ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-linux-next-kasan-gce-root/syz-executor2712988438 <...> Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. execve("ci-upstream-linux-next-kasan-gce-root/syz-executor2712988438", ["ci-upstream-linux-next-kasan-gce-root/syz-executor2712988438"], 0x7ffdf50a9da0 /* 10 vars */) = 0 brk(NULL) = 0x555583db6000 brk(0x555583db6d80) = 0x555583db6d80 arch_prctl(ARCH_SET_FS, 0x555583db6400) = 0 set_tid_address(0x555583db66d0) = 5636 set_robust_list(0x555583db66e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-linux-next-kasan-gce-root/syz-executor2712988438", 4096) = 66 getrandom("\x3b\x6e\xcc\x43\x09\x55\xde\xf8", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555583db6d80 brk(0x555583dd7d80) = 0x555583dd7d80 brk(0x555583dd8000) = 0x555583dd8000 mprotect(0x7f4cd3a48000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 getrandom("\x34\xb7\x34\xeb\x01\x61\xb5\x77", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.g3hS2O", 0700) = 0 chmod("./syzkaller.g3hS2O", 0777) = 0 chdir("./syzkaller.g3hS2O") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5638 attached , child_tidptr=0x555583db66d0) = 5638 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5638] set_robust_list(0x555583db66e0, 24 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5638] <... set_robust_list resumed>) = 0 [pid 5638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5638] chdir("./0") = 0 [pid 5638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5638] setpgid(0, 0) = 0 [pid 5638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1000", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5638] write(1, "executing program\n", 18) = 18 [pid 5638] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5638] ioctl(3, BLKROSET, [4]) = 0 [pid 5638] memfd_create("syzkaller", 0) = 4 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5638] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5638] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5638] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5638] close(4) = 0 [pid 5638] close(5) = 0 [pid 5638] mkdir("./file1", 0777) = 0 [ 90.738727][ T5638] loop0: detected capacity change from 0 to 32768 [pid 5638] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5638] chdir("./file1") = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5638] exit_group(0) = ? [pid 5638] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5638, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 90.784660][ T5638] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 90.799704][ T5638] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 90.869561][ T5636] INFO: trying to register non-static key. [ 90.875425][ T5636] The code is fine but needs lockdep annotation, or maybe [ 90.882533][ T5636] you didn't initialize this object before use? [ 90.888776][ T5636] turning off the locking correctness validator. [ 90.895140][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: syz-executor271 Not tainted syzkaller #0 PREEMPT(full) [ 90.904855][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.914936][ T5636] Call Trace: [ 90.918225][ T5636] [ 90.921161][ T5636] dump_stack_lvl+0xe8/0x150 [ 90.925777][ T5636] assign_lock_key+0x133/0x150 [ 90.930555][ T5636] register_lock_class+0xcc/0x2e0 [ 90.935582][ T5636] ? __lock_acquire+0x747/0x2de0 [ 90.940526][ T5636] __lock_acquire+0x10c/0x2de0 [ 90.945301][ T5636] ? kasan_save_track+0x4f/0x80 [ 90.950158][ T5636] ? kasan_save_track+0x3e/0x80 [ 90.955010][ T5636] ? kasan_save_free_info+0x40/0x50 [ 90.960242][ T5636] ? __kasan_slab_free+0x5c/0x80 [ 90.965268][ T5636] ? kfree+0x1c5/0x650 [ 90.969346][ T5636] ? ocfs2_journal_shutdown+0x650/0xb70 [ 90.974917][ T5636] ? ocfs2_dismount_volume+0x3c1/0x850 [ 90.980386][ T5636] ? generic_shutdown_super+0x13d/0x2d0 [ 90.985974][ T5636] ? kill_block_super+0x44/0xa0 [ 90.990885][ T5636] ? deactivate_locked_super+0xbc/0x110 [ 90.996455][ T5636] ? cleanup_mnt+0x3d3/0x460 [ 91.001173][ T5636] ? lock_acquire+0x115/0x350 [ 91.005870][ T5636] lock_acquire+0x115/0x350 [ 91.010392][ T5636] ? ocfs2_mark_lockres_freeing+0x164/0x840 [ 91.016313][ T5636] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 91.022483][ T5636] ? rcu_is_watching+0x16/0xb0 [ 91.027301][ T5636] _raw_spin_lock_irqsave+0x40/0x60 [ 91.032654][ T5636] ? ocfs2_mark_lockres_freeing+0x164/0x840 [ 91.038603][ T5636] ocfs2_mark_lockres_freeing+0x164/0x840 [ 91.044349][ T5636] ? kasan_quarantine_put+0xbb/0x1f0 [ 91.049655][ T5636] ? __pfx_ocfs2_mark_lockres_freeing+0x10/0x10 [ 91.055949][ T5636] ? ocfs2_journal_shutdown+0x650/0xb70 [ 91.061527][ T5636] ? __pfx_ocfs2_journal_shutdown+0x10/0x10 [ 91.067452][ T5636] ocfs2_dlm_shutdown+0x37/0x240 [ 91.072421][ T5636] ocfs2_dismount_volume+0x44d/0x850 [ 91.077728][ T5636] ? __pfx_ocfs2_dismount_volume+0x10/0x10 [ 91.083560][ T5636] ? __pfx_evict_inodes+0x10/0x10 [ 91.088631][ T5636] ? __pfx_ocfs2_put_super+0x10/0x10 [ 91.093962][ T5636] generic_shutdown_super+0x13d/0x2d0 [ 91.099393][ T5636] kill_block_super+0x44/0xa0 [ 91.104104][ T5636] deactivate_locked_super+0xbc/0x110 [ 91.109519][ T5636] cleanup_mnt+0x3d3/0x460 [ 91.113969][ T5636] task_work_run+0x1d9/0x260 [ 91.118606][ T5636] ? __pfx_task_work_run+0x10/0x10 [ 91.123752][ T5636] ? path_umount+0x24f/0xb40 [ 91.128377][ T5636] ptrace_notify+0x258/0x290 [ 91.133090][ T5636] ? __pfx_ptrace_notify+0x10/0x10 [ 91.138269][ T5636] ? __x64_sys_umount+0x12a/0x170 [ 91.143331][ T5636] ? __pfx___x64_sys_umount+0x10/0x10 [ 91.148827][ T5636] ptrace_report_syscall_exit+0x2d/0x50 [ 91.154508][ T5636] do_syscall_64+0x4a0/0x520 [ 91.159138][ T5636] ? trace_irq_disable+0x3b/0x140 [ 91.164357][ T5636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.170451][ T5636] ? clear_bhb_loop+0x70/0xc0 [ 91.175152][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.181159][ T5636] RIP: 0033:0x7f4cd39b8f77 [ 91.185609][ T5636] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 14 4b 09 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 91.205225][ T5636] RSP: 002b:00007ffd92676828 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 91.213698][ T5636] RAX: 0000000000000000 RBX: 000000000001616d RCX: 00007f4cd39b8f77 [ 91.221683][ T5636] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd926768e0 [ 91.229671][ T5636] RBP: 00007ffd926768e0 R08: 00007ffd926778e0 R09: 00000000ffffffff [ 91.237660][ T5636] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd92677950 [ 91.245648][ T5636] R13: 0000555583db7780 R14: 431bde82d7b634db R15: 00007ffd92677970 [ 91.253648][ T5636] [ 91.258203][ T5636] ocfs2: Unmounting device (7,0) on (node local) umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file1") = 0 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5642 attached , child_tidptr=0x555583db66d0) = 5642 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5642] set_robust_list(0x555583db66e0, 24) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5642] chdir("./1") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5642] write(1, "executing program\n", 18) = 18 executing program [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5642] ioctl(3, BLKROSET, [4]) = 0 [pid 5642] memfd_create("syzkaller", 0) = 4 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5642] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5642] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5642] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5642] close(4) = 0 [pid 5642] close(5) = 0 [pid 5642] mkdir("./file1", 0777) = 0 [pid 5642] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5642] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5642] chdir("./file1") = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5642] exit_group(0) = ? [pid 5642] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 91.561577][ T5642] loop0: detected capacity change from 0 to 32768 [ 91.582139][ T5642] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 91.582354][ T5642] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file1") = 0 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 91.632582][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583db66d0) = 5644 ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5644 attached [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5644] set_robust_list(0x555583db66e0, 24) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5644] chdir("./2") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5644] write(1, "executing program\n", 18) = 18 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5644] ioctl(3, BLKROSET, [4]) = 0 [pid 5644] memfd_create("syzkaller", 0) = 4 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5644] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5644] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5644] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5644] close(4) = 0 [pid 5644] close(5) = 0 [pid 5644] mkdir("./file1", 0777) = 0 [pid 5644] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5644] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5644] chdir("./file1") = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5644] exit_group(0) = ? [pid 5644] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 91.888837][ T5644] loop0: detected capacity change from 0 to 32768 [ 91.910915][ T5644] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 91.911160][ T5644] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file1") = 0 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 91.976781][ T5636] ocfs2: Unmounting device (7,0) on (node local) [ 91.987018][ T990] cfg80211: failed to load regulatory.db close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5646 attached , child_tidptr=0x555583db66d0) = 5646 [pid 5646] set_robust_list(0x555583db66e0, 24 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] <... set_robust_list resumed>) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5646] chdir("./3") = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] setpgid(0, 0) = 0 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5646] write(1, "executing program\n", 18) = 18 executing program [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5646] ioctl(3, BLKROSET, [4]) = 0 [pid 5646] memfd_create("syzkaller", 0) = 4 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5646] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5646] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5646] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5646] close(4) = 0 [pid 5646] close(5) = 0 [pid 5646] mkdir("./file1", 0777) = 0 [pid 5646] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [ 92.206312][ T5646] loop0: detected capacity change from 0 to 32768 [ 92.227235][ T5646] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [pid 5646] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5646] chdir("./file1") = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5646] exit_group(0) = ? [pid 5646] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5646, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 92.227583][ T5646] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file1") = 0 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 92.310917][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5648 attached , child_tidptr=0x555583db66d0) = 5648 [pid 5648] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] chdir("./4") = 0 [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5648] setpgid(0, 0) = 0 [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5648] write(3, "1000", 4) = 4 [pid 5648] close(3) = 0 [pid 5648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5648] write(1, "executing program\n", 18) = 18 executing program [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5648] ioctl(3, BLKROSET, [4]) = 0 [pid 5648] memfd_create("syzkaller", 0) = 4 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5648] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5648] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5648] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5648] close(4) = 0 [pid 5648] close(5) = 0 [pid 5648] mkdir("./file1", 0777) = 0 [pid 5648] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5648] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5648] chdir("./file1") = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5648] exit_group(0) = ? [pid 5648] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5648, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 92.547613][ T5648] loop0: detected capacity change from 0 to 32768 [ 92.575751][ T5648] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file1") = 0 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 92.575993][ T5648] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 92.616355][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5650 attached , child_tidptr=0x555583db66d0) = 5650 [pid 5650] set_robust_list(0x555583db66e0, 24 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5650] <... set_robust_list resumed>) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5650] chdir("./5") = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5650] setpgid(0, 0) = 0 executing program [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5650] write(1, "executing program\n", 18) = 18 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5650] ioctl(3, BLKROSET, [4]) = 0 [pid 5650] memfd_create("syzkaller", 0) = 4 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5650] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5650] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5650] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5650] close(4) = 0 [pid 5650] close(5) = 0 [pid 5650] mkdir("./file1", 0777) = 0 [pid 5650] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5650] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5650] chdir("./file1") = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5650] exit_group(0) = ? [pid 5650] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5650, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [ 92.869125][ T5650] loop0: detected capacity change from 0 to 32768 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file1") = 0 umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 92.919764][ T5650] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 92.919951][ T5650] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 92.947785][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5652 attached , child_tidptr=0x555583db66d0) = 5652 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] set_robust_list(0x555583db66e0, 24) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] chdir("./6") = 0 [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5652] setpgid(0, 0) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5652] write(3, "1000", 4) = 4 [pid 5652] close(3) = 0 [pid 5652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5652] write(1, "executing program\n", 18) = 18 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5652] ioctl(3, BLKROSET, [4]) = 0 executing program [pid 5652] memfd_create("syzkaller", 0) = 4 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5652] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5652] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5652] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5652] close(4) = 0 [pid 5652] close(5) = 0 [pid 5652] mkdir("./file1", 0777) = 0 [pid 5652] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5652] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5652] chdir("./file1") = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5652] exit_group(0) = ? [pid 5652] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5652, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 93.181720][ T5652] loop0: detected capacity change from 0 to 32768 [ 93.201855][ T5652] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 93.202105][ T5652] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file1") = 0 umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 93.262195][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5654 attached , child_tidptr=0x555583db66d0) = 5654 [pid 5654] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5654] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] chdir("./7") = 0 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5654] setpgid(0, 0) = 0 [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5654] write(3, "1000", 4) = 4 [pid 5654] close(3) = 0 [pid 5654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5654] write(1, "executing program\n", 18) = 18 executing program [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5654] ioctl(3, BLKROSET, [4]) = 0 [pid 5654] memfd_create("syzkaller", 0) = 4 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5654] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5654] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5654] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5654] close(4) = 0 [pid 5654] close(5) = 0 [pid 5654] mkdir("./file1", 0777) = 0 [pid 5654] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5654] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5654] chdir("./file1") = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5654] exit_group(0) = ? [pid 5654] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5654, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [ 93.508558][ T5654] loop0: detected capacity change from 0 to 32768 [ 93.529699][ T5654] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 93.529916][ T5654] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file1") = 0 umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 93.582536][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5656 attached , child_tidptr=0x555583db66d0) = 5656 [pid 5656] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] chdir("./8") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5656] write(1, "executing program\n", 18) = 18 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5656] ioctl(3, BLKROSET, [4]) = 0 [pid 5656] memfd_create("syzkaller", 0) = 4 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5656] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5656] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5656] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5656] close(4) = 0 [pid 5656] close(5) = 0 [pid 5656] mkdir("./file1", 0777) = 0 [pid 5656] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5656] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5656] chdir("./file1") = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5656] exit_group(0) = ? [pid 5656] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5656, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 93.863729][ T5656] loop0: detected capacity change from 0 to 32768 [ 93.889103][ T5656] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file1") = 0 umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 93.889330][ T5656] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 93.918858][ T5636] ocfs2: Unmounting device (7,0) on (node local) clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5658 attached , child_tidptr=0x555583db66d0) = 5658 [pid 5658] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5658] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] chdir("./9") = 0 [pid 5658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5658] setpgid(0, 0) = 0 [pid 5658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5658] write(3, "1000", 4) = 4 [pid 5658] close(3) = 0 [pid 5658] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5658] write(1, "executing program\n", 18) = 18 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5658] ioctl(3, BLKROSET, [4]) = 0 [pid 5658] memfd_create("syzkaller", 0) = 4 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5658] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5658] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5658] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5658] close(4) = 0 [pid 5658] close(5) = 0 [pid 5658] mkdir("./file1", 0777) = 0 [pid 5658] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5658] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5658] chdir("./file1") = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 94.153115][ T5658] loop0: detected capacity change from 0 to 32768 [ 94.182863][ T5658] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [pid 5658] exit_group(0) = ? [pid 5658] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5658, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 94.183061][ T5658] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file1") = 0 umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 94.254138][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5660 attached , child_tidptr=0x555583db66d0) = 5660 [pid 5660] set_robust_list(0x555583db66e0, 24 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5660] <... set_robust_list resumed>) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5660] chdir("./10") = 0 [pid 5660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5660] setpgid(0, 0) = 0 [pid 5660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5660] write(3, "1000", 4) = 4 [pid 5660] close(3) = 0 [pid 5660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5660] write(1, "executing program\n", 18) = 18 executing program [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5660] ioctl(3, BLKROSET, [4]) = 0 [pid 5660] memfd_create("syzkaller", 0) = 4 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5660] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5660] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5660] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5660] close(4) = 0 [pid 5660] close(5) = 0 [pid 5660] mkdir("./file1", 0777) = 0 [pid 5660] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5660] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5660] chdir("./file1") = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5660] exit_group(0) = ? [pid 5660] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5660, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 94.538509][ T5660] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 94.538746][ T5660] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file1") = 0 umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 94.586865][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5662 attached , child_tidptr=0x555583db66d0) = 5662 [pid 5662] set_robust_list(0x555583db66e0, 24 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5662] <... set_robust_list resumed>) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5662] chdir("./11") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5662] write(1, "executing program\n", 18) = 18 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5662] ioctl(3, BLKROSET, [4]) = 0 executing program [pid 5662] memfd_create("syzkaller", 0) = 4 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5662] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5662] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5662] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5662] close(4) = 0 [pid 5662] close(5) = 0 [pid 5662] mkdir("./file1", 0777) = 0 [pid 5662] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5662] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5662] chdir("./file1") = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5662] exit_group(0) = ? [pid 5662] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5662, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file1") = 0 umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5664 attached [pid 5664] set_robust_list(0x555583db66e0, 24) = 0 [pid 5664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] <... clone resumed>, child_tidptr=0x555583db66d0) = 5664 [pid 5664] chdir("./12" [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5664] <... chdir resumed>) = 0 [pid 5664] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5664] <... prctl resumed>) = 0 [pid 5664] setpgid(0, 0) = 0 [ 94.899939][ T5662] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 94.900145][ T5662] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 94.932503][ T5636] ocfs2: Unmounting device (7,0) on (node local) [pid 5664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5664] write(3, "1000", 4) = 4 [pid 5664] close(3) = 0 [pid 5664] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5664] write(1, "executing program\n", 18) = 18 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5664] ioctl(3, BLKROSET, [4]) = 0 [pid 5664] memfd_create("syzkaller", 0) = 4 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5664] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5664] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5664] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5664] close(4) = 0 [pid 5664] close(5) = 0 [pid 5664] mkdir("./file1", 0777) = 0 [pid 5664] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5664] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5664] chdir("./file1") = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5664] exit_group(0) = ? [pid 5664] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5664, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file1") = 0 umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 95.192140][ T5664] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 95.192392][ T5664] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 95.231739][ T5636] ocfs2: Unmounting device (7,0) on (node local) ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5667 attached , child_tidptr=0x555583db66d0) = 5667 [pid 5667] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5667] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] chdir("./13") = 0 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5667] write(3, "1000", 4) = 4 [pid 5667] close(3) = 0 [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5667] write(1, "executing program\n", 18) = 18 executing program [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5667] ioctl(3, BLKROSET, [4]) = 0 [pid 5667] memfd_create("syzkaller", 0) = 4 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5667] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5667] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5667] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5667] close(4) = 0 [pid 5667] close(5) = 0 [pid 5667] mkdir("./file1", 0777) = 0 [pid 5667] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5667] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5667] chdir("./file1") = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5667] exit_group(0) = ? [pid 5667] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5667, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 95.527439][ T5667] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 95.527636][ T5667] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file1") = 0 umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 95.583612][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5669 attached , child_tidptr=0x555583db66d0) = 5669 [pid 5669] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5669] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] chdir("./14") = 0 [pid 5669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5669] setpgid(0, 0) = 0 [pid 5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5669] write(3, "1000", 4) = 4 [pid 5669] close(3) = 0 [pid 5669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5669] write(1, "executing program\n", 18) = 18 executing program [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5669] ioctl(3, BLKROSET, [4]) = 0 [pid 5669] memfd_create("syzkaller", 0) = 4 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5669] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5669] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5669] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5669] close(4) = 0 [pid 5669] close(5) = 0 [pid 5669] mkdir("./file1", 0777) = 0 [pid 5669] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5669] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5669] chdir("./file1") = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5669] exit_group(0) = ? [ 95.890111][ T5669] set_capacity_and_notify: 4 callbacks suppressed [ 95.890130][ T5669] loop0: detected capacity change from 0 to 32768 [pid 5669] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5669, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 95.941030][ T5669] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 95.941216][ T5669] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file1") = 0 umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 95.991084][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5671 attached , child_tidptr=0x555583db66d0) = 5671 [pid 5671] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5671] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5671] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5671] chdir("./15") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5671] write(1, "executing program\n", 18) = 18 executing program [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5671] ioctl(3, BLKROSET, [4]) = 0 [pid 5671] memfd_create("syzkaller", 0) = 4 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5671] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5671] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5671] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5671] close(4) = 0 [pid 5671] close(5) = 0 [pid 5671] mkdir("./file1", 0777) = 0 [pid 5671] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5671] chdir("./file1") = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5671] exit_group(0) = ? [pid 5671] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 96.286824][ T5671] loop0: detected capacity change from 0 to 32768 [ 96.316649][ T5671] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file1") = 0 umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5673 attached [pid 5673] set_robust_list(0x555583db66e0, 24 [pid 5636] <... clone resumed>, child_tidptr=0x555583db66d0) = 5673 [pid 5673] <... set_robust_list resumed>) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5673] chdir("./16") = 0 [pid 5673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5673] setpgid(0, 0) = 0 [pid 5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5673] write(3, "1000", 4) = 4 [pid 5673] close(3) = 0 [pid 5673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5673] write(1, "executing program\n", 18) = 18 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 executing program [pid 5673] ioctl(3, BLKROSET, [4]) = 0 [pid 5673] memfd_create("syzkaller", 0) = 4 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [ 96.316891][ T5671] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 96.350449][ T5636] ocfs2: Unmounting device (7,0) on (node local) [pid 5673] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5673] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5673] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5673] close(4) = 0 [pid 5673] close(5) = 0 [pid 5673] mkdir("./file1", 0777) = 0 [pid 5673] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5673] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5673] chdir("./file1") = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5673] exit_group(0) = ? [pid 5673] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5673, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 96.529357][ T5673] loop0: detected capacity change from 0 to 32768 [ 96.535869][ T5673] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 96.536605][ T5673] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file1") = 0 umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 96.593173][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5675 attached , child_tidptr=0x555583db66d0) = 5675 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5675] set_robust_list(0x555583db66e0, 24) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5675] chdir("./17") = 0 [pid 5675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5675] setpgid(0, 0) = 0 [pid 5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5675] write(3, "1000", 4) = 4 [pid 5675] close(3) = 0 executing program [pid 5675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5675] write(1, "executing program\n", 18) = 18 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5675] ioctl(3, BLKROSET, [4]) = 0 [pid 5675] memfd_create("syzkaller", 0) = 4 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5675] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5675] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5675] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5675] close(4) = 0 [pid 5675] close(5) = 0 [pid 5675] mkdir("./file1", 0777) = 0 [pid 5675] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5675] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5675] chdir("./file1") = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5675] exit_group(0) = ? [pid 5675] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5675, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [ 96.812750][ T5675] loop0: detected capacity change from 0 to 32768 [ 96.836699][ T5675] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file1") = 0 [ 96.837016][ T5675] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 96.874723][ T5636] ocfs2: Unmounting device (7,0) on (node local) umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5677 attached , child_tidptr=0x555583db66d0) = 5677 [pid 5677] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5677] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5677] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5677] chdir("./18") = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] write(1, "executing program\n", 18) = 18 executing program [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5677] ioctl(3, BLKROSET, [4]) = 0 [pid 5677] memfd_create("syzkaller", 0) = 4 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5677] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5677] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5677] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5677] close(4) = 0 [pid 5677] close(5) = 0 [pid 5677] mkdir("./file1", 0777) = 0 [pid 5677] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5677] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [ 97.192107][ T5677] loop0: detected capacity change from 0 to 32768 [ 97.219443][ T5677] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [pid 5677] chdir("./file1") = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5677] exit_group(0) = ? [pid 5677] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 97.219745][ T5677] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file1") = 0 umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5679 attached , child_tidptr=0x555583db66d0) = 5679 [pid 5679] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5679] chdir("./19" [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5679] <... chdir resumed>) = 0 [pid 5679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5679] setpgid(0, 0) = 0 [pid 5679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5679] write(3, "1000", 4) = 4 [pid 5679] close(3) = 0 [pid 5679] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5679] write(1, "executing program\n", 18) = 18 executing program [ 97.284533][ T5636] ocfs2: Unmounting device (7,0) on (node local) [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5679] ioctl(3, BLKROSET, [4]) = 0 [pid 5679] memfd_create("syzkaller", 0) = 4 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5679] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5679] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5679] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5679] close(4) = 0 [pid 5679] close(5) = 0 [pid 5679] mkdir("./file1", 0777) = 0 [pid 5679] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5679] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5679] chdir("./file1") = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5679] exit_group(0) = ? [pid 5679] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5679, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 97.496408][ T5679] loop0: detected capacity change from 0 to 32768 [ 97.514029][ T5679] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 97.514268][ T5679] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file1") = 0 umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5681 attached [pid 5681] set_robust_list(0x555583db66e0, 24) = 0 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5681] chdir("./20" [pid 5636] <... clone resumed>, child_tidptr=0x555583db66d0) = 5681 [pid 5681] <... chdir resumed>) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5681] setpgid(0, 0) = 0 [ 97.552567][ T5636] ocfs2: Unmounting device (7,0) on (node local) [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5681] write(1, "executing program\n", 18) = 18 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5681] ioctl(3, BLKROSET, [4]) = 0 [pid 5681] memfd_create("syzkaller", 0) = 4 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5681] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5681] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5681] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5681] close(4) = 0 [pid 5681] close(5) = 0 [pid 5681] mkdir("./file1", 0777) = 0 [pid 5681] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5681] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5681] chdir("./file1") = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5681] exit_group(0) = ? [pid 5681] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5681, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.785854][ T5681] loop0: detected capacity change from 0 to 32768 [ 97.812035][ T5681] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 97.812212][ T5681] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file1") = 0 umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 97.871257][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5683 attached , child_tidptr=0x555583db66d0) = 5683 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5683] set_robust_list(0x555583db66e0, 24) = 0 [pid 5683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5683] chdir("./21") = 0 [pid 5683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5683] setpgid(0, 0) = 0 [pid 5683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5683] write(3, "1000", 4) = 4 [pid 5683] close(3) = 0 [pid 5683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5683] write(1, "executing program\n", 18) = 18 executing program [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5683] ioctl(3, BLKROSET, [4]) = 0 [pid 5683] memfd_create("syzkaller", 0) = 4 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5683] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5683] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5683] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5683] close(4) = 0 [pid 5683] close(5) = 0 [pid 5683] mkdir("./file1", 0777) = 0 [pid 5683] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5683] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [ 98.102811][ T5683] loop0: detected capacity change from 0 to 32768 [ 98.132861][ T5683] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [pid 5683] chdir("./file1") = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5683] exit_group(0) = ? [pid 5683] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5683, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 98.133126][ T5683] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file1") = 0 umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 98.174317][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5685 attached [pid 5685] set_robust_list(0x555583db66e0, 24 [pid 5636] <... clone resumed>, child_tidptr=0x555583db66d0) = 5685 [pid 5685] <... set_robust_list resumed>) = 0 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] chdir("./22") = 0 [pid 5685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5685] setpgid(0, 0) = 0 [pid 5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5685] write(3, "1000", 4) = 4 [pid 5685] close(3) = 0 [pid 5685] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5685] write(1, "executing program\n", 18) = 18 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5685] ioctl(3, BLKROSET, [4]) = 0 [pid 5685] memfd_create("syzkaller", 0) = 4 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5685] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5685] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5685] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5685] close(4) = 0 [pid 5685] close(5) = 0 [pid 5685] mkdir("./file1", 0777) = 0 [pid 5685] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5685] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5685] chdir("./file1") = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5685] exit_group(0) = ? [pid 5685] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5685, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 98.440659][ T5685] loop0: detected capacity change from 0 to 32768 [ 98.467388][ T5685] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 98.467721][ T5685] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file1") = 0 umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 98.540493][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5687 attached , child_tidptr=0x555583db66d0) = 5687 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5687] set_robust_list(0x555583db66e0, 24) = 0 [pid 5687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5687] chdir("./23") = 0 [pid 5687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5687] setpgid(0, 0) = 0 [pid 5687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5687] write(3, "1000", 4) = 4 [pid 5687] close(3) = 0 [pid 5687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5687] write(1, "executing program\n", 18) = 18 executing program [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5687] ioctl(3, BLKROSET, [4]) = 0 [pid 5687] memfd_create("syzkaller", 0) = 4 [pid 5687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5687] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5687] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5687] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5687] close(4) = 0 [pid 5687] close(5) = 0 [pid 5687] mkdir("./file1", 0777) = 0 [pid 5687] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5687] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5687] chdir("./file1") = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5687] exit_group(0) = ? [pid 5687] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5687, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 98.760537][ T5687] loop0: detected capacity change from 0 to 32768 [ 98.784551][ T5687] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 98.784989][ T5687] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file1") = 0 umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 98.876168][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5689 attached , child_tidptr=0x555583db66d0) = 5689 [pid 5689] set_robust_list(0x555583db66e0, 24) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5689] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5689] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5689] chdir("./24") = 0 [pid 5689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5689] setpgid(0, 0) = 0 [pid 5689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5689] write(3, "1000", 4) = 4 [pid 5689] close(3) = 0 [pid 5689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5689] write(1, "executing program\n", 18) = 18 executing program [pid 5689] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5689] ioctl(3, BLKROSET, [4]) = 0 [pid 5689] memfd_create("syzkaller", 0) = 4 [pid 5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5689] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5689] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5689] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5689] close(4) = 0 [pid 5689] close(5) = 0 [pid 5689] mkdir("./file1", 0777) = 0 [pid 5689] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5689] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5689] chdir("./file1") = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5689] exit_group(0) = ? [pid 5689] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5689, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 99.136067][ T5689] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 99.136299][ T5689] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file1") = 0 [ 99.193950][ T5636] ocfs2: Unmounting device (7,0) on (node local) umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5691 attached , child_tidptr=0x555583db66d0) = 5691 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5691] set_robust_list(0x555583db66e0, 24) = 0 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5691] chdir("./25") = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5691] setpgid(0, 0) = 0 [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5691] write(3, "1000", 4) = 4 [pid 5691] close(3) = 0 [pid 5691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5691] write(1, "executing program\n", 18) = 18 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5691] ioctl(3, BLKROSET, [4]) = 0 executing program [pid 5691] memfd_create("syzkaller", 0) = 4 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5691] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5691] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5691] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5691] close(4) = 0 [pid 5691] close(5) = 0 [pid 5691] mkdir("./file1", 0777) = 0 [pid 5691] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5691] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5691] chdir("./file1") = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5691] exit_group(0) = ? [pid 5691] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5691, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 99.511716][ T5691] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 99.511909][ T5691] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file1") = 0 umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 99.561089][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5693 attached , child_tidptr=0x555583db66d0) = 5693 [pid 5693] set_robust_list(0x555583db66e0, 24) = 0 [pid 5693] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5693] chdir("./26") = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5693] setpgid(0, 0) = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5693] write(3, "1000", 4) = 4 [pid 5693] close(3) = 0 [pid 5693] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5693] write(1, "executing program\n", 18) = 18 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5693] ioctl(3, BLKROSET, [4]) = 0 [pid 5693] memfd_create("syzkaller", 0) = 4 [pid 5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5693] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5693] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5693] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5693] close(4) = 0 [pid 5693] close(5) = 0 [pid 5693] mkdir("./file1", 0777) = 0 [pid 5693] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5693] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5693] chdir("./file1") = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5693] exit_group(0) = ? [pid 5693] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5693, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 99.851064][ T5693] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 99.851304][ T5693] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file1") = 0 umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 [ 99.908360][ T5636] ocfs2: Unmounting device (7,0) on (node local) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5695 attached , child_tidptr=0x555583db66d0) = 5695 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5695] set_robust_list(0x555583db66e0, 24) = 0 [pid 5695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5695] chdir("./27") = 0 [pid 5695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5695] setpgid(0, 0) = 0 [pid 5695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5695] write(3, "1000", 4) = 4 [pid 5695] close(3) = 0 [pid 5695] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5695] write(1, "executing program\n", 18) = 18 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5695] ioctl(3, BLKROSET, [4]) = 0 [pid 5695] memfd_create("syzkaller", 0) = 4 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5695] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5695] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5695] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5695] close(4) = 0 [pid 5695] close(5) = 0 [pid 5695] mkdir("./file1", 0777) = 0 [pid 5695] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5695] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5695] chdir("./file1") = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5695] exit_group(0) = ? [pid 5695] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5695, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 [ 100.152403][ T5695] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 100.152691][ T5695] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file1") = 0 umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 [ 100.213480][ T5636] ocfs2: Unmounting device (7,0) on (node local) rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5697 attached , child_tidptr=0x555583db66d0) = 5697 [pid 5697] set_robust_list(0x555583db66e0, 24) = 0 [pid 5697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5697] chdir("./28" [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5697] <... chdir resumed>) = 0 [pid 5697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5697] setpgid(0, 0) = 0 [pid 5697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5697] write(3, "1000", 4) = 4 [pid 5697] close(3) = 0 [pid 5697] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5697] write(1, "executing program\n", 18) = 18 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5697] ioctl(3, BLKROSET, [4]) = 0 [pid 5697] memfd_create("syzkaller", 0) = 4 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5697] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5697] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5697] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5697] close(4) = 0 [pid 5697] close(5) = 0 [pid 5697] mkdir("./file1", 0777) = 0 [pid 5697] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5697] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5697] chdir("./file1") = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5697] exit_group(0) = ? [pid 5697] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5697, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555583dbf7f0 /* 2 entries */, 32768) = 48 getdents64(4, 0x555583dbf7f0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file1") = 0 [ 100.537602][ T5697] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 100.537898][ T5697] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 100.571548][ T5636] ocfs2: Unmounting device (7,0) on (node local) umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 getdents64(3, 0x555583db77b0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5699 attached , child_tidptr=0x555583db66d0) = 5699 [pid 5699] set_robust_list(0x555583db66e0, 24) = 0 [pid 5699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5699] chdir("./29" [pid 5636] rt_sigprocmask(SIG_SETMASK, [] [pid 5699] <... chdir resumed>) = 0 [pid 5636] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5699] setpgid(0, 0) = 0 [pid 5699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5699] write(3, "1000", 4) = 4 [pid 5699] close(3) = 0 [pid 5699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5699] write(1, "executing program\n", 18) = 18 executing program [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDONLY|O_APPEND|O_NOFOLLOW|FASYNC) = 3 [pid 5699] ioctl(3, BLKROSET, [4]) = 0 [pid 5699] memfd_create("syzkaller", 0) = 4 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4ccb400000 [pid 5699] write(4, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 [pid 5699] munmap(0x7f4ccb400000, 138412032) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5 [pid 5699] ioctl(5, LOOP_SET_FD, 4) = 0 [pid 5699] close(4) = 0 [pid 5699] close(5) = 0 [pid 5699] mkdir("./file1", 0777) = 0 [pid 5699] mount("/dev/loop0", "./file1", "ocfs2", MS_RDONLY|MS_NOATIME|MS_I_VERSION, "data=ordered,resv_level=00000000000000000002,heartbeat=none,coherency=buffered,errors=continue,barri"...) = 0 [pid 5699] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 4 [pid 5699] chdir("./file1") = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5699] exit_group(0) = ? [pid 5699] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5699, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555583db77b0 /* 4 entries */, 32768) = 112 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 100.865031][ T5699] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 100.865341][ T5699] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode.