 [pid 314] write(1, "executing program\n", 18 [pid 304] <... rmdir resumed>) = 0 [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 314] <... write resumed>) = 18 [pid 304] mkdir("./2", 0777 [pid 303] close(3 [pid 314] getpid() = 5 [pid 314] pidfd_open(5, 0) = 3 [pid 314] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 314] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 314] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 303] <... close resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 303] rmdir("./1" [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 315 attached [ 23.995607][ T311] overlayfs: upper fs does not support tmpfile. [ 23.995960][ T310] overlayfs: upper fs does not support tmpfile. [ 24.006000][ T311] incfs_lookup_dentry err:-2 [ 24.012799][ T312] overlayfs: upper fs does not support tmpfile. [ 24.014720][ T313] overlayfs: upper fs does not support tmpfile. [pid 303] <... rmdir resumed>) = 0 [pid 303] mkdir("./2", 0777) = 0 [pid 315] set_robust_list(0x555571cf2660, 24 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] <... set_robust_list resumed>) = 0 [pid 315] chdir("./2" [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 4 [pid 315] <... chdir resumed>) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 4 [pid 315] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 315] write(1, "executing program\n", 18./strace-static-x86_64: Process 316 attached [pid 314] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... restart_syscall resumed>) = 0 [pid 316] set_robust_list(0x555571cf2660, 24 [pid 314] chdir("./bus"executing program [pid 316] <... set_robust_list resumed>) = 0 [pid 314] <... chdir resumed>) = 0 [pid 315] <... write resumed>) = 18 [pid 316] chdir("./2" [pid 315] getpid( [pid 316] <... chdir resumed>) = 0 [pid 315] <... getpid resumed>) = 4 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 315] pidfd_open(4, 0 [pid 314] mkdirat(AT_FDCWD, "./file0", 072 [pid 316] <... prctl resumed>) = 0 [pid 315] <... pidfd_open resumed>) = 3 [pid 302] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] setpgid(0, 0 [pid 315] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 314] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 316] <... setpgid resumed>) = 0 [pid 315] <... setns resumed>) = 0 [pid 314] mkdir("./file1", 000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 315] umount2(".", MNT_DETACH [pid 314] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 316] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] mkdir("./bus", 000 [pid 302] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 316] symlink("/dev/binderfs", "./binderfs" [pid 314] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] <... openat resumed>) = 3 [pid 316] <... symlink resumed>) = 0 [pid 314] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,"executing program [pid 302] newfstatat(3, "", [pid 316] write(1, "executing program\n", 18 [pid 315] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 316] <... write resumed>) = 18 [pid 315] <... mount resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 315] chdir("./bus") = 0 [pid 315] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 315] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 315] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 315] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 316] getpid( [pid 302] getdents64(3, [pid 316] <... getpid resumed>) = 4 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 316] pidfd_open(4, 0 [pid 302] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] <... pidfd_open resumed>) = 3 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 302] newfstatat(AT_FDCWD, "./1/binderfs", [pid 316] <... setns resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] umount2(".", MNT_DETACH [pid 302] unlink("./1/binderfs" [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... unlink resumed>) = 0 [pid 316] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 302] getdents64(3, [pid 316] <... mount resumed>) = 0 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 316] chdir("./bus" [pid 302] close(3 [pid 316] <... chdir resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 316] mkdirat(AT_FDCWD, "./file0", 072 [pid 302] rmdir("./1" [pid 316] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 302] <... rmdir resumed>) = 0 [pid 316] mkdir("./file1", 000 [pid 302] mkdir("./2", 0777 [pid 316] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] <... mkdir resumed>) = 0 [pid 316] mkdir("./bus", 000 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 316] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 316] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 4 ./strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x555571cf2660, 24) = 0 [pid 317] chdir("./2") = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 317] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 317] write(1, "executing program\n", 18) = 18 [pid 317] getpid() = 4 [pid 317] pidfd_open(4, 0) = 3 [pid 317] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 317] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 317] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = 0 [pid 317] chdir("./bus") = 0 [pid 317] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 317] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 317] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 24.045598][ T314] incfs: mount failed -22 [ 24.053283][ T314] overlayfs: upper fs does not support tmpfile. [ 24.055977][ T315] overlayfs: upper fs does not support tmpfile. [ 24.065272][ T316] ------------[ cut here ]------------ [ 24.071371][ T316] WARNING: CPU: 0 PID: 316 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 24.079442][ T316] Modules linked in: [ 24.083401][ T316] CPU: 0 UID: 0 PID: 316 Comm: syz-executor208 Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 24.097225][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.107332][ T316] RIP: 0010:drop_nlink+0xce/0x110 [ 24.112414][ T316] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 24.132045][ T316] RSP: 0018:ffffc9000131f0d0 EFLAGS: 00010293 [ 24.138147][ T316] RAX: ffffffff81ed527e RBX: ffff8881163dd040 RCX: ffff888101bf0000 [ 24.146141][ T316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.154226][ T316] RBP: ffffc9000131f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 24.162227][ T316] R10: dffffc0000000000 R11: fffff52000263e10 R12: dffffc0000000000 [ 24.170254][ T316] R13: 1ffff11022c7ba11 R14: ffff8881163dd088 R15: 0000000000000000 [ 24.178230][ T316] FS: 0000555571cf2380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.187171][ T316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.193809][ T316] CR2: 0000200000001000 CR3: 000000010e6f6000 CR4: 00000000003526b0 [ 24.201842][ T316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.209902][ T316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.217916][ T316] Call Trace: [ 24.221228][ T316] [ 24.224166][ T316] simple_rmdir+0x153/0x260 [ 24.228653][ T316] vfs_rmdir+0x3dd/0x560 [ 24.232935][ T316] dir_rmdir+0x236/0x320 [ 24.237176][ T316] ? __cfi_dir_rmdir+0x10/0x10 [ 24.241958][ T316] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 24.246982][ T316] vfs_rmdir+0x3dd/0x560 [ 24.251242][ T316] dir_rmdir+0x236/0x320 [ 24.255480][ T316] ? __cfi_dir_rmdir+0x10/0x10 [ 24.260257][ T316] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 24.265276][ T316] vfs_rmdir+0x3dd/0x560 [ 24.269497][ T316] ovl_workdir_cleanup+0x192/0x780 [ 24.274626][ T316] ? lookup_one_len+0x2f0/0x2f0 [ 24.279483][ T316] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 24.285141][ T316] ? lookup_one+0x197/0x2e0 [ 24.289640][ T316] ? __cfi_lookup_one+0x10/0x10 [ 24.294520][ T316] ? kasan_save_alloc_info+0x40/0x50 [ 24.299809][ T316] ovl_workdir_create+0x2af/0x750 [ 24.304847][ T316] ? __kasan_check_write+0x18/0x20 [ 24.309957][ T316] ? ovl_statfs+0x2d0/0x2d0 [ 24.314470][ T316] ? _raw_spin_lock+0x8c/0x120 [ 24.319224][ T316] ? _raw_spin_unlock+0x45/0x60 [ 24.324099][ T316] ? mnt_want_write+0x321/0x510 [ 24.328950][ T316] ovl_get_workdir+0x328/0x1650 [ 24.333820][ T316] ? ovl_fill_super+0x36f0/0x36f0 [ 24.338847][ T316] ? __kasan_check_write+0x18/0x20 [ 24.344000][ T316] ? _raw_spin_lock+0x8c/0x120 [ 24.348873][ T316] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.354135][ T316] ? __kasan_check_write+0x18/0x20 [ 24.359255][ T316] ? _raw_spin_lock+0x8c/0x120 [ 24.364031][ T316] ? __cfi__raw_spin_lock+0x10/0x10 [ 24.369232][ T316] ? __kasan_check_write+0x18/0x20 [ 24.374361][ T316] ? up_read+0x26/0x1d0 [ 24.378524][ T316] ? _raw_spin_unlock+0x45/0x60 [ 24.383383][ T316] ? ovl_inuse_trylock+0xbd/0x110 [ 24.388440][ T316] ovl_fill_super+0x133f/0x36f0 [ 24.393324][ T316] ? xas_nomem+0x71/0x2d0 [ 24.397686][ T316] ? ida_alloc_range+0xa12/0xa50 [ 24.402687][ T316] ? __cfi_ovl_fill_super+0x10/0x10 [ 24.407893][ T316] ? __kasan_check_write+0x18/0x20 [ 24.413033][ T316] ? mutex_unlock+0x8b/0x240 [ 24.417626][ T316] ? __cfi_mutex_unlock+0x10/0x10 [ 24.422677][ T316] ? __kasan_check_write+0x18/0x20 [ 24.427790][ T316] ? _raw_spin_lock+0x8c/0x120 [ 24.432587][ T316] ? sget_fc+0x9ce/0xad0 [ 24.436826][ T316] ? __cfi_set_anon_super_fc+0x10/0x10 [ 24.442352][ T316] get_tree_nodev+0xcb/0x170 [ 24.446937][ T316] ? __cfi_ovl_fill_super+0x10/0x10 [ 24.452186][ T316] ovl_get_tree+0x20/0x30 [ 24.456530][ T316] vfs_get_tree+0x9e/0x290 [ 24.461003][ T316] do_new_mount+0x251/0xb40 [ 24.465511][ T316] ? security_capable+0xcf/0xf0 [ 24.470394][ T316] path_mount+0x688/0x1050 [ 24.474813][ T316] ? putname+0x113/0x150 [ 24.479044][ T316] __se_sys_mount+0x2bd/0x480 [ 24.483743][ T316] ? __x64_sys_mount+0xf0/0xf0 [ 24.488510][ T316] ? __kasan_check_write+0x18/0x20 [ 24.493650][ T316] __x64_sys_mount+0xc3/0xf0 [ 24.498240][ T316] x64_sys_call+0x2021/0x2ee0 [ 24.502935][ T316] do_syscall_64+0x58/0xf0 [ 24.507347][ T316] ? clear_bhb_loop+0x50/0xa0 [ 24.512034][ T316] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.517926][ T316] RIP: 0033:0x7f39d9e22b19 [ 24.522818][ T316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 24.542452][ T316] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.550883][ T316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 24.558852][ T316] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 24.566840][ T316] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 24.574826][ T316] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 24.582810][ T316] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000002 [ 24.590818][ T316] [ 24.593832][ T316] ---[ end trace 0000000000000000 ]--- [ 24.599444][ T316] ------------[ cut here ]------------ [ 24.599674][ T317] ------------[ cut here ]------------ [ 24.604938][ T316] WARNING: CPU: 1 PID: 316 at fs/dcache.c:774 dput+0x3cd/0x510 [ 24.610409][ T317] WARNING: CPU: 0 PID: 317 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 24.617894][ T316] Modules linked in: [ 24.625783][ T317] Modules linked in: [ 24.629656][ T316] CPU: 1 UID: 0 PID: 316 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 24.633542][ T317] CPU: 0 UID: 0 PID: 317 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 24.648803][ T316] Tainted: [W]=WARN [ 24.648810][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.664077][ T317] Tainted: [W]=WARN [ 24.664084][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.664094][ T317] RIP: 0010:drop_nlink+0xce/0x110 [ 24.667895][ T316] RIP: 0010:dput+0x3cd/0x510 [ 24.678043][ T317] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 24.681844][ T316] Code: 55 99 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 93 55 99 ff <0f> 0b e9 9c fe ff ff e8 87 55 99 ff 48 89 df e8 2f 01 00 00 84 c0 [ 24.691890][ T317] RSP: 0018:ffffc900012df0d0 EFLAGS: 00010293 [ 24.696894][ T316] RSP: 0018:ffffc9000131f3b0 EFLAGS: 00010293 [ 24.701510][ T317] RAX: ffffffff81ed527e RBX: ffff888129eacd00 RCX: ffff88812d21a600 [ 24.721074][ T316] [ 24.721082][ T316] RAX: ffffffff81ec551d RBX: ffff8881163d8000 RCX: ffff888101bf0000 [ 24.740705][ T317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 24.746722][ T316] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 24.752775][ T317] RBP: ffffc900012df0f8 R08: 0000000000000003 R09: 0000000000000004 [ 24.752789][ T317] R10: dffffc0000000000 R11: fffff5200025be10 R12: dffffc0000000000 [ 24.760834][ T316] RBP: ffffc9000131f3e0 R08: 0000000000000003 R09: 0000000000000004 [ 24.763140][ T317] R13: 1ffff110253d59a9 R14: ffff888129eacd48 R15: 0000000000000000 [ 24.771102][ T316] R10: dffffc0000000000 R11: fffff52000263e68 R12: 00000000ffffff80 [ 24.771116][ T316] R13: ffff8881163d8084 R14: ffff8881163d8080 R15: 1ffff11022c7b010 [ 24.779062][ T317] FS: 0000555571cf2380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.787026][ T316] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.794991][ T317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.802952][ T316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.810912][ T317] CR2: 0000200000001000 CR3: 0000000102f36000 CR4: 00000000003526b0 [ 24.810930][ T317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.818879][ T316] CR2: 00007ffe1bb84088 CR3: 000000010e6f6000 CR4: 00000000003526b0 [ 24.826842][ T317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.834807][ T316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.834820][ T316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.843732][ T317] Call Trace: [ 24.843740][ T317] [ 24.852673][ T316] Call Trace: [ 24.852681][ T316] [ 24.859235][ T317] simple_rmdir+0x153/0x260 [ 24.865810][ T316] path_put+0x3d/0x70 [ 24.873777][ T317] vfs_rmdir+0x3dd/0x560 [ 24.881746][ T316] dentry_release+0x53/0xb0 [ 24.889705][ T317] dir_rmdir+0x236/0x320 [ 24.897671][ T316] ? __cfi_dentry_release+0x10/0x10 [ 24.905754][ T317] ? __cfi_dir_rmdir+0x10/0x10 [ 24.913715][ T316] __dentry_kill+0x22b/0x5f0 [ 24.916982][ T317] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 24.919892][ T316] ? lock_for_kill+0xa7/0x230 [ 24.923520][ T317] vfs_rmdir+0x3dd/0x560 [ 24.926433][ T316] dput+0x3f2/0x510 [ 24.930921][ T317] dir_rmdir+0x236/0x320 [ 24.934886][ T316] path_put+0x3d/0x70 [ 24.939096][ T317] ? __cfi_dir_rmdir+0x10/0x10 [ 24.943584][ T316] dentry_release+0x53/0xb0 [ 24.947802][ T317] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 24.952991][ T316] ? __cfi_dentry_release+0x10/0x10 [ 24.957738][ T317] vfs_rmdir+0x3dd/0x560 [ 24.962325][ T316] __dentry_kill+0x22b/0x5f0 [ 24.967322][ T317] ovl_workdir_cleanup+0x192/0x780 [ 24.971986][ T316] ? lock_for_kill+0xae/0x230 [ 24.976205][ T317] ? lookup_one_len+0x2f0/0x2f0 [ 24.979983][ T316] dput+0x3f2/0x510 [ 24.984210][ T317] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 24.988166][ T316] ovl_workdir_create+0x2bf/0x750 [ 24.992923][ T317] ? lookup_one+0x197/0x2e0 [ 24.997399][ T316] ? __kasan_check_write+0x18/0x20 [ 25.002408][ T317] ? __cfi_lookup_one+0x10/0x10 [ 25.007579][ T316] ? ovl_statfs+0x2d0/0x2d0 [ 25.011819][ T317] ? kasan_save_alloc_info+0x40/0x50 [ 25.016373][ T316] ? _raw_spin_lock+0x8c/0x120 [ 25.021473][ T317] ovl_workdir_create+0x2af/0x750 [ 25.026210][ T316] ? _raw_spin_unlock+0x45/0x60 [ 25.031060][ T317] ? __kasan_check_write+0x18/0x20 [ 25.034843][ T316] ? mnt_want_write+0x321/0x510 [ 25.040464][ T317] ? ovl_statfs+0x2d0/0x2d0 [ 25.045462][ T316] ovl_get_workdir+0x328/0x1650 [ 25.049933][ T317] ? _raw_spin_lock+0x8c/0x120 [ 25.055067][ T316] ? ovl_fill_super+0x36f0/0x36f0 [ 25.059857][ T317] ? _raw_spin_unlock+0x45/0x60 [ 25.064347][ T316] ? __kasan_check_write+0x18/0x20 [ 25.069613][ T317] ? mnt_want_write+0x321/0x510 [ 25.074378][ T316] ? _raw_spin_lock+0x8c/0x120 [ 25.079382][ T317] ovl_get_workdir+0x328/0x1650 [ 25.084233][ T316] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.089302][ T317] ? ovl_fill_super+0x36f0/0x36f0 [ 25.094157][ T316] ? __kasan_check_write+0x18/0x20 [ 25.098698][ T317] ? __kasan_check_write+0x18/0x20 [ 25.103551][ T316] ? _raw_spin_lock+0x8c/0x120 [ 25.108297][ T317] ? _raw_spin_lock+0x8c/0x120 [ 25.113320][ T316] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.118134][ T317] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.123233][ T316] ? __kasan_check_write+0x18/0x20 [ 25.128058][ T317] ? __kasan_check_write+0x18/0x20 [ 25.132812][ T316] ? up_read+0x26/0x1d0 [ 25.132830][ T316] ? _raw_spin_unlock+0x45/0x60 [ 25.132847][ T316] ? ovl_inuse_trylock+0xbd/0x110 [ 25.137683][ T317] ? _raw_spin_lock+0x8c/0x120 [ 25.142865][ T316] ovl_fill_super+0x133f/0x36f0 [ 25.147862][ T317] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.152961][ T316] ? xas_nomem+0x71/0x2d0 [ 25.158043][ T317] ? __kasan_check_write+0x18/0x20 [ 25.162820][ T316] ? ida_alloc_range+0xa12/0xa50 [ 25.167578][ T317] ? up_read+0x26/0x1d0 [ 25.172833][ T316] ? __cfi_ovl_fill_super+0x10/0x10 [ 25.177968][ T317] ? _raw_spin_unlock+0x45/0x60 [ 25.183073][ T316] ? __kasan_check_write+0x18/0x20 [ 25.188159][ T317] ? ovl_inuse_trylock+0xbd/0x110 [ 25.192313][ T316] ? mutex_unlock+0x8b/0x240 [ 25.197143][ T317] ovl_fill_super+0x133f/0x36f0 [ 25.202193][ T316] ? __cfi_mutex_unlock+0x10/0x10 [ 25.206927][ T317] ? xas_nomem+0x71/0x2d0 [ 25.211765][ T316] ? __kasan_check_write+0x18/0x20 [ 25.216940][ T317] ? ida_alloc_range+0xa12/0xa50 [ 25.221258][ T316] ? _raw_spin_lock+0x8c/0x120 [ 25.226352][ T317] ? __cfi_ovl_fill_super+0x10/0x10 [ 25.231276][ T316] ? sget_fc+0x9ce/0xad0 [ 25.235402][ T317] ? __kasan_check_write+0x18/0x20 [ 25.240587][ T316] ? __cfi_set_anon_super_fc+0x10/0x10 [ 25.245411][ T317] ? mutex_unlock+0x8b/0x240 [ 25.250518][ T316] get_tree_nodev+0xcb/0x170 [ 25.255513][ T317] ? __cfi_mutex_unlock+0x10/0x10 [ 25.260102][ T316] ? __cfi_ovl_fill_super+0x10/0x10 [ 25.264917][ T317] ? __kasan_check_write+0x18/0x20 [ 25.269913][ T316] ovl_get_tree+0x20/0x30 [ 25.274229][ T317] ? _raw_spin_lock+0x8c/0x120 [ 25.279313][ T316] vfs_get_tree+0x9e/0x290 [ 25.284254][ T317] ? sget_fc+0x9ce/0xad0 [ 25.288991][ T316] do_new_mount+0x251/0xb40 [ 25.294180][ T317] ? __cfi_set_anon_super_fc+0x10/0x10 [ 25.298395][ T316] ? security_capable+0xcf/0xf0 [ 25.303496][ T317] get_tree_nodev+0xcb/0x170 [ 25.308927][ T316] path_mount+0x688/0x1050 [ 25.313504][ T317] ? __cfi_ovl_fill_super+0x10/0x10 [ 25.318073][ T316] ? putname+0x113/0x150 [ 25.323094][ T317] ovl_get_tree+0x20/0x30 [ 25.328264][ T316] __se_sys_mount+0x2bd/0x480 [ 25.333361][ T317] vfs_get_tree+0x9e/0x290 [ 25.337663][ T316] ? __x64_sys_mount+0xf0/0xf0 [ 25.342424][ T317] do_new_mount+0x251/0xb40 [ 25.346806][ T316] ? __kasan_check_write+0x18/0x20 [ 25.351045][ T317] ? security_capable+0xcf/0xf0 [ 25.355569][ T316] __x64_sys_mount+0xc3/0xf0 [ 25.361110][ T317] path_mount+0x688/0x1050 [ 25.365937][ T316] x64_sys_call+0x2021/0x2ee0 [ 25.370517][ T317] ? putname+0x113/0x150 [ 25.374907][ T316] do_syscall_64+0x58/0xf0 [ 25.380097][ T317] __se_sys_mount+0x2bd/0x480 [ 25.384325][ T316] ? clear_bhb_loop+0x50/0xa0 [ 25.388627][ T317] ? __x64_sys_mount+0xf0/0xf0 [ 25.393291][ T316] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.397679][ T317] ? __kasan_check_write+0x18/0x20 [ 25.402429][ T316] RIP: 0033:0x7f39d9e22b19 [ 25.406912][ T317] __x64_sys_mount+0xc3/0xf0 [ 25.412009][ T316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 25.416830][ T317] x64_sys_call+0x2021/0x2ee0 [pid 317] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 314] <... mount resumed>) = -1 EACCES (Permission denied) [pid 314] close(3) = 0 [pid 314] close(4) = -1 EBADF (Bad file descriptor) [pid 314] close(5) = -1 EBADF (Bad file descriptor) [pid 314] close(6) = -1 EBADF (Bad file descriptor) [pid 314] close(7) = -1 EBADF (Bad file descriptor) [pid 314] close(8) = -1 EBADF (Bad file descriptor) [pid 314] close(9) = -1 EBADF (Bad file descriptor) [pid 314] close(10) = -1 EBADF (Bad file descriptor) [pid 314] close(11) = -1 EBADF (Bad file descriptor) [pid 314] close(12) = -1 EBADF (Bad file descriptor) [pid 314] close(13) = -1 EBADF (Bad file descriptor) [pid 314] close(14) = -1 EBADF (Bad file descriptor) [pid 314] close(15) = -1 EBADF (Bad file descriptor) [pid 314] close(16) = -1 EBADF (Bad file descriptor) [pid 314] close(17) = -1 EBADF (Bad file descriptor) [pid 314] close(18) = -1 EBADF (Bad file descriptor) [pid 314] close(19) = -1 EBADF (Bad file descriptor) [pid 314] close(20) = -1 EBADF (Bad file descriptor) [pid 314] close(21) = -1 EBADF (Bad file descriptor) [pid 314] close(22) = -1 EBADF (Bad file descriptor) [pid 314] close(23) = -1 EBADF (Bad file descriptor) [pid 314] close(24) = -1 EBADF (Bad file descriptor) [pid 314] close(25) = -1 EBADF (Bad file descriptor) [pid 314] close(26) = -1 EBADF (Bad file descriptor) [pid 314] close(27) = -1 EBADF (Bad file descriptor) [pid 314] close(28) = -1 EBADF (Bad file descriptor) [pid 314] close(29) = -1 EBADF (Bad file descriptor) [pid 314] exit_group(0) = ? [pid 314] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./3/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./3") = 0 [pid 301] mkdir("./4", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 6 ./strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x555571cf2660, 24) = 0 [pid 318] chdir("./4") = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 318] write(1, "executing program\n", 18executing program ) = 18 [pid 318] getpid() = 6 [pid 318] pidfd_open(6, 0) = 3 [pid 318] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 318] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [ 25.421418][ T316] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 25.425812][ T317] do_syscall_64+0x58/0xf0 [ 25.430479][ T316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 25.430493][ T316] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 25.434702][ T317] ? clear_bhb_loop+0x50/0xa0 [ 25.439094][ T316] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 25.443820][ T317] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.448415][ T316] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [pid 318] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 318] chdir("./bus") = 0 [pid 318] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 318] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 318] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 25.453173][ T317] RIP: 0033:0x7f39d9e22b19 [ 25.459030][ T316] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000002 [ 25.464139][ T317] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 25.468521][ T316] [ 25.473092][ T317] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 [ 25.492688][ T316] ---[ end trace 0000000000000000 ]--- [ 25.497338][ T317] ORIG_RAX: 00000000000000a5 [ 25.548611][ T318] incfs: mount failed -22 [ 25.552760][ T317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 25.558726][ T318] overlayfs: upper fs does not support tmpfile. [ 25.565137][ T317] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 25.565154][ T317] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 25.638486][ T317] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [pid 318] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 315] <... mount resumed>) = -1 EACCES (Permission denied) [pid 315] close(3) = 0 [pid 315] close(4) = -1 EBADF (Bad file descriptor) [pid 315] close(5) = -1 EBADF (Bad file descriptor) [pid 315] close(6) = -1 EBADF (Bad file descriptor) [pid 315] close(7) = -1 EBADF (Bad file descriptor) [pid 315] close(8) = -1 EBADF (Bad file descriptor) [pid 315] close(9) = -1 EBADF (Bad file descriptor) [pid 315] close(10) = -1 EBADF (Bad file descriptor) [pid 315] close(11) = -1 EBADF (Bad file descriptor) [pid 315] close(12) = -1 EBADF (Bad file descriptor) [pid 315] close(13) = -1 EBADF (Bad file descriptor) [pid 315] close(14) = -1 EBADF (Bad file descriptor) [pid 315] close(15) = -1 EBADF (Bad file descriptor) [pid 315] close(16) = -1 EBADF (Bad file descriptor) [pid 315] close(17) = -1 EBADF (Bad file descriptor) [pid 315] close(18) = -1 EBADF (Bad file descriptor) [pid 315] close(19) = -1 EBADF (Bad file descriptor) [pid 315] close(20) = -1 EBADF (Bad file descriptor) [pid 315] close(21) = -1 EBADF (Bad file descriptor) [pid 315] close(22) = -1 EBADF (Bad file descriptor) [pid 315] close(23) = -1 EBADF (Bad file descriptor) [pid 315] close(24) = -1 EBADF (Bad file descriptor) [pid 315] close(25) = -1 EBADF (Bad file descriptor) [pid 315] close(26) = -1 EBADF (Bad file descriptor) [pid 315] close(27) = -1 EBADF (Bad file descriptor) [pid 315] close(28) = -1 EBADF (Bad file descriptor) [pid 315] close(29) = -1 EBADF (Bad file descriptor) [pid 315] exit_group(0) = ? [pid 315] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 318] <... mount resumed>) = -1 EACCES (Permission denied) [pid 304] <... restart_syscall resumed>) = 0 [pid 318] close(3) = 0 [pid 304] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 318] close(4 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 318] close(5 [pid 304] <... openat resumed>) = 3 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] newfstatat(3, "", [pid 318] close(6 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] getdents64(3, [pid 318] close(7 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 318] close(8 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] newfstatat(AT_FDCWD, "./2/binderfs", [pid 318] close(9 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] unlink("./2/binderfs" [pid 318] close(10 [pid 304] <... unlink resumed>) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] getdents64(3, [pid 318] close(11 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] close(3 [pid 318] close(12 [pid 304] <... close resumed>) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] rmdir("./2" [pid 318] close(13 [pid 304] <... rmdir resumed>) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] mkdir("./3", 0777 [pid 318] close(14 [pid 304] <... mkdir resumed>) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 318] close(15) = -1 EBADF (Bad file descriptor) [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 5 [pid 318] close(16) = -1 EBADF (Bad file descriptor) [pid 318] close(17) = -1 EBADF (Bad file descriptor) [pid 318] close(18./strace-static-x86_64: Process 319 attached ) = -1 EBADF (Bad file descriptor) [pid 319] set_robust_list(0x555571cf2660, 24 [pid 318] close(19 [pid 317] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 319] <... set_robust_list resumed>) = 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] close(20) = -1 EBADF (Bad file descriptor) [pid 318] close(21 [pid 319] chdir("./3" [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] close(3 [pid 316] close(3 [pid 319] <... chdir resumed>) = 0 [pid 318] close(22 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = 0 [pid 316] <... close resumed>) = 0 [pid 319] <... prctl resumed>) = 0 [pid 318] close(23 [pid 319] setpgid(0, 0 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... setpgid resumed>) = 0 [pid 318] close(24 [pid 317] close(4 [pid 316] close(4 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 318] close(25 [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(5 [pid 319] symlink("/dev/binderfs", "./binderfs" [pid 318] close(26 [pid 317] close(5 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... symlink resumed>) = 0 [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(6 [pid 318] close(27 [pid 317] close(6 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 319] write(1, "executing program\n", 18 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(7 [pid 319] <... write resumed>) = 18 [pid 318] close(28 [pid 317] close(7 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] getpid( [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(8 [pid 319] <... getpid resumed>) = 5 [pid 318] close(29 [pid 317] close(8 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(9 [pid 319] pidfd_open(5, 0 [pid 318] exit_group(0 [pid 317] close(9 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... pidfd_open resumed>) = 3 [pid 318] <... exit_group resumed>) = ? [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(10 [pid 319] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 317] close(10 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... setns resumed>) = 0 [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(11 [pid 317] close(11 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] umount2(".", MNT_DETACH [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(12 [pid 319] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 318] +++ exited with 0 +++ [pid 317] close(12 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(13 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./4/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./4") = 0 [pid 301] mkdir("./5", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x555571cf2660, 24 [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 7 [pid 320] <... set_robust_list resumed>) = 0 [pid 319] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 317] close(13 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] chdir("./bus" [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(14 [pid 320] chdir("./5" [pid 319] <... chdir resumed>) = 0 [pid 317] close(14 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... chdir resumed>) = 0 [pid 319] mkdirat(AT_FDCWD, "./file0", 072 [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(15 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 319] <... mkdirat resumed>) = -1 EEXIST (File exists) [ 25.646521][ T317] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000002 [ 25.654546][ T317] [ 25.657567][ T317] ---[ end trace 0000000000000000 ]--- [ 25.663363][ T316] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 25.663407][ T317] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 25.677616][ T316] overlayfs: maximum fs stacking depth exceeded [ 25.682536][ T317] overlayfs: maximum fs stacking depth exceeded [pid 317] close(15 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... prctl resumed>) = 0 [pid 319] mkdir("./file1", 000 [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(16 [pid 320] setpgid(0, 0 [pid 319] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 317] close(16 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... setpgid resumed>) = 0 [pid 319] mkdir("./bus", 000 [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(17 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 319] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 317] close(17 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 319] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 316] close(18 [pid 320] symlink("/dev/binderfs", "./binderfs" [pid 317] close(18 [pid 316] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 320] <... symlink resumed>) = 0 executing program [pid 320] write(1, "executing program\n", 18) = 18 [pid 320] getpid() = 7 [pid 320] pidfd_open(7, 0) = 3 [pid 320] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 320] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 320] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 320] chdir("./bus") = 0 [pid 320] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 320] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 320] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 320] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 317] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] close(19) = -1 EBADF (Bad file descriptor) [pid 317] close(20) = -1 EBADF (Bad file descriptor) [pid 317] close(21) = -1 EBADF (Bad file descriptor) [pid 317] close(22) = -1 EBADF (Bad file descriptor) [pid 317] close(23) = -1 EBADF (Bad file descriptor) [pid 317] close(24) = -1 EBADF (Bad file descriptor) [pid 317] close(25) = -1 EBADF (Bad file descriptor) [pid 317] close(26) = -1 EBADF (Bad file descriptor) [pid 317] close(27) = -1 EBADF (Bad file descriptor) [pid 317] close(28) = -1 EBADF (Bad file descriptor) [pid 317] close(29) = -1 EBADF (Bad file descriptor) [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=105} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 316] close(19) = -1 EBADF (Bad file descriptor) [pid 316] close(20) = -1 EBADF (Bad file descriptor) [pid 316] close(21) = -1 EBADF (Bad file descriptor) [pid 316] close(22) = -1 EBADF (Bad file descriptor) [pid 316] close(23) = -1 EBADF (Bad file descriptor) [pid 316] close(24) = -1 EBADF (Bad file descriptor) [pid 316] close(25) = -1 EBADF (Bad file descriptor) [pid 316] close(26) = -1 EBADF (Bad file descriptor) [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./2/binderfs") = 0 [pid 302] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./2") = 0 [pid 302] mkdir("./3", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 5 [pid 316] close(27) = -1 EBADF (Bad file descriptor) [pid 316] close(28) = -1 EBADF (Bad file descriptor) [pid 316] close(29) = -1 EBADF (Bad file descriptor) [pid 316] exit_group(0) = ? [pid 316] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=139} --- [pid 303] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x555571cf2660, 24) = 0 [pid 321] chdir("./3") = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 321] write(1, "executing program\n", 18executing program ) = 18 [pid 321] getpid( [pid 303] <... restart_syscall resumed>) = 0 [pid 321] <... getpid resumed>) = 5 [pid 321] pidfd_open(5, 0 [pid 303] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 321] <... pidfd_open resumed>) = 3 [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 321] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 303] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 321] <... setns resumed>) = 0 [pid 303] <... openat resumed>) = 3 [pid 303] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 321] umount2(".", MNT_DETACH [pid 303] getdents64(3, [pid 321] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 25.699777][ T319] incfs: mount failed -22 [ 25.706254][ T319] ------------[ cut here ]------------ [ 25.707953][ T320] incfs: mount failed -22 [ 25.711758][ T319] WARNING: CPU: 0 PID: 319 at fs/inode.c:397 inc_nlink+0x129/0x150 [ 25.719708][ T320] overlayfs: upper fs does not support tmpfile. [ 25.723980][ T319] Modules linked in: [ 25.723996][ T319] CPU: 0 UID: 0 PID: 319 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 25.749409][ T319] Tainted: [W]=WARN [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 321] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 303] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./2/binderfs") = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] close(3) = 0 [pid 303] rmdir("./2") = 0 [pid 303] mkdir("./3", 0777) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 5 [pid 321] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 321] chdir("./bus") = 0 [pid 321] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 321] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 321] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 321] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,"./strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x555571cf2660, 24) = 0 [pid 322] chdir("./3") = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 322] write(1, "executing program\n", 18executing program ) = 18 [pid 322] getpid() = 5 [pid 322] pidfd_open(5, 0) = 3 [pid 322] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 322] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 322] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 322] chdir("./bus") = 0 [pid 322] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 322] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 322] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 25.753255][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 25.755579][ T321] incfs: mount failed -22 [ 25.763342][ T319] RIP: 0010:inc_nlink+0x129/0x150 [ 25.772708][ T319] Code: 4e ee ff e9 35 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4a ff ff ff 48 89 df e8 61 4e ee ff e9 3d ff ff ff e8 07 54 98 ff <0f> 0b eb 82 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 50 ff ff ff 4c [ 25.784040][ T322] incfs: mount failed -22 [ 25.792355][ T319] RSP: 0018:ffffc9000130f1a0 EFLAGS: 00010293 [ 25.802774][ T319] RAX: ffffffff81ed56a9 RBX: ffff888129eac6c8 RCX: ffff88811fc4a600 [ 25.810783][ T319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.818758][ T319] RBP: ffffc9000130f1c8 R08: ffffc9000130f12f R09: 0000000000000000 [ 25.826748][ T319] R10: ffffc9000130f120 R11: fffff52000261e26 R12: dffffc0000000000 [ 25.834765][ T319] R13: 1ffff110253d58d9 R14: ffff888129eac680 R15: 0000000000000000 [ 25.842777][ T319] FS: 0000555571cf2380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.851749][ T319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.858336][ T319] CR2: 0000200000001000 CR3: 000000010eaf6000 CR4: 00000000003526b0 [ 25.866336][ T319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.874350][ T319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.882346][ T319] Call Trace: [ 25.885639][ T319] [ 25.888566][ T319] ramfs_mkdir+0x58/0x70 [ 25.892828][ T319] vfs_mkdir+0x583/0x820 [ 25.897071][ T319] dir_mkdir+0x3c5/0x5a0 [ 25.901322][ T319] ? __cfi_dir_mkdir+0x10/0x10 [ 25.906112][ T319] ? bpf_lsm_inode_mkdir+0xd/0x20 [ 25.911166][ T319] ? security_inode_mkdir+0x74/0x140 [ 25.916628][ T319] vfs_mkdir+0x583/0x820 [ 25.920905][ T319] dir_mkdir+0x3c5/0x5a0 [ 25.925678][ T319] ? __cfi_dir_mkdir+0x10/0x10 [ 25.930466][ T319] ? selinux_inode_mkdir+0x26/0x30 [ 25.935581][ T319] ? bpf_lsm_inode_mkdir+0xd/0x20 [ 25.940633][ T319] ? security_inode_mkdir+0x74/0x140 [ 25.945924][ T319] vfs_mkdir+0x583/0x820 [ 25.950184][ T319] ovl_mkdir_real+0xcd/0x280 [ 25.954773][ T319] ovl_workdir_create+0x337/0x750 [ 25.959783][ T319] ? __kasan_check_write+0x18/0x20 [ 25.964905][ T319] ? ovl_statfs+0x2d0/0x2d0 [ 25.969408][ T319] ? _raw_spin_lock+0x8c/0x120 [ 25.974271][ T319] ? _raw_spin_unlock+0x45/0x60 [ 25.979116][ T319] ? mnt_want_write+0x321/0x510 [ 25.983981][ T319] ovl_get_workdir+0x328/0x1650 [ 25.988835][ T319] ? ovl_fill_super+0x36f0/0x36f0 [ 25.993891][ T319] ? __kasan_check_write+0x18/0x20 [ 25.999009][ T319] ? _raw_spin_lock+0x8c/0x120 [ 26.003790][ T319] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.008998][ T319] ? __kasan_check_write+0x18/0x20 [ 26.014125][ T319] ? _raw_spin_lock+0x8c/0x120 [ 26.018917][ T319] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.024150][ T319] ? __kasan_check_write+0x18/0x20 [ 26.029265][ T319] ? up_read+0x26/0x1d0 [ 26.033442][ T319] ? _raw_spin_unlock+0x45/0x60 [ 26.038290][ T319] ? ovl_inuse_trylock+0xbd/0x110 [ 26.043331][ T319] ovl_fill_super+0x133f/0x36f0 [ 26.048185][ T319] ? xas_nomem+0x71/0x2d0 [ 26.052546][ T319] ? _raw_spin_unlock_irqrestore+0x5b/0x70 [ 26.058347][ T319] ? ida_alloc_range+0xa12/0xa50 [ 26.063390][ T319] ? __cfi_ovl_fill_super+0x10/0x10 [ 26.068668][ T319] ? __kasan_check_write+0x18/0x20 [ 26.073829][ T319] ? mutex_unlock+0x8b/0x240 [ 26.078426][ T319] ? __cfi_mutex_unlock+0x10/0x10 [ 26.083480][ T319] ? __kasan_check_write+0x18/0x20 [ 26.088599][ T319] ? sget_fc+0x9ce/0xad0 [ 26.092873][ T319] ? __cfi_set_anon_super_fc+0x10/0x10 [ 26.098330][ T319] get_tree_nodev+0xcb/0x170 [ 26.102940][ T319] ? __cfi_ovl_fill_super+0x10/0x10 [ 26.108138][ T319] ovl_get_tree+0x20/0x30 [ 26.112520][ T319] vfs_get_tree+0x9e/0x290 [ 26.116944][ T319] do_new_mount+0x251/0xb40 [ 26.121489][ T319] ? security_capable+0xcf/0xf0 [ 26.126351][ T319] path_mount+0x688/0x1050 [ 26.130785][ T319] ? putname+0x113/0x150 [ 26.135029][ T319] __se_sys_mount+0x2bd/0x480 [ 26.139700][ T319] ? __x64_sys_mount+0xf0/0xf0 [ 26.144488][ T319] ? __kasan_check_write+0x18/0x20 [ 26.149605][ T319] __x64_sys_mount+0xc3/0xf0 [ 26.154220][ T319] x64_sys_call+0x2021/0x2ee0 [ 26.158902][ T319] do_syscall_64+0x58/0xf0 [ 26.163372][ T319] ? clear_bhb_loop+0x50/0xa0 [ 26.168049][ T319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.173960][ T319] RIP: 0033:0x7f39d9e22b19 [ 26.178370][ T319] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 26.197994][ T319] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 26.206439][ T319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 26.214441][ T319] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 26.222450][ T319] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 26.230447][ T319] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 26.238417][ T319] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000003 [ 26.246400][ T319] [ 26.249415][ T319] ---[ end trace 0000000000000000 ]--- [pid 322] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 320] <... mount resumed>) = -1 EACCES (Permission denied) [pid 320] close(3) = 0 [pid 320] close(4) = -1 EBADF (Bad file descriptor) [pid 320] close(5) = -1 EBADF (Bad file descriptor) [pid 320] close(6) = -1 EBADF (Bad file descriptor) [pid 320] close(7) = -1 EBADF (Bad file descriptor) [pid 320] close(8) = -1 EBADF (Bad file descriptor) [pid 320] close(9) = -1 EBADF (Bad file descriptor) [pid 320] close(10) = -1 EBADF (Bad file descriptor) [pid 320] close(11) = -1 EBADF (Bad file descriptor) [pid 320] close(12) = -1 EBADF (Bad file descriptor) [pid 320] close(13) = -1 EBADF (Bad file descriptor) [pid 320] close(14) = -1 EBADF (Bad file descriptor) [pid 320] close(15) = -1 EBADF (Bad file descriptor) [pid 320] close(16) = -1 EBADF (Bad file descriptor) [pid 320] close(17) = -1 EBADF (Bad file descriptor) [pid 320] close(18) = -1 EBADF (Bad file descriptor) [pid 320] close(19) = -1 EBADF (Bad file descriptor) [pid 320] close(20) = -1 EBADF (Bad file descriptor) [pid 320] close(21) = -1 EBADF (Bad file descriptor) [pid 320] close(22) = -1 EBADF (Bad file descriptor) [pid 320] close(23) = -1 EBADF (Bad file descriptor) [pid 320] close(24) = -1 EBADF (Bad file descriptor) [pid 320] close(25) = -1 EBADF (Bad file descriptor) [pid 320] close(26) = -1 EBADF (Bad file descriptor) [pid 320] close(27) = -1 EBADF (Bad file descriptor) [pid 320] close(28) = -1 EBADF (Bad file descriptor) [pid 320] close(29) = -1 EBADF (Bad file descriptor) [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./5/binderfs"executing program ) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./5") = 0 [pid 301] mkdir("./6", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 8 ./strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x555571cf2660, 24) = 0 [pid 323] chdir("./6") = 0 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 323] write(1, "executing program\n", 18) = 18 [pid 323] getpid() = 8 [pid 323] pidfd_open(8, 0) = 3 [pid 323] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 323] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 323] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 323] chdir("./bus") = 0 [pid 323] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 323] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 323] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 26.255115][ T321] ------------[ cut here ]------------ [ 26.260629][ T321] WARNING: CPU: 1 PID: 321 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.268126][ T323] incfs: mount failed -22 [ 26.269208][ T321] Modules linked in: [ 26.275361][ T323] overlayfs: upper fs does not support tmpfile. [ 26.277037][ T321] CPU: 1 UID: 0 PID: 321 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 26.298314][ T321] Tainted: [W]=WARN [ 26.302133][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 26.312209][ T321] RIP: 0010:drop_nlink+0xce/0x110 [ 26.317240][ T321] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.336867][ T321] RSP: 0018:ffffc900012df0d0 EFLAGS: 00010293 [ 26.342966][ T321] RAX: ffffffff81ed527e RBX: ffff8881110396c0 RCX: ffff88811fc49300 [ 26.350971][ T321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.358967][ T321] RBP: ffffc900012df0f8 R08: 0000000000000003 R09: 0000000000000004 [ 26.366951][ T321] R10: dffffc0000000000 R11: fffff5200025be10 R12: dffffc0000000000 [ 26.374951][ T321] R13: 1ffff110222072e1 R14: ffff888111039708 R15: 0000000000000000 [ 26.383037][ T321] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.391997][ T321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.398574][ T321] CR2: 0000200000001000 CR3: 0000000102f36000 CR4: 00000000003526b0 [ 26.406571][ T321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.414595][ T321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.422597][ T321] Call Trace: [ 26.425883][ T321] [ 26.428797][ T321] simple_rmdir+0x153/0x260 [ 26.433316][ T321] vfs_rmdir+0x3dd/0x560 [ 26.437561][ T321] dir_rmdir+0x236/0x320 [ 26.441817][ T321] ? __cfi_dir_rmdir+0x10/0x10 [ 26.446817][ T321] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 26.451887][ T321] vfs_rmdir+0x3dd/0x560 [ 26.456138][ T321] dir_rmdir+0x236/0x320 [ 26.460476][ T321] ? __cfi_dir_rmdir+0x10/0x10 [ 26.465241][ T321] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 26.470283][ T321] vfs_rmdir+0x3dd/0x560 [ 26.474521][ T321] ovl_workdir_cleanup+0x192/0x780 [ 26.479620][ T321] ? dentry_revalidate+0x2e0/0x370 [ 26.484744][ T321] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 26.490428][ T321] ? lookup_one+0x2d2/0x2e0 [ 26.494930][ T321] ? __cfi_lookup_one+0x10/0x10 [ 26.499767][ T321] ? kasan_save_alloc_info+0x40/0x50 [ 26.505071][ T321] ovl_workdir_create+0x2af/0x750 [ 26.510135][ T321] ? __kasan_check_write+0x18/0x20 [ 26.515245][ T321] ? ovl_statfs+0x2d0/0x2d0 [ 26.519761][ T321] ? _raw_spin_lock+0x8c/0x120 [ 26.524534][ T321] ? _raw_spin_unlock+0x45/0x60 [ 26.529391][ T321] ? mnt_want_write+0x321/0x510 [ 26.534273][ T321] ovl_get_workdir+0x328/0x1650 [ 26.539126][ T321] ? ovl_fill_super+0x36f0/0x36f0 [ 26.544174][ T321] ? __kasan_check_write+0x18/0x20 [ 26.549285][ T321] ? _raw_spin_lock+0x8c/0x120 [ 26.554063][ T321] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.559256][ T321] ? __kasan_check_write+0x18/0x20 [ 26.564384][ T321] ? _raw_spin_lock+0x8c/0x120 [ 26.569144][ T321] ? __cfi__raw_spin_lock+0x10/0x10 [ 26.574368][ T321] ? __kasan_check_write+0x18/0x20 [ 26.579479][ T321] ? up_read+0x26/0x1d0 [ 26.583654][ T321] ? _raw_spin_unlock+0x45/0x60 [ 26.588508][ T321] ? ovl_inuse_trylock+0xbd/0x110 [ 26.593565][ T321] ovl_fill_super+0x133f/0x36f0 [ 26.598426][ T321] ? xas_nomem+0x71/0x2d0 [ 26.602780][ T321] ? ida_alloc_range+0xa12/0xa50 [ 26.607763][ T321] ? __cfi_ovl_fill_super+0x10/0x10 [ 26.612977][ T321] ? __kasan_check_write+0x18/0x20 [ 26.618087][ T321] ? mutex_unlock+0x8b/0x240 [ 26.622691][ T321] ? __cfi_mutex_unlock+0x10/0x10 [ 26.627711][ T321] ? __kasan_check_write+0x18/0x20 [ 26.632852][ T321] ? _raw_spin_lock+0x8c/0x120 [ 26.637621][ T321] ? sget_fc+0x9ce/0xad0 [ 26.641881][ T321] ? __cfi_set_anon_super_fc+0x10/0x10 [ 26.647387][ T321] get_tree_nodev+0xcb/0x170 [ 26.651992][ T321] ? __cfi_ovl_fill_super+0x10/0x10 [ 26.657191][ T321] ovl_get_tree+0x20/0x30 [ 26.661542][ T321] vfs_get_tree+0x9e/0x290 [ 26.665957][ T321] do_new_mount+0x251/0xb40 [ 26.670481][ T321] ? security_capable+0xcf/0xf0 [ 26.675329][ T321] path_mount+0x688/0x1050 [ 26.679727][ T321] ? putname+0x113/0x150 [ 26.683980][ T321] __se_sys_mount+0x2bd/0x480 [ 26.688659][ T321] ? __x64_sys_mount+0xf0/0xf0 [ 26.693463][ T321] ? __kasan_check_write+0x18/0x20 [ 26.698576][ T321] __x64_sys_mount+0xc3/0xf0 [ 26.703176][ T321] x64_sys_call+0x2021/0x2ee0 [ 26.707856][ T321] do_syscall_64+0x58/0xf0 [ 26.712278][ T321] ? clear_bhb_loop+0x50/0xa0 [ 26.716955][ T321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.722850][ T321] RIP: 0033:0x7f39d9e22b19 [ 26.727260][ T321] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 26.746875][ T321] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [pid 323] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 EACCES (Permission denied) [pid 323] close(3) = 0 [pid 323] close(4) = -1 EBADF (Bad file descriptor) [pid 323] close(5) = -1 EBADF (Bad file descriptor) [pid 323] close(6) = -1 EBADF (Bad file descriptor) [pid 323] close(7) = -1 EBADF (Bad file descriptor) [pid 323] close(8) = -1 EBADF (Bad file descriptor) [pid 323] close(9) = -1 EBADF (Bad file descriptor) [pid 323] close(10) = -1 EBADF (Bad file descriptor) [pid 323] close(11) = -1 EBADF (Bad file descriptor) [pid 323] close(12) = -1 EBADF (Bad file descriptor) [pid 323] close(13) = -1 EBADF (Bad file descriptor) [pid 323] close(14) = -1 EBADF (Bad file descriptor) [pid 323] close(15) = -1 EBADF (Bad file descriptor) [pid 323] close(16) = -1 EBADF (Bad file descriptor) [pid 323] close(17) = -1 EBADF (Bad file descriptor) [pid 323] close(18) = -1 EBADF (Bad file descriptor) [pid 323] close(19) = -1 EBADF (Bad file descriptor) [pid 323] close(20) = -1 EBADF (Bad file descriptor) [pid 323] close(21) = -1 EBADF (Bad file descriptor) [pid 323] close(22) = -1 EBADF (Bad file descriptor) [pid 323] close(23) = -1 EBADF (Bad file descriptor) [pid 323] close(24) = -1 EBADF (Bad file descriptor) [pid 323] close(25) = -1 EBADF (Bad file descriptor) [pid 323] close(26) = -1 EBADF (Bad file descriptor) [pid 323] close(27) = -1 EBADF (Bad file descriptor) [pid 323] close(28) = -1 EBADF (Bad file descriptor) [pid 323] close(29) = -1 EBADF (Bad file descriptor) [pid 323] exit_group(0) = ? [ 26.755321][ T321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 26.763412][ T321] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 26.771412][ T321] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 26.779378][ T321] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 26.787356][ T321] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000003 [ 26.795360][ T321] [ 26.798388][ T321] ---[ end trace 0000000000000000 ]--- [pid 323] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./6/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./6") = 0 [pid 301] mkdir("./7", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 9 ./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x555571cf2660, 24) = 0 [pid 324] chdir("./7") = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 324] write(1, "executing program\n", 18executing program ) = 18 [pid 324] getpid() = 9 [pid 324] pidfd_open(9, 0) = 3 [pid 324] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 324] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 324] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 324] chdir("./bus") = 0 [pid 324] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 324] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 324] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 26.804138][ T321] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 26.810746][ T322] ------------[ cut here ]------------ [ 26.814084][ T321] overlayfs: maximum fs stacking depth exceeded [ 26.818943][ T322] WARNING: CPU: 0 PID: 322 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.833140][ T322] Modules linked in: [ 26.833205][ T324] incfs: mount failed -22 [ 26.837032][ T322] CPU: 0 UID: 0 PID: 322 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 26.837061][ T322] Tainted: [W]=WARN [ 26.845126][ T324] overlayfs: upper fs does not support tmpfile. [ 26.856665][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 26.856682][ T322] RIP: 0010:drop_nlink+0xce/0x110 [ 26.881805][ T322] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.901463][ T322] RSP: 0018:ffffc9000131f0d0 EFLAGS: 00010293 [ 26.907549][ T322] RAX: ffffffff81ed527e RBX: ffff888129eac680 RCX: ffff88811fc4df00 [ 26.915550][ T322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.923588][ T322] RBP: ffffc9000131f0f8 R08: ffffc9000131f047 R09: 1ffff92000263e08 [ 26.931611][ T322] R10: dffffc0000000000 R11: fffff52000263e09 R12: dffffc0000000000 [ 26.939584][ T322] R13: 1ffff110253d58d9 R14: ffff888129eac6c8 R15: 0000000000000000 [ 26.947579][ T322] FS: 0000555571cf2380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.956628][ T322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.963253][ T322] CR2: 00007f39d9e9d1f0 CR3: 000000010e6f6000 CR4: 00000000003526b0 [ 26.971280][ T322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.979359][ T322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.987343][ T322] Call Trace: [ 26.990639][ T322] [ 26.993563][ T322] simple_rmdir+0x1f6/0x260 [ 26.998047][ T322] vfs_rmdir+0x3dd/0x560 [ 27.002309][ T322] dir_rmdir+0x236/0x320 [ 27.006551][ T322] ? __cfi_dir_rmdir+0x10/0x10 [ 27.011329][ T322] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 27.016362][ T322] vfs_rmdir+0x3dd/0x560 [ 27.020689][ T322] dir_rmdir+0x236/0x320 [ 27.024938][ T322] ? __cfi_dir_rmdir+0x10/0x10 [ 27.029688][ T322] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 27.034874][ T322] vfs_rmdir+0x3dd/0x560 [ 27.039140][ T322] ovl_workdir_cleanup+0x192/0x780 [ 27.044318][ T322] ? dentry_revalidate+0x2e0/0x370 [ 27.049440][ T322] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 27.055123][ T322] ? lookup_one+0x2d2/0x2e0 [ 27.059630][ T322] ? __cfi_lookup_one+0x10/0x10 [ 27.064501][ T322] ? kasan_save_alloc_info+0x40/0x50 [ 27.069784][ T322] ovl_workdir_create+0x2af/0x750 [ 27.074950][ T322] ? __kasan_check_write+0x18/0x20 [ 27.080105][ T322] ? ovl_statfs+0x2d0/0x2d0 [ 27.084617][ T322] ? _raw_spin_lock+0x8c/0x120 [ 27.089388][ T322] ? _raw_spin_unlock+0x45/0x60 [ 27.094401][ T322] ? mnt_want_write+0x321/0x510 [ 27.099264][ T322] ovl_get_workdir+0x328/0x1650 [ 27.104141][ T322] ? ovl_fill_super+0x36f0/0x36f0 [ 27.109177][ T322] ? __kasan_check_write+0x18/0x20 [ 27.114307][ T322] ? _raw_spin_lock+0x8c/0x120 [ 27.119074][ T322] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.124287][ T322] ? __kasan_check_write+0x18/0x20 [ 27.129401][ T322] ? _raw_spin_lock+0x8c/0x120 [ 27.134186][ T322] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.139383][ T322] ? __kasan_check_write+0x18/0x20 [ 27.144536][ T322] ? up_read+0x26/0x1d0 [ 27.148699][ T322] ? _raw_spin_unlock+0x45/0x60 [ 27.153560][ T322] ? ovl_inuse_trylock+0xbd/0x110 [ 27.158589][ T322] ovl_fill_super+0x133f/0x36f0 [ 27.163461][ T322] ? xas_nomem+0x71/0x2d0 [ 27.167792][ T322] ? ida_alloc_range+0xa12/0xa50 [ 27.172740][ T322] ? __cfi_ovl_fill_super+0x10/0x10 [ 27.177959][ T322] ? __kasan_check_write+0x18/0x20 [ 27.183130][ T322] ? mutex_unlock+0x8b/0x240 [ 27.187741][ T322] ? __cfi_mutex_unlock+0x10/0x10 [ 27.192841][ T322] ? __kasan_check_write+0x18/0x20 [ 27.197975][ T322] ? _raw_spin_lock+0x8c/0x120 [ 27.202832][ T322] ? sget_fc+0x9ce/0xad0 [ 27.207084][ T322] ? __cfi_set_anon_super_fc+0x10/0x10 [ 27.212598][ T322] get_tree_nodev+0xcb/0x170 [ 27.217204][ T322] ? __cfi_ovl_fill_super+0x10/0x10 [ 27.222598][ T322] ovl_get_tree+0x20/0x30 [ 27.226936][ T322] vfs_get_tree+0x9e/0x290 [ 27.231372][ T322] do_new_mount+0x251/0xb40 [ 27.235883][ T322] ? security_capable+0xcf/0xf0 [ 27.240778][ T322] path_mount+0x688/0x1050 [ 27.245198][ T322] ? putname+0x113/0x150 [ 27.249426][ T322] __se_sys_mount+0x2bd/0x480 [ 27.254124][ T322] ? __x64_sys_mount+0xf0/0xf0 [ 27.258886][ T322] ? __kasan_check_write+0x18/0x20 [ 27.264028][ T322] __x64_sys_mount+0xc3/0xf0 [ 27.268625][ T322] x64_sys_call+0x2021/0x2ee0 [ 27.273345][ T322] do_syscall_64+0x58/0xf0 [ 27.277768][ T322] ? clear_bhb_loop+0x50/0xa0 [ 27.282535][ T322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.288430][ T322] RIP: 0033:0x7f39d9e22b19 [ 27.292855][ T322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 27.312510][ T322] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.320940][ T322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 27.328905][ T322] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 27.336890][ T322] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 27.344884][ T322] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 27.352906][ T322] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000003 [pid 324] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 321] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 321] close(3) = 0 [pid 321] close(4) = -1 EBADF (Bad file descriptor) [pid 321] close(5) = -1 EBADF (Bad file descriptor) [pid 321] close(6) = -1 EBADF (Bad file descriptor) [pid 321] close(7) = -1 EBADF (Bad file descriptor) [pid 321] close(8) = -1 EBADF (Bad file descriptor) [pid 321] close(9) = -1 EBADF (Bad file descriptor) [pid 321] close(10) = -1 EBADF (Bad file descriptor) [pid 321] close(11) = -1 EBADF (Bad file descriptor) [pid 321] close(12) = -1 EBADF (Bad file descriptor) [pid 321] close(13) = -1 EBADF (Bad file descriptor) [pid 321] close(14) = -1 EBADF (Bad file descriptor) [pid 321] close(15) = -1 EBADF (Bad file descriptor) [pid 321] close(16) = -1 EBADF (Bad file descriptor) [pid 321] close(17) = -1 EBADF (Bad file descriptor) [pid 321] close(18) = -1 EBADF (Bad file descriptor) [pid 321] close(19) = -1 EBADF (Bad file descriptor) [pid 321] close(20) = -1 EBADF (Bad file descriptor) [pid 321] close(21) = -1 EBADF (Bad file descriptor) [pid 321] close(22) = -1 EBADF (Bad file descriptor) [pid 321] close(23) = -1 EBADF (Bad file descriptor) [pid 321] close(24) = -1 EBADF (Bad file descriptor) [pid 321] close(25) = -1 EBADF (Bad file descriptor) [pid 321] close(26) = -1 EBADF (Bad file descriptor) [pid 321] close(27) = -1 EBADF (Bad file descriptor) [pid 321] close(28) = -1 EBADF (Bad file descriptor) [pid 321] close(29) = -1 EBADF (Bad file descriptor) [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=55} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 324] <... mount resumed>) = -1 EACCES (Permission denied) [pid 319] <... mount resumed>) = -1 EACCES (Permission denied) [pid 319] close(3) = 0 [pid 324] close(3) = 0 [pid 319] close(4 [pid 324] close(4) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(5 [pid 319] close(5 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(6 [pid 319] close(6 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(7 [pid 302] <... restart_syscall resumed>) = 0 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(7 [pid 324] close(8 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(8 [pid 324] close(9 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(9 [pid 324] close(10 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(10 [pid 302] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 324] close(11 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... openat resumed>) = 3 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(11 [pid 324] close(12 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] newfstatat(3, "", [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(13 [pid 319] close(12 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(14 [pid 302] getdents64(3, [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(13 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 324] close(15 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(14 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 324] close(16) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(17 [pid 319] close(15 [pid 302] newfstatat(AT_FDCWD, "./3/binderfs", [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 324] close(18 [pid 319] close(16 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] unlink("./3/binderfs" [pid 324] close(19 [pid 319] close(17 [pid 302] <... unlink resumed>) = 0 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(20 [pid 319] close(18 [pid 302] getdents64(3, [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 324] close(21 [pid 319] close(19 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] close(3 [pid 324] close(22 [pid 319] close(20 [pid 302] <... close resumed>) = 0 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] close(23 [pid 302] rmdir("./3" [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(21 [pid 302] <... rmdir resumed>) = 0 [pid 324] close(24 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(22 [pid 302] mkdir("./4", 0777 [pid 324] close(25 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(23 [pid 302] <... mkdir resumed>) = 0 [pid 324] close(26 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 319] close(24 [pid 322] close(3 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 324] close(27 [pid 322] <... close resumed>) = 0 [pid 319] close(25 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(4 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 325 attached [pid 324] close(28 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(26 [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 6 [pid 325] set_robust_list(0x555571cf2660, 24 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(5 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(6) = -1 EBADF (Bad file descriptor) [pid 322] close(7) = -1 EBADF (Bad file descriptor) [pid 322] close(8) = -1 EBADF (Bad file descriptor) [pid 322] close(9) = -1 EBADF (Bad file descriptor) [pid 322] close(10 [pid 325] <... set_robust_list resumed>) = 0 [pid 324] close(29 [pid 319] close(27 [pid 324] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] chdir("./4" [pid 324] exit_group(0 [pid 322] close(11 [pid 319] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] close(28) = -1 EBADF (Bad file descriptor) [pid 319] close(29) = -1 EBADF (Bad file descriptor) [pid 319] exit_group(0 [pid 324] <... exit_group resumed>) = ? [pid 325] <... chdir resumed>) = 0 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] <... exit_group resumed>) = ? [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 322] close(12 [pid 324] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 325] <... prctl resumed>) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 319] +++ exited with 0 +++ [pid 325] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 325] symlink("/dev/binderfs", "./binderfs" [pid 322] close(13 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=54} --- [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 322] close(14 [pid 325] <... symlink resumed>) = 0 executing program [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] write(1, "executing program\n", 18) = 18 [pid 325] getpid() = 6 [pid 325] pidfd_open(6, 0) = 3 [pid 325] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 301] <... restart_syscall resumed>) = 0 [pid 325] <... setns resumed>) = 0 [pid 325] umount2(".", MNT_DETACH [pid 301] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 325] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 325] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 301] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 322] close(15 [pid 304] <... restart_syscall resumed>) = 0 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(16) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 322] close(17 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 322] close(18 [pid 304] <... openat resumed>) = 3 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] newfstatat(3, "", [pid 322] close(19 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] getdents64(3, [pid 322] close(20 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 322] close(21 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(22 [pid 304] newfstatat(AT_FDCWD, "./3/binderfs", [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(23 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(24 [pid 304] unlink("./3/binderfs" [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(25 [pid 304] <... unlink resumed>) = 0 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 322] close(26) = -1 EBADF (Bad file descriptor) [pid 322] close(27) = -1 EBADF (Bad file descriptor) [pid 304] getdents64(3, [pid 325] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 322] close(28 [pid 301] <... openat resumed>) = 3 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 325] chdir("./bus" [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] close(3 [pid 301] newfstatat(3, "", [pid 325] <... chdir resumed>) = 0 [pid 322] close(29 [pid 304] <... close resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 325] mkdirat(AT_FDCWD, "./file0", 072 [pid 322] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] rmdir("./3" [pid 301] getdents64(3, [pid 325] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 325] mkdir("./file1", 000 [pid 304] <... rmdir resumed>) = 0 [pid 301] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 325] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 322] exit_group(0 [pid 304] mkdir("./4", 0777 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 325] mkdir("./bus", 000 [pid 301] newfstatat(AT_FDCWD, "./7/binderfs", [pid 325] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 325] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 301] unlink("./7/binderfs" [pid 322] <... exit_group resumed>) = ? [pid 304] <... mkdir resumed>) = 0 [pid 322] +++ exited with 0 +++ [pid 301] <... unlink resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x555571cf2660, 24) = 0 [pid 326] chdir("./4") = 0 [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 6 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 326] write(1, "executing program\n", 18executing program ) = 18 [pid 326] getpid() = 6 [pid 326] pidfd_open(6, 0) = 3 [pid 326] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 326] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 326] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [ 27.360903][ T322] [ 27.363913][ T322] ---[ end trace 0000000000000000 ]--- [ 27.369581][ T319] overlayfs: upper fs does not support tmpfile. [ 27.369605][ T322] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 27.385267][ T322] overlayfs: maximum fs stacking depth exceeded [ 27.399267][ T325] incfs: mount failed -22 [pid 301] getdents64(3, [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=57} --- [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 303] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] rmdir("./7" [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... rmdir resumed>) = 0 [pid 303] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] mkdir("./8", 0777 [pid 303] <... openat resumed>) = 3 [pid 301] <... mkdir resumed>) = 0 [pid 303] newfstatat(3, "", [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] getdents64(3, [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 10 [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./3/binderfs") = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] close(3) = 0 [pid 303] rmdir("./3") = 0 [pid 303] mkdir("./4", 0777) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 6 ./strace-static-x86_64: Process 328 attached ./strace-static-x86_64: Process 327 attached [pid 326] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 328] set_robust_list(0x555571cf2660, 24 [pid 327] set_robust_list(0x555571cf2660, 24 [pid 326] chdir("./bus" [pid 325] <... mount resumed>) = -1 EACCES (Permission denied) [pid 328] <... set_robust_list resumed>) = 0 [pid 327] <... set_robust_list resumed>) = 0 [pid 326] <... chdir resumed>) = 0 [pid 325] close(3) = 0 [pid 327] chdir("./8" [pid 325] close(4 [pid 326] mkdirat(AT_FDCWD, "./file0", 072 [pid 327] <... chdir resumed>) = 0 [pid 326] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] chdir("./4" [pid 327] <... prctl resumed>) = 0 [pid 326] mkdir("./file1", 000 [pid 325] close(5 [pid 327] setpgid(0, 0 [pid 326] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 328] <... chdir resumed>) = 0 [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 327] <... setpgid resumed>) = 0 [pid 326] mkdir("./bus", 000 [pid 325] close(6 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] <... prctl resumed>) = 0 [pid 325] close(7 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 326] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 328] setpgid(0, 0 [pid 327] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 326] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 328] <... setpgid resumed>) = 0 [pid 327] symlink("/dev/binderfs", "./binderfs" [pid 325] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 325] close(8) = -1 EBADF (Bad file descriptor) [pid 325] close(9) = -1 EBADF (Bad file descriptor) [pid 325] close(10) = -1 EBADF (Bad file descriptor) [pid 325] close(11) = -1 EBADF (Bad file descriptor) [pid 325] close(12) = -1 EBADF (Bad file descriptor) [pid 325] close(13) = -1 EBADF (Bad file descriptor) [pid 325] close(14) = -1 EBADF (Bad file descriptor) [pid 325] close(15) = -1 EBADF (Bad file descriptor) [pid 325] close(16) = -1 EBADF (Bad file descriptor) [pid 325] close(17) = -1 EBADF (Bad file descriptor) [pid 325] close(18) = -1 EBADF (Bad file descriptor) [pid 325] close(19) = -1 EBADF (Bad file descriptor) [pid 325] close(20) = -1 EBADF (Bad file descriptor) [pid 325] close(21) = -1 EBADF (Bad file descriptor) [pid 325] close(22) = -1 EBADF (Bad file descriptor) [pid 325] close(23) = -1 EBADF (Bad file descriptor) [pid 325] close(24) = -1 EBADF (Bad file descriptor) [pid 325] close(25) = -1 EBADF (Bad file descriptor) [pid 325] close(26) = -1 EBADF (Bad file descriptor) [pid 325] close(27) = -1 EBADF (Bad file descriptor) [pid 325] close(28) = -1 EBADF (Bad file descriptor) [pid 325] close(29) = -1 EBADF (Bad file descriptor) [pid 325] exit_group(0) = ? [pid 325] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>executing program [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 328] write(1, "executing program\n", 18) = 18 [pid 328] getpid() = 6 [pid 328] pidfd_open(6, 0) = 3 [pid 328] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 328] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [ 27.405790][ T325] overlayfs: upper fs does not support tmpfile. [ 27.411620][ T326] incfs: mount failed -22 [ 27.418714][ T326] ------------[ cut here ]------------ [ 27.424260][ T326] WARNING: CPU: 1 PID: 326 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 27.426191][ T327] incfs: mount failed -22 [ 27.432645][ T326] Modules linked in: [ 27.438779][ T327] overlayfs: upper fs does not support tmpfile. [ 27.440738][ T326] CPU: 1 UID: 0 PID: 326 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 27.448285][ T328] incfs: mount failed -22 [ 27.462315][ T326] Tainted: [W]=WARN [ 27.470428][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 27.480490][ T326] RIP: 0010:drop_nlink+0xce/0x110 [ 27.485517][ T326] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 27.505150][ T326] RSP: 0018:ffffc9000130f0d0 EFLAGS: 00010293 [pid 328] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULLexecuting program [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./4/binderfs") = 0 [pid 302] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./4" [pid 327] <... symlink resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 327] write(1, "executing program\n", 18 [pid 302] mkdir("./5", 0777 [pid 327] <... write resumed>) = 18 [pid 302] <... mkdir resumed>) = 0 [pid 327] getpid() = 10 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 327] pidfd_open(10, 0) = 3 [pid 327] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 327] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 327] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 7 [pid 327] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 327] chdir("./bus") = 0 [pid 327] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 327] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 327] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 327] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 328] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 328] chdir("./bus") = 0 [pid 328] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 328] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 328] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 328] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,"./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x555571cf2660, 24) = 0 [pid 329] chdir("./5") = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) executing program [pid 329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 329] write(1, "executing program\n", 18) = 18 [pid 329] getpid() = 7 [pid 329] pidfd_open(7, 0) = 3 [pid 329] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 329] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 329] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 329] chdir("./bus") = 0 [pid 329] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 329] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 329] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 27.511226][ T326] RAX: ffffffff81ed527e RBX: ffff8881163bc340 RCX: ffff88811fc4cc00 [ 27.519187][ T326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.527166][ T326] RBP: ffffc9000130f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 27.533997][ T329] incfs: mount failed -22 [ 27.535856][ T326] R10: dffffc0000000000 R11: fffff52000261e10 R12: dffffc0000000000 [ 27.547798][ T326] R13: 1ffff11022c77871 R14: ffff8881163bc388 R15: 0000000000000000 [ 27.555837][ T326] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.565006][ T326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.571610][ T326] CR2: 0000200000001000 CR3: 000000010e6f6000 CR4: 00000000003526b0 [ 27.579581][ T326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.587589][ T326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.595581][ T326] Call Trace: [ 27.598850][ T326] [ 27.601791][ T326] simple_rmdir+0x153/0x260 [ 27.606300][ T326] vfs_rmdir+0x3dd/0x560 [ 27.610563][ T326] dir_rmdir+0x236/0x320 [ 27.614805][ T326] ? __cfi_dir_rmdir+0x10/0x10 [ 27.619550][ T326] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 27.624587][ T326] vfs_rmdir+0x3dd/0x560 [ 27.628830][ T326] dir_rmdir+0x236/0x320 [ 27.633095][ T326] ? __cfi_dir_rmdir+0x10/0x10 [ 27.637861][ T326] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 27.642898][ T326] vfs_rmdir+0x3dd/0x560 [ 27.647137][ T326] ovl_workdir_cleanup+0x192/0x780 [ 27.652296][ T326] ? dentry_revalidate+0x2e0/0x370 [ 27.657432][ T326] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 27.663110][ T326] ? lookup_one+0x2d2/0x2e0 [ 27.667622][ T326] ? __cfi_lookup_one+0x10/0x10 [ 27.672501][ T326] ? kasan_save_alloc_info+0x40/0x50 [ 27.677787][ T326] ovl_workdir_create+0x2af/0x750 [ 27.682876][ T326] ? __kasan_check_write+0x18/0x20 [ 27.688000][ T326] ? ovl_statfs+0x2d0/0x2d0 [ 27.692531][ T326] ? _raw_spin_lock+0x8c/0x120 [ 27.697298][ T326] ? _raw_spin_unlock+0x45/0x60 [ 27.702191][ T326] ? mnt_want_write+0x321/0x510 [ 27.707045][ T326] ovl_get_workdir+0x328/0x1650 [ 27.711921][ T326] ? ovl_fill_super+0x36f0/0x36f0 [ 27.716947][ T326] ? __kasan_check_write+0x18/0x20 [ 27.722081][ T326] ? _raw_spin_lock+0x8c/0x120 [ 27.726845][ T326] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.732077][ T326] ? __kasan_check_write+0x18/0x20 [ 27.737186][ T326] ? _raw_spin_lock+0x8c/0x120 [ 27.741989][ T326] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.747182][ T326] ? __kasan_check_write+0x18/0x20 [ 27.752310][ T326] ? up_read+0x26/0x1d0 [ 27.756465][ T326] ? _raw_spin_unlock+0x45/0x60 [ 27.761378][ T326] ? ovl_inuse_trylock+0xbd/0x110 [ 27.766403][ T326] ovl_fill_super+0x133f/0x36f0 [ 27.771271][ T326] ? xas_nomem+0x71/0x2d0 [ 27.775600][ T326] ? ida_alloc_range+0xa12/0xa50 [ 27.780573][ T326] ? __cfi_ovl_fill_super+0x10/0x10 [ 27.785785][ T326] ? __kasan_check_write+0x18/0x20 [ 27.790927][ T326] ? mutex_unlock+0x8b/0x240 [ 27.795521][ T326] ? __cfi_mutex_unlock+0x10/0x10 [ 27.800582][ T326] ? __kasan_check_write+0x18/0x20 [ 27.805693][ T326] ? _raw_spin_lock+0x8c/0x120 [ 27.810507][ T326] ? sget_fc+0x9ce/0xad0 [ 27.814757][ T326] ? __cfi_set_anon_super_fc+0x10/0x10 [ 27.820250][ T326] get_tree_nodev+0xcb/0x170 [ 27.824841][ T326] ? __cfi_ovl_fill_super+0x10/0x10 [ 27.830023][ T326] ovl_get_tree+0x20/0x30 [ 27.834369][ T326] vfs_get_tree+0x9e/0x290 [ 27.838785][ T326] do_new_mount+0x251/0xb40 [ 27.843314][ T326] ? security_capable+0xcf/0xf0 [ 27.848187][ T326] path_mount+0x688/0x1050 [ 27.852636][ T326] ? putname+0x113/0x150 [ 27.856887][ T326] __se_sys_mount+0x2bd/0x480 [ 27.861637][ T326] ? __x64_sys_mount+0xf0/0xf0 [ 27.866417][ T326] ? __kasan_check_write+0x18/0x20 [ 27.871575][ T326] __x64_sys_mount+0xc3/0xf0 [ 27.876181][ T326] x64_sys_call+0x2021/0x2ee0 [ 27.880888][ T326] do_syscall_64+0x58/0xf0 [ 27.885299][ T326] ? clear_bhb_loop+0x50/0xa0 [ 27.889957][ T326] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.895976][ T326] RIP: 0033:0x7f39d9e22b19 [ 27.900502][ T326] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 27.920141][ T326] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.928552][ T326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 27.936537][ T326] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 27.944534][ T326] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 27.952557][ T326] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [pid 329] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 327] <... mount resumed>) = -1 EACCES (Permission denied) [pid 327] close(3) = 0 [pid 327] close(4) = -1 EBADF (Bad file descriptor) [pid 327] close(5) = -1 EBADF (Bad file descriptor) [pid 327] close(6) = -1 EBADF (Bad file descriptor) [pid 327] close(7) = -1 EBADF (Bad file descriptor) [pid 327] close(8) = -1 EBADF (Bad file descriptor) [pid 327] close(9) = -1 EBADF (Bad file descriptor) [pid 327] close(10) = -1 EBADF (Bad file descriptor) [pid 327] close(11) = -1 EBADF (Bad file descriptor) [pid 327] close(12) = -1 EBADF (Bad file descriptor) [pid 327] close(13) = -1 EBADF (Bad file descriptor) [pid 327] close(14) = -1 EBADF (Bad file descriptor) [pid 327] close(15) = -1 EBADF (Bad file descriptor) [pid 327] close(16) = -1 EBADF (Bad file descriptor) [pid 327] close(17) = -1 EBADF (Bad file descriptor) [pid 327] close(18) = -1 EBADF (Bad file descriptor) [pid 327] close(19) = -1 EBADF (Bad file descriptor) [pid 327] close(20) = -1 EBADF (Bad file descriptor) [pid 327] close(21) = -1 EBADF (Bad file descriptor) [pid 327] close(22) = -1 EBADF (Bad file descriptor) [pid 327] close(23) = -1 EBADF (Bad file descriptor) [pid 327] close(24) = -1 EBADF (Bad file descriptor) [pid 327] close(25) = -1 EBADF (Bad file descriptor) [pid 327] close(26) = -1 EBADF (Bad file descriptor) [pid 327] close(27) = -1 EBADF (Bad file descriptor) [pid 327] close(28) = -1 EBADF (Bad file descriptor) [pid 327] close(29) = -1 EBADF (Bad file descriptor) [pid 327] exit_group(0) = ? [pid 327] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 326] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 326] close(3) = 0 [pid 326] close(4) = -1 EBADF (Bad file descriptor) [pid 326] close(5) = -1 EBADF (Bad file descriptor) [pid 326] close(6) = -1 EBADF (Bad file descriptor) [pid 326] close(7) = -1 EBADF (Bad file descriptor) [pid 326] close(8 [pid 301] <... restart_syscall resumed>) = 0 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(9) = -1 EBADF (Bad file descriptor) [pid 326] close(10) = -1 EBADF (Bad file descriptor) [pid 301] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 326] close(11) = -1 EBADF (Bad file descriptor) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 326] close(12 [pid 301] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(13 [pid 301] <... openat resumed>) = 3 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(14) = -1 EBADF (Bad file descriptor) [pid 301] newfstatat(3, "", [pid 326] close(15 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(16 [pid 301] getdents64(3, [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 326] close(17) = -1 EBADF (Bad file descriptor) [pid 301] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 326] close(18) = -1 EBADF (Bad file descriptor) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 326] close(19) = -1 EBADF (Bad file descriptor) [pid 301] newfstatat(AT_FDCWD, "./8/binderfs", [pid 326] close(20) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 326] close(21) = -1 EBADF (Bad file descriptor) [pid 329] <... mount resumed>) = -1 EACCES (Permission denied) [pid 326] close(22 [pid 329] close(3 [pid 328] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 27.960557][ T326] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000004 [ 27.968525][ T326] [ 27.971551][ T326] ---[ end trace 0000000000000000 ]--- [ 27.977194][ T326] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 27.977525][ T329] overlayfs: upper fs does not support tmpfile. [ 27.986533][ T326] overlayfs: maximum fs stacking depth exceeded [ 27.993219][ T328] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [pid 301] unlink("./8/binderfs" [pid 329] <... close resumed>) = 0 [pid 328] close(3 [pid 301] <... unlink resumed>) = 0 [pid 328] <... close resumed>) = 0 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(23) = -1 EBADF (Bad file descriptor) [pid 326] close(24 [pid 329] close(4 [pid 328] close(4 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] getdents64(3, [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(25 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 329] close(5 [pid 328] close(5 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] close(3 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(26 [pid 301] <... close resumed>) = 0 [pid 329] close(6 [pid 328] close(6 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] rmdir("./8" [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(27 [pid 329] close(7 [pid 328] close(7 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... rmdir resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(28 [pid 329] close(8 [pid 328] close(8 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] mkdir("./9", 0777 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] close(29 [pid 329] close(9 [pid 328] close(9 [pid 326] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... mkdir resumed>) = 0 [pid 329] close(10 [pid 326] exit_group(0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(10 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 329] close(11 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 326] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 330 attached [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(11 [pid 326] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=54} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 11 [pid 330] set_robust_list(0x555571cf2660, 24 [pid 329] close(12 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] <... set_robust_list resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(12) = -1 EBADF (Bad file descriptor) [pid 329] close(13 [pid 328] close(13 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] chdir("./9" [pid 329] close(14 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] <... chdir resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(14 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 329] close(15 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] <... prctl resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(15 [pid 330] setpgid(0, 0 [pid 329] close(16 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] <... setpgid resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(16 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 329] close(17 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... restart_syscall resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(17 [pid 330] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 329] close(18 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] symlink("/dev/binderfs", "./binderfs" [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(18 [pid 330] <... symlink resumed>) = 0 [pid 329] close(19 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] write(1, "executing program\n", 18 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 328] close(19 [pid 330] <... write resumed>) = 18 [pid 329] close(20 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] getpid( [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(20 [pid 330] <... getpid resumed>) = 11 [pid 329] close(21 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(21 [pid 330] pidfd_open(11, 0 [pid 329] close(22 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] <... pidfd_open resumed>) = 3 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(22 [pid 329] close(23 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(23 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 330] <... setns resumed>) = 0 [pid 329] close(24 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 330] umount2(".", MNT_DETACH [pid 304] <... openat resumed>) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 330] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(24 [pid 304] getdents64(3, [pid 330] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 329] close(25 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 328] close(25 [pid 304] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./4/binderfs") = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./4") = 0 [pid 304] mkdir("./5", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 331 attached , child_tidptr=0x555571cf2650) = 7 [pid 331] set_robust_list(0x555571cf2660, 24) = 0 [pid 331] chdir("./5") = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 331] write(1, "executing program\n", 18) = 18 [pid 331] getpid() = 7 [pid 331] pidfd_open(7, 0) = 3 [pid 331] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 331] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 331] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULLexecuting program [pid 330] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 329] close(26 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] chdir("./bus" [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] close(27) = -1 EBADF (Bad file descriptor) [pid 329] close(28 [pid 330] <... chdir resumed>) = 0 [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] mkdirat(AT_FDCWD, "./file0", 072 [pid 329] close(29 [pid 330] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] mkdir("./file1", 000 [pid 329] exit_group(0 [pid 330] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 329] <... exit_group resumed>) = ? [pid 330] mkdir("./bus", 000 [pid 329] +++ exited with 0 +++ [pid 330] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 330] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 331] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 328] close(26 [pid 331] chdir("./bus" [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 331] <... chdir resumed>) = 0 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] mkdirat(AT_FDCWD, "./file0", 072 [pid 328] close(27) = -1 EBADF (Bad file descriptor) [pid 302] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 331] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 328] close(28 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 331] mkdir("./file1", 000 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 331] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 328] close(29 [pid 302] <... openat resumed>) = 3 [pid 331] mkdir("./bus", 000 [pid 328] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] newfstatat(3, "", [pid 331] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 328] exit_group(0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 331] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 302] getdents64(3, [pid 328] <... exit_group resumed>) = ? [pid 328] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 303] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 303] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./4/binderfs") = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] close(3) = 0 [pid 303] rmdir("./4") = 0 [pid 303] mkdir("./5", 0777) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x555571cf2660, 24) = 0 [pid 332] chdir("./5") = 0 [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 7 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] getpid() = 7 [pid 332] pidfd_open(7, 0) = 3 [pid 332] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 332] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 332] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 332] chdir("./bus") = 0 [pid 332] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 332] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 332] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 28.008427][ T328] overlayfs: maximum fs stacking depth exceeded [ 28.024634][ T330] incfs: mount failed -22 [ 28.027750][ T331] incfs: mount failed -22 [ 28.032548][ T330] overlayfs: upper fs does not support tmpfile. [ 28.037720][ T331] ------------[ cut here ]------------ [ 28.045059][ T331] WARNING: CPU: 1 PID: 331 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 28.047362][ T332] incfs: mount failed -22 [ 28.053754][ T331] Modules linked in: [pid 332] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./5/binderfs") = 0 [pid 302] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./5") = 0 [pid 302] mkdir("./6", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x555571cf2660, 24) = 0 [pid 333] chdir("./6") = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 executing program [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] getpid() = 8 [pid 333] pidfd_open(8, 0) = 3 [pid 333] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 333] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 333] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 8 [pid 333] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 333] chdir("./bus") = 0 [pid 333] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 333] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 333] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 28.061267][ T331] CPU: 1 UID: 0 PID: 331 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 28.074830][ T333] incfs: mount failed -22 [ 28.077465][ T331] Tainted: [W]=WARN [ 28.084996][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.095073][ T331] RIP: 0010:drop_nlink+0xce/0x110 [ 28.100131][ T331] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 28.119787][ T331] RSP: 0018:ffffc9000132f0d0 EFLAGS: 00010293 [ 28.125895][ T331] RAX: ffffffff81ed527e RBX: ffff8881163bd380 RCX: ffff88811fc5a600 [ 28.133892][ T331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.141888][ T331] RBP: ffffc9000132f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 28.149855][ T331] R10: dffffc0000000000 R11: fffff52000265e10 R12: dffffc0000000000 [ 28.157856][ T331] R13: 1ffff11022c77a79 R14: ffff8881163bd3c8 R15: 0000000000000000 [ 28.165856][ T331] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.174801][ T331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.181411][ T331] CR2: 0000200000001000 CR3: 000000010e6f6000 CR4: 00000000003526b0 [ 28.189402][ T331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.197396][ T331] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.205399][ T331] Call Trace: [ 28.208691][ T331] [ 28.211631][ T331] simple_rmdir+0x153/0x260 [ 28.216131][ T331] vfs_rmdir+0x3dd/0x560 [ 28.220392][ T331] dir_rmdir+0x236/0x320 [ 28.224813][ T331] ? __cfi_dir_rmdir+0x10/0x10 [ 28.229556][ T331] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 28.234596][ T331] vfs_rmdir+0x3dd/0x560 [ 28.238835][ T331] dir_rmdir+0x236/0x320 [ 28.243101][ T331] ? __cfi_dir_rmdir+0x10/0x10 [ 28.247864][ T331] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 28.252904][ T331] vfs_rmdir+0x3dd/0x560 [ 28.257163][ T331] ovl_workdir_cleanup+0x192/0x780 [ 28.262314][ T331] ? dentry_revalidate+0x2e0/0x370 [ 28.267437][ T331] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 28.273112][ T331] ? lookup_one+0x2d2/0x2e0 [ 28.277618][ T331] ? __cfi_lookup_one+0x10/0x10 [ 28.282498][ T331] ? kasan_save_alloc_info+0x40/0x50 [ 28.287781][ T331] ovl_workdir_create+0x2af/0x750 [ 28.292820][ T331] ? __kasan_check_write+0x18/0x20 [ 28.297930][ T331] ? ovl_statfs+0x2d0/0x2d0 [ 28.302475][ T331] ? _raw_spin_lock+0x8c/0x120 [ 28.307237][ T331] ? _raw_spin_unlock+0x45/0x60 [ 28.312097][ T331] ? mnt_want_write+0x321/0x510 [ 28.316941][ T331] ovl_get_workdir+0x328/0x1650 [ 28.321813][ T331] ? ovl_fill_super+0x36f0/0x36f0 [ 28.326835][ T331] ? __kasan_check_write+0x18/0x20 [ 28.331957][ T331] ? _raw_spin_lock+0x8c/0x120 [ 28.336718][ T331] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.341927][ T331] ? __kasan_check_write+0x18/0x20 [ 28.347037][ T331] ? _raw_spin_lock+0x8c/0x120 [ 28.351808][ T331] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.357000][ T331] ? __kasan_check_write+0x18/0x20 [ 28.362125][ T331] ? up_read+0x26/0x1d0 [ 28.366284][ T331] ? _raw_spin_unlock+0x45/0x60 [ 28.371145][ T331] ? ovl_inuse_trylock+0xbd/0x110 [ 28.376166][ T331] ovl_fill_super+0x133f/0x36f0 [ 28.381024][ T331] ? xas_nomem+0x71/0x2d0 [ 28.385364][ T331] ? ida_alloc_range+0xa12/0xa50 [ 28.390313][ T331] ? __cfi_ovl_fill_super+0x10/0x10 [ 28.395532][ T331] ? __kasan_check_write+0x18/0x20 [ 28.400669][ T331] ? mutex_unlock+0x8b/0x240 [ 28.405260][ T331] ? __cfi_mutex_unlock+0x10/0x10 [ 28.410296][ T331] ? __kasan_check_write+0x18/0x20 [ 28.415425][ T331] ? _raw_spin_lock+0x8c/0x120 [ 28.420206][ T331] ? sget_fc+0x9ce/0xad0 [ 28.424446][ T331] ? __cfi_set_anon_super_fc+0x10/0x10 [ 28.429883][ T331] get_tree_nodev+0xcb/0x170 [ 28.434485][ T331] ? __cfi_ovl_fill_super+0x10/0x10 [ 28.439688][ T331] ovl_get_tree+0x20/0x30 [ 28.444051][ T331] vfs_get_tree+0x9e/0x290 [ 28.448463][ T331] do_new_mount+0x251/0xb40 [ 28.452974][ T331] ? security_capable+0xcf/0xf0 [ 28.457831][ T331] path_mount+0x688/0x1050 [ 28.462259][ T331] ? putname+0x113/0x150 [ 28.466508][ T331] __se_sys_mount+0x2bd/0x480 [ 28.471191][ T331] ? __x64_sys_mount+0xf0/0xf0 [ 28.475952][ T331] ? __kasan_check_write+0x18/0x20 [ 28.481075][ T331] __x64_sys_mount+0xc3/0xf0 [ 28.485661][ T331] x64_sys_call+0x2021/0x2ee0 [ 28.490359][ T331] do_syscall_64+0x58/0xf0 [ 28.494768][ T331] ? clear_bhb_loop+0x50/0xa0 [ 28.499426][ T331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.505327][ T331] RIP: 0033:0x7f39d9e22b19 [ 28.509734][ T331] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 28.529371][ T331] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.537845][ T331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 28.545841][ T331] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 28.553849][ T331] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [pid 333] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 330] <... mount resumed>) = -1 EACCES (Permission denied) [pid 330] close(3) = 0 [pid 330] close(4) = -1 EBADF (Bad file descriptor) [pid 330] close(5) = -1 EBADF (Bad file descriptor) [pid 330] close(6) = -1 EBADF (Bad file descriptor) [pid 330] close(7) = -1 EBADF (Bad file descriptor) [pid 330] close(8) = -1 EBADF (Bad file descriptor) [pid 330] close(9) = -1 EBADF (Bad file descriptor) [pid 330] close(10) = -1 EBADF (Bad file descriptor) [pid 330] close(11) = -1 EBADF (Bad file descriptor) [pid 330] close(12) = -1 EBADF (Bad file descriptor) [pid 330] close(13) = -1 EBADF (Bad file descriptor) [pid 330] close(14) = -1 EBADF (Bad file descriptor) [pid 330] close(15) = -1 EBADF (Bad file descriptor) [pid 330] close(16) = -1 EBADF (Bad file descriptor) [pid 330] close(17) = -1 EBADF (Bad file descriptor) [pid 330] close(18) = -1 EBADF (Bad file descriptor) [pid 330] close(19) = -1 EBADF (Bad file descriptor) [pid 330] close(20) = -1 EBADF (Bad file descriptor) [pid 330] close(21) = -1 EBADF (Bad file descriptor) [pid 330] close(22) = -1 EBADF (Bad file descriptor) [pid 330] close(23) = -1 EBADF (Bad file descriptor) [pid 330] close(24) = -1 EBADF (Bad file descriptor) [pid 330] close(25) = -1 EBADF (Bad file descriptor) [pid 330] close(26) = -1 EBADF (Bad file descriptor) [pid 330] close(27) = -1 EBADF (Bad file descriptor) [pid 330] close(28) = -1 EBADF (Bad file descriptor) [pid 330] close(29) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 28.561843][ T331] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 28.569816][ T331] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000005 [ 28.577819][ T331] [ 28.580860][ T331] ---[ end trace 0000000000000000 ]--- [ 28.586514][ T331] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 28.586818][ T332] overlayfs: upper fs does not support tmpfile. [ 28.595843][ T331] overlayfs: maximum fs stacking depth exceeded [ 28.602258][ T333] ------------[ cut here ]------------ [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./9/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./9") = 0 [pid 301] mkdir("./10", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 12 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x555571cf2660, 24) = 0 [pid 334] chdir("./10") = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 334] write(1, "executing program\n", 18executing program ) = 18 [pid 334] getpid() = 12 [pid 334] pidfd_open(12, 0) = 3 [pid 334] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 334] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 334] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 334] chdir("./bus") = 0 [pid 334] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 334] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 334] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 28.613763][ T333] WARNING: CPU: 0 PID: 333 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 28.621711][ T333] Modules linked in: [ 28.625615][ T333] CPU: 0 UID: 0 PID: 333 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 28.630388][ T334] incfs: mount failed -22 [ 28.640969][ T333] Tainted: [W]=WARN [ 28.640978][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.648899][ T334] overlayfs: upper fs does not support tmpfile. [ 28.649062][ T333] RIP: 0010:drop_nlink+0xce/0x110 [ 28.670427][ T333] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 28.690053][ T333] RSP: 0018:ffffc900012df0d0 EFLAGS: 00010293 [ 28.696135][ T333] RAX: ffffffff81ed527e RBX: ffff8881163bd040 RCX: ffff888108382600 [ 28.704112][ T333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.712097][ T333] RBP: ffffc900012df0f8 R08: 0000000000000003 R09: 0000000000000004 [ 28.720057][ T333] R10: dffffc0000000000 R11: fffff5200025be10 R12: dffffc0000000000 [ 28.728048][ T333] R13: 1ffff11022c77a11 R14: ffff8881163bd088 R15: 0000000000000000 [ 28.736034][ T333] FS: 0000555571cf2380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 28.745420][ T333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.752033][ T333] CR2: 0000200000001000 CR3: 000000010eaf6000 CR4: 00000000003526b0 [ 28.760005][ T333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.767983][ T333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.775978][ T333] Call Trace: [ 28.779250][ T333] [ 28.782189][ T333] simple_rmdir+0x153/0x260 [ 28.786688][ T333] vfs_rmdir+0x3dd/0x560 [ 28.790985][ T333] dir_rmdir+0x236/0x320 [ 28.795258][ T333] ? __cfi_dir_rmdir+0x10/0x10 [ 28.800002][ T333] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 28.805033][ T333] vfs_rmdir+0x3dd/0x560 [ 28.809299][ T333] dir_rmdir+0x236/0x320 [ 28.813559][ T333] ? __cfi_dir_rmdir+0x10/0x10 [ 28.818319][ T333] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 28.823355][ T333] vfs_rmdir+0x3dd/0x560 [ 28.827593][ T333] ovl_workdir_cleanup+0x192/0x780 [ 28.832731][ T333] ? dentry_revalidate+0x2e0/0x370 [ 28.837861][ T333] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 28.843509][ T333] ? lookup_one+0x2d2/0x2e0 [ 28.848012][ T333] ? __cfi_lookup_one+0x10/0x10 [ 28.852925][ T333] ? kasan_save_alloc_info+0x40/0x50 [ 28.858208][ T333] ovl_workdir_create+0x2af/0x750 [ 28.863249][ T333] ? __kasan_check_write+0x18/0x20 [ 28.868370][ T333] ? ovl_statfs+0x2d0/0x2d0 [ 28.872884][ T333] ? _raw_spin_lock+0x8c/0x120 [ 28.877660][ T333] ? _raw_spin_unlock+0x45/0x60 [ 28.882528][ T333] ? mnt_want_write+0x321/0x510 [ 28.887378][ T333] ovl_get_workdir+0x328/0x1650 [ 28.892249][ T333] ? ovl_fill_super+0x36f0/0x36f0 [ 28.897271][ T333] ? __kasan_check_write+0x18/0x20 [ 28.902395][ T333] ? _raw_spin_lock+0x8c/0x120 [ 28.907159][ T333] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.912377][ T333] ? __kasan_check_write+0x18/0x20 [ 28.917489][ T333] ? _raw_spin_lock+0x8c/0x120 [ 28.922264][ T333] ? __cfi__raw_spin_lock+0x10/0x10 [ 28.927464][ T333] ? __kasan_check_write+0x18/0x20 [ 28.932584][ T333] ? up_read+0x26/0x1d0 [ 28.936741][ T333] ? _raw_spin_unlock+0x45/0x60 [ 28.941594][ T333] ? ovl_inuse_trylock+0xbd/0x110 [ 28.946620][ T333] ovl_fill_super+0x133f/0x36f0 [ 28.951479][ T333] ? xas_nomem+0x71/0x2d0 [ 28.955891][ T333] ? ida_alloc_range+0xa12/0xa50 [ 28.960846][ T333] ? __cfi_ovl_fill_super+0x10/0x10 [ 28.966044][ T333] ? __kasan_check_write+0x18/0x20 [ 28.971185][ T333] ? mutex_unlock+0x8b/0x240 [ 28.975773][ T333] ? __cfi_mutex_unlock+0x10/0x10 [ 28.980813][ T333] ? __kasan_check_write+0x18/0x20 [ 28.985919][ T333] ? _raw_spin_lock+0x8c/0x120 [ 28.990706][ T333] ? sget_fc+0x9ce/0xad0 [ 28.994951][ T333] ? __cfi_set_anon_super_fc+0x10/0x10 [ 29.000434][ T333] get_tree_nodev+0xcb/0x170 [ 29.005028][ T333] ? __cfi_ovl_fill_super+0x10/0x10 [ 29.010272][ T333] ovl_get_tree+0x20/0x30 [ 29.014611][ T333] vfs_get_tree+0x9e/0x290 [ 29.019008][ T333] do_new_mount+0x251/0xb40 [ 29.023521][ T333] ? security_capable+0xcf/0xf0 [ 29.028385][ T333] path_mount+0x688/0x1050 [ 29.032830][ T333] ? putname+0x113/0x150 [ 29.037075][ T333] __se_sys_mount+0x2bd/0x480 [ 29.041765][ T333] ? __x64_sys_mount+0xf0/0xf0 [ 29.046525][ T333] ? __kasan_check_write+0x18/0x20 [ 29.051649][ T333] __x64_sys_mount+0xc3/0xf0 [ 29.056236][ T333] x64_sys_call+0x2021/0x2ee0 [ 29.060930][ T333] do_syscall_64+0x58/0xf0 [ 29.065344][ T333] ? clear_bhb_loop+0x50/0xa0 [ 29.070010][ T333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.075944][ T333] RIP: 0033:0x7f39d9e22b19 [ 29.080391][ T333] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 29.100026][ T333] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.108454][ T333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [pid 334] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 331] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 334] <... mount resumed>) = -1 EACCES (Permission denied) [pid 332] <... mount resumed>) = -1 EACCES (Permission denied) [pid 331] close(3 [pid 334] close(3 [pid 331] <... close resumed>) = 0 [pid 334] <... close resumed>) = 0 [pid 332] close(3 [pid 334] close(4 [pid 332] <... close resumed>) = 0 [pid 331] close(4 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(4 [pid 334] close(5 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(5 [pid 331] close(5 [pid 334] close(6 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(6 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(7 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(6 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(8 [pid 332] close(7 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(7 [pid 334] close(9 [pid 332] close(8 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(8 [pid 334] close(10 [pid 332] close(9 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(9 [pid 334] close(11 [pid 332] close(10 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(12 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(10 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(11 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(13 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(11 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(12 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(14 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(12 [pid 334] close(15 [pid 332] close(13 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(14 [pid 334] close(16 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(13 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(15 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(17 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(14 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(16 [pid 334] close(18 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(17 [pid 331] close(15 [pid 334] close(19 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(16 [pid 334] close(20 [pid 332] close(18 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(17 [pid 334] close(21 [pid 332] close(19 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(18 [pid 334] close(22 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(20 [pid 334] close(23 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(21 [pid 331] close(19 [pid 334] close(24 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(22 [pid 331] close(20 [pid 334] close(25 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(23 [pid 331] close(21 [pid 334] close(26 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(24 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(27 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(22 [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] close(28 [pid 332] close(25 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(23 [pid 334] close(29 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(26 [pid 331] close(24 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] exit_group(0 [ 29.116444][ T333] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 29.124441][ T333] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 29.132436][ T333] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 29.140429][ T333] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000006 [ 29.148392][ T333] [ 29.151428][ T333] ---[ end trace 0000000000000000 ]--- [ 29.157092][ T333] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [pid 332] close(27 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 334] <... exit_group resumed>) = ? [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(25 [pid 334] +++ exited with 0 +++ [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] close(28) = -1 EBADF (Bad file descriptor) [pid 332] close(29 [pid 331] close(26 [pid 332] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] exit_group(0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 332] <... exit_group resumed>) = ? [pid 331] close(27 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 333] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 332] +++ exited with 0 +++ [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] close(28 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 333] close(3) = 0 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 333] close(4 [pid 331] close(29 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 333] close(5 [pid 331] exit_group(0 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(6) = -1 EBADF (Bad file descriptor) [pid 333] close(7 [pid 331] <... exit_group resumed>) = ? [pid 301] <... openat resumed>) = 3 [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 333] close(8) = -1 EBADF (Bad file descriptor) [pid 333] close(9 [pid 301] newfstatat(3, "", [pid 333] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 333] close(10) = -1 EBADF (Bad file descriptor) [pid 301] getdents64(3, [pid 333] close(11) = -1 EBADF (Bad file descriptor) [pid 333] close(12) = -1 EBADF (Bad file descriptor) [pid 333] close(13) = -1 EBADF (Bad file descriptor) [pid 333] close(14) = -1 EBADF (Bad file descriptor) [pid 333] close(15) = -1 EBADF (Bad file descriptor) [pid 333] close(16) = -1 EBADF (Bad file descriptor) [pid 333] close(17) = -1 EBADF (Bad file descriptor) [pid 333] close(18) = -1 EBADF (Bad file descriptor) [pid 333] close(19) = -1 EBADF (Bad file descriptor) [pid 333] close(20) = -1 EBADF (Bad file descriptor) [pid 333] close(21) = -1 EBADF (Bad file descriptor) [pid 333] close(22) = -1 EBADF (Bad file descriptor) [pid 333] close(23) = -1 EBADF (Bad file descriptor) [pid 333] close(24) = -1 EBADF (Bad file descriptor) [pid 333] close(25) = -1 EBADF (Bad file descriptor) [pid 333] close(26) = -1 EBADF (Bad file descriptor) [pid 333] close(27) = -1 EBADF (Bad file descriptor) [pid 333] close(28) = -1 EBADF (Bad file descriptor) [pid 333] close(29) = -1 EBADF (Bad file descriptor) [pid 333] exit_group(0) = ? [pid 333] +++ exited with 0 +++ [pid 331] +++ exited with 0 +++ [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=57} --- [pid 301] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=56} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./10/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./10") = 0 [pid 301] mkdir("./11", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 335 attached , child_tidptr=0x555571cf2650) = 13 [pid 335] set_robust_list(0x555571cf2660, 24) = 0 [pid 335] chdir("./11") = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 335] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 335] write(1, "executing program\n", 18) = 18 [pid 335] getpid() = 13 [pid 335] pidfd_open(13, 0) = 3 [pid 335] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 335] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 335] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 304] <... restart_syscall resumed>) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... openat resumed>) = 3 [pid 303] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] newfstatat(3, "", [pid 303] <... openat resumed>) = 3 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] newfstatat(3, "", [pid 302] getdents64(3, [pid 303] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 304] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] getdents64(3, [pid 302] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 335] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 303] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] newfstatat(AT_FDCWD, "./6/binderfs", [pid 335] chdir("./bus" [pid 304] <... openat resumed>) = 3 [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 335] <... chdir resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 335] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 304] newfstatat(3, "", [pid 303] newfstatat(AT_FDCWD, "./5/binderfs", [pid 302] unlink("./6/binderfs" [pid 335] mkdir("./file1", 000 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] <... unlink resumed>) = 0 [pid 335] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 335] mkdir("./bus", 000 [pid 304] getdents64(3, [pid 303] unlink("./5/binderfs" [pid 302] getdents64(3, [pid 335] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 335] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] <... unlink resumed>) = 0 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] getdents64(3, [pid 302] close(3 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] <... close resumed>) = 0 [pid 304] newfstatat(AT_FDCWD, "./5/binderfs", [pid 303] close(3 [pid 302] rmdir("./6" [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] <... close resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 304] unlink("./5/binderfs" [pid 303] rmdir("./5" [pid 302] mkdir("./7", 0777 [pid 304] <... unlink resumed>) = 0 [pid 303] <... rmdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 304] getdents64(3, [pid 303] mkdir("./6", 0777 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 336 attached [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] <... mkdir resumed>) = 0 [pid 304] close(3) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] rmdir("./5" [pid 336] set_robust_list(0x555571cf2660, 24 [pid 304] <... rmdir resumed>) = 0 [pid 336] <... set_robust_list resumed>) = 0 [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 9 [pid 336] chdir("./7" [pid 304] mkdir("./6", 0777 [pid 336] <... chdir resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 336] setpgid(0, 0 [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 8 ./strace-static-x86_64: Process 338 attached [pid 336] <... setpgid resumed>) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 337 attached [pid 338] set_robust_list(0x555571cf2660, 24 [pid 336] symlink("/dev/binderfs", "./binderfs" [pid 337] set_robust_list(0x555571cf2660, 24 [pid 338] <... set_robust_list resumed>) = 0 [pid 337] <... set_robust_list resumed>) = 0 [pid 336] <... symlink resumed>) = 0 [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 8 [pid 338] chdir("./6" [pid 337] chdir("./6"executing program [pid 336] write(1, "executing program\n", 18 [pid 335] <... mount resumed>) = -1 EACCES (Permission denied) [pid 338] <... chdir resumed>) = 0 [pid 337] <... chdir resumed>) = 0 [pid 335] close(3 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 336] <... write resumed>) = 18 [pid 335] <... close resumed>) = 0 [pid 337] <... prctl resumed>) = 0 [pid 338] <... prctl resumed>) = 0 [pid 337] setpgid(0, 0 [pid 336] getpid( [pid 338] setpgid(0, 0 [pid 337] <... setpgid resumed>) = 0 [pid 335] close(4 [pid 338] <... setpgid resumed>) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 336] <... getpid resumed>) = 9 [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 337] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 335] close(5 [pid 337] symlink("/dev/binderfs", "./binderfs" [pid 336] pidfd_open(9, 0executing program [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... symlink resumed>) = 0 [pid 335] close(6 [pid 337] write(1, "executing program\n", 18 [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... write resumed>) = 18 [pid 338] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 337] getpid( [pid 335] close(7 [pid 338] symlink("/dev/binderfs", "./binderfs" [pid 337] <... getpid resumed>) = 8 [pid 336] <... pidfd_open resumed>) = 3 [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] pidfd_open(8, 0 [pid 336] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 337] <... pidfd_open resumed>) = 3 [pid 335] close(8 [pid 337] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... setns resumed>) = 0 [pid 335] close(9 [pid 337] umount2(".", MNT_DETACH [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 337] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 335] close(10 [pid 338] <... symlink resumed>) = 0 executing program [pid 336] <... setns resumed>) = 0 [pid 338] write(1, "executing program\n", 18 [pid 336] umount2(".", MNT_DETACH [pid 338] <... write resumed>) = 18 [pid 336] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 338] getpid( [pid 336] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 338] <... getpid resumed>) = 8 [pid 337] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 335] close(11 [pid 337] chdir("./bus" [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... chdir resumed>) = 0 [pid 335] close(12 [pid 337] mkdirat(AT_FDCWD, "./file0", 072 [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 335] close(13) = -1 EBADF (Bad file descriptor) [pid 335] close(14 [pid 337] mkdir("./file1", 000 [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 335] close(15 [pid 337] mkdir("./bus", 000 [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 335] close(16 [pid 337] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 335] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] pidfd_open(8, 0 [pid 336] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 338] <... pidfd_open resumed>) = 3 [pid 338] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 336] chdir("./bus" [pid 338] <... setns resumed>) = 0 [pid 336] <... chdir resumed>) = 0 [pid 338] umount2(".", MNT_DETACH [pid 336] mkdirat(AT_FDCWD, "./file0", 072 [pid 338] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 338] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 336] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 335] close(17) = -1 EBADF (Bad file descriptor) [pid 335] close(18) = -1 EBADF (Bad file descriptor) [pid 335] close(19) = -1 EBADF (Bad file descriptor) [pid 335] close(20) = -1 EBADF (Bad file descriptor) [pid 335] close(21) = -1 EBADF (Bad file descriptor) [pid 335] close(22) = -1 EBADF (Bad file descriptor) [pid 335] close(23) = -1 EBADF (Bad file descriptor) [pid 335] close(24) = -1 EBADF (Bad file descriptor) [pid 335] close(25) = -1 EBADF (Bad file descriptor) [pid 335] close(26) = -1 EBADF (Bad file descriptor) [pid 335] close(27) = -1 EBADF (Bad file descriptor) [pid 335] close(28) = -1 EBADF (Bad file descriptor) [pid 335] close(29) = -1 EBADF (Bad file descriptor) [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 336] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 336] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 29.166428][ T333] overlayfs: maximum fs stacking depth exceeded [ 29.181513][ T335] incfs: mount failed -22 [ 29.188457][ T335] overlayfs: upper fs does not support tmpfile. [ 29.197991][ T337] incfs: mount failed -22 [ 29.199255][ T336] incfs: mount failed -22 [ 29.205700][ T337] overlayfs: upper fs does not support tmpfile. [ 29.209570][ T338] incfs: mount failed -22 [pid 336] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 338] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 338] chdir("./bus") = 0 [pid 338] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 338] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 338] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 338] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./11/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./11") = 0 [pid 301] mkdir("./12", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 14 ./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x555571cf2660, 24) = 0 [pid 339] chdir("./12") = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 339] write(1, "executing program\n", 18executing program ) = 18 [pid 339] getpid() = 14 [pid 339] pidfd_open(14, 0) = 3 [pid 339] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 339] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 339] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 339] chdir("./bus") = 0 [pid 339] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 339] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 339] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 29.217772][ T336] ------------[ cut here ]------------ [ 29.217782][ T336] WARNING: CPU: 0 PID: 336 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 29.231173][ T336] Modules linked in: [ 29.235082][ T336] CPU: 0 UID: 0 PID: 336 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 29.243619][ T339] incfs: mount failed -22 [ 29.250587][ T336] Tainted: [W]=WARN [ 29.258412][ T339] overlayfs: upper fs does not support tmpfile. [ 29.259025][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.259038][ T336] RIP: 0010:drop_nlink+0xce/0x110 [ 29.280387][ T336] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 29.300018][ T336] RSP: 0018:ffffc9000133f0d0 EFLAGS: 00010293 [ 29.306112][ T336] RAX: ffffffff81ed527e RBX: ffff8881163bcd00 RCX: ffff88811fc59300 [ 29.314115][ T336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.322109][ T336] RBP: ffffc9000133f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 29.330106][ T336] R10: dffffc0000000000 R11: fffff52000267e10 R12: dffffc0000000000 [ 29.338081][ T336] R13: 1ffff11022c779a9 R14: ffff8881163bcd48 R15: 0000000000000000 [ 29.346094][ T336] FS: 0000555571cf2380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.355048][ T336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.361652][ T336] CR2: 0000200000001000 CR3: 000000010e6f6000 CR4: 00000000003526b0 [ 29.369623][ T336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.377727][ T336] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.385746][ T336] Call Trace: [ 29.389028][ T336] [ 29.391981][ T336] simple_rmdir+0x153/0x260 [ 29.396524][ T336] vfs_rmdir+0x3dd/0x560 [ 29.400792][ T336] dir_rmdir+0x236/0x320 [ 29.405050][ T336] ? __cfi_dir_rmdir+0x10/0x10 [ 29.409801][ T336] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 29.414842][ T336] vfs_rmdir+0x3dd/0x560 [ 29.419126][ T336] dir_rmdir+0x236/0x320 [ 29.423381][ T336] ? __cfi_dir_rmdir+0x10/0x10 [ 29.428146][ T336] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 29.433198][ T336] vfs_rmdir+0x3dd/0x560 [ 29.437438][ T336] ovl_workdir_cleanup+0x192/0x780 [ 29.442601][ T336] ? dentry_revalidate+0x2e0/0x370 [ 29.447710][ T336] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 29.453360][ T336] ? lookup_one+0x2d2/0x2e0 [ 29.457860][ T336] ? __cfi_lookup_one+0x10/0x10 [ 29.462722][ T336] ? kasan_save_alloc_info+0x40/0x50 [ 29.468007][ T336] ovl_workdir_create+0x2af/0x750 [ 29.473048][ T336] ? __kasan_check_write+0x18/0x20 [ 29.478179][ T336] ? ovl_statfs+0x2d0/0x2d0 [ 29.482696][ T336] ? _raw_spin_lock+0x8c/0x120 [ 29.487459][ T336] ? _raw_spin_unlock+0x45/0x60 [ 29.492343][ T336] ? mnt_want_write+0x321/0x510 [ 29.497188][ T336] ovl_get_workdir+0x328/0x1650 [ 29.502056][ T336] ? ovl_fill_super+0x36f0/0x36f0 [ 29.507077][ T336] ? __kasan_check_write+0x18/0x20 [ 29.512202][ T336] ? _raw_spin_lock+0x8c/0x120 [ 29.516956][ T336] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.522170][ T336] ? __kasan_check_write+0x18/0x20 [ 29.527278][ T336] ? _raw_spin_lock+0x8c/0x120 [ 29.532052][ T336] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.537240][ T336] ? __kasan_check_write+0x18/0x20 [ 29.542366][ T336] ? up_read+0x26/0x1d0 [ 29.546513][ T336] ? _raw_spin_unlock+0x45/0x60 [ 29.551388][ T336] ? ovl_inuse_trylock+0xbd/0x110 [ 29.556435][ T336] ovl_fill_super+0x133f/0x36f0 [ 29.561362][ T336] ? xas_nomem+0x71/0x2d0 [ 29.565692][ T336] ? ida_alloc_range+0xa12/0xa50 [ 29.570668][ T336] ? __cfi_ovl_fill_super+0x10/0x10 [ 29.575878][ T336] ? __kasan_check_write+0x18/0x20 [ 29.581019][ T336] ? mutex_unlock+0x8b/0x240 [ 29.585618][ T336] ? __cfi_mutex_unlock+0x10/0x10 [ 29.590659][ T336] ? __kasan_check_write+0x18/0x20 [ 29.595775][ T336] ? _raw_spin_lock+0x8c/0x120 [ 29.600555][ T336] ? sget_fc+0x9ce/0xad0 [ 29.604800][ T336] ? __cfi_set_anon_super_fc+0x10/0x10 [ 29.610286][ T336] get_tree_nodev+0xcb/0x170 [ 29.614880][ T336] ? __cfi_ovl_fill_super+0x10/0x10 [ 29.620097][ T336] ovl_get_tree+0x20/0x30 [ 29.624428][ T336] vfs_get_tree+0x9e/0x290 [ 29.628829][ T336] do_new_mount+0x251/0xb40 [ 29.633438][ T336] ? security_capable+0xcf/0xf0 [ 29.638294][ T336] path_mount+0x688/0x1050 [ 29.642749][ T336] ? putname+0x113/0x150 [ 29.647004][ T336] __se_sys_mount+0x2bd/0x480 [ 29.651699][ T336] ? __x64_sys_mount+0xf0/0xf0 [ 29.656463][ T336] ? __kasan_check_write+0x18/0x20 [ 29.661595][ T336] __x64_sys_mount+0xc3/0xf0 [ 29.666199][ T336] x64_sys_call+0x2021/0x2ee0 [ 29.670904][ T336] do_syscall_64+0x58/0xf0 [ 29.675330][ T336] ? clear_bhb_loop+0x50/0xa0 [ 29.679994][ T336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.685924][ T336] RIP: 0033:0x7f39d9e22b19 [ 29.690370][ T336] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 29.709994][ T336] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.718436][ T336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 29.726453][ T336] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 29.734501][ T336] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 29.742494][ T336] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 29.750499][ T336] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000007 [ 29.758477][ T336] [ 29.761514][ T336] ---[ end trace 0000000000000000 ]--- [pid 339] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 337] <... mount resumed>) = -1 EACCES (Permission denied) [pid 337] close(3) = 0 [pid 337] close(4) = -1 EBADF (Bad file descriptor) [pid 337] close(5) = -1 EBADF (Bad file descriptor) [pid 337] close(6) = -1 EBADF (Bad file descriptor) [pid 337] close(7) = -1 EBADF (Bad file descriptor) [pid 337] close(8) = -1 EBADF (Bad file descriptor) [pid 337] close(9) = -1 EBADF (Bad file descriptor) [pid 337] close(10) = -1 EBADF (Bad file descriptor) [pid 337] close(11) = -1 EBADF (Bad file descriptor) [pid 337] close(12) = -1 EBADF (Bad file descriptor) [pid 337] close(13) = -1 EBADF (Bad file descriptor) [pid 337] close(14) = -1 EBADF (Bad file descriptor) [pid 337] close(15) = -1 EBADF (Bad file descriptor) [pid 339] <... mount resumed>) = -1 EACCES (Permission denied) [pid 337] close(16 [pid 339] close(3) = 0 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(4 [pid 337] close(17 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(5 [pid 338] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 337] close(18 [pid 336] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(3 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(3 [pid 339] close(6 [pid 337] close(19 [pid 338] <... close resumed>) = 0 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = 0 [pid 339] close(7 [pid 338] close(4 [pid 337] close(20 [pid 336] close(4 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(8 [pid 338] close(5 [pid 337] close(21 [pid 336] close(5 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(9 [pid 338] close(6 [pid 337] close(22 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(6 [pid 339] close(10 [pid 338] close(7 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] close(23 [pid 336] close(7 [pid 339] close(11 [pid 338] close(8 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] close(24 [pid 336] close(8 [pid 339] close(12 [pid 338] close(9 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] close(25 [pid 336] close(9 [pid 339] close(13 [pid 338] close(10 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(10 [pid 339] close(14 [pid 338] close(11 [pid 337] close(26 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(11 [pid 339] close(15 [pid 338] close(12 [pid 337] close(27 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(12 [pid 338] close(13 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(16 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] close(28 [pid 336] close(13 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(14 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(17 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(14 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(15 [pid 337] close(29 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(18 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(15 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(16 [pid 337] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(19 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(16 [pid 338] close(17 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(17 [pid 338] close(18 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] exit_group(0 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(20 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] <... exit_group resumed>) = ? [pid 336] close(18 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(19 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(19 [pid 338] close(20 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(20 [pid 338] close(21 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(22 [pid 336] close(21 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(23 [pid 336] close(22 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(24 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 337] +++ exited with 0 +++ [pid 336] close(23 [pid 339] close(21 [pid 338] close(25 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(22 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(24 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(26 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(23 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(25 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(27 [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(24 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(26 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(28 [pid 339] close(25 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(29 [pid 336] close(27 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(26 [pid 338] exit_group(0 [pid 336] close(28 [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] close(27 [pid 338] <... exit_group resumed>) = ? [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] close(29 [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 339] close(28 [pid 338] +++ exited with 0 +++ [pid 336] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] exit_group(0 [pid 339] close(29 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 339] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 336] <... exit_group resumed>) = ? [pid 339] exit_group(0 [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 339] <... exit_group resumed>) = ? [pid 336] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=57} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 339] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 304] <... restart_syscall resumed>) = 0 [pid 304] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... restart_syscall resumed>) = 0 [pid 304] <... openat resumed>) = 3 [pid 301] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./12/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./12") = 0 [pid 301] mkdir("./13", 0777 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, [pid 301] <... mkdir resumed>) = 0 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 340 attached ) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./6/binderfs", [pid 340] set_robust_list(0x555571cf2660, 24 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 15 [pid 340] <... set_robust_list resumed>) = 0 [pid 304] unlink("./6/binderfs" [pid 340] chdir("./13" [pid 304] <... unlink resumed>) = 0 [pid 304] getdents64(3, [pid 340] <... chdir resumed>) = 0 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0 [pid 304] close(3 [pid 340] <... setpgid resumed>) = 0 [pid 304] <... close resumed>) = 0 [pid 304] rmdir("./6" [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 302] <... restart_syscall resumed>) = 0 [pid 340] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... rmdir resumed>) = 0 [pid 304] mkdir("./7", 0777 [pid 340] symlink("/dev/binderfs", "./binderfs" [pid 302] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 340] <... symlink resumed>) = 0 [pid 304] <... mkdir resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] write(1, "executing program\n", 18 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 340] <... write resumed>) = 18 [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] getpid( [pid 303] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... openat resumed>) = 3 [pid 340] <... getpid resumed>) = 15 [pid 302] newfstatat(3, "", [pid 303] <... openat resumed>) = 3 [pid 340] pidfd_open(15, 0 [pid 303] newfstatat(3, "", [pid 340] <... pidfd_open resumed>) = 3 [pid 303] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 340] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 303] getdents64(3, [pid 302] getdents64(3, [pid 340] <... setns resumed>) = 0 [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 340] umount2(".", MNT_DETACH [pid 302] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 303] newfstatat(AT_FDCWD, "./6/binderfs", [pid 302] newfstatat(AT_FDCWD, "./7/binderfs", ./strace-static-x86_64: Process 341 attached [pid 303] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./6/binderfs" [pid 341] set_robust_list(0x555571cf2660, 24 [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 9 [pid 303] <... unlink resumed>) = 0 [pid 341] <... set_robust_list resumed>) = 0 [pid 303] getdents64(3, [pid 341] chdir("./7" [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 341] <... chdir resumed>) = 0 [pid 303] close(3 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 303] <... close resumed>) = 0 [pid 341] <... prctl resumed>) = 0 [pid 303] rmdir("./6" [pid 341] setpgid(0, 0 [pid 303] <... rmdir resumed>) = 0 [ 29.767154][ T336] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 29.767392][ T338] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 29.777460][ T336] overlayfs: maximum fs stacking depth exceeded [ 29.786054][ T338] overlayfs: maximum fs stacking depth exceeded [pid 303] mkdir("./7", 0777 [pid 341] <... setpgid resumed>) = 0 [pid 303] <... mkdir resumed>) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 9 [pid 341] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 341] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 342 attached ) = 0 [pid 340] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 342] set_robust_list(0x555571cf2660, 24 [pid 340] chdir("./bus" [pid 302] unlink("./7/binderfs" [pid 342] <... set_robust_list resumed>) = 0 [pid 340] <... chdir resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 342] chdir("./7" [pid 302] getdents64(3, [pid 342] <... chdir resumed>) = 0 [pid 340] mkdirat(AT_FDCWD, "./file0", 072 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 340] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 302] close(3 [pid 342] <... prctl resumed>) = 0 [pid 340] mkdir("./file1", 000 [pid 302] <... close resumed>) = 0 [pid 342] setpgid(0, 0 [pid 340] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] rmdir("./7" [pid 342] <... setpgid resumed>) = 0 [pid 340] mkdir("./bus", 000 [pid 302] <... rmdir resumed>) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 340] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] mkdir("./8", 0777 [pid 342] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 340] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 302] <... mkdir resumed>) = 0 executing program [pid 342] symlink("/dev/binderfs", "./binderfs" [pid 341] write(1, "executing program\n", 18 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 342] <... symlink resumed>) = 0 [pid 341] <... write resumed>) = 18 [pid 341] getpid() = 9 [pid 341] pidfd_open(9, 0executing program ./strace-static-x86_64: Process 343 attached [pid 342] write(1, "executing program\n", 18 [pid 341] <... pidfd_open resumed>) = 3 [pid 343] set_robust_list(0x555571cf2660, 24 [pid 342] <... write resumed>) = 18 [pid 341] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 341] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 341] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 343] <... set_robust_list resumed>) = 0 [pid 342] getpid( [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 10 [pid 343] chdir("./8" [pid 342] <... getpid resumed>) = 9 [pid 343] <... chdir resumed>) = 0 [pid 342] pidfd_open(9, 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 342] <... pidfd_open resumed>) = 3 [pid 343] <... prctl resumed>) = 0 [pid 342] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 343] setpgid(0, 0 [pid 342] <... setns resumed>) = 0 [pid 343] <... setpgid resumed>) = 0 [pid 342] umount2(".", MNT_DETACH [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 342] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 343] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 342] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 343] symlink("/dev/binderfs", "./binderfs" [pid 341] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 341] chdir("./bus") = 0 [pid 341] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 341] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 341] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 341] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 343] <... symlink resumed>) = 0 executing program [pid 342] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 340] <... mount resumed>) = -1 EACCES (Permission denied) [pid 343] write(1, "executing program\n", 18 [pid 340] close(3 [pid 343] <... write resumed>) = 18 [pid 342] chdir("./bus" [pid 340] <... close resumed>) = 0 [pid 343] getpid( [pid 342] <... chdir resumed>) = 0 [pid 340] close(4 [pid 343] <... getpid resumed>) = 10 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] pidfd_open(10, 0 [pid 342] mkdirat(AT_FDCWD, "./file0", 072 [pid 340] close(5 [pid 343] <... pidfd_open resumed>) = 3 [pid 342] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 342] mkdir("./file1", 000 [pid 340] close(6 [pid 343] <... setns resumed>) = 0 [pid 342] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] umount2(".", MNT_DETACH [pid 342] mkdir("./bus", 000 [pid 340] close(7 [pid 343] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 342] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 340] close(8 [pid 343] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] chdir("./bus" [pid 340] close(9 [pid 343] <... chdir resumed>) = 0 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(10 [pid 343] mkdirat(AT_FDCWD, "./file0", 072 [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 340] close(11) = -1 EBADF (Bad file descriptor) [pid 343] mkdir("./file1", 000 [pid 340] close(12 [pid 343] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] mkdir("./bus", 000 [pid 340] close(13 [pid 343] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(14 [pid 343] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 340] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 340] close(15) = -1 EBADF (Bad file descriptor) [pid 340] close(16) = -1 EBADF (Bad file descriptor) [pid 340] close(17) = -1 EBADF (Bad file descriptor) [pid 340] close(18) = -1 EBADF (Bad file descriptor) [pid 340] close(19) = -1 EBADF (Bad file descriptor) [pid 340] close(20) = -1 EBADF (Bad file descriptor) [pid 340] close(21) = -1 EBADF (Bad file descriptor) [pid 340] close(22) = -1 EBADF (Bad file descriptor) [pid 340] close(23) = -1 EBADF (Bad file descriptor) [pid 340] close(24) = -1 EBADF (Bad file descriptor) [pid 340] close(25) = -1 EBADF (Bad file descriptor) [pid 340] close(26) = -1 EBADF (Bad file descriptor) [pid 340] close(27) = -1 EBADF (Bad file descriptor) [pid 340] close(28) = -1 EBADF (Bad file descriptor) [pid 340] close(29) = -1 EBADF (Bad file descriptor) [pid 340] exit_group(0) = ? [pid 340] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./13/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./13") = 0 [pid 301] mkdir("./14", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 16 ./strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x555571cf2660, 24) = 0 [pid 344] chdir("./14") = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 344] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 344] write(1, "executing program\n", 18) = 18 [pid 344] getpid() = 16 [pid 344] pidfd_open(16, 0) = 3 [pid 344] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 344] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [ 29.820303][ T340] incfs: mount failed -22 [ 29.827997][ T340] overlayfs: upper fs does not support tmpfile. [ 29.829010][ T341] incfs: mount failed -22 [ 29.836773][ T342] incfs: mount failed -22 [ 29.841717][ T341] overlayfs: upper fs does not support tmpfile. [ 29.846602][ T343] incfs: mount failed -22 [ 29.850896][ T342] ------------[ cut here ]------------ [ 29.859215][ T342] WARNING: CPU: 1 PID: 342 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 29.867188][ T342] Modules linked in: [pid 344] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 344] chdir("./bus") = 0 [pid 344] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 344] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 344] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 29.871630][ T342] CPU: 1 UID: 0 PID: 342 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 29.871834][ T344] incfs: mount failed -22 [ 29.887060][ T342] Tainted: [W]=WARN [ 29.887069][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.887079][ T342] RIP: 0010:drop_nlink+0xce/0x110 [ 29.893371][ T344] overlayfs: upper fs does not support tmpfile. [ 29.895209][ T342] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 29.936219][ T342] RSP: 0018:ffffc9000135f0d0 EFLAGS: 00010293 [ 29.942329][ T342] RAX: ffffffff81ed527e RBX: ffff8881163d56c0 RCX: ffff888121310000 [ 29.950409][ T342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.958370][ T342] RBP: ffffc9000135f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 29.966369][ T342] R10: dffffc0000000000 R11: fffff5200026be10 R12: dffffc0000000000 [ 29.974454][ T342] R13: 1ffff11022c7aae1 R14: ffff8881163d5708 R15: 0000000000000000 [ 29.982453][ T342] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.991422][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.998001][ T342] CR2: 0000200000001000 CR3: 0000000101fe6000 CR4: 00000000003526b0 [ 30.006003][ T342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.013999][ T342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.022014][ T342] Call Trace: [ 30.025296][ T342] [ 30.028212][ T342] simple_rmdir+0x153/0x260 [ 30.032757][ T342] vfs_rmdir+0x3dd/0x560 [ 30.037003][ T342] dir_rmdir+0x236/0x320 [ 30.041261][ T342] ? __cfi_dir_rmdir+0x10/0x10 [ 30.046026][ T342] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 30.051075][ T342] vfs_rmdir+0x3dd/0x560 [ 30.055317][ T342] dir_rmdir+0x236/0x320 [ 30.059540][ T342] ? __cfi_dir_rmdir+0x10/0x10 [ 30.064312][ T342] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 30.069334][ T342] vfs_rmdir+0x3dd/0x560 [ 30.073589][ T342] ovl_workdir_cleanup+0x192/0x780 [ 30.078699][ T342] ? dentry_revalidate+0x2e0/0x370 [ 30.083821][ T342] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 30.089484][ T342] ? lookup_one+0x2d2/0x2e0 [ 30.094022][ T342] ? __cfi_lookup_one+0x10/0x10 [ 30.098895][ T342] ? kasan_save_alloc_info+0x40/0x50 [ 30.104215][ T342] ovl_workdir_create+0x2af/0x750 [ 30.109239][ T342] ? __kasan_check_write+0x18/0x20 [ 30.114369][ T342] ? ovl_statfs+0x2d0/0x2d0 [ 30.118873][ T342] ? _raw_spin_lock+0x8c/0x120 [ 30.123645][ T342] ? _raw_spin_unlock+0x45/0x60 [ 30.128489][ T342] ? mnt_want_write+0x321/0x510 [ 30.133388][ T342] ovl_get_workdir+0x328/0x1650 [ 30.138247][ T342] ? ovl_fill_super+0x36f0/0x36f0 [ 30.143278][ T342] ? __kasan_check_write+0x18/0x20 [ 30.148396][ T342] ? _raw_spin_lock+0x8c/0x120 [ 30.153173][ T342] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.158370][ T342] ? __kasan_check_write+0x18/0x20 [ 30.163489][ T342] ? _raw_spin_lock+0x8c/0x120 [ 30.168247][ T342] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.173455][ T342] ? __kasan_check_write+0x18/0x20 [ 30.178563][ T342] ? up_read+0x26/0x1d0 [ 30.182721][ T342] ? _raw_spin_unlock+0x45/0x60 [ 30.187573][ T342] ? ovl_inuse_trylock+0xbd/0x110 [ 30.192694][ T342] ovl_fill_super+0x133f/0x36f0 [ 30.197545][ T342] ? xas_nomem+0x71/0x2d0 [ 30.201886][ T342] ? ida_alloc_range+0xa12/0xa50 [ 30.206821][ T342] ? __cfi_ovl_fill_super+0x10/0x10 [ 30.212031][ T342] ? __kasan_check_write+0x18/0x20 [ 30.217139][ T342] ? mutex_unlock+0x8b/0x240 [ 30.221750][ T342] ? __cfi_mutex_unlock+0x10/0x10 [ 30.226772][ T342] ? __kasan_check_write+0x18/0x20 [ 30.231904][ T342] ? _raw_spin_lock+0x8c/0x120 [ 30.236661][ T342] ? sget_fc+0x9ce/0xad0 [ 30.240916][ T342] ? __cfi_set_anon_super_fc+0x10/0x10 [ 30.246372][ T342] get_tree_nodev+0xcb/0x170 [ 30.250981][ T342] ? __cfi_ovl_fill_super+0x10/0x10 [ 30.256179][ T342] ovl_get_tree+0x20/0x30 [ 30.260525][ T342] vfs_get_tree+0x9e/0x290 [ 30.264936][ T342] do_new_mount+0x251/0xb40 [ 30.269420][ T342] ? security_capable+0xcf/0xf0 [ 30.274296][ T342] path_mount+0x688/0x1050 [ 30.278708][ T342] ? putname+0x113/0x150 [ 30.282985][ T342] __se_sys_mount+0x2bd/0x480 [ 30.287672][ T342] ? __x64_sys_mount+0xf0/0xf0 [ 30.292473][ T342] ? __kasan_check_write+0x18/0x20 [ 30.297590][ T342] __x64_sys_mount+0xc3/0xf0 [ 30.302234][ T342] x64_sys_call+0x2021/0x2ee0 [ 30.306943][ T342] do_syscall_64+0x58/0xf0 [ 30.311422][ T342] ? clear_bhb_loop+0x50/0xa0 [ 30.316108][ T342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.322021][ T342] RIP: 0033:0x7f39d9e22b19 [ 30.326435][ T342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 30.346071][ T342] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.354516][ T342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 30.362524][ T342] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [pid 344] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 341] <... mount resumed>) = -1 EACCES (Permission denied) [pid 344] <... mount resumed>) = -1 EACCES (Permission denied) [pid 344] close(3) = 0 [pid 344] close(4) = -1 EBADF (Bad file descriptor) [pid 344] close(5) = -1 EBADF (Bad file descriptor) [pid 344] close(6) = -1 EBADF (Bad file descriptor) [pid 344] close(7) = -1 EBADF (Bad file descriptor) [pid 344] close(8) = -1 EBADF (Bad file descriptor) [pid 344] close(9) = -1 EBADF (Bad file descriptor) [pid 344] close(10) = -1 EBADF (Bad file descriptor) [pid 344] close(11) = -1 EBADF (Bad file descriptor) [pid 344] close(12) = -1 EBADF (Bad file descriptor) [pid 344] close(13) = -1 EBADF (Bad file descriptor) [pid 344] close(14) = -1 EBADF (Bad file descriptor) [pid 344] close(15) = -1 EBADF (Bad file descriptor) [pid 344] close(16) = -1 EBADF (Bad file descriptor) [pid 344] close(17) = -1 EBADF (Bad file descriptor) [pid 344] close(18) = -1 EBADF (Bad file descriptor) [pid 344] close(19) = -1 EBADF (Bad file descriptor) [pid 344] close(20) = -1 EBADF (Bad file descriptor) [pid 344] close(21) = -1 EBADF (Bad file descriptor) [pid 344] close(22) = -1 EBADF (Bad file descriptor) [pid 344] close(23) = -1 EBADF (Bad file descriptor) [pid 344] close(24) = -1 EBADF (Bad file descriptor) [ 30.370541][ T342] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 30.378522][ T342] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 30.386517][ T342] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000007 [ 30.394527][ T342] [ 30.397547][ T342] ---[ end trace 0000000000000000 ]--- [ 30.403384][ T342] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 30.403508][ T343] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [pid 344] close(25) = -1 EBADF (Bad file descriptor) [pid 344] close(26) = -1 EBADF (Bad file descriptor) [pid 344] close(27) = -1 EBADF (Bad file descriptor) [pid 344] close(28) = -1 EBADF (Bad file descriptor) [pid 344] close(29) = -1 EBADF (Bad file descriptor) [pid 344] exit_group(0) = ? [pid 344] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 341] close(3) = 0 [pid 341] close(4) = -1 EBADF (Bad file descriptor) [pid 341] close(5) = -1 EBADF (Bad file descriptor) [pid 341] close(6) = -1 EBADF (Bad file descriptor) [pid 341] close(7) = -1 EBADF (Bad file descriptor) [pid 341] close(8) = -1 EBADF (Bad file descriptor) [pid 341] close(9) = -1 EBADF (Bad file descriptor) [pid 341] close(10) = -1 EBADF (Bad file descriptor) [pid 341] close(11) = -1 EBADF (Bad file descriptor) [pid 341] close(12) = -1 EBADF (Bad file descriptor) [pid 341] close(13) = -1 EBADF (Bad file descriptor) [pid 341] close(14) = -1 EBADF (Bad file descriptor) [pid 341] close(15) = -1 EBADF (Bad file descriptor) [pid 341] close(16) = -1 EBADF (Bad file descriptor) [pid 341] close(17) = -1 EBADF (Bad file descriptor) [pid 341] close(18) = -1 EBADF (Bad file descriptor) [pid 341] close(19) = -1 EBADF (Bad file descriptor) [pid 341] close(20) = -1 EBADF (Bad file descriptor) [pid 341] close(21) = -1 EBADF (Bad file descriptor) [pid 341] close(22) = -1 EBADF (Bad file descriptor) [pid 341] close(23) = -1 EBADF (Bad file descriptor) [pid 341] close(24) = -1 EBADF (Bad file descriptor) [pid 341] close(25) = -1 EBADF (Bad file descriptor) [pid 341] close(26) = -1 EBADF (Bad file descriptor) [pid 341] close(27) = -1 EBADF (Bad file descriptor) [pid 341] close(28) = -1 EBADF (Bad file descriptor) [pid 341] close(29) = -1 EBADF (Bad file descriptor) [pid 341] exit_group(0) = ? [pid 341] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 343] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 342] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 343] close(3 [pid 342] close(3 [pid 301] <... openat resumed>) = 3 [pid 343] <... close resumed>) = 0 [pid 301] newfstatat(3, "", [pid 343] close(4 [pid 342] <... close resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] getdents64(3, [pid 343] close(5 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 343] close(6 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] newfstatat(AT_FDCWD, "./14/binderfs", [pid 343] close(7 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] unlink("./14/binderfs" [pid 343] close(8 [pid 301] <... unlink resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] getdents64(3, [pid 343] close(9 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] close(3 [pid 343] close(10 [pid 301] <... close resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] rmdir("./14" [pid 343] close(11 [pid 301] <... rmdir resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] mkdir("./15", 0777 [pid 343] close(12 [pid 301] <... mkdir resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(4 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 343] close(13 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 345 attached [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(5) = -1 EBADF (Bad file descriptor) [pid 345] set_robust_list(0x555571cf2660, 24 [pid 343] close(14 [pid 342] close(6 [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 17 [pid 345] <... set_robust_list resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... restart_syscall resumed>) = 0 [pid 345] chdir("./15" [pid 343] close(15 [pid 342] close(7 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] <... chdir resumed>) = 0 [pid 343] close(16 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(8 [pid 304] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 345] <... prctl resumed>) = 0 [pid 343] close(17 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] setpgid(0, 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(9 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 343] close(18 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 342] close(10 [pid 345] <... setpgid resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... openat resumed>) = 3 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 343] close(19 [pid 345] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(11 [pid 304] newfstatat(3, "", [pid 343] close(20 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 345] symlink("/dev/binderfs", "./binderfs" [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] <... symlink resumed>) = 0 [pid 343] close(21 [pid 342] close(12 [pid 304] getdents64(3, [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 345] write(1, "executing program\n", 18 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] <... write resumed>) = 18 executing program [pid 343] close(22 [pid 345] getpid( [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 345] <... getpid resumed>) = 17 [pid 343] close(23 [pid 345] pidfd_open(17, 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 345] <... pidfd_open resumed>) = 3 [pid 343] close(24 [pid 304] newfstatat(AT_FDCWD, "./7/binderfs", [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 343] close(25 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 345] <... setns resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] unlink("./7/binderfs" [pid 345] umount2(".", MNT_DETACH [pid 343] close(26) = -1 EBADF (Bad file descriptor) [pid 304] <... unlink resumed>) = 0 [pid 345] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 343] close(27 [pid 304] getdents64(3, [pid 345] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 342] close(13 [pid 304] close(3 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... close resumed>) = 0 [pid 342] close(14 [pid 304] rmdir("./7" [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... rmdir resumed>) = 0 [pid 342] close(15 [pid 304] mkdir("./8", 0777 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... mkdir resumed>) = 0 [pid 342] close(16 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 10 [pid 342] close(17) = -1 EBADF (Bad file descriptor) [pid 342] close(18) = -1 EBADF (Bad file descriptor) [pid 342] close(19) = -1 EBADF (Bad file descriptor) [pid 342] close(20) = -1 EBADF (Bad file descriptor) [pid 342] close(21) = -1 EBADF (Bad file descriptor) [pid 343] close(28./strace-static-x86_64: Process 346 attached ) = -1 EBADF (Bad file descriptor) [pid 345] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 346] set_robust_list(0x555571cf2660, 24 [pid 345] chdir("./bus" [pid 343] close(29 [pid 346] <... set_robust_list resumed>) = 0 [pid 343] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] <... chdir resumed>) = 0 [pid 342] close(22 [pid 346] chdir("./8" [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 343] exit_group(0 [pid 342] close(23 [pid 345] mkdirat(AT_FDCWD, "./file0", 072 [pid 346] <... chdir resumed>) = 0 [pid 343] <... exit_group resumed>) = ? [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 342] close(24) = -1 EBADF (Bad file descriptor) [pid 342] close(25) = -1 EBADF (Bad file descriptor) [pid 342] close(26) = -1 EBADF (Bad file descriptor) [pid 342] close(27) = -1 EBADF (Bad file descriptor) [pid 342] close(28) = -1 EBADF (Bad file descriptor) [pid 342] close(29) = -1 EBADF (Bad file descriptor) [pid 342] exit_group(0 [pid 343] +++ exited with 0 +++ [pid 345] mkdir("./file1", 000 [pid 342] <... exit_group resumed>) = ? [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 342] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=55} --- [pid 303] restart_syscall(<... resuming interrupted clone ...> [pid 345] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 346] <... prctl resumed>) = 0 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 346] setpgid(0, 0 [pid 345] mkdir("./bus", 000 [pid 346] <... setpgid resumed>) = 0 [pid 345] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 345] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 346] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 346] write(1, "executing program\n", 18) = 18 [pid 346] getpid() = 10 [pid 346] pidfd_open(10, 0) = 3 [pid 346] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 346] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 346] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 303] <... restart_syscall resumed>) = 0 [pid 303] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 303] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./7/binderfs") = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] close(3) = 0 [pid 303] rmdir("./7") = 0 [pid 303] mkdir("./8", 0777) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... restart_syscall resumed>) = 0 [pid 346] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 345] <... mount resumed>) = -1 EACCES (Permission denied) ./strace-static-x86_64: Process 347 attached [pid 346] chdir("./bus" [pid 345] close(3 [pid 302] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 347] set_robust_list(0x555571cf2660, 24 [pid 346] <... chdir resumed>) = 0 [pid 345] <... close resumed>) = 0 [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 10 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 346] mkdirat(AT_FDCWD, "./file0", 072 [pid 345] close(4 [pid 302] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 347] <... set_robust_list resumed>) = 0 [pid 346] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... openat resumed>) = 3 [pid 347] chdir("./8" [pid 346] mkdir("./file1", 000 [pid 345] close(5 [pid 302] newfstatat(3, "", [pid 347] <... chdir resumed>) = 0 [pid 346] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 346] mkdir("./bus", 000 [pid 345] close(6 [pid 302] getdents64(3, [pid 347] <... prctl resumed>) = 0 [pid 346] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 346] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 345] close(7 [pid 302] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 347] setpgid(0, 0) = 0 [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 347] write(1, "executing program\n", 18executing program ) = 18 [pid 347] getpid() = 10 [pid 347] pidfd_open(10, 0) = 3 [pid 347] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 347] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 347] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 345] close(8 [pid 302] newfstatat(AT_FDCWD, "./8/binderfs", [pid 345] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 345] close(9) = -1 EBADF (Bad file descriptor) [pid 345] close(10) = -1 EBADF (Bad file descriptor) [pid 345] close(11) = -1 EBADF (Bad file descriptor) [pid 345] close(12) = -1 EBADF (Bad file descriptor) [pid 345] close(13) = -1 EBADF (Bad file descriptor) [pid 345] close(14) = -1 EBADF (Bad file descriptor) [pid 345] close(15) = -1 EBADF (Bad file descriptor) [pid 345] close(16) = -1 EBADF (Bad file descriptor) [pid 345] close(17) = -1 EBADF (Bad file descriptor) [pid 345] close(18) = -1 EBADF (Bad file descriptor) [pid 345] close(19) = -1 EBADF (Bad file descriptor) [pid 345] close(20) = -1 EBADF (Bad file descriptor) [pid 345] close(21) = -1 EBADF (Bad file descriptor) [pid 345] close(22) = -1 EBADF (Bad file descriptor) [pid 345] close(23) = -1 EBADF (Bad file descriptor) [pid 345] close(24) = -1 EBADF (Bad file descriptor) [pid 345] close(25) = -1 EBADF (Bad file descriptor) [pid 345] close(26) = -1 EBADF (Bad file descriptor) [pid 345] close(27) = -1 EBADF (Bad file descriptor) [pid 345] close(28) = -1 EBADF (Bad file descriptor) [pid 345] close(29) = -1 EBADF (Bad file descriptor) [pid 345] exit_group(0) = ? [pid 345] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./8/binderfs" [pid 346] <... mount resumed>) = -1 EACCES (Permission denied) [pid 302] <... unlink resumed>) = 0 [pid 347] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 346] close(3 [pid 347] chdir("./bus" [pid 302] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] close(3 [pid 346] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 347] <... chdir resumed>) = 0 [pid 346] close(4 [pid 302] rmdir("./8" [pid 347] mkdirat(AT_FDCWD, "./file0", 072 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./9", 0777 [pid 346] close(5 [pid 347] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] mkdir("./file1", 000 [pid 346] close(6 [pid 347] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... mkdir resumed>) = 0 [pid 346] close(7 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 347] mkdir("./bus", 000 [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 348 attached [pid 347] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 346] close(8 [pid 347] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] set_robust_list(0x555571cf2660, 24 [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 11 [pid 348] <... set_robust_list resumed>) = 0 [pid 346] close(9 [pid 348] chdir("./9" [pid 346] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... chdir resumed>) = 0 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 348] write(1, "executing program\n", 18executing program ) = 18 [pid 348] getpid() = 11 [pid 348] pidfd_open(11, 0) = 3 [ 30.412731][ T342] overlayfs: maximum fs stacking depth exceeded [ 30.427969][ T343] overlayfs: maximum fs stacking depth exceeded [ 30.441767][ T345] incfs: mount failed -22 [ 30.449407][ T345] overlayfs: upper fs does not support tmpfile. [ 30.451054][ T346] incfs: mount failed -22 [ 30.463041][ T346] overlayfs: upper fs does not support tmpfile. [ 30.465911][ T347] incfs: mount failed -22 [pid 348] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 348] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 348] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./15/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./15") = 0 [pid 301] mkdir("./16", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 18 ./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x555571cf2660, 24) = 0 [pid 349] chdir("./16") = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = -1 ENOENT (No such file or directory) [pid 349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 349] write(1, "executing program\n", 18) = 18 [pid 349] getpid() = 18 [pid 349] pidfd_open(18, 0) = 3 [pid 349] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 349] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 349] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 348] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 348] chdir("./bus") = 0 [pid 348] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 348] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 348] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 348] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 349] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 349] chdir("./bus") = 0 [pid 349] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 349] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 349] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 349] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 346] close(10) = -1 EBADF (Bad file descriptor) [pid 346] close(11) = -1 EBADF (Bad file descriptor) [pid 346] close(12) = -1 EBADF (Bad file descriptor) [pid 346] close(13) = -1 EBADF (Bad file descriptor) [pid 346] close(14) = -1 EBADF (Bad file descriptor) [pid 346] close(15) = -1 EBADF (Bad file descriptor) [pid 346] close(16) = -1 EBADF (Bad file descriptor) [pid 346] close(17) = -1 EBADF (Bad file descriptor) [pid 346] close(18) = -1 EBADF (Bad file descriptor) [pid 346] close(19) = -1 EBADF (Bad file descriptor) [pid 346] close(20) = -1 EBADF (Bad file descriptor) [ 30.477234][ T347] ------------[ cut here ]------------ [ 30.479574][ T348] incfs: mount failed -22 [ 30.482750][ T347] WARNING: CPU: 1 PID: 347 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 30.492843][ T349] incfs: mount failed -22 [ 30.495270][ T347] Modules linked in: [ 30.504141][ T347] CPU: 1 UID: 0 PID: 347 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 30.512608][ T349] overlayfs: upper fs does not support tmpfile. [pid 346] close(21) = -1 EBADF (Bad file descriptor) [pid 346] close(22) = -1 EBADF (Bad file descriptor) [pid 346] close(23) = -1 EBADF (Bad file descriptor) [pid 346] close(24) = -1 EBADF (Bad file descriptor) [pid 346] close(25) = -1 EBADF (Bad file descriptor) [pid 346] close(26) = -1 EBADF (Bad file descriptor) [pid 346] close(27) = -1 EBADF (Bad file descriptor) [pid 346] close(28) = -1 EBADF (Bad file descriptor) [pid 346] close(29) = -1 EBADF (Bad file descriptor) [pid 346] exit_group(0) = ? [pid 346] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 304] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 304] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./8/binderfs") = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./8") = 0 [pid 304] mkdir("./9", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 11 ./strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x555571cf2660, 24) = 0 [pid 350] chdir("./9") = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 350] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] getpid() = 11 [pid 350] pidfd_open(11, 0) = 3 [pid 350] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 350] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 350] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 350] chdir("./bus") = 0 [pid 350] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 350] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 350] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 30.519747][ T347] Tainted: [W]=WARN [ 30.529968][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.540097][ T347] RIP: 0010:drop_nlink+0xce/0x110 [ 30.540975][ T350] incfs: mount failed -22 [ 30.546426][ T347] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 30.569162][ T347] RSP: 0018:ffffc9000135f0d0 EFLAGS: 00010293 [ 30.575638][ T347] RAX: ffffffff81ed527e RBX: ffff8881112ce080 RCX: ffff888121315f00 [ 30.583635][ T347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.591635][ T347] RBP: ffffc9000135f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 30.599597][ T347] R10: dffffc0000000000 R11: fffff5200026be10 R12: dffffc0000000000 [ 30.607581][ T347] R13: 1ffff11022259c19 R14: ffff8881112ce0c8 R15: 0000000000000000 [ 30.615581][ T347] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.624535][ T347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.631143][ T347] CR2: 0000200000001000 CR3: 000000010a77e000 CR4: 00000000003526b0 [ 30.639114][ T347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.647096][ T347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.655099][ T347] Call Trace: [ 30.658367][ T347] [ 30.661300][ T347] simple_rmdir+0x153/0x260 [ 30.665802][ T347] vfs_rmdir+0x3dd/0x560 [ 30.670026][ T347] dir_rmdir+0x236/0x320 [ 30.674284][ T347] ? __cfi_dir_rmdir+0x10/0x10 [ 30.679053][ T347] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 30.684098][ T347] vfs_rmdir+0x3dd/0x560 [ 30.688336][ T347] dir_rmdir+0x236/0x320 [ 30.692592][ T347] ? __cfi_dir_rmdir+0x10/0x10 [ 30.697441][ T347] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 30.702486][ T347] vfs_rmdir+0x3dd/0x560 [ 30.706723][ T347] ovl_workdir_cleanup+0x192/0x780 [ 30.711848][ T347] ? dentry_revalidate+0x2e0/0x370 [ 30.716956][ T347] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 30.722602][ T347] ? lookup_one+0x2d2/0x2e0 [ 30.727105][ T347] ? __cfi_lookup_one+0x10/0x10 [ 30.731965][ T347] ? kasan_save_alloc_info+0x40/0x50 [ 30.737248][ T347] ovl_workdir_create+0x2af/0x750 [ 30.742294][ T347] ? __kasan_check_write+0x18/0x20 [ 30.747405][ T347] ? ovl_statfs+0x2d0/0x2d0 [ 30.751952][ T347] ? _raw_spin_lock+0x8c/0x120 [ 30.756715][ T347] ? _raw_spin_unlock+0x45/0x60 [ 30.761573][ T347] ? mnt_want_write+0x321/0x510 [ 30.766422][ T347] ovl_get_workdir+0x328/0x1650 [ 30.771282][ T347] ? ovl_fill_super+0x36f0/0x36f0 [ 30.776306][ T347] ? __kasan_check_write+0x18/0x20 [ 30.781515][ T347] ? _raw_spin_lock+0x8c/0x120 [ 30.786274][ T347] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.791487][ T347] ? __kasan_check_write+0x18/0x20 [ 30.796595][ T347] ? _raw_spin_lock+0x8c/0x120 [ 30.801382][ T347] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.806573][ T347] ? __kasan_check_write+0x18/0x20 [ 30.811705][ T347] ? up_read+0x26/0x1d0 [ 30.815863][ T347] ? _raw_spin_unlock+0x45/0x60 [ 30.820736][ T347] ? ovl_inuse_trylock+0xbd/0x110 [ 30.825766][ T347] ovl_fill_super+0x133f/0x36f0 [ 30.830664][ T347] ? xas_nomem+0x71/0x2d0 [ 30.834996][ T347] ? ida_alloc_range+0xa12/0xa50 [ 30.839922][ T347] ? __cfi_ovl_fill_super+0x10/0x10 [ 30.845247][ T347] ? __kasan_check_write+0x18/0x20 [ 30.850410][ T347] ? mutex_unlock+0x8b/0x240 [ 30.855016][ T347] ? __cfi_mutex_unlock+0x10/0x10 [ 30.860040][ T347] ? __kasan_check_write+0x18/0x20 [ 30.865228][ T347] ? _raw_spin_lock+0x8c/0x120 [ 30.869978][ T347] ? sget_fc+0x9ce/0xad0 [ 30.874351][ T347] ? __cfi_set_anon_super_fc+0x10/0x10 [ 30.879844][ T347] get_tree_nodev+0xcb/0x170 [ 30.884448][ T347] ? __cfi_ovl_fill_super+0x10/0x10 [ 30.889654][ T347] ovl_get_tree+0x20/0x30 [ 30.894008][ T347] vfs_get_tree+0x9e/0x290 [ 30.898422][ T347] do_new_mount+0x251/0xb40 [ 30.902938][ T347] ? security_capable+0xcf/0xf0 [ 30.907788][ T347] path_mount+0x688/0x1050 [ 30.912226][ T347] ? putname+0x113/0x150 [ 30.916471][ T347] __se_sys_mount+0x2bd/0x480 [ 30.921176][ T347] ? __x64_sys_mount+0xf0/0xf0 [ 30.925952][ T347] ? __kasan_check_write+0x18/0x20 [ 30.931088][ T347] __x64_sys_mount+0xc3/0xf0 [ 30.935680][ T347] x64_sys_call+0x2021/0x2ee0 [ 30.940376][ T347] do_syscall_64+0x58/0xf0 [ 30.944790][ T347] ? clear_bhb_loop+0x50/0xa0 [ 30.949641][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.955640][ T347] RIP: 0033:0x7f39d9e22b19 [ 30.960049][ T347] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 30.979701][ T347] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 30.988176][ T347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 30.996282][ T347] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 31.004289][ T347] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 31.012289][ T347] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 31.020288][ T347] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000008 [pid 350] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 349] <... mount resumed>) = -1 EACCES (Permission denied) [pid 349] close(3) = 0 [pid 349] close(4) = -1 EBADF (Bad file descriptor) [pid 349] close(5) = -1 EBADF (Bad file descriptor) [pid 349] close(6) = -1 EBADF (Bad file descriptor) [pid 349] close(7) = -1 EBADF (Bad file descriptor) [pid 349] close(8) = -1 EBADF (Bad file descriptor) [pid 349] close(9) = -1 EBADF (Bad file descriptor) [pid 349] close(10) = -1 EBADF (Bad file descriptor) [pid 349] close(11) = -1 EBADF (Bad file descriptor) [pid 349] close(12) = -1 EBADF (Bad file descriptor) [pid 349] close(13) = -1 EBADF (Bad file descriptor) [pid 349] close(14) = -1 EBADF (Bad file descriptor) [pid 349] close(15) = -1 EBADF (Bad file descriptor) [pid 349] close(16) = -1 EBADF (Bad file descriptor) [pid 349] close(17) = -1 EBADF (Bad file descriptor) [pid 349] close(18) = -1 EBADF (Bad file descriptor) [pid 349] close(19) = -1 EBADF (Bad file descriptor) [pid 349] close(20) = -1 EBADF (Bad file descriptor) [pid 349] close(21) = -1 EBADF (Bad file descriptor) [pid 349] close(22) = -1 EBADF (Bad file descriptor) [pid 349] close(23) = -1 EBADF (Bad file descriptor) [pid 349] close(24) = -1 EBADF (Bad file descriptor) [pid 349] close(25) = -1 EBADF (Bad file descriptor) [pid 349] close(26) = -1 EBADF (Bad file descriptor) [pid 349] close(27) = -1 EBADF (Bad file descriptor) [pid 349] close(28) = -1 EBADF (Bad file descriptor) [pid 349] close(29) = -1 EBADF (Bad file descriptor) [pid 349] exit_group(0) = ? [pid 349] +++ exited with 0 +++ [pid 348] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 347] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 348] close(3) = 0 [pid 348] close(4 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(3 [pid 348] close(5 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = 0 [pid 348] close(6) = -1 EBADF (Bad file descriptor) [pid 347] close(4 [pid 348] close(7 [pid 350] <... mount resumed>) = -1 EACCES (Permission denied) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(3 [pid 348] close(8 [pid 347] close(5 [pid 350] <... close resumed>) = 0 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(4 [pid 348] close(9 [pid 347] close(6 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(5 [pid 348] close(10 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(6) = -1 EBADF (Bad file descriptor) [pid 348] close(11 [pid 347] close(7 [pid 350] close(7 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(12 [pid 347] close(8 [pid 350] close(8 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(13 [pid 347] close(9 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(9 [pid 348] close(14 [pid 347] close(10 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(10 [pid 348] close(15 [pid 347] close(11 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... restart_syscall resumed>) = 0 [pid 350] close(11 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] close(12 [pid 301] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(16 [pid 347] close(12 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 350] close(13 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(17 [pid 347] close(13 [pid 301] <... openat resumed>) = 3 [pid 350] close(14 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] newfstatat(3, "", [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(18 [pid 347] close(14 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 350] close(15 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] getdents64(3, [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(19 [pid 347] close(15 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 350] close(16 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(20 [pid 347] close(16 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 350] close(17 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] newfstatat(AT_FDCWD, "./16/binderfs", [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 350] close(18 [pid 348] close(21 [pid 347] close(17 [pid 301] unlink("./16/binderfs" [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... unlink resumed>) = 0 [pid 350] close(19 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] getdents64(3, [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(22 [pid 347] close(18 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 350] close(20 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] close(3 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(19 [pid 301] <... close resumed>) = 0 [pid 350] close(21 [pid 348] close(23 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] rmdir("./16" [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(20 [pid 301] <... rmdir resumed>) = 0 [pid 350] close(22 [pid 301] mkdir("./17", 0777 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(24 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... mkdir resumed>) = 0 [pid 350] close(23 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(25 [pid 347] close(21./strace-static-x86_64: Process 351 attached [pid 350] close(24 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(22 [pid 351] set_robust_list(0x555571cf2660, 24 [pid 350] close(25 [pid 348] close(26 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 19 [pid 351] <... set_robust_list resumed>) = 0 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(23 [pid 351] chdir("./17" [pid 350] close(26 [pid 348] close(27 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(24 [pid 348] close(28 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] <... chdir resumed>) = 0 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 350] close(27 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(25 [pid 351] <... prctl resumed>) = 0 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 348] close(29 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] setpgid(0, 0 [pid 350] close(28 [pid 351] <... setpgid resumed>) = 0 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 350] close(29 [pid 348] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(26 [pid 350] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 350] exit_group(0 [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] symlink("/dev/binderfs", "./binderfs" [pid 350] <... exit_group resumed>) = ? [pid 348] exit_group(0 [pid 347] close(27 [pid 351] <... symlink resumed>) = 0 [pid 348] <... exit_group resumed>) = ? [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 347] close(28 [pid 351] write(1, "executing program\n", 18 [pid 350] +++ exited with 0 +++ [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 351] <... write resumed>) = 18 [pid 347] close(29 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 351] getpid( [pid 348] +++ exited with 0 +++ [pid 347] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 351] <... getpid resumed>) = 19 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 351] pidfd_open(19, 0 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 351] <... pidfd_open resumed>) = 3 [pid 351] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 351] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 351] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 347] exit_group(0) = ? [pid 347] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=57} --- [ 31.028265][ T347] [ 31.031319][ T347] ---[ end trace 0000000000000000 ]--- [ 31.036984][ T347] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 31.037124][ T348] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 31.046338][ T347] overlayfs: maximum fs stacking depth exceeded [ 31.056092][ T350] overlayfs: upper fs does not support tmpfile. [ 31.061952][ T348] overlayfs: maximum fs stacking depth exceeded [pid 303] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 303] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 303] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./8/binderfs" [pid 351] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... restart_syscall resumed>) = 0 [pid 303] <... unlink resumed>) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 351] chdir("./bus" [pid 304] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] getdents64(3, [pid 351] <... chdir resumed>) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] close(3 [pid 304] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] <... openat resumed>) = 3 [pid 303] <... close resumed>) = 0 [pid 304] newfstatat(3, "", [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 351] mkdirat(AT_FDCWD, "./file0", 072 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 351] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 302] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 351] mkdir("./file1", 000 [pid 304] getdents64(3, [pid 302] <... openat resumed>) = 3 [pid 351] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] newfstatat(3, "", [pid 303] rmdir("./8") = 0 [pid 304] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] mkdir("./9", 0777 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 351] mkdir("./bus", 000 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] <... mkdir resumed>) = 0 [pid 302] getdents64(3, [pid 351] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] newfstatat(AT_FDCWD, "./9/binderfs", [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 351] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 304] unlink("./9/binderfs" [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... unlink resumed>) = 0 [pid 302] newfstatat(AT_FDCWD, "./9/binderfs", [pid 304] getdents64(3, [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] unlink("./9/binderfs" [pid 304] close(3) = 0 [pid 302] <... unlink resumed>) = 0 [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 11 ./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x555571cf2660, 24) = 0 [pid 352] chdir("./9") = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 352] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 352] write(1, "executing program\n", 18) = 18 [pid 352] getpid() = 11 [pid 352] pidfd_open(11, 0) = 3 [pid 352] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 352] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 352] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 304] rmdir("./9" [pid 302] getdents64(3, [pid 304] <... rmdir resumed>) = 0 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] mkdir("./10", 0777 [pid 302] close(3 [pid 304] <... mkdir resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] rmdir("./9") = 0 [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 12 [pid 302] mkdir("./10", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 12 ./strace-static-x86_64: Process 353 attached [pid 353] set_robust_list(0x555571cf2660, 24) = 0 [pid 353] chdir("./10"./strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x555571cf2660, 24 [pid 352] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 354] <... set_robust_list resumed>) = 0 [pid 352] chdir("./bus" [pid 354] chdir("./10" [pid 353] <... chdir resumed>) = 0 [pid 352] <... chdir resumed>) = 0 [pid 351] <... mount resumed>) = -1 EACCES (Permission denied) [pid 354] <... chdir resumed>) = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 353] <... prctl resumed>) = 0 [pid 352] mkdirat(AT_FDCWD, "./file0", 072 [pid 351] close(3 [pid 354] <... prctl resumed>) = 0 [pid 353] setpgid(0, 0 [pid 352] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 354] setpgid(0, 0 [pid 353] <... setpgid resumed>) = 0 [pid 354] <... setpgid resumed>) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 352] mkdir("./file1", 000 [pid 351] <... close resumed>) = 0 [pid 353] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 353] symlink("/dev/binderfs", "./binderfs" [pid 351] close(4 [pid 354] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 353] <... symlink resumed>) = 0 [pid 352] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 354] symlink("/dev/binderfs", "./binderfs" [pid 352] mkdir("./bus", 000 [pid 351] close(5 [pid 353] write(1, "executing program\n", 18) = 18 [pid 353] getpid( [pid 354] <... symlink resumed>) = 0 [pid 353] <... getpid resumed>) = 12 [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] <... mkdir resumed>) = -1 EEXIST (File exists) executing program [pid 354] write(1, "executing program\n", 18 [pid 353] pidfd_open(12, 0 [pid 352] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 351] close(6 [pid 354] <... write resumed>) = 18 [pid 353] <... pidfd_open resumed>) = 3 [pid 353] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 353] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 353] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 353] chdir("./bus") = 0 [pid 353] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 353] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 353] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 353] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 351] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 351] close(7) = -1 EBADF (Bad file descriptor) [pid 351] close(8) = -1 EBADF (Bad file descriptor) [pid 351] close(9) = -1 EBADF (Bad file descriptor) [pid 351] close(10) = -1 EBADF (Bad file descriptor) [pid 351] close(11) = -1 EBADF (Bad file descriptor) [pid 351] close(12) = -1 EBADF (Bad file descriptor) [pid 351] close(13) = -1 EBADF (Bad file descriptor) [pid 351] close(14) = -1 EBADF (Bad file descriptor) [pid 351] close(15) = -1 EBADF (Bad file descriptor) [pid 351] close(16) = -1 EBADF (Bad file descriptor) [pid 351] close(17) = -1 EBADF (Bad file descriptor) [pid 351] close(18) = -1 EBADF (Bad file descriptor) [pid 351] close(19) = -1 EBADF (Bad file descriptor) [pid 351] close(20) = -1 EBADF (Bad file descriptor) [pid 351] close(21) = -1 EBADF (Bad file descriptor) [pid 351] close(22) = -1 EBADF (Bad file descriptor) [pid 351] close(23) = -1 EBADF (Bad file descriptor) [pid 351] close(24) = -1 EBADF (Bad file descriptor) [pid 351] close(25) = -1 EBADF (Bad file descriptor) [pid 351] close(26) = -1 EBADF (Bad file descriptor) [pid 351] close(27) = -1 EBADF (Bad file descriptor) [pid 351] close(28) = -1 EBADF (Bad file descriptor) [pid 351] close(29) = -1 EBADF (Bad file descriptor) [pid 351] exit_group(0) = ? [pid 351] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 354] getpid() = 12 [pid 354] pidfd_open(12, 0) = 3 [pid 354] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [ 31.088554][ T351] incfs: mount failed -22 [ 31.096667][ T351] overlayfs: upper fs does not support tmpfile. [ 31.102159][ T352] incfs: mount failed -22 [ 31.110225][ T352] ------------[ cut here ]------------ [ 31.110938][ T353] incfs: mount failed -22 [ 31.115823][ T352] WARNING: CPU: 1 PID: 352 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 31.128358][ T352] Modules linked in: [pid 354] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 354] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./17/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./17") = 0 [pid 301] mkdir("./18", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 20 [pid 354] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 354] chdir("./bus") = 0 [pid 354] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 354] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 354] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 354] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,"./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x555571cf2660, 24) = 0 [pid 355] chdir("./18") = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 355] write(1, "executing program\n", 18executing program ) = 18 [pid 355] getpid() = 20 [pid 355] pidfd_open(20, 0) = 3 [pid 355] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 355] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 355] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 355] chdir("./bus") = 0 [pid 355] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 355] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 355] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 31.132329][ T352] CPU: 1 UID: 0 PID: 352 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 31.137906][ T354] incfs: mount failed -22 [ 31.148619][ T352] Tainted: [W]=WARN [ 31.156474][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.164748][ T355] incfs: mount failed -22 [ 31.166609][ T352] RIP: 0010:drop_nlink+0xce/0x110 [ 31.173895][ T355] overlayfs: upper fs does not support tmpfile. [ 31.176914][ T352] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 31.202605][ T352] RSP: 0018:ffffc9000134f0d0 EFLAGS: 00010293 [ 31.208678][ T352] RAX: ffffffff81ed527e RBX: ffff8881163d63c0 RCX: ffff888121313900 [ 31.216673][ T352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.224674][ T352] RBP: ffffc9000134f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 31.232685][ T352] R10: dffffc0000000000 R11: fffff52000269e10 R12: dffffc0000000000 [ 31.240735][ T352] R13: 1ffff11022c7ac81 R14: ffff8881163d6408 R15: 0000000000000000 [ 31.248709][ T352] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.257656][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.264311][ T352] CR2: 0000200000001000 CR3: 000000010a77e000 CR4: 00000000003526b0 [ 31.272320][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.280323][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.288299][ T352] Call Trace: [ 31.291597][ T352] [ 31.294520][ T352] simple_rmdir+0x153/0x260 [ 31.299007][ T352] vfs_rmdir+0x3dd/0x560 [ 31.303269][ T352] dir_rmdir+0x236/0x320 [ 31.307508][ T352] ? __cfi_dir_rmdir+0x10/0x10 [ 31.312287][ T352] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 31.317310][ T352] vfs_rmdir+0x3dd/0x560 [ 31.321573][ T352] dir_rmdir+0x236/0x320 [ 31.325816][ T352] ? __cfi_dir_rmdir+0x10/0x10 [ 31.330591][ T352] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 31.335617][ T352] vfs_rmdir+0x3dd/0x560 [ 31.339847][ T352] ovl_workdir_cleanup+0x192/0x780 [ 31.344985][ T352] ? dentry_revalidate+0x2e0/0x370 [ 31.350138][ T352] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 31.355804][ T352] ? lookup_one+0x2d2/0x2e0 [ 31.360546][ T352] ? __cfi_lookup_one+0x10/0x10 [ 31.365412][ T352] ? kasan_save_alloc_info+0x40/0x50 [ 31.370728][ T352] ovl_workdir_create+0x2af/0x750 [ 31.375756][ T352] ? __kasan_check_write+0x18/0x20 [ 31.380901][ T352] ? ovl_statfs+0x2d0/0x2d0 [ 31.385404][ T352] ? _raw_spin_lock+0x8c/0x120 [ 31.390192][ T352] ? _raw_spin_unlock+0x45/0x60 [ 31.395038][ T352] ? mnt_want_write+0x321/0x510 [ 31.399874][ T352] ovl_get_workdir+0x328/0x1650 [ 31.404742][ T352] ? ovl_fill_super+0x36f0/0x36f0 [ 31.409770][ T352] ? __kasan_check_write+0x18/0x20 [ 31.414915][ T352] ? _raw_spin_lock+0x8c/0x120 [ 31.419686][ T352] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.424903][ T352] ? __kasan_check_write+0x18/0x20 [ 31.430018][ T352] ? _raw_spin_lock+0x8c/0x120 [ 31.434791][ T352] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.439991][ T352] ? __kasan_check_write+0x18/0x20 [ 31.445119][ T352] ? up_read+0x26/0x1d0 [ 31.449278][ T352] ? _raw_spin_unlock+0x45/0x60 [ 31.454137][ T352] ? ovl_inuse_trylock+0xbd/0x110 [ 31.459170][ T352] ovl_fill_super+0x133f/0x36f0 [ 31.464038][ T352] ? xas_nomem+0x71/0x2d0 [ 31.468365][ T352] ? ida_alloc_range+0xa12/0xa50 [ 31.473326][ T352] ? __cfi_ovl_fill_super+0x10/0x10 [ 31.478532][ T352] ? __kasan_check_write+0x18/0x20 [ 31.483686][ T352] ? mutex_unlock+0x8b/0x240 [ 31.488288][ T352] ? __cfi_mutex_unlock+0x10/0x10 [ 31.493344][ T352] ? __kasan_check_write+0x18/0x20 [ 31.498464][ T352] ? _raw_spin_lock+0x8c/0x120 [ 31.503267][ T352] ? sget_fc+0x9ce/0xad0 [ 31.507511][ T352] ? __cfi_set_anon_super_fc+0x10/0x10 [ 31.512989][ T352] get_tree_nodev+0xcb/0x170 [ 31.517576][ T352] ? __cfi_ovl_fill_super+0x10/0x10 [ 31.522815][ T352] ovl_get_tree+0x20/0x30 [ 31.527153][ T352] vfs_get_tree+0x9e/0x290 [ 31.531602][ T352] do_new_mount+0x251/0xb40 [ 31.536109][ T352] ? security_capable+0xcf/0xf0 [ 31.541011][ T352] path_mount+0x688/0x1050 [ 31.545432][ T352] ? putname+0x113/0x150 [ 31.549660][ T352] __se_sys_mount+0x2bd/0x480 [ 31.554441][ T352] ? __x64_sys_mount+0xf0/0xf0 [ 31.559207][ T352] ? __kasan_check_write+0x18/0x20 [ 31.564348][ T352] __x64_sys_mount+0xc3/0xf0 [ 31.568942][ T352] x64_sys_call+0x2021/0x2ee0 [ 31.573645][ T352] do_syscall_64+0x58/0xf0 [ 31.578060][ T352] ? clear_bhb_loop+0x50/0xa0 [ 31.582750][ T352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.588645][ T352] RIP: 0033:0x7f39d9e22b19 [ 31.593079][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 31.612739][ T352] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.621188][ T352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 31.629158][ T352] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [pid 355] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 EACCES (Permission denied) [pid 355] close(3) = 0 [pid 355] close(4) = -1 EBADF (Bad file descriptor) [pid 355] close(5) = -1 EBADF (Bad file descriptor) [pid 355] close(6) = -1 EBADF (Bad file descriptor) [pid 355] close(7) = -1 EBADF (Bad file descriptor) [pid 355] close(8) = -1 EBADF (Bad file descriptor) [pid 355] close(9) = -1 EBADF (Bad file descriptor) [pid 355] close(10) = -1 EBADF (Bad file descriptor) [pid 355] close(11) = -1 EBADF (Bad file descriptor) [pid 355] close(12) = -1 EBADF (Bad file descriptor) [pid 355] close(13) = -1 EBADF (Bad file descriptor) [pid 355] close(14) = -1 EBADF (Bad file descriptor) [pid 355] close(15) = -1 EBADF (Bad file descriptor) [pid 355] close(16) = -1 EBADF (Bad file descriptor) [pid 355] close(17) = -1 EBADF (Bad file descriptor) [pid 355] close(18) = -1 EBADF (Bad file descriptor) [pid 355] close(19) = -1 EBADF (Bad file descriptor) [pid 355] close(20) = -1 EBADF (Bad file descriptor) [pid 355] close(21) = -1 EBADF (Bad file descriptor) [pid 355] close(22) = -1 EBADF (Bad file descriptor) [pid 355] close(23) = -1 EBADF (Bad file descriptor) [pid 355] close(24) = -1 EBADF (Bad file descriptor) [pid 355] close(25) = -1 EBADF (Bad file descriptor) [pid 355] close(26) = -1 EBADF (Bad file descriptor) [pid 355] close(27) = -1 EBADF (Bad file descriptor) [pid 355] close(28) = -1 EBADF (Bad file descriptor) [pid 355] close(29) = -1 EBADF (Bad file descriptor) [pid 355] exit_group(0) = ? [ 31.637163][ T352] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 31.645162][ T352] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 31.653183][ T352] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 0000000000000009 [ 31.661365][ T352] [ 31.664402][ T352] ---[ end trace 0000000000000000 ]--- [ 31.670044][ T352] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 31.670403][ T353] overlayfs: upper fs does not support tmpfile. [ 31.679390][ T352] overlayfs: maximum fs stacking depth exceeded [pid 355] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./18/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./18") = 0 [pid 301] mkdir("./19", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 21 ./strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x555571cf2660, 24) = 0 [pid 353] <... mount resumed>) = -1 EACCES (Permission denied) [pid 352] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 353] close(3) = 0 [pid 353] close(4) = -1 EBADF (Bad file descriptor) [pid 353] close(5) = -1 EBADF (Bad file descriptor) [pid 353] close(6) = -1 EBADF (Bad file descriptor) [pid 353] close(7) = -1 EBADF (Bad file descriptor) [pid 353] close(8) = -1 EBADF (Bad file descriptor) [pid 353] close(9) = -1 EBADF (Bad file descriptor) [pid 353] close(10) = -1 EBADF (Bad file descriptor) [pid 353] close(11) = -1 EBADF (Bad file descriptor) [pid 353] close(12) = -1 EBADF (Bad file descriptor) [pid 353] close(13) = -1 EBADF (Bad file descriptor) [pid 353] close(14) = -1 EBADF (Bad file descriptor) [pid 353] close(15) = -1 EBADF (Bad file descriptor) [pid 353] close(16) = -1 EBADF (Bad file descriptor) [pid 353] close(17) = -1 EBADF (Bad file descriptor) [pid 353] close(18) = -1 EBADF (Bad file descriptor) [pid 353] close(19) = -1 EBADF (Bad file descriptor) [pid 353] close(20) = -1 EBADF (Bad file descriptor) [pid 353] close(21) = -1 EBADF (Bad file descriptor) [pid 353] close(22) = -1 EBADF (Bad file descriptor) [pid 353] close(23) = -1 EBADF (Bad file descriptor) [pid 353] close(24) = -1 EBADF (Bad file descriptor) [pid 353] close(25) = -1 EBADF (Bad file descriptor) [pid 353] close(26) = -1 EBADF (Bad file descriptor) [pid 353] close(27) = -1 EBADF (Bad file descriptor) [pid 353] close(28) = -1 EBADF (Bad file descriptor) [pid 353] close(29) = -1 EBADF (Bad file descriptor) [pid 353] exit_group(0) = ? [pid 353] +++ exited with 0 +++ [pid 356] chdir("./19" [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 356] <... chdir resumed>) = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 356] symlink("/dev/binderfs", "./binderfs") = 0 [pid 356] write(1, "executing program\n", 18executing program [pid 352] close(3 [pid 356] <... write resumed>) = 18 [pid 356] getpid( [pid 354] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 352] <... close resumed>) = 0 [pid 356] <... getpid resumed>) = 21 [pid 354] close(3 [pid 352] close(4 [pid 356] pidfd_open(21, 0 [pid 354] <... close resumed>) = 0 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 356] <... pidfd_open resumed>) = 3 [pid 352] close(5 [pid 356] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 354] close(4 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 356] <... setns resumed>) = 0 [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(6 [pid 356] umount2(".", MNT_DETACH [pid 354] close(5 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 356] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(7 [pid 356] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 354] close(6 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(8 [pid 354] close(7 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(9 [pid 354] close(8 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(10 [pid 354] close(9 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(11 [pid 354] close(10 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(12 [pid 354] close(11 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(13 [pid 354] close(12 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(14 [pid 354] close(13 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(15 [pid 354] close(14 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(16 [pid 354] close(15 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(17 [pid 354] close(16 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(18 [pid 354] close(17 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(19 [pid 354] close(18 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(20 [pid 354] close(19 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(21 [pid 354] close(20 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(22 [pid 354] close(21 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(23 [pid 354] close(22 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(24 [pid 354] close(23 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(25 [pid 354] close(24 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(26 [pid 354] close(25 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(27 [pid 354] close(26 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(28 [pid 354] close(27 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] close(29 [pid 354] close(28 [pid 352] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] exit_group(0 [pid 354] close(29 [pid 352] <... exit_group resumed>) = ? [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 352] +++ exited with 0 +++ [pid 354] exit_group(0) = ? [pid 354] +++ exited with 0 +++ [pid 356] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... restart_syscall resumed>) = 0 [pid 356] chdir("./bus" [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=54} --- [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 356] <... chdir resumed>) = 0 [pid 303] restart_syscall(<... resuming interrupted clone ...> [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 356] mkdirat(AT_FDCWD, "./file0", 072 [pid 304] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 356] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 356] mkdir("./file1", 000 [pid 304] <... openat resumed>) = 3 [pid 356] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] newfstatat(3, "", [pid 356] mkdir("./bus", 000 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 356] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] getdents64(3, [pid 356] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 304] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./10/binderfs") = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./10") = 0 [pid 304] mkdir("./11", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 13 ./strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x555571cf2660, 24) = 0 [pid 357] chdir("./11") = 0 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 357] setpgid(0, 0) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 357] write(1, "executing program\n", 18executing program ) = 18 [pid 357] getpid() = 13 [pid 357] pidfd_open(13, 0) = 3 [pid 357] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 303] <... restart_syscall resumed>) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 357] umount2(".", MNT_DETACH [pid 356] <... mount resumed>) = -1 EACCES (Permission denied) [pid 303] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 303] <... openat resumed>) = 3 [pid 302] <... openat resumed>) = 3 [pid 303] newfstatat(3, "", [pid 302] newfstatat(3, "", [pid 303] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] getdents64(3, [pid 302] getdents64(3, [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./9/binderfs", [pid 302] newfstatat(AT_FDCWD, "./10/binderfs", [pid 303] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./9/binderfs" [pid 302] unlink("./10/binderfs" [pid 303] <... unlink resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 303] getdents64(3, [pid 302] getdents64(3, [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] close(3 [pid 302] close(3 [pid 303] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 303] rmdir("./9" [pid 302] rmdir("./10" [pid 303] <... rmdir resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 303] mkdir("./10", 0777 [pid 302] mkdir("./11", 0777 [pid 303] <... mkdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 357] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 356] close(3 [pid 357] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 356] <... close resumed>) = 0 ./strace-static-x86_64: Process 359 attached ./strace-static-x86_64: Process 358 attached [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 12 [pid 359] set_robust_list(0x555571cf2660, 24 [pid 358] set_robust_list(0x555571cf2660, 24 [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 13 [pid 359] <... set_robust_list resumed>) = 0 [pid 359] chdir("./11" [pid 358] <... set_robust_list resumed>) = 0 [pid 359] <... chdir resumed>) = 0 [pid 358] chdir("./10" [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0 [pid 358] <... chdir resumed>) = 0 [pid 359] <... setpgid resumed>) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 359] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 359] symlink("/dev/binderfs", "./binderfs" [pid 358] <... prctl resumed>) = 0 executing program [pid 359] <... symlink resumed>) = 0 [pid 358] setpgid(0, 0 [pid 359] write(1, "executing program\n", 18) = 18 [pid 358] <... setpgid resumed>) = 0 [pid 359] getpid( [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 359] <... getpid resumed>) = 13 [pid 359] pidfd_open(13, 0) = 3 [pid 358] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 359] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 358] symlink("/dev/binderfs", "./binderfs" [pid 359] <... setns resumed>) = 0 [pid 358] <... symlink resumed>) = 0 [pid 359] umount2(".", MNT_DETACHexecuting program [pid 358] write(1, "executing program\n", 18 [pid 359] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... write resumed>) = 18 [pid 359] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 358] getpid( [pid 357] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 356] close(4 [pid 357] chdir("./bus" [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 357] <... chdir resumed>) = 0 [pid 356] close(5 [pid 357] mkdirat(AT_FDCWD, "./file0", 072 [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 357] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 356] close(6 [pid 357] mkdir("./file1", 000 [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 357] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 356] close(7 [pid 357] mkdir("./bus", 000 [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 357] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 356] close(8) = -1 EBADF (Bad file descriptor) [pid 357] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 356] close(9 [pid 359] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... getpid resumed>) = 12 [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] chdir("./bus" [pid 358] pidfd_open(12, 0 [pid 359] <... chdir resumed>) = 0 [pid 358] <... pidfd_open resumed>) = 3 [pid 359] mkdirat(AT_FDCWD, "./file0", 072 [pid 358] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 359] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 358] <... setns resumed>) = 0 [pid 359] mkdir("./file1", 000 [pid 358] umount2(".", MNT_DETACH [pid 359] <... mkdir resumed>) = -1 EEXIST (File exists) [ 31.680019][ T354] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 31.702092][ T354] overlayfs: maximum fs stacking depth exceeded [ 31.710686][ T356] incfs: mount failed -22 [ 31.717415][ T356] overlayfs: upper fs does not support tmpfile. [ 31.727985][ T357] incfs: mount failed -22 [ 31.732614][ T359] incfs: mount failed -22 [pid 358] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 358] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 359] mkdir("./bus", 000 [pid 356] close(10 [pid 359] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 356] close(11 [pid 358] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 358] chdir("./bus") = 0 [pid 358] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 358] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 358] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 358] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 356] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 356] close(12) = -1 EBADF (Bad file descriptor) [pid 356] close(13) = -1 EBADF (Bad file descriptor) [pid 356] close(14) = -1 EBADF (Bad file descriptor) [pid 356] close(15) = -1 EBADF (Bad file descriptor) [pid 356] close(16) = -1 EBADF (Bad file descriptor) [pid 356] close(17) = -1 EBADF (Bad file descriptor) [pid 356] close(18) = -1 EBADF (Bad file descriptor) [pid 356] close(19) = -1 EBADF (Bad file descriptor) [pid 356] close(20) = -1 EBADF (Bad file descriptor) [pid 356] close(21) = -1 EBADF (Bad file descriptor) [pid 356] close(22) = -1 EBADF (Bad file descriptor) [pid 356] close(23) = -1 EBADF (Bad file descriptor) [pid 356] close(24) = -1 EBADF (Bad file descriptor) [pid 356] close(25) = -1 EBADF (Bad file descriptor) [pid 356] close(26) = -1 EBADF (Bad file descriptor) [pid 356] close(27) = -1 EBADF (Bad file descriptor) [pid 356] close(28) = -1 EBADF (Bad file descriptor) [pid 356] close(29) = -1 EBADF (Bad file descriptor) [pid 356] exit_group(0) = ? [pid 356] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./19/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./19") = 0 [pid 301] mkdir("./20", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 360 attached , child_tidptr=0x555571cf2650) = 22 [pid 360] set_robust_list(0x555571cf2660, 24) = 0 [pid 360] chdir("./20") = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 360] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 360] write(1, "executing program\n", 18) = 18 [pid 360] getpid() = 22 [pid 360] pidfd_open(22, 0) = 3 [pid 360] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 360] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 360] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [ 31.734291][ T357] overlayfs: upper fs does not support tmpfile. [ 31.739992][ T358] incfs: mount failed -22 [ 31.745010][ T359] ------------[ cut here ]------------ [ 31.753026][ T359] WARNING: CPU: 1 PID: 359 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 31.761611][ T359] Modules linked in: [ 31.765720][ T359] CPU: 1 UID: 0 PID: 359 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 31.776684][ T360] incfs: mount failed -22 [ 31.781056][ T359] Tainted: [W]=WARN [pid 360] chdir("./bus") = 0 [pid 360] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 360] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 360] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 31.781065][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.781077][ T359] RIP: 0010:drop_nlink+0xce/0x110 [ 31.781107][ T359] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 31.788328][ T360] overlayfs: upper fs does not support tmpfile. [ 31.790038][ T359] RSP: 0018:ffffc9000137f0d0 EFLAGS: 00010293 [ 31.837037][ T359] RAX: ffffffff81ed527e RBX: ffff88811046d040 RCX: ffff88810abfdf00 [ 31.845022][ T359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.853021][ T359] RBP: ffffc9000137f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 31.861071][ T359] R10: dffffc0000000000 R11: fffff5200026fe10 R12: dffffc0000000000 [ 31.869167][ T359] R13: 1ffff1102208da11 R14: ffff88811046d088 R15: 0000000000000000 [ 31.877167][ T359] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.886136][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.892784][ T359] CR2: 0000200000001000 CR3: 000000010ab3a000 CR4: 00000000003526b0 [ 31.900798][ T359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.908770][ T359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.916774][ T359] Call Trace: [ 31.920106][ T359] [ 31.923035][ T359] simple_rmdir+0x153/0x260 [ 31.927533][ T359] vfs_rmdir+0x3dd/0x560 [ 31.931797][ T359] dir_rmdir+0x236/0x320 [ 31.936043][ T359] ? __cfi_dir_rmdir+0x10/0x10 [ 31.940843][ T359] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 31.945868][ T359] vfs_rmdir+0x3dd/0x560 [ 31.950147][ T359] dir_rmdir+0x236/0x320 [ 31.954389][ T359] ? __cfi_dir_rmdir+0x10/0x10 [ 31.959140][ T359] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 31.964186][ T359] vfs_rmdir+0x3dd/0x560 [ 31.968429][ T359] ovl_workdir_cleanup+0x192/0x780 [ 31.973649][ T359] ? dentry_revalidate+0x2e0/0x370 [ 31.978770][ T359] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 31.984428][ T359] ? lookup_one+0x2d2/0x2e0 [ 31.988935][ T359] ? __cfi_lookup_one+0x10/0x10 [ 31.993802][ T359] ? kasan_save_alloc_info+0x40/0x50 [ 31.999092][ T359] ovl_workdir_create+0x2af/0x750 [ 32.004212][ T359] ? __kasan_check_write+0x18/0x20 [ 32.009351][ T359] ? ovl_statfs+0x2d0/0x2d0 [ 32.013890][ T359] ? _raw_spin_lock+0x8c/0x120 [ 32.018648][ T359] ? _raw_spin_unlock+0x45/0x60 [ 32.023524][ T359] ? mnt_want_write+0x321/0x510 [ 32.028375][ T359] ovl_get_workdir+0x328/0x1650 [ 32.033260][ T359] ? ovl_fill_super+0x36f0/0x36f0 [ 32.038291][ T359] ? __kasan_check_write+0x18/0x20 [ 32.043419][ T359] ? _raw_spin_lock+0x8c/0x120 [ 32.048184][ T359] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.053392][ T359] ? __kasan_check_write+0x18/0x20 [ 32.058505][ T359] ? _raw_spin_lock+0x8c/0x120 [ 32.063287][ T359] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.068500][ T359] ? __kasan_check_write+0x18/0x20 [ 32.073638][ T359] ? up_read+0x26/0x1d0 [ 32.077795][ T359] ? _raw_spin_unlock+0x45/0x60 [ 32.082656][ T359] ? ovl_inuse_trylock+0xbd/0x110 [ 32.087681][ T359] ovl_fill_super+0x133f/0x36f0 [ 32.092549][ T359] ? xas_nomem+0x71/0x2d0 [ 32.096873][ T359] ? ida_alloc_range+0xa12/0xa50 [ 32.101827][ T359] ? __cfi_ovl_fill_super+0x10/0x10 [ 32.107029][ T359] ? __kasan_check_write+0x18/0x20 [ 32.112164][ T359] ? mutex_unlock+0x8b/0x240 [ 32.116754][ T359] ? __cfi_mutex_unlock+0x10/0x10 [ 32.121796][ T359] ? __kasan_check_write+0x18/0x20 [ 32.126908][ T359] ? _raw_spin_lock+0x8c/0x120 [ 32.131686][ T359] ? sget_fc+0x9ce/0xad0 [ 32.135924][ T359] ? __cfi_set_anon_super_fc+0x10/0x10 [ 32.141401][ T359] get_tree_nodev+0xcb/0x170 [ 32.145988][ T359] ? __cfi_ovl_fill_super+0x10/0x10 [ 32.151235][ T359] ovl_get_tree+0x20/0x30 [ 32.155604][ T359] vfs_get_tree+0x9e/0x290 [ 32.160013][ T359] do_new_mount+0x251/0xb40 [ 32.164543][ T359] ? security_capable+0xcf/0xf0 [ 32.169395][ T359] path_mount+0x688/0x1050 [ 32.173834][ T359] ? putname+0x113/0x150 [ 32.178079][ T359] __se_sys_mount+0x2bd/0x480 [ 32.182779][ T359] ? __x64_sys_mount+0xf0/0xf0 [ 32.187559][ T359] ? __kasan_check_write+0x18/0x20 [ 32.192688][ T359] __x64_sys_mount+0xc3/0xf0 [ 32.197278][ T359] x64_sys_call+0x2021/0x2ee0 [ 32.201969][ T359] do_syscall_64+0x58/0xf0 [ 32.206383][ T359] ? clear_bhb_loop+0x50/0xa0 [ 32.211080][ T359] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.216983][ T359] RIP: 0033:0x7f39d9e22b19 [ 32.221411][ T359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 32.241047][ T359] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.249454][ T359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 32.257450][ T359] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 32.265457][ T359] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 32.273455][ T359] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 32.281471][ T359] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 000000000000000b [ 32.289441][ T359] [pid 360] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 357] <... mount resumed>) = -1 EACCES (Permission denied) [pid 357] close(3) = 0 [pid 357] close(4) = -1 EBADF (Bad file descriptor) [pid 357] close(5) = -1 EBADF (Bad file descriptor) [pid 357] close(6) = -1 EBADF (Bad file descriptor) [pid 357] close(7) = -1 EBADF (Bad file descriptor) [pid 357] close(8) = -1 EBADF (Bad file descriptor) [pid 357] close(9) = -1 EBADF (Bad file descriptor) [pid 357] close(10) = -1 EBADF (Bad file descriptor) [pid 357] close(11) = -1 EBADF (Bad file descriptor) [pid 357] close(12) = -1 EBADF (Bad file descriptor) [pid 357] close(13) = -1 EBADF (Bad file descriptor) [pid 357] close(14) = -1 EBADF (Bad file descriptor) [pid 357] close(15) = -1 EBADF (Bad file descriptor) [pid 357] close(16) = -1 EBADF (Bad file descriptor) [pid 357] close(17) = -1 EBADF (Bad file descriptor) [pid 357] close(18) = -1 EBADF (Bad file descriptor) [pid 357] close(19) = -1 EBADF (Bad file descriptor) [pid 357] close(20) = -1 EBADF (Bad file descriptor) [pid 357] close(21) = -1 EBADF (Bad file descriptor) [pid 357] close(22) = -1 EBADF (Bad file descriptor) [pid 357] close(23) = -1 EBADF (Bad file descriptor) [pid 357] close(24) = -1 EBADF (Bad file descriptor) [pid 357] close(25) = -1 EBADF (Bad file descriptor) [pid 357] close(26) = -1 EBADF (Bad file descriptor) [pid 357] close(27) = -1 EBADF (Bad file descriptor) [pid 357] close(28) = -1 EBADF (Bad file descriptor) [pid 357] close(29) = -1 EBADF (Bad file descriptor) [pid 357] exit_group(0) = ? [pid 357] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 304] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 304] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./11/binderfs") = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./11") = 0 [pid 304] mkdir("./12", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 14 ./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x555571cf2660, 24) = 0 [pid 361] chdir("./12") = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 361] write(1, "executing program\n", 18executing program ) = 18 [pid 361] getpid() = 14 [pid 361] pidfd_open(14, 0) = 3 [pid 361] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 361] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 361] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 361] chdir("./bus") = 0 [pid 361] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 361] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 361] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 32.292468][ T359] ---[ end trace 0000000000000000 ]--- [ 32.298104][ T359] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 32.298289][ T358] ------------[ cut here ]------------ [ 32.308448][ T359] overlayfs: maximum fs stacking depth exceeded [ 32.312987][ T358] WARNING: CPU: 1 PID: 358 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 32.327299][ T358] Modules linked in: [ 32.328931][ T361] incfs: mount failed -22 [ 32.331476][ T358] CPU: 1 UID: 0 PID: 358 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 32.351052][ T358] Tainted: [W]=WARN [ 32.354842][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.364954][ T358] RIP: 0010:drop_nlink+0xce/0x110 [ 32.369999][ T358] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 32.389620][ T358] RSP: 0018:ffffc9000131f0d0 EFLAGS: 00010293 [ 32.395808][ T358] RAX: ffffffff81ed527e RBX: ffff8881163d6d80 RCX: ffff88810ab1cc00 [ 32.403812][ T358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.411809][ T358] RBP: ffffc9000131f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 32.419778][ T358] R10: dffffc0000000000 R11: fffff52000263e10 R12: dffffc0000000000 [ 32.427863][ T358] R13: 1ffff11022c7adb9 R14: ffff8881163d6dc8 R15: 0000000000000000 [ 32.435862][ T358] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.444821][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.451431][ T358] CR2: 0000200000001000 CR3: 000000010afdc000 CR4: 00000000003526b0 [ 32.459405][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.467401][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.475398][ T358] Call Trace: [ 32.478670][ T358] [ 32.481611][ T358] simple_rmdir+0x153/0x260 [ 32.486120][ T358] vfs_rmdir+0x3dd/0x560 [ 32.490383][ T358] dir_rmdir+0x236/0x320 [ 32.494628][ T358] ? __cfi_dir_rmdir+0x10/0x10 [ 32.499378][ T358] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 32.504405][ T358] vfs_rmdir+0x3dd/0x560 [ 32.508645][ T358] dir_rmdir+0x236/0x320 [ 32.512894][ T358] ? __cfi_dir_rmdir+0x10/0x10 [ 32.517671][ T358] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 32.522714][ T358] vfs_rmdir+0x3dd/0x560 [ 32.526955][ T358] ovl_workdir_cleanup+0x192/0x780 [ 32.532083][ T358] ? dentry_revalidate+0x2e0/0x370 [ 32.537196][ T358] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 32.542847][ T358] ? lookup_one+0x2d2/0x2e0 [ 32.547353][ T358] ? __cfi_lookup_one+0x10/0x10 [ 32.552227][ T358] ? kasan_save_alloc_info+0x40/0x50 [ 32.557510][ T358] ovl_workdir_create+0x2af/0x750 [ 32.562552][ T358] ? __kasan_check_write+0x18/0x20 [ 32.567667][ T358] ? ovl_statfs+0x2d0/0x2d0 [ 32.572214][ T358] ? _raw_spin_lock+0x8c/0x120 [ 32.576978][ T358] ? _raw_spin_unlock+0x45/0x60 [ 32.581852][ T358] ? mnt_want_write+0x321/0x510 [ 32.586698][ T358] ovl_get_workdir+0x328/0x1650 [ 32.591571][ T358] ? ovl_fill_super+0x36f0/0x36f0 [ 32.596594][ T358] ? __kasan_check_write+0x18/0x20 [ 32.601729][ T358] ? _raw_spin_lock+0x8c/0x120 [ 32.606484][ T358] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.611698][ T358] ? __kasan_check_write+0x18/0x20 [ 32.616809][ T358] ? _raw_spin_lock+0x8c/0x120 [ 32.621593][ T358] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.626784][ T358] ? __kasan_check_write+0x18/0x20 [ 32.631905][ T358] ? up_read+0x26/0x1d0 [ 32.636054][ T358] ? _raw_spin_unlock+0x45/0x60 [ 32.640934][ T358] ? ovl_inuse_trylock+0xbd/0x110 [ 32.645961][ T358] ovl_fill_super+0x133f/0x36f0 [ 32.650829][ T358] ? xas_nomem+0x71/0x2d0 [ 32.655153][ T358] ? ida_alloc_range+0xa12/0xa50 [ 32.660120][ T358] ? __cfi_ovl_fill_super+0x10/0x10 [ 32.665324][ T358] ? __kasan_check_write+0x18/0x20 [ 32.670475][ T358] ? mutex_unlock+0x8b/0x240 [ 32.675079][ T358] ? __cfi_mutex_unlock+0x10/0x10 [ 32.680129][ T358] ? __kasan_check_write+0x18/0x20 [ 32.685247][ T358] ? _raw_spin_lock+0x8c/0x120 [ 32.689998][ T358] ? sget_fc+0x9ce/0xad0 [ 32.694280][ T358] ? __cfi_set_anon_super_fc+0x10/0x10 [ 32.699746][ T358] get_tree_nodev+0xcb/0x170 [ 32.704361][ T358] ? __cfi_ovl_fill_super+0x10/0x10 [ 32.709560][ T358] ovl_get_tree+0x20/0x30 [ 32.713921][ T358] vfs_get_tree+0x9e/0x290 [ 32.718335][ T358] do_new_mount+0x251/0xb40 [ 32.722859][ T358] ? security_capable+0xcf/0xf0 [ 32.727706][ T358] path_mount+0x688/0x1050 [ 32.732137][ T358] ? putname+0x113/0x150 [ 32.736381][ T358] __se_sys_mount+0x2bd/0x480 [ 32.741076][ T358] ? __x64_sys_mount+0xf0/0xf0 [ 32.745840][ T358] ? __kasan_check_write+0x18/0x20 [ 32.750971][ T358] __x64_sys_mount+0xc3/0xf0 [ 32.755574][ T358] x64_sys_call+0x2021/0x2ee0 [ 32.760275][ T358] do_syscall_64+0x58/0xf0 [ 32.764689][ T358] ? clear_bhb_loop+0x50/0xa0 [ 32.769348][ T358] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.775255][ T358] RIP: 0033:0x7f39d9e22b19 [ 32.779671][ T358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 32.799308][ T358] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.807751][ T358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 32.815752][ T358] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 32.823748][ T358] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 32.831777][ T358] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [pid 361] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 360] <... mount resumed>) = -1 EACCES (Permission denied) [pid 360] close(3) = 0 [pid 360] close(4) = -1 EBADF (Bad file descriptor) [pid 360] close(5) = -1 EBADF (Bad file descriptor) [pid 360] close(6) = -1 EBADF (Bad file descriptor) [pid 360] close(7) = -1 EBADF (Bad file descriptor) [pid 360] close(8) = -1 EBADF (Bad file descriptor) [pid 360] close(9) = -1 EBADF (Bad file descriptor) [pid 360] close(10) = -1 EBADF (Bad file descriptor) [pid 360] close(11) = -1 EBADF (Bad file descriptor) [pid 360] close(12) = -1 EBADF (Bad file descriptor) [pid 360] close(13) = -1 EBADF (Bad file descriptor) [pid 360] close(14) = -1 EBADF (Bad file descriptor) [pid 360] close(15) = -1 EBADF (Bad file descriptor) [pid 360] close(16) = -1 EBADF (Bad file descriptor) [pid 360] close(17) = -1 EBADF (Bad file descriptor) [pid 360] close(18) = -1 EBADF (Bad file descriptor) [pid 360] close(19) = -1 EBADF (Bad file descriptor) [pid 360] close(20) = -1 EBADF (Bad file descriptor) [pid 360] close(21) = -1 EBADF (Bad file descriptor) [pid 360] close(22) = -1 EBADF (Bad file descriptor) [pid 360] close(23) = -1 EBADF (Bad file descriptor) [pid 360] close(24) = -1 EBADF (Bad file descriptor) [pid 360] close(25) = -1 EBADF (Bad file descriptor) [pid 360] close(26) = -1 EBADF (Bad file descriptor) [pid 360] close(27) = -1 EBADF (Bad file descriptor) [pid 360] close(28 [pid 359] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 358] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 358] close(3) = 0 [pid 358] close(4) = -1 EBADF (Bad file descriptor) [pid 358] close(5) = -1 EBADF (Bad file descriptor) [pid 358] close(6) = -1 EBADF (Bad file descriptor) [pid 358] close(7) = -1 EBADF (Bad file descriptor) [pid 358] close(8 [pid 361] <... mount resumed>) = -1 EACCES (Permission denied) [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(3 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] close(3 [pid 360] close(29 [pid 359] <... close resumed>) = 0 [pid 361] <... close resumed>) = 0 [pid 360] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(4 [pid 358] close(9 [pid 361] close(4 [pid 360] exit_group(0 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 360] <... exit_group resumed>) = ? [pid 359] close(5 [pid 361] close(5 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(10 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(6 [pid 361] close(6 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 360] +++ exited with 0 +++ [pid 359] close(7 [pid 361] close(7 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(11 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(8 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 361] close(8 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(12 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(9 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] close(9 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(13 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(10 [pid 361] close(10 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(11 [pid 358] close(14 [pid 361] close(11 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(12 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] close(12 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(13 [pid 358] close(15 [pid 361] close(13 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(14 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] close(14 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(15 [pid 358] close(16 [pid 361] close(15 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(16 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] close(16 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... restart_syscall resumed>) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(17 [pid 358] close(17 [pid 361] close(17 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(18 [pid 358] close(18 [pid 301] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 361] close(18 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(19 [pid 358] close(19 [pid 301] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 361] close(19 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... openat resumed>) = 3 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(20 [pid 301] newfstatat(3, "", [pid 361] close(20 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(21 [pid 301] getdents64(3, [pid 361] close(21 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(22 [pid 301] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 361] close(22 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(23 [pid 301] newfstatat(AT_FDCWD, "./20/binderfs", [pid 361] close(23 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(24 [pid 301] unlink("./20/binderfs" [pid 361] close(24 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... unlink resumed>) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(25 [pid 301] getdents64(3, [pid 361] close(25 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(26 [pid 301] close(3 [pid 361] close(26 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... close resumed>) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(27 [pid 301] rmdir("./20" [pid 361] close(27 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... rmdir resumed>) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(28 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] mkdir("./21", 0777 [pid 361] close(28 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(20 [pid 301] <... mkdir resumed>) = 0 [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(29 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 361] close(29 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(21./strace-static-x86_64: Process 362 attached [pid 361] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] exit_group(0 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] set_robust_list(0x555571cf2660, 24 [pid 361] exit_group(0 [pid 359] <... exit_group resumed>) = ? [pid 358] close(22 [pid 362] <... set_robust_list resumed>) = 0 [pid 361] <... exit_group resumed>) = ? [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 23 [pid 362] chdir("./21" [pid 359] +++ exited with 0 +++ [pid 358] close(23 [pid 362] <... chdir resumed>) = 0 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=54} --- [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 358] close(24 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 362] <... prctl resumed>) = 0 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 361] +++ exited with 0 +++ [pid 358] close(25 [pid 362] setpgid(0, 0 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 362] <... setpgid resumed>) = 0 [pid 358] close(26 [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 358] close(27) = -1 EBADF (Bad file descriptor) [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 358] close(28 [pid 362] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] symlink("/dev/binderfs", "./binderfs" [pid 358] close(29 [pid 362] <... symlink resumed>) = 0 [pid 358] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 362] write(1, "executing program\n", 18) = 18 [pid 362] getpid() = 23 [pid 362] pidfd_open(23, 0) = 3 [pid 362] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 362] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 362] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 358] exit_group(0) = ? [pid 358] +++ exited with 0 +++ [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=57} --- [pid 303] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 303] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 303] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 303] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 303] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 362] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... restart_syscall resumed>) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 362] chdir("./bus" [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] newfstatat(AT_FDCWD, "./10/binderfs", [pid 304] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] unlink("./10/binderfs" [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 362] <... chdir resumed>) = 0 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 303] <... unlink resumed>) = 0 [pid 302] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 362] mkdirat(AT_FDCWD, "./file0", 072 [pid 304] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 303] getdents64(3, [pid 302] <... openat resumed>) = 3 [pid 362] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 304] <... openat resumed>) = 3 [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] newfstatat(3, "", [pid 362] mkdir("./file1", 000 [pid 304] newfstatat(3, "", [pid 303] close(3 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 362] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] <... close resumed>) = 0 [pid 302] getdents64(3, [pid 362] mkdir("./bus", 000 [pid 304] getdents64(3, [pid 303] rmdir("./10" [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 362] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 362] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 303] <... rmdir resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./11/binderfs", [pid 304] newfstatat(AT_FDCWD, "./12/binderfs", [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./11/binderfs" [pid 304] unlink("./12/binderfs") = 0 [pid 303] mkdir("./11", 0777 [pid 302] <... unlink resumed>) = 0 [pid 304] getdents64(3, [pid 303] <... mkdir resumed>) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 13 [ 32.839757][ T358] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 000000000000000a [ 32.847760][ T358] [ 32.850808][ T358] ---[ end trace 0000000000000000 ]--- [ 32.856495][ T358] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 32.857018][ T361] overlayfs: upper fs does not support tmpfile. [ 32.865952][ T358] overlayfs: maximum fs stacking depth exceeded [ 32.891676][ T362] incfs: mount failed -22 [pid 302] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./11") = 0 [pid 302] mkdir("./12", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 14 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./12") = 0 [pid 304] mkdir("./13", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 15 ./strace-static-x86_64: Process 363 attached ./strace-static-x86_64: Process 365 attached ./strace-static-x86_64: Process 364 attached [pid 365] set_robust_list(0x555571cf2660, 24 [pid 364] set_robust_list(0x555571cf2660, 24 [pid 363] set_robust_list(0x555571cf2660, 24 [pid 362] <... mount resumed>) = -1 EACCES (Permission denied) [pid 365] <... set_robust_list resumed>) = 0 [pid 364] <... set_robust_list resumed>) = 0 [pid 365] chdir("./13" [pid 364] chdir("./12" [pid 363] <... set_robust_list resumed>) = 0 [pid 365] <... chdir resumed>) = 0 [pid 364] <... chdir resumed>) = 0 [pid 362] close(3 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 362] <... close resumed>) = 0 [pid 365] <... prctl resumed>) = 0 [pid 364] <... prctl resumed>) = 0 [pid 363] chdir("./11" [pid 365] setpgid(0, 0 [pid 364] setpgid(0, 0 [pid 362] close(4 [pid 365] <... setpgid resumed>) = 0 [pid 364] <... setpgid resumed>) = 0 [pid 363] <... chdir resumed>) = 0 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 362] close(5 [pid 365] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 364] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 365] symlink("/dev/binderfs", "./binderfs" [pid 364] symlink("/dev/binderfs", "./binderfs" [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 365] <... symlink resumed>) = 0 [pid 364] <... symlink resumed>) = 0 [pid 363] <... prctl resumed>) = 0 [pid 362] close(6 [pid 364] write(1, "executing program\n", 18 executing program [pid 365] write(1, "executing program\n", 18 [pid 364] <... write resumed>) = 18 [pid 363] setpgid(0, 0 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] <... write resumed>) = 18 [pid 364] getpid( [pid 363] <... setpgid resumed>) = 0 [pid 362] close(7 [pid 365] getpid( [pid 364] <... getpid resumed>) = 14 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] <... getpid resumed>) = 15 [pid 364] pidfd_open(14, 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 362] close(8 [pid 365] pidfd_open(15, 0 [pid 364] <... pidfd_open resumed>) = 3 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] <... pidfd_open resumed>) = 3 [pid 364] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 363] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 362] close(9 [pid 364] <... setns resumed>) = 0 [pid 365] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 364] umount2(".", MNT_DETACH [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] <... setns resumed>) = 0 [pid 364] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 362] close(10 [pid 365] umount2(".", MNT_DETACH [pid 364] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 363] write(1, "executing program\n", 18) = 18 [pid 363] getpid() = 13 [pid 363] pidfd_open(13, 0) = 3 [pid 363] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 363] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 363] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 365] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 362] close(11 [pid 365] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] chdir("./bus" [pid 363] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 364] <... chdir resumed>) = 0 [pid 363] chdir("./bus" [pid 364] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 363] <... chdir resumed>) = 0 [pid 364] mkdir("./file1", 000 [pid 363] mkdirat(AT_FDCWD, "./file0", 072 [pid 364] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 363] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 364] mkdir("./bus", 000 [pid 363] mkdir("./file1", 000 [pid 364] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 363] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 364] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 363] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 365] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 362] close(12) = -1 EBADF (Bad file descriptor) [pid 365] chdir("./bus" [pid 362] close(13 [pid 365] <... chdir resumed>) = 0 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] mkdirat(AT_FDCWD, "./file0", 072 [pid 362] close(14 [pid 365] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] mkdir("./file1", 000 [pid 362] close(15 [pid 365] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] close(16 [pid 365] mkdir("./bus", 000 [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 362] close(17 [pid 365] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 362] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 362] close(18) = -1 EBADF (Bad file descriptor) [pid 362] close(19) = -1 EBADF (Bad file descriptor) [pid 362] close(20) = -1 EBADF (Bad file descriptor) [pid 362] close(21) = -1 EBADF (Bad file descriptor) [pid 362] close(22) = -1 EBADF (Bad file descriptor) [pid 362] close(23) = -1 EBADF (Bad file descriptor) [pid 362] close(24) = -1 EBADF (Bad file descriptor) [pid 362] close(25) = -1 EBADF (Bad file descriptor) [pid 362] close(26) = -1 EBADF (Bad file descriptor) [pid 362] close(27) = -1 EBADF (Bad file descriptor) [pid 362] close(28) = -1 EBADF (Bad file descriptor) [pid 362] close(29) = -1 EBADF (Bad file descriptor) [pid 362] exit_group(0) = ? [pid 362] +++ exited with 0 +++ [pid 363] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./21/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./21") = 0 [pid 301] mkdir("./22", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 24 ./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x555571cf2660, 24) = 0 [pid 366] chdir("./22") = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 366] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 366] write(1, "executing program\n", 18) = 18 [pid 366] getpid() = 24 [ 32.899329][ T362] overlayfs: upper fs does not support tmpfile. [ 32.909941][ T364] incfs: mount failed -22 [ 32.912445][ T363] incfs: mount failed -22 [ 32.914997][ T365] incfs: mount failed -22 [ 32.922195][ T364] ------------[ cut here ]------------ [ 32.928796][ T364] WARNING: CPU: 1 PID: 364 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 32.937110][ T364] Modules linked in: [pid 366] pidfd_open(24, 0) = 3 [pid 366] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 366] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 366] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 366] chdir("./bus") = 0 [pid 366] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 366] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 366] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 32.941036][ T364] CPU: 1 UID: 0 PID: 364 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [ 32.952035][ T366] incfs: mount failed -22 [ 32.957031][ T364] Tainted: [W]=WARN [ 32.963748][ T366] overlayfs: upper fs does not support tmpfile. [ 32.965153][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.981114][ T364] RIP: 0010:drop_nlink+0xce/0x110 [ 32.986148][ T364] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 33.005775][ T364] RSP: 0018:ffffc9000135f0d0 EFLAGS: 00010293 [ 33.011868][ T364] RAX: ffffffff81ed527e RBX: ffff8881112ce3c0 RCX: ffff888109368000 [ 33.019837][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.027817][ T364] RBP: ffffc9000135f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 33.035875][ T364] R10: dffffc0000000000 R11: fffff5200026be10 R12: dffffc0000000000 [ 33.043964][ T364] R13: 1ffff11022259c81 R14: ffff8881112ce408 R15: 0000000000000000 [ 33.051962][ T364] FS: 0000555571cf2380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.060938][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.067521][ T364] CR2: 0000200000001000 CR3: 000000010b778000 CR4: 00000000003526b0 [ 33.075521][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.083521][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.091835][ T364] Call Trace: [ 33.095158][ T364] [ 33.098077][ T364] simple_rmdir+0x153/0x260 [ 33.102605][ T364] vfs_rmdir+0x3dd/0x560 [ 33.106848][ T364] dir_rmdir+0x236/0x320 [ 33.111141][ T364] ? __cfi_dir_rmdir+0x10/0x10 [ 33.115925][ T364] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 33.121063][ T364] vfs_rmdir+0x3dd/0x560 [ 33.125325][ T364] dir_rmdir+0x236/0x320 [ 33.129554][ T364] ? __cfi_dir_rmdir+0x10/0x10 [ 33.134406][ T364] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 33.139436][ T364] vfs_rmdir+0x3dd/0x560 [ 33.143703][ T364] ovl_workdir_cleanup+0x192/0x780 [ 33.148826][ T364] ? dentry_revalidate+0x2e0/0x370 [ 33.153961][ T364] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 33.159647][ T364] ? lookup_one+0x2d2/0x2e0 [ 33.164188][ T364] ? __cfi_lookup_one+0x10/0x10 [ 33.169046][ T364] ? kasan_save_alloc_info+0x40/0x50 [ 33.174359][ T364] ovl_workdir_create+0x2af/0x750 [ 33.179384][ T364] ? __kasan_check_write+0x18/0x20 [ 33.184523][ T364] ? ovl_statfs+0x2d0/0x2d0 [ 33.189031][ T364] ? _raw_spin_lock+0x8c/0x120 [ 33.193816][ T364] ? _raw_spin_unlock+0x45/0x60 [ 33.198663][ T364] ? mnt_want_write+0x321/0x510 [ 33.203529][ T364] ovl_get_workdir+0x328/0x1650 [ 33.208385][ T364] ? ovl_fill_super+0x36f0/0x36f0 [ 33.213424][ T364] ? __kasan_check_write+0x18/0x20 [ 33.218534][ T364] ? _raw_spin_lock+0x8c/0x120 [ 33.223433][ T364] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.228659][ T364] ? __kasan_check_write+0x18/0x20 [ 33.233782][ T364] ? _raw_spin_lock+0x8c/0x120 [ 33.238578][ T364] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.243789][ T364] ? __kasan_check_write+0x18/0x20 [ 33.248903][ T364] ? up_read+0x26/0x1d0 [ 33.253064][ T364] ? _raw_spin_unlock+0x45/0x60 [ 33.257909][ T364] ? ovl_inuse_trylock+0xbd/0x110 [ 33.262939][ T364] ovl_fill_super+0x133f/0x36f0 [ 33.267790][ T364] ? xas_nomem+0x71/0x2d0 [ 33.272387][ T364] ? ida_alloc_range+0xa12/0xa50 [ 33.277324][ T364] ? __cfi_ovl_fill_super+0x10/0x10 [ 33.282528][ T364] ? __kasan_check_write+0x18/0x20 [ 33.287637][ T364] ? mutex_unlock+0x8b/0x240 [ 33.292244][ T364] ? __cfi_mutex_unlock+0x10/0x10 [ 33.297271][ T364] ? __kasan_check_write+0x18/0x20 [ 33.302490][ T364] ? _raw_spin_lock+0x8c/0x120 [ 33.307257][ T364] ? sget_fc+0x9ce/0xad0 [ 33.311518][ T364] ? __cfi_set_anon_super_fc+0x10/0x10 [ 33.316977][ T364] get_tree_nodev+0xcb/0x170 [ 33.321585][ T364] ? __cfi_ovl_fill_super+0x10/0x10 [ 33.326784][ T364] ovl_get_tree+0x20/0x30 [ 33.331124][ T364] vfs_get_tree+0x9e/0x290 [ 33.335544][ T364] do_new_mount+0x251/0xb40 [ 33.340033][ T364] ? security_capable+0xcf/0xf0 [ 33.344915][ T364] path_mount+0x688/0x1050 [ 33.349331][ T364] ? putname+0x113/0x150 [ 33.353589][ T364] __se_sys_mount+0x2bd/0x480 [ 33.358275][ T364] ? __x64_sys_mount+0xf0/0xf0 [ 33.363057][ T364] ? __kasan_check_write+0x18/0x20 [ 33.368168][ T364] __x64_sys_mount+0xc3/0xf0 [ 33.372764][ T364] x64_sys_call+0x2021/0x2ee0 [ 33.377441][ T364] do_syscall_64+0x58/0xf0 [ 33.381888][ T364] ? clear_bhb_loop+0x50/0xa0 [ 33.386568][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.392468][ T364] RIP: 0033:0x7f39d9e22b19 [ 33.396878][ T364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 33.416501][ T364] RSP: 002b:00007ffe1bb84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.425067][ T364] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39d9e22b19 [ 33.433066][ T364] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 33.441062][ T364] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [pid 366] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1,") = -1 EACCES (Permission denied) [pid 366] close(3) = 0 [pid 366] close(4) = -1 EBADF (Bad file descriptor) [pid 366] close(5) = -1 EBADF (Bad file descriptor) [pid 366] close(6) = -1 EBADF (Bad file descriptor) [pid 366] close(7) = -1 EBADF (Bad file descriptor) [pid 366] close(8) = -1 EBADF (Bad file descriptor) [pid 366] close(9) = -1 EBADF (Bad file descriptor) [pid 366] close(10) = -1 EBADF (Bad file descriptor) [pid 366] close(11) = -1 EBADF (Bad file descriptor) [pid 366] close(12) = -1 EBADF (Bad file descriptor) [pid 366] close(13) = -1 EBADF (Bad file descriptor) [pid 366] close(14) = -1 EBADF (Bad file descriptor) [pid 366] close(15) = -1 EBADF (Bad file descriptor) [pid 366] close(16) = -1 EBADF (Bad file descriptor) [pid 366] close(17) = -1 EBADF (Bad file descriptor) [pid 366] close(18) = -1 EBADF (Bad file descriptor) [pid 366] close(19) = -1 EBADF (Bad file descriptor) [pid 366] close(20) = -1 EBADF (Bad file descriptor) [pid 366] close(21) = -1 EBADF (Bad file descriptor) [pid 366] close(22) = -1 EBADF (Bad file descriptor) [pid 366] close(23) = -1 EBADF (Bad file descriptor) [pid 366] close(24) = -1 EBADF (Bad file descriptor) [pid 366] close(25) = -1 EBADF (Bad file descriptor) [pid 366] close(26) = -1 EBADF (Bad file descriptor) [pid 366] close(27) = -1 EBADF (Bad file descriptor) [pid 366] close(28) = -1 EBADF (Bad file descriptor) [pid 366] close(29) = -1 EBADF (Bad file descriptor) [pid 366] exit_group(0) = ? [pid 366] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./22/binderfs") = 0 [pid 301] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./22") = 0 [pid 301] mkdir("./23", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571cf2650) = 25 ./strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x555571cf2660, 24) = 0 [pid 367] chdir("./23") = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [ 33.449036][ T364] R10: 0000000001004040 R11: 0000000000000246 R12: 00007ffe1bb841ac [ 33.457037][ T364] R13: 00007ffe1bb841e0 R14: 00007ffe1bb841c0 R15: 000000000000000c [ 33.465038][ T364] [ 33.468047][ T364] ---[ end trace 0000000000000000 ]--- [ 33.473922][ T364] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 33.474344][ T365] overlayfs: upper fs does not support tmpfile. [ 33.483376][ T364] overlayfs: maximum fs stacking depth exceeded [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 367] write(1, "executing program\n", 18executing program ) = 18 [pid 367] getpid() = 25 [pid 367] pidfd_open(25, 0 [pid 364] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 364] close(3 [pid 367] <... pidfd_open resumed>) = 3 [pid 364] <... close resumed>) = 0 [pid 364] close(4 [pid 367] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... setns resumed>) = 0 [pid 364] close(5 [pid 367] umount2(".", MNT_DETACH [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] close(6 [pid 367] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 367] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] close(7 [pid 365] <... mount resumed>) = -1 EACCES (Permission denied) [pid 367] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 363] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 367] chdir("./bus" [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] close(3) = 0 [pid 365] close(4) = -1 EBADF (Bad file descriptor) [pid 367] <... chdir resumed>) = 0 [pid 364] close(8 [pid 363] close(3 [pid 367] mkdirat(AT_FDCWD, "./file0", 072 [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 363] <... close resumed>) = 0 [pid 364] close(9 [pid 363] close(4 [pid 365] close(5 [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] mkdir("./file1", 000 [pid 364] close(10 [pid 363] close(5 [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 364] close(11 [pid 363] close(6 [pid 365] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] mkdir("./bus", 000 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 365] close(6 [pid 363] close(7 [pid 367] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 365] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 364] close(12 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] close(7 [pid 364] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] close(8 [pid 365] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] close(8) = -1 EBADF (Bad file descriptor) [pid 365] close(9) = -1 EBADF (Bad file descriptor) [pid 365] close(10) = -1 EBADF (Bad file descriptor) [pid 365] close(11) = -1 EBADF (Bad file descriptor) [pid 365] close(12) = -1 EBADF (Bad file descriptor) [pid 365] close(13) = -1 EBADF (Bad file descriptor) [pid 365] close(14) = -1 EBADF (Bad file descriptor) [pid 365] close(15) = -1 EBADF (Bad file descriptor) [pid 365] close(16) = -1 EBADF (Bad file descriptor) [pid 365] close(17) = -1 EBADF (Bad file descriptor) [pid 365] close(18) = -1 EBADF (Bad file descriptor) [pid 365] close(19) = -1 EBADF (Bad file descriptor) [pid 365] close(20) = -1 EBADF (Bad file descriptor) [pid 365] close(21) = -1 EBADF (Bad file descriptor) [pid 365] close(22) = -1 EBADF (Bad file descriptor) [pid 365] close(23) = -1 EBADF (Bad file descriptor) [pid 365] close(24) = -1 EBADF (Bad file descriptor) [pid 365] close(25) = -1 EBADF (Bad file descriptor) [pid 365] close(26) = -1 EBADF (Bad file descriptor) [pid 365] close(27) = -1 EBADF (Bad file descriptor) [pid 365] close(28) = -1 EBADF (Bad file descriptor) [pid 365] close(29) = -1 EBADF (Bad file descriptor) [pid 365] exit_group(0) = ? [pid 365] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 364] close(13) = -1 EBADF (Bad file descriptor) [pid 364] close(14) = -1 EBADF (Bad file descriptor) [pid 364] close(15) = -1 EBADF (Bad file descriptor) [pid 364] close(16) = -1 EBADF (Bad file descriptor) [pid 364] close(17) = -1 EBADF (Bad file descriptor) [pid 364] close(18) = -1 EBADF (Bad file descriptor) [pid 364] close(19) = -1 EBADF (Bad file descriptor) [pid 364] close(20) = -1 EBADF (Bad file descriptor) [pid 364] close(21) = -1 EBADF (Bad file descriptor) [pid 364] close(22) = -1 EBADF (Bad file descriptor) [pid 364] close(23) = -1 EBADF (Bad file descriptor) [pid 364] close(24) = -1 EBADF (Bad file descriptor) [pid 364] close(25) = -1 EBADF (Bad file descriptor) [pid 364] close(26) = -1 EBADF (Bad file descriptor) [pid 364] close(27) = -1 EBADF (Bad file descriptor) [pid 364] close(28) = -1 EBADF (Bad file descriptor) [pid 364] close(29) = -1 EBADF (Bad file descriptor) [pid 364] exit_group(0 [pid 304] <... restart_syscall resumed>) = 0 [pid 364] <... exit_group resumed>) = ? [pid 364] +++ exited with 0 +++ [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... mount resumed>) = -1 EACCES (Permission denied) [pid 363] close(9) = -1 EBADF (Bad file descriptor) [pid 304] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=55} --- [pid 367] close(3 [pid 363] close(10 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 367] <... close resumed>) = 0 [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(4 [pid 363] close(11 [pid 304] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(5 [pid 363] close(12 [pid 304] <... openat resumed>) = 3 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(6 [pid 363] close(13 [pid 304] newfstatat(3, "", [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(7 [pid 363] close(14 [pid 304] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(8 [pid 363] close(15 [pid 304] getdents64(3, [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(9 [pid 363] close(16 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(10 [pid 363] close(17 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(11 [pid 363] close(18 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(12 [pid 363] close(19 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(13 [pid 363] close(20 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(14 [pid 363] close(21 [pid 304] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(15 [pid 363] close(22 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] newfstatat(AT_FDCWD, "./13/binderfs", [pid 367] close(16 [pid 363] close(23 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 367] close(17 [pid 363] close(24 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] unlink("./13/binderfs" [pid 367] close(18 [pid 363] close(25 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(19 [pid 363] close(26 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] <... unlink resumed>) = 0 [pid 367] close(20 [pid 363] close(27 [pid 304] getdents64(3, [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(21 [pid 363] close(28 [pid 304] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] close(3 [pid 367] close(22 [pid 363] close(29 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(23 [pid 363] exit_group(0 [pid 304] <... close resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 363] <... exit_group resumed>) = ? [pid 304] rmdir("./13" [pid 367] close(24 [pid 304] <... rmdir resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] mkdir("./14", 0777 [pid 367] close(25 [pid 363] +++ exited with 0 +++ [pid 304] <... mkdir resumed>) = 0 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(26) = -1 EBADF (Bad file descriptor) [pid 367] close(27) = -1 EBADF (Bad file descriptor) [pid 367] close(28) = -1 EBADF (Bad file descriptor) [pid 367] close(29) = -1 EBADF (Bad file descriptor) [pid 367] exit_group(0) = ? [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 303] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 368 attached [pid 367] +++ exited with 0 +++ [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 16 [pid 368] set_robust_list(0x555571cf2660, 24) = 0 [pid 368] chdir("./14" [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 368] <... chdir resumed>) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 368] <... prctl resumed>) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 368] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 368] write(1, "executing program\n", 18) = 18 [pid 368] getpid() = 16 [pid 368] pidfd_open(16, 0) = 3 [pid 368] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 368] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 368] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 303] <... restart_syscall resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 368] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 368] chdir("./bus") = 0 [pid 368] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 301] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] newfstatat(3, "", [pid 303] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] getdents64(3, [pid 303] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 302] <... openat resumed>) = 3 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 368] mkdir("./file1", 000 [pid 303] <... openat resumed>) = 3 [pid 302] newfstatat(3, "", [pid 301] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 368] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 303] newfstatat(3, "", [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 368] mkdir("./bus", 000 [pid 303] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, [pid 301] newfstatat(AT_FDCWD, "./23/binderfs", [pid 368] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 303] getdents64(3, [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program executing program [pid 368] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] unlink("./23/binderfs" [pid 303] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... unlink resumed>) = 0 [pid 303] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./12/binderfs", [pid 301] getdents64(3, [pid 303] newfstatat(AT_FDCWD, "./11/binderfs", [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 303] unlink("./11/binderfs" [pid 302] unlink("./12/binderfs" [pid 301] close(3 [pid 303] <... unlink resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 301] rmdir("./23" [pid 303] getdents64(3, [pid 302] getdents64(3, [pid 301] <... rmdir resumed>) = 0 [pid 303] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 303] close(3 [pid 302] close(3 [pid 301] mkdir("./24", 0777 [pid 303] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 301] <... mkdir resumed>) = 0 [pid 303] rmdir("./11" [pid 302] rmdir("./12" [pid 303] <... rmdir resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] mkdir("./12", 0777 [pid 302] mkdir("./13", 0777 [pid 303] <... mkdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 370 attached ./strace-static-x86_64: Process 371 attached [pid 370] set_robust_list(0x555571cf2660, 24 [pid 303] <... clone resumed>, child_tidptr=0x555571cf2650) = 14 [pid 371] set_robust_list(0x555571cf2660, 24 [pid 370] <... set_robust_list resumed>) = 0 [pid 302] <... clone resumed>, child_tidptr=0x555571cf2650) = 15 [pid 371] <... set_robust_list resumed>) = 0 [pid 370] chdir("./13" [pid 301] <... clone resumed>, child_tidptr=0x555571cf2650) = 26 [pid 371] chdir("./12" [pid 370] <... chdir resumed>) = 0 [pid 371] <... chdir resumed>) = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 371] <... prctl resumed>) = 0 [pid 370] <... prctl resumed>) = 0 [pid 371] setpgid(0, 0 [pid 370] setpgid(0, 0 [pid 371] <... setpgid resumed>) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 370] <... setpgid resumed>) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 371] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 370] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] symlink("/dev/binderfs", "./binderfs" [pid 371] write(1, "executing program\n", 18 [pid 370] <... symlink resumed>) = 0 [pid 371] <... write resumed>) = 18 [pid 371] getpid() = 14 [pid 370] write(1, "executing program\n", 18 [pid 371] pidfd_open(14, 0 [pid 370] <... write resumed>) = 18 [pid 371] <... pidfd_open resumed>) = 3 [pid 370] getpid() = 15 [pid 371] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 370] pidfd_open(15, 0 [pid 371] <... setns resumed>) = 0 [pid 371] umount2(".", MNT_DETACH [pid 370] <... pidfd_open resumed>) = 3 [pid 370] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 371] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 370] umount2(".", MNT_DETACH [pid 371] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 370] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x555571cf2660, 24) = 0 [ 33.489630][ T363] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 33.505079][ T363] overlayfs: maximum fs stacking depth exceeded [ 33.507016][ T367] incfs: mount failed -22 [ 33.521829][ T367] overlayfs: upper fs does not support tmpfile. [ 33.536540][ T368] incfs: mount failed -22 [ 33.544245][ T368] overlayfs: upper fs does not support tmpfile. [pid 369] chdir("./24") = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 369] write(1, "executing program\n", 18executing program ) = 18 [pid 369] getpid( [pid 371] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 370] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 369] <... getpid resumed>) = 26 [pid 371] chdir("./bus") = 0 [pid 371] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 369] pidfd_open(26, 0 [pid 371] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 369] <... pidfd_open resumed>) = 3 [pid 368] <... mount resumed>) = -1 EACCES (Permission denied) [pid 371] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 371] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 370] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 369] setns(3, 0x24020000 /* CLONE_NEW??? */ [pid 368] close(3 [pid 370] chdir("./bus" [pid 369] <... setns resumed>) = 0 [pid 368] <... close resumed>) = 0 [pid 370] <... chdir resumed>) = 0 [pid 369] umount2(".", MNT_DETACH [pid 368] close(4 [pid 370] mkdirat(AT_FDCWD, "./file0", 072 [pid 369] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 369] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL [pid 368] close(5) = -1 EBADF (Bad file descriptor) [pid 370] mkdir("./file1", 000 [pid 368] close(6 [pid 370] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] mkdir("./bus", 000 [pid 368] close(7 [pid 370] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 368] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 370] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 368] close(8) = -1 EBADF (Bad file descriptor) [pid 368] close(9) = -1 EBADF (Bad file descriptor) [pid 368] close(10) = -1 EBADF (Bad file descriptor) [pid 368] close(11) = -1 EBADF (Bad file descriptor) [pid 368] close(12) = -1 EBADF (Bad file descriptor) [pid 368] close(13) = -1 EBADF (Bad file descriptor) [pid 368] close(14) = -1 EBADF (Bad file descriptor) [pid 368] close(15) = -1 EBADF (Bad file descriptor) [pid 368] close(16) = -1 EBADF (Bad file descriptor) [pid 368] close(17) = -1 EBADF (Bad file descriptor) [pid 368] close(18) = -1 EBADF (Bad file descriptor) [pid 368] close(19) = -1 EBADF (Bad file descriptor) [pid 368] close(20) = -1 EBADF (Bad file descriptor) [pid 368] close(21) = -1 EBADF (Bad file descriptor) [pid 368] close(22) = -1 EBADF (Bad file descriptor) [pid 368] close(23) = -1 EBADF (Bad file descriptor) [pid 368] close(24) = -1 EBADF (Bad file descriptor) [pid 368] close(25) = -1 EBADF (Bad file descriptor) [pid 368] close(26) = -1 EBADF (Bad file descriptor) [pid 368] close(27) = -1 EBADF (Bad file descriptor) [pid 368] close(28) = -1 EBADF (Bad file descriptor) [pid 368] close(29) = -1 EBADF (Bad file descriptor) [pid 368] exit_group(0) = ? [pid 368] +++ exited with 0 +++ [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 304] restart_syscall(<... resuming interrupted clone ...> [pid 369] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 369] chdir("./bus") = 0 [pid 369] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 369] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 369] mkdir("./bus", 000) = -1 EEXIST (File exists) [ 33.551573][ T371] incfs: mount failed -22 [ 33.556876][ T370] incfs: mount failed -22 [ 33.557874][ T371] ------------[ cut here ]------------ [ 33.563685][ T369] incfs: mount failed -22 [ 33.566725][ T371] WARNING: CPU: 0 PID: 371 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 33.579302][ T371] Modules linked in: [ 33.583228][ T371] CPU: 0 UID: 0 PID: 371 Comm: syz-executor208 Tainted: G W 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f [pid 369] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] <... restart_syscall resumed>) = 0 [pid 304] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 3 entries */, 32768) = 80 [pid 304] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./14/binderfs") = 0 [pid 304] getdents64(3, 0x555571cf36f0 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [pid 304] rmdir("./14") = 0 [pid 304] mkdir("./15", 0777) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x555571cf2660, 24) = 0 [pid 372] chdir("./15") = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 372] write(1, "executing program\n", 18executing program ) = 18 [pid 372] getpid() = 17 [pid 372] pidfd_open(17, 0) = 3 [pid 372] setns(3, 0x24020000 /* CLONE_NEW??? */) = 0 [pid 372] umount2(".", MNT_DETACH) = -1 EINVAL (Invalid argument) [pid 372] mount("./bus", "./bus", "incremental-fs", MS_NOSUID|MS_REC|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 372] chdir("./bus") = 0 [pid 372] mkdirat(AT_FDCWD, "./file0", 072) = -1 EEXIST (File exists) [pid 372] mkdir("./file1", 000) = -1 EEXIST (File exists) [pid 372] mkdir("./bus", 000) = -1 EEXIST (File exists) [pid 372] mount(NULL, "./bus", "overlay", MS_MANDLOCK|MS_REC|MS_STRICTATIME, "workdir=./bus,lowerdir=./file0,upperdir=./file1," [pid 304] <... clone resumed>, child_tidptr=0x555571cf2650) = 17 [ 33.588332][ T369] overlayfs: upper fs does not support tmpfile. [ 33.598578][ T371] Tainted: [W]=WARN [ 33.608627][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.615960][ T372] incfs: mount failed -22 [ 33.618813][ T371] RIP: 0010:drop_nlink+0xce/0x110 [ 33.628165][ T371] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 58 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 33.647911][ T371] RSP: 0018:ffffc9000139f0d0 EFLAGS: 00010293 [ 33.654042][ T371] RAX: ffffffff81ed527e RBX: ffff888111031a00 RCX: ffff88810bb6a600 [ 33.662041][ T371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.670022][ T371] RBP: ffffc9000139f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 33.678009][ T371] R10: dffffc0000000000 R11: fffff52000273e10 R12: dffffc0000000000 [ 33.686024][ T371] R13: 1ffff11022206349 R14: ffff888111031a48 R15: 0000000000000000 [ 33.694027][ T371] FS: 0000555571cf2380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.703008][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.709604][ T371] CR2: 0000200000001000 CR3: 000000010b784000 CR4: 00000000003526b0 [ 33.717621][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.725628][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.733633][ T371] Call Trace: [ 33.736912][ T371] [ 33.739833][ T371] simple_rmdir+0x153/0x260 [ 33.744374][ T371] vfs_rmdir+0x3dd/0x560 [ 33.748616][ T371] dir_rmdir+0x236/0x320 [ 33.752870][ T371] ? __cfi_dir_rmdir+0x10/0x10 [ 33.757633][ T371] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 33.762673][ T371] vfs_rmdir+0x3dd/0x560 [ 33.766915][ T371] dir_rmdir+0x236/0x320 [ 33.771177][ T371] ? __cfi_dir_rmdir+0x10/0x10 [ 33.775939][ T371] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 33.780985][ T371] vfs_rmdir+0x3dd/0x560 [ 33.785230][ T371] ovl_workdir_cleanup+0x192/0x780 [ 33.790367][ T371] ? dentry_revalidate+0x2e0/0x370 [ 33.795479][ T371] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 33.801308][ T371] ? lookup_one+0x2d2/0x2e0 [ 33.805822][ T371] ? __cfi_lookup_one+0x10/0x10 [ 33.810721][ T371] ? kasan_save_alloc_info+0x40/0x50 [ 33.816012][ T371] ovl_workdir_create+0x2af/0x750 [ 33.821077][ T371] ? __kasan_check_write+0x18/0x20 [ 33.826190][ T371] ? ovl_statfs+0x2d0/0x2d0 [ 33.830858][ T371] ? _raw_spin_lock+0x8c/0x120 [ 33.835631][ T371] ? _raw_spin_unlock+0x45/0x60 [ 33.840503][ T371] ? mnt_want_write+0x321/0x510 [ 33.845366][ T371] ovl_get_workdir+0x328/0x1650 [ 33.850318][ T371] ? ovl_fill_super+0x36f0/0x36f0 [ 33.855367][ T371] ? __kasan_check_write+0x18/0x20 [ 33.860524][ T371] ? _raw_spin_lock+0x8c/0x120 [ 33.865296][ T371] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.870534][ T371] ? __kasan_check_write+0x18/0x20 [ 33.875656][ T371] ? _raw_spin_lock+0x8c/0x120 [ 33.880454][ T371] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.885655][ T371] ? __kasan_check_write+0x18/0x20 [ 33.890796][ T371] ? up_read+0x26/0x1d0 [ 33.894951][ T371] ? _raw_spin_unlock+0x45/0x60 [ 33.899792][ T371] ? ovl_inuse_trylock+0xbd/0x110 [ 33.904840][ T371] ovl_fill_super+0x133f/0x36f0 [ 33.909696][ T371] ? xas_nomem+0x71/0x2d0 [ 33.914046][ T371] ? ida_alloc_range+0xa12/0xa50 [ 33.918985][ T371] ? __cfi_ovl_fill_super+0x10/0x10 [ 33.924222][ T371] ? __kasan_check_write+0x18/0x20 [ 33.929333][ T371] ? mutex_unlock+0x8b/0x240 [ 33.933949][ T371] ? __cfi_mutex_unlock+0x10/0x10 [ 33.939027][ T371] ? __kasan_check_write+0x18/0x20 [ 33.944155][ T371] ? _raw_spin_lock+0x8c/0x120 [ 33.948923][ T371] ? sget_fc+0x9ce/0xad0 [ 33.953196][ T371] ? __cfi_set_anon_super_fc+0x10/0x10 [ 33.958657][ T371] get_tree_nodev+0xcb/0x170 [ 33.963265][ T371] ? __cfi_ovl_fill_super+0x10/0x10 [ 33.968469][ T371] ovl_get_tree+0x20/0x30 [ 33.973076][ T371] vfs_get_tree+0x9e/0x290 [ 33.977497][ T371] do_new_mount+0x251/0xb40 [ 33.982005][ T371] ? security_capable+0xcf/0xf0 [ 33.986855][ T371] path_mount+0x688/0x1050 [ 33.991295][ T371] ? putname+0x113/0x150 [ 33.995555][ T371] __se_sys_mount+0x2bd/0x480 [ 34.000279][ T371] ? __x64_sys_mount+0xf0/0xf0 [ 34.005052][ T371] ? __kasan_check_write+0x18/0x20 [ 34.010211][ T371] __x64_sys_mount+0xc3/0xf0 [ 34.014803][ T371] x64_sys_call+0x2021/0x2ee0 [ 34.019466][ T371] do_syscall_64+0x58/0xf0 [ 34.023892][ T371] ? clear_bhb_loop+0x50/0xa0 [ 34.028573][ T371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.034484][ T371] RIP: 0033:0x7f39d9e22b19