./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3636236787 <...> Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. execve("./syz-executor3636236787", ["./syz-executor3636236787"], 0x7ffda2d17540 /* 10 vars */) = 0 brk(NULL) = 0x555589b67000 brk(0x555589b67d40) = 0x555589b67d40 arch_prctl(ARCH_SET_FS, 0x555589b673c0) = 0 set_tid_address(0x555589b67690) = 282 set_robust_list(0x555589b676a0, 24) = 0 rseq(0x555589b67ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3636236787", 4096) = 28 getrandom("\x67\x3a\x5d\xde\xfe\xa5\xb2\x59", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555589b67d40 brk(0x555589b88d40) = 0x555589b88d40 brk(0x555589b89000) = 0x555589b89000 mprotect(0x7f2524cd8000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 [ 26.824549][ T24] audit: type=1400 audit(1749016826.050:64): avc: denied { execmem } for pid=282 comm="syz-executor363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 [ 26.851301][ T24] audit: type=1400 audit(1749016826.070:65): avc: denied { mounton } for pid=282 comm="syz-executor363" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.876864][ T282] cgroup: Unknown subsys name 'net' [ 26.880746][ T24] audit: type=1400 audit(1749016826.080:66): avc: denied { mount } for pid=282 comm="syz-executor363" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 26.920309][ T24] audit: type=1400 audit(1749016826.110:67): avc: denied { unmount } for pid=282 comm="syz-executor363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.921152][ T282] cgroup: Unknown subsys name 'devices' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 27.136724][ T282] cgroup: Unknown subsys name 'hugetlb' [ 27.143785][ T282] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = 283 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 283 attached [pid 283] set_robust_list(0x555589b676a0, 24 [pid 282] <... clone resumed>, child_tidptr=0x555589b67690) = 284 [pid 282] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 283] <... set_robust_list resumed>) = 0 [pid 282] <... clone resumed>, child_tidptr=0x555589b67690) = 285 [pid 282] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = 286 [pid 282] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 283] mkdir("./syzkaller.q9DmBh", 0700 [pid 282] <... clone resumed>, child_tidptr=0x555589b67690) = 287 ./strace-static-x86_64: Process 287 attached [pid 287] set_robust_list(0x555589b676a0, 24) = 0 [pid 287] getrandom("\xb8\x77\x9b\xe1\xbd\xfe\x42\x8a", 8, GRND_NONBLOCK) = 8 [pid 287] mkdir("./syzkaller.OwhiEu", 0700 [pid 283] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 286 attached [pid 286] set_robust_list(0x555589b676a0, 24) = 0 ./strace-static-x86_64: Process 284 attached [pid 283] chmod("./syzkaller.q9DmBh", 0777 [pid 286] mkdir("./syzkaller.N0q2Ad", 0700 [pid 283] <... chmod resumed>) = 0 [pid 287] <... mkdir resumed>) = 0 [pid 286] <... mkdir resumed>) = 0 [pid 283] chdir("./syzkaller.q9DmBh" [pid 284] set_robust_list(0x555589b676a0, 24 [pid 286] chmod("./syzkaller.N0q2Ad", 0777) = 0 [pid 286] chdir("./syzkaller.N0q2Ad") = 0 [pid 286] unshare(CLONE_NEWPID [pid 283] <... chdir resumed>) = 0 [pid 284] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 285 attached [pid 287] chmod("./syzkaller.OwhiEu", 0777 [pid 285] set_robust_list(0x555589b676a0, 24 [pid 287] <... chmod resumed>) = 0 [pid 285] <... set_robust_list resumed>) = 0 [pid 283] unshare(CLONE_NEWPID [pid 287] chdir("./syzkaller.OwhiEu") = 0 [pid 286] <... unshare resumed>) = 0 [pid 287] unshare(CLONE_NEWPID [pid 283] <... unshare resumed>) = 0 [pid 287] <... unshare resumed>) = 0 [pid 287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 285] mkdir("./syzkaller.Ic1zzY", 0700 [pid 286] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 283] <... clone resumed>, child_tidptr=0x555589b67690) = 289 [pid 287] <... clone resumed>, child_tidptr=0x555589b67690) = 290 [pid 285] <... mkdir resumed>) = 0 [pid 286] <... clone resumed>, child_tidptr=0x555589b67690) = 288 [pid 285] chmod("./syzkaller.Ic1zzY", 0777) = 0 [pid 285] chdir("./syzkaller.Ic1zzY") = 0 [pid 285] unshare(CLONE_NEWPID) = 0 [pid 285] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 284] mkdir("./syzkaller.2Z7Hbn", 0700 [pid 285] <... clone resumed>, child_tidptr=0x555589b67690) = 291 ./strace-static-x86_64: Process 290 attached [pid 290] set_robust_list(0x555589b676a0, 24) = 0 [pid 290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] getppid() = 0 [pid 290] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 290] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 290] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 290] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 290] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 284] <... mkdir resumed>) = 0 [pid 290] <... prlimit64 resumed>NULL) = 0 [pid 290] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 290] unshare(CLONE_NEWNS [pid 284] chmod("./syzkaller.2Z7Hbn", 0777 [pid 290] <... unshare resumed>) = 0 [pid 284] <... chmod resumed>) = 0 [pid 290] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL./strace-static-x86_64: Process 289 attached [pid 284] chdir("./syzkaller.2Z7Hbn"./strace-static-x86_64: Process 291 attached ./strace-static-x86_64: Process 288 attached [pid 290] <... mount resumed>) = 0 [pid 289] set_robust_list(0x555589b676a0, 24 [pid 284] <... chdir resumed>) = 0 [pid 284] unshare(CLONE_NEWPID) = 0 [pid 284] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = 292 [pid 289] <... set_robust_list resumed>) = 0 [pid 289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 288] set_robust_list(0x555589b676a0, 24 [pid 289] getppid() = 0 [pid 289] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 288] <... set_robust_list resumed>) = 0 [pid 289] <... prlimit64 resumed>NULL) = 0 [pid 289] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 289] <... prlimit64 resumed>NULL) = 0 [pid 288] <... prctl resumed>) = 0 [pid 289] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 288] getppid( [pid 289] <... prlimit64 resumed>NULL) = 0 [pid 288] <... getppid resumed>) = 0 [pid 288] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 289] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 289] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 288] <... prlimit64 resumed>NULL) = 0 [pid 289] <... prlimit64 resumed>NULL) = 0 [pid 288] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 289] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 288] <... prlimit64 resumed>NULL) = 0 [pid 289] <... prlimit64 resumed>NULL) = 0 [pid 288] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 289] unshare(CLONE_NEWNS [pid 288] <... prlimit64 resumed>NULL) = 0 [pid 289] <... unshare resumed>) = 0 [pid 288] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 288] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 288] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 288] unshare(CLONE_NEWNS) = 0 [pid 289] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 288] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 289] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 288] unshare(CLONE_NEWIPC [pid 289] unshare(CLONE_NEWCGROUP [pid 288] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... unshare resumed>) = 0 [pid 288] unshare(CLONE_NEWCGROUP) = 0 [pid 289] unshare(CLONE_NEWUTS) = 0 [pid 288] unshare(CLONE_NEWUTS) = 0 [pid 289] unshare(CLONE_SYSVSEM) = 0 [pid 289] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 288] unshare(CLONE_SYSVSEM) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 289] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 288] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 289] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 291] set_robust_list(0x555589b676a0, 24 [pid 289] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 290] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 291] <... set_robust_list resumed>) = 0 [pid 289] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] unshare(CLONE_NEWCGROUP) = 0 [pid 289] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 290] unshare(CLONE_NEWUTS [pid 288] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 290] <... unshare resumed>) = 0 [pid 289] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 290] unshare(CLONE_SYSVSEM [pid 291] <... prctl resumed>) = 0 [pid 289] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 290] <... unshare resumed>) = 0 [pid 291] getppid() = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 291] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 291] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 291] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 289] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 291] <... prlimit64 resumed>NULL) = 0 [pid 291] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 289] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 291] <... prlimit64 resumed>NULL) = 0 [pid 291] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 290] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 291] <... prlimit64 resumed>NULL) = 0 [pid 291] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 291] unshare(CLONE_NEWNS [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 291] <... unshare resumed>) = 0 [pid 288] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 289] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 289] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 289] getpid( [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 289] <... getpid resumed>) = 1 [pid 289] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 291] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 289] <... capget resumed>{effective=1< [pid 288] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 291] <... mount resumed>) = 0 [pid 289] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 290] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 289] <... capset resumed>) = 0 [pid 291] unshare(CLONE_NEWIPC [pid 289] unshare(CLONE_NEWNET [pid 291] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 291] unshare(CLONE_NEWCGROUP [pid 288] getpid( [pid 291] <... unshare resumed>) = 0 [pid 288] <... getpid resumed>) = 1 [pid 290] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 288] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 288] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 291] <... unshare resumed>) = 0 [pid 290] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 288] <... capset resumed>) = 0 [pid 291] unshare(CLONE_SYSVSEM [pid 290] getpid( [pid 288] unshare(CLONE_NEWNET./strace-static-x86_64: Process 292 attached [pid 291] <... unshare resumed>) = 0 [pid 290] <... getpid resumed>) = 1 [pid 291] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 290] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 291] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 290] <... capget resumed>{effective=1< [pid 290] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 291] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 290] <... capset resumed>) = 0 [pid 291] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 290] unshare(CLONE_NEWNET [pid 291] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 292] set_robust_list(0x555589b676a0, 24 [pid 291] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 291] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 291] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 291] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 291] getpid() = 1 [pid 292] <... set_robust_list resumed>) = 0 [pid 291] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 292] getppid() = 0 [pid 292] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 292] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 292] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 292] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 292] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 292] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 292] unshare(CLONE_NEWNS) = 0 [pid 292] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 292] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 292] unshare(CLONE_NEWCGROUP) = 0 [pid 292] unshare(CLONE_NEWUTS) = 0 [pid 292] unshare(CLONE_SYSVSEM) = 0 [pid 292] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] getpid() = 1 [pid 292] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 289] <... unshare resumed>) = 0 [pid 289] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 289] write(3, "0 65535", 7) = 7 [pid 289] close(3) = 0 [pid 289] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 289] dup2(3, 200) = 200 [pid 289] close(3) = 0 [pid 289] ioctl(200, TUNSETIFF, 0x7ffd25a57b20 [pid 290] <... unshare resumed>) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0 65535", 7) = 7 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 290] dup2(3, 200) = 200 [pid 290] close(3) = 0 [ 27.317846][ T24] audit: type=1400 audit(1749016826.540:68): avc: denied { mounton } for pid=290 comm="syz-executor363" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 290] ioctl(200, TUNSETIFF, 0x7ffd25a57b20 [pid 291] <... unshare resumed>) = 0 [pid 291] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 291] write(3, "0 65535", 7) = 7 [pid 291] close(3) = 0 [pid 291] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 291] dup2(3, 200) = 200 [pid 291] close(3) = 0 [pid 291] ioctl(200, TUNSETIFF, 0x7ffd25a57b20 [pid 289] <... ioctl resumed>) = 0 [pid 289] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 289] write(3, "0", 1) = 1 [pid 289] close(3) = 0 [pid 289] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3 [pid 289] write(3, "0", 1) = 1 [pid 289] close(3) = 0 [pid 289] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 289] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 289] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 289] close(4) = 0 [pid 289] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 288] <... unshare resumed>) = 0 [pid 291] <... ioctl resumed>) = 0 [pid 290] <... ioctl resumed>) = 0 [pid 289] <... sendto resumed>) = 40 [pid 288] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 290] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0", 1) = 1 [pid 290] close(3) = 0 [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 [pid 290] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 290] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 290] close(4) = 0 [pid 290] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40 [pid 290] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4 [pid 290] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0 [pid 290] close(4) = 0 [pid 290] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 64 [pid 290] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 288] <... openat resumed>) = 3 [pid 290] <... socket resumed>) = 4 [pid 290] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 288] write(3, "0 65535", 7 [pid 290] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 290] close(4 [pid 288] <... write resumed>) = 7 [pid 290] <... close resumed>) = 0 [pid 290] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 288] close(3 [pid 290] <... sendto resumed>) = 48 [pid 290] recvfrom(3, [pid 288] <... close resumed>) = 0 [pid 290] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 289] recvfrom(3, [pid 288] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK [pid 290] <... socket resumed>) = 4 [pid 291] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 290] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 289] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 288] <... openat resumed>) = 3 [pid 291] <... openat resumed>) = 3 [pid 290] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] write(3, "0", 1 [pid 290] close(4 [pid 289] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 288] dup2(3, 200 [pid 291] <... write resumed>) = 1 [pid 290] <... close resumed>) = 0 [pid 291] close(3 [pid 290] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 289] <... socket resumed>) = 4 [pid 288] <... dup2 resumed>) = 200 [pid 291] <... close resumed>) = 0 [pid 290] <... sendto resumed>) = 60 [pid 289] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 288] close(3 [pid 291] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 290] recvfrom(3, [pid 289] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 288] <... close resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 289] close(4 [pid 288] ioctl(200, TUNSETIFF, 0x7ffd25a57b20 [pid 291] write(3, "0", 1 [pid 290] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 289] <... close resumed>) = 0 [pid 288] <... ioctl resumed>) = 0 [pid 291] <... write resumed>) = 1 [pid 290] <... socket resumed>) = 4 [pid 291] close(3 [pid 290] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 289] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 288] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 291] <... close resumed>) = 0 [pid 290] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 289] <... sendto resumed>) = 64 [pid 291] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 290] close(4 [pid 289] recvfrom(3, [pid 288] <... openat resumed>) = 3 [pid 291] <... socket resumed>) = 3 [pid 290] <... close resumed>) = 0 [pid 289] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 291] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 290] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 289] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 288] write(3, "0", 1 [pid 291] <... socket resumed>) = 4 [pid 290] <... sendto resumed>) = 44 [pid 289] <... socket resumed>) = 4 [pid 288] <... write resumed>) = 1 [pid 291] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 290] recvfrom(3, [pid 289] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 288] close(3 [pid 291] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 290] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 289] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 288] <... close resumed>) = 0 [pid 291] close(4 [pid 290] close(3 [pid 289] close(4 [pid 288] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 288] <... openat resumed>) = 3 [pid 291] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 290] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 289] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 288] write(3, "0", 1 [pid 292] <... unshare resumed>) = 0 [pid 291] <... sendto resumed>) = 40 [pid 292] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 290] <... openat resumed>) = 3 [pid 292] <... openat resumed>) = 3 [pid 291] recvfrom(3, [pid 290] write(3, "100000", 6 [pid 289] <... sendto resumed>) = 48 [pid 288] <... write resumed>) = 1 [pid 292] write(3, "0 65535", 7 [pid 291] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] <... write resumed>) = 6 [pid 289] recvfrom(3, [pid 288] close(3 [pid 292] <... write resumed>) = 7 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3 [pid 290] close(3 [pid 289] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 291] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 292] dup2(3, 200 [pid 290] <... close resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 292] <... dup2 resumed>) = 200 [pid 289] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 292] close(3) = 0 [pid 290] mkdir("./syz-tmp", 0777 [pid 292] ioctl(200, TUNSETIFF, 0x7ffd25a57b20 [pid 291] <... socket resumed>) = 4 [pid 289] <... socket resumed>) = 4 [pid 288] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 292] <... ioctl resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 292] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC [pid 291] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 289] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 292] <... openat resumed>) = 3 [pid 291] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 290] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 289] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 288] <... socket resumed>) = 3 [pid 292] write(3, "0", 1 [ 27.410157][ T24] audit: type=1400 audit(1749016826.630:69): avc: denied { module_request } for pid=279 comm="strace-static-x" kmod="net-pf-16-proto-4-type-16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [pid 291] close(4 [pid 292] <... write resumed>) = 1 [pid 291] <... close resumed>) = 0 [pid 290] <... mount resumed>) = 0 [pid 289] close(4 [pid 288] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 290] mkdir("./syz-tmp/newroot", 0777 [pid 289] <... close resumed>) = 0 [pid 288] <... socket resumed>) = 4 [pid 291] <... sendto resumed>) = 64 [pid 290] <... mkdir resumed>) = 0 [pid 289] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 288] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 291] recvfrom(3, [pid 290] mkdir("./syz-tmp/newroot/dev", 0700 [pid 289] <... sendto resumed>) = 60 [pid 288] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] <... mkdir resumed>) = 0 [pid 289] recvfrom(3, [pid 288] close(4 [pid 291] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 290] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 288] <... close resumed>) = 0 [pid 291] <... socket resumed>) = 4 [pid 290] <... mount resumed>) = 0 [pid 289] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 288] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 290] mkdir("./syz-tmp/newroot/proc", 0700 [pid 289] <... socket resumed>) = 4 [pid 288] <... sendto resumed>) = 40 [pid 291] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 288] recvfrom(3, [pid 291] close(4 [pid 290] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 289] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 288] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 291] <... close resumed>) = 0 [pid 290] <... mount resumed>) = 0 [pid 289] close(4 [pid 288] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 290] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 289] <... close resumed>) = 0 [pid 288] <... socket resumed>) = 4 [pid 291] <... sendto resumed>) = 48 [pid 290] <... mkdir resumed>) = 0 [pid 289] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 288] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 291] recvfrom(3, [pid 290] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... sendto resumed>) = 44 [pid 288] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 289] recvfrom(3, [pid 288] close(4 [pid 291] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 290] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 288] <... close resumed>) = 0 [pid 291] <... socket resumed>) = 4 [pid 290] <... mount resumed>) = 0 [pid 289] close(3 [pid 288] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 292] close(3 [pid 291] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 290] mkdir("./syz-tmp/newroot/sys", 0700 [pid 289] <... close resumed>) = 0 [pid 288] <... sendto resumed>) = 64 [pid 292] <... close resumed>) = 0 [pid 291] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 288] recvfrom(3, [pid 292] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC [pid 291] close(4 [pid 290] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... openat resumed>) = 3 [pid 288] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 292] <... openat resumed>) = 3 [pid 291] <... close resumed>) = 0 [pid 290] <... mount resumed>) = 0 [pid 289] write(3, "100000", 6 [pid 288] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 290] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... write resumed>) = 6 [pid 288] <... socket resumed>) = 4 [pid 291] <... sendto resumed>) = 60 [pid 290] <... mount resumed>) = 0 [pid 289] close(3 [pid 288] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 291] recvfrom(3, [pid 290] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... close resumed>) = 0 [pid 288] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 289] mkdir("./syz-tmp", 0777 [pid 288] close(4 [pid 291] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 290] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 291] <... socket resumed>) = 4 [pid 290] <... mount resumed>) = 0 [pid 289] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 288] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 290] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 289] <... mount resumed>) = 0 [pid 288] <... sendto resumed>) = 48 [pid 291] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot", 0777 [pid 288] recvfrom(3, [pid 291] close(4 [pid 290] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 291] <... close resumed>) = 0 [pid 290] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 289] mkdir("./syz-tmp/newroot/dev", 0700 [pid 288] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 290] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 289] <... mkdir resumed>) = 0 [pid 288] <... socket resumed>) = 4 [pid 291] <... sendto resumed>) = 44 [pid 290] <... mkdir resumed>) = 0 [pid 289] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 291] recvfrom(3, [pid 290] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 289] <... mount resumed>) = 0 [pid 288] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot/proc", 0700 [pid 288] close(4 [pid 291] close(3 [pid 290] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 289] <... mkdir resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 288] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 290] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 289] <... mount resumed>) = 0 [pid 288] <... sendto resumed>) = 60 [pid 291] <... openat resumed>) = 3 [pid 290] <... mkdir resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 288] recvfrom(3, [pid 291] write(3, "100000", 6 [pid 290] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 291] <... write resumed>) = 6 [pid 290] <... mount resumed>) = 0 [pid 289] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] close(3 [pid 290] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 288] <... socket resumed>) = 4 [pid 291] <... close resumed>) = 0 [pid 290] <... mount resumed>) = 0 [pid 289] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 291] mkdir("./syz-tmp", 0777 [pid 290] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mount resumed>) = 0 [pid 288] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mount resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot/sys", 0700 [pid 288] close(4 [pid 291] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 290] mkdir("./syz-tmp/pivot", 0777 [pid 289] <... mkdir resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 291] <... mount resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 289] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] mkdir("./syz-tmp/newroot", 0777 [pid 290] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 289] <... mount resumed>) = 0 [pid 288] <... sendto resumed>) = 44 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... pivot_root resumed>) = 0 [pid 289] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] recvfrom(3, [pid 291] mkdir("./syz-tmp/newroot/dev", 0700 [pid 290] chdir("/" [pid 289] <... mount resumed>) = 0 [pid 288] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... chdir resumed>) = 0 [pid 289] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] close(3 [pid 291] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] umount2("./pivot", MNT_DETACH [pid 289] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 288] <... close resumed>) = 0 [pid 291] <... mount resumed>) = 0 [pid 289] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 291] mkdir("./syz-tmp/newroot/proc", 0700 [pid 289] <... mount resumed>) = 0 [pid 288] <... openat resumed>) = 3 [pid 291] <... mkdir resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 288] write(3, "100000", 6 [pid 291] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... write resumed>) = 6 [pid 291] <... mount resumed>) = 0 [pid 289] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] close(3 [pid 291] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 289] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 288] <... close resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 288] mkdir("./syz-tmp", 0777 [pid 291] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 291] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 289] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 288] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 291] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mount resumed>) = 0 [pid 291] <... mount resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 288] mkdir("./syz-tmp/newroot", 0777 [pid 291] mkdir("./syz-tmp/newroot/sys", 0700 [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 288] mkdir("./syz-tmp/newroot/dev", 0700 [pid 291] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 291] <... mount resumed>) = 0 [pid 289] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mount resumed>) = 0 [pid 288] <... mount resumed>) = 0 [pid 291] <... mount resumed>) = 0 [pid 289] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] mkdir("./syz-tmp/newroot/proc", 0700 [pid 291] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mount resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 291] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 289] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 291] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mount resumed>) = 0 [pid 288] <... mount resumed>) = 0 [pid 291] <... mount resumed>) = 0 [pid 289] mkdir("./syz-tmp/pivot", 0777 [pid 288] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 291] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 288] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... pivot_root resumed>) = 0 [pid 288] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 291] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 289] chdir("/" [pid 288] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 289] <... chdir resumed>) = 0 [pid 288] <... mount resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 289] umount2("./pivot", MNT_DETACH [pid 288] mkdir("./syz-tmp/newroot/sys", 0700 [pid 291] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 288] <... mkdir resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 288] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 288] <... mount resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 288] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 288] <... mount resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 288] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 288] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 291] <... mount resumed>) = 0 [pid 288] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 288] <... mount resumed>) = 0 [pid 292] write(3, "0", 1 [pid 291] <... mount resumed>) = 0 [ 27.450183][ T24] audit: type=1400 audit(1749016826.670:70): avc: denied { mounton } for pid=290 comm="syz-executor363" path="/root/syzkaller.OwhiEu/syz-tmp" dev="sda1" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.484534][ T24] audit: type=1400 audit(1749016826.670:71): avc: denied { mount } for pid=290 comm="syz-executor363" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [pid 290] chroot("./newroot" [pid 289] chroot("./newroot" [pid 288] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 292] <... write resumed>) = 1 [pid 291] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] <... chroot resumed>) = 0 [pid 289] <... chroot resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 291] <... mount resumed>) = 0 [pid 290] chdir("/" [pid 289] chdir("/" [pid 288] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] mkdir("./syz-tmp/pivot", 0777 [pid 290] <... chdir resumed>) = 0 [pid 289] <... chdir resumed>) = 0 [pid 288] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 291] <... mkdir resumed>) = 0 [pid 290] mkdir("/dev/gadgetfs", 0777 [pid 289] mkdir("/dev/gadgetfs", 0777 [pid 288] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 291] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 290] <... mkdir resumed>) = 0 [pid 289] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 288] <... mkdir resumed>) = 0 [pid 291] <... pivot_root resumed>) = 0 [ 27.511054][ T24] audit: type=1400 audit(1749016826.690:72): avc: denied { mounton } for pid=290 comm="syz-executor363" path="/root/syzkaller.OwhiEu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.513457][ T290] request_module fs-gadgetfs succeeded, but still no fs? [pid 290] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 289] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 288] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 292] close(3 [pid 291] chdir("/" [pid 289] <... mount resumed>) = -1 ENODEV (No such device) [pid 288] <... mkdir resumed>) = 0 [pid 291] <... chdir resumed>) = 0 [pid 289] mkdir("/dev/binderfs", 0777 [pid 288] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 291] umount2("./pivot", MNT_DETACH [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 289] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 288] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 289] <... mount resumed>) = 0 [pid 288] <... mkdir resumed>) = 0 [pid 289] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 288] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 288] <... mount resumed>) = 0 [pid 289] getpid( [pid 288] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... getpid resumed>) = 1 [pid 288] <... mount resumed>) = 0 [pid 289] mkdir("/syzcgroup/unified/syz0", 0777 [pid 288] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mount resumed>) = 0 [pid 289] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 288] mkdir("./syz-tmp/pivot", 0777 [pid 289] <... openat resumed>) = 3 [pid 288] <... mkdir resumed>) = 0 [pid 289] write(3, "32", 2 [pid 288] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 289] <... write resumed>) = 2 [pid 288] <... pivot_root resumed>) = 0 [pid 289] close(3 [pid 288] chdir("/" [pid 289] <... close resumed>) = 0 [pid 288] <... chdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 288] umount2("./pivot", MNT_DETACH [pid 289] <... openat resumed>) = 3 [pid 289] write(3, "1", 1) = 1 [pid 289] close(3) = 0 [pid 289] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 291] <... umount2 resumed>) = 0 [pid 292] <... close resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 291] chroot("./newroot" [pid 288] chroot("./newroot" [pid 291] <... chroot resumed>) = 0 [pid 288] <... chroot resumed>) = 0 [pid 291] chdir("/" [pid 288] chdir("/" [pid 291] <... chdir resumed>) = 0 [pid 288] <... chdir resumed>) = 0 [pid 292] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE [pid 291] mkdir("/dev/gadgetfs", 0777 [pid 288] mkdir("/dev/gadgetfs", 0777 [pid 292] <... socket resumed>) = 3 [pid 291] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 290] <... mount resumed>) = -1 ENODEV (No such device) [pid 289] <... mkdir resumed>) = 0 [pid 288] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 291] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 288] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 291] <... mount resumed>) = -1 ENODEV (No such device) [pid 288] <... mount resumed>) = -1 ENODEV (No such device) [pid 292] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] mkdir("/dev/binderfs", 0777 [pid 288] mkdir("/dev/binderfs", 0777 [pid 291] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 288] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 291] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 288] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 292] <... socket resumed>) = 4 [pid 290] mkdir("/dev/binderfs", 0777 [pid 289] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 292] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 291] <... mount resumed>) = 0 [pid 289] <... openat resumed>) = 3 [pid 288] <... mount resumed>) = 0 [pid 291] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 290] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 288] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 292] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 289] write(3, "1", 1 [pid 292] close(4 [pid 289] <... write resumed>) = 1 [pid 292] <... close resumed>) = 0 [pid 289] close(3 [pid 292] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] getpid( [pid 289] <... close resumed>) = 0 [pid 288] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 292] <... sendto resumed>) = 40 [pid 290] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 289] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 292] recvfrom(3, [pid 291] <... getpid resumed>) = 1 [pid 289] <... openat resumed>) = 3 [pid 288] getpid( [pid 292] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 289] write(3, "313524224", 9 [pid 292] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] mkdir("/syzcgroup/unified/syz2", 0777 [pid 289] <... write resumed>) = 9 [pid 288] <... getpid resumed>) = 1 [pid 292] <... socket resumed>) = 4 [pid 289] close(3 [pid 292] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 289] <... close resumed>) = 0 [pid 288] mkdir("/syzcgroup/unified/syz3", 0777 [pid 292] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 289] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 292] close(4 [pid 289] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 289] write(3, "314572800", 9 [pid 292] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] <... mkdir resumed>) = 0 [pid 289] <... write resumed>) = 9 [pid 292] <... sendto resumed>) = 64 [pid 289] close(3 [pid 288] <... mkdir resumed>) = 0 [pid 292] recvfrom(3, [pid 289] <... close resumed>) = 0 [pid 292] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 291] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC [pid 289] mkdir("/syzcgroup/net/syz0", 0777 [pid 288] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 292] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] <... openat resumed>) = 3 [pid 290] <... mount resumed>) = 0 [pid 289] <... mkdir resumed>) = 0 [pid 292] <... socket resumed>) = 4 [pid 289] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 288] <... openat resumed>) = 3 [pid 292] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 291] write(3, "32", 2 [pid 290] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 289] <... openat resumed>) = 3 [pid 288] write(3, "32", 2 [pid 292] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... write resumed>) = 2 [pid 289] write(3, "1", 1 [pid 292] close(4 [pid 291] close(3 [pid 290] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 288] <... write resumed>) = 2 [pid 291] <... close resumed>) = 0 [pid 290] getpid( [pid 288] close(3 [pid 291] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 290] <... getpid resumed>) = 1 [pid 288] <... close resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] mkdir("/syzcgroup/unified/syz4", 0777 [pid 288] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 291] write(3, "1", 1 [pid 288] <... openat resumed>) = 3 [pid 292] <... close resumed>) = 0 [pid 291] <... write resumed>) = 1 [pid 289] <... write resumed>) = 1 [pid 288] write(3, "1", 1 [pid 292] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] close(3 [pid 290] <... mkdir resumed>) = 0 [pid 289] close(3 [pid 292] <... sendto resumed>) = 48 [pid 291] <... close resumed>) = 0 [pid 290] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 289] <... close resumed>) = 0 [pid 288] <... write resumed>) = 1 [pid 292] recvfrom(3, [pid 291] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 289] mkdir("./0", 0777 [pid 288] close(3 [pid 292] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 288] <... close resumed>) = 0 [pid 288] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 292] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 289] <... mkdir resumed>) = 0 [pid 292] <... socket resumed>) = 4 [pid 291] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 288] <... mkdir resumed>) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 292] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 288] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 292] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] write(3, "32", 2 [pid 289] <... openat resumed>) = 3 [pid 288] <... openat resumed>) = 3 [pid 292] close(4 [pid 291] write(3, "1", 1 [pid 290] <... write resumed>) = 2 [pid 289] ioctl(3, LOOP_CLR_FD [pid 288] write(3, "1", 1 [pid 292] <... close resumed>) = 0 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] <... write resumed>) = 1 executing program [pid 292] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] <... write resumed>) = 1 [pid 290] close(3 [pid 289] close(3 [pid 288] close(3 [pid 292] <... sendto resumed>) = 60 [pid 288] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 288] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "313524224", 9) = 9 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "314572800", 9) = 9 [pid 288] close(3) = 0 [pid 288] mkdir("/syzcgroup/net/syz3", 0777) = 0 [pid 288] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "1", 1) = 1 [pid 288] close(3) = 0 [pid 288] mkdir("./0", 0777) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 292] recvfrom(3, [pid 291] close(3 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] ioctl(3, LOOP_CLR_FD [pid 292] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] close(3) = 0 [pid 292] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0 [pid 291] <... close resumed>) = 0 [pid 289] <... clone resumed>, child_tidptr=0x555589b67690) = 2 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 295 attached [pid 292] <... socket resumed>) = 4 [pid 291] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 295] set_robust_list(0x555589b676a0, 24 [pid 292] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun" [pid 288] <... clone resumed>, child_tidptr=0x555589b67690) = 2 [pid 295] <... set_robust_list resumed>) = 0 [pid 292] <... ioctl resumed>, ifr_ifindex=11}) = 0 [pid 291] <... openat resumed>) = 3 [pid 295] chdir("./0" [pid 292] close(4 [pid 291] write(3, "313524224", 9 [pid 295] <... chdir resumed>) = 0 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 292] <... close resumed>) = 0 [pid 291] <... write resumed>) = 9 [pid 295] <... prctl resumed>) = 0 [pid 292] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 291] close(3 [pid 295] setpgid(0, 0) = 0 [pid 295] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 295] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 295] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 292] <... sendto resumed>) = 44 [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 291] <... close resumed>) = 0 [pid 295] <... openat resumed>) = 3 [pid 292] recvfrom(3, [pid 295] write(3, "1000", 4 [pid 291] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 295] <... write resumed>) = 4 [pid 292] <... recvfrom resumed>[{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 295] close(3 [pid 291] <... openat resumed>) = 3 [pid 292] close(3./strace-static-x86_64: Process 294 attached [pid 295] <... close resumed>) = 0 [pid 291] write(3, "314572800", 9 [pid 295] read(200, [pid 292] <... close resumed>) = 0 [pid 295] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 294] set_robust_list(0x555589b676a0, 24 [pid 292] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 291] <... write resumed>) = 9 [pid 295] read(200, 0x7ffd25a57420, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 294] <... set_robust_list resumed>) = 0 [pid 292] <... openat resumed>) = 3 [pid 291] close(3 [pid 295] symlink("/dev/binderfs", "./binderfs" [pid 292] write(3, "100000", 6 [pid 295] <... symlink resumed>) = 0 [pid 294] chdir("./0" [pid 291] <... close resumed>) = 0 [pid 295] write(1, "executing program\n", 18 [pid 292] <... write resumed>) = 6 [pid 295] <... write resumed>) = 18 [pid 294] <... chdir resumed>) = 0 [pid 292] close(3 [pid 291] mkdir("/syzcgroup/net/syz2", 0777 [pid 290] <... close resumed>) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... close resumed>) = 0 [pid 295] <... futex resumed>) = 0 [pid 294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] rt_sigaction(SIGRT_1, {sa_handler=0x7f2524c7d840, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2524c6e9f0}, NULL, 8) = 0 [pid 294] <... prctl resumed>) = 0 [pid 295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 294] setpgid(0, 0 [pid 292] mkdir("./syz-tmp", 0777 [pid 291] <... mkdir resumed>) = 0 [pid 290] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2524bf0000 [pid 294] <... setpgid resumed>) = 0 [pid 295] mprotect(0x7f2524bf1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 294] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 292] <... mkdir resumed>) = 0 [pid 291] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 292] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 290] <... openat resumed>) = 3 [pid 295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 294] <... symlink resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2524c10990, parent_tid=0x7f2524c10990, exit_signal=0, stack=0x7f2524bf0000, stack_size=0x20300, tls=0x7f2524c106c0}./strace-static-x86_64: Process 297 attached [pid 294] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 292] <... mount resumed>) = 0 [pid 291] write(3, "1", 1 [pid 290] write(3, "1", 1 [pid 297] set_robust_list(0x7f2524c109a0, 24 [pid 295] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 292] mkdir("./syz-tmp/newroot", 0777 [pid 297] <... set_robust_list resumed>) = 0 [pid 295] rt_sigprocmask(SIG_SETMASK, [], [pid 294] <... symlink resumed>) = 0 [pid 291] <... write resumed>) = 1 [pid 290] <... write resumed>) = 1 [pid 297] rt_sigprocmask(SIG_SETMASK, [], [pid 295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] close(3 [pid 290] close(3 [pid 297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 292] mkdir("./syz-tmp/newroot/dev", 0700 [pid 297] memfd_create("syzkaller", 0 [pid 295] <... futex resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 297] <... memfd_create resumed>) = 3 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 294] <... symlink resumed>) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 291] mkdir("./0", 0777 [pid 290] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 292] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 297] <... mmap resumed>) = 0x7f251c7f0000 [pid 294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 292] <... mount resumed>) = 0 [pid 291] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 297] <... write resumed>) = 524288 [pid 294] <... openat resumed>) = 3 [pid 292] mkdir("./syz-tmp/newroot/proc", 0700 [pid 291] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 290] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 297] munmap(0x7f251c7f0000, 138412032 [pid 294] write(3, "1000", 4 [pid 292] <... mkdir resumed>) = 0 [pid 291] <... openat resumed>) = 3 [pid 290] <... openat resumed>) = 3 [pid 297] <... munmap resumed>) = 0 [pid 294] <... write resumed>) = 4 [pid 292] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 291] ioctl(3, LOOP_CLR_FD [pid 290] write(3, "1", 1 [pid 297] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 294] close(3 [pid 292] <... mount resumed>) = 0 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 290] <... write resumed>) = 1 [pid 297] <... openat resumed>) = 4 [pid 294] <... close resumed>) = 0 [pid 292] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 291] close(3 [pid 290] close(3 [pid 297] ioctl(4, LOOP_SET_FD, 3 [pid 294] read(200, [pid 292] <... mkdir resumed>) = 0 [pid 292] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 291] <... close resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 294] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 292] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 299 attached [pid 297] <... ioctl resumed>) = 0 [pid 294] read(200, [pid 292] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] <... openat resumed>) = 3 [pid 299] set_robust_list(0x555589b676a0, 24 [pid 297] close(3 [pid 292] <... mount resumed>) = 0 [pid 291] <... clone resumed>, child_tidptr=0x555589b67690) = 2 [pid 290] write(3, "313524224", 9 [pid 299] <... set_robust_list resumed>) = 0 [pid 297] <... close resumed>) = 0 [pid 294] <... read resumed>0x7ffd25a57420, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] mkdir("./syz-tmp/newroot/sys", 0700 [pid 290] <... write resumed>) = 9 [pid 299] chdir("./0" [pid 297] close(4 [pid 294] symlink("/dev/binderfs", "./binderfs" [pid 292] <... mkdir resumed>) = 0 [pid 290] close(3 [pid 299] <... chdir resumed>) = 0 [ 27.539635][ T24] audit: type=1400 audit(1749016826.700:73): avc: denied { mount } for pid=290 comm="syz-executor363" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.580613][ T289] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation executing program [pid 297] <... close resumed>) = 0 [pid 294] <... symlink resumed>) = 0 [pid 292] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] <... close resumed>) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] mkdir("./file1", 0777 [pid 294] write(1, "executing program\n", 18 [pid 297] <... mkdir resumed>) = 0 [pid 294] <... write resumed>) = 18 [pid 292] <... mount resumed>) = 0 [pid 299] <... prctl resumed>) = 0 [pid 297] mount("/dev/loop3", "./file1", "ext4", MS_NOSUID|MS_NODEV|MS_MANDLOCK|MS_STRICTATIME|MS_LAZYTIME, "delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b"... [pid 294] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 299] setpgid(0, 0 [pid 292] <... mount resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 299] <... setpgid resumed>) = 0 [pid 292] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] write(3, "314572800", 9 [pid 299] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 292] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 290] <... write resumed>) = 9 [pid 299] <... symlink resumed>) = 0 [pid 292] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] close(3 [pid 299] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 292] <... mount resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 299] <... symlink resumed>) = 0 [pid 292] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 290] mkdir("/syzcgroup/net/syz4", 0777 [pid 299] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 292] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 299] <... symlink resumed>) = 0 [pid 292] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 292] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 290] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 292] mkdir("./syz-tmp/newroot/syzcgroup", 0700 [pid 290] write(3, "1", 1 [pid 299] write(3, "1000", 4 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... write resumed>) = 1 [pid 299] <... write resumed>) = 4 [pid 292] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700 [pid 290] close(3 [pid 299] close(3 [pid 292] <... mkdir resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 292] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700 [pid 290] mkdir("./0", 0777 [pid 299] read(200, [pid 292] <... mkdir resumed>) = 0 [pid 290] <... mkdir resumed>) = 0 [pid 299] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 292] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700 [pid 290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 299] read(200, [pid 292] <... mkdir resumed>) = 0 [pid 290] <... openat resumed>) = 3 [pid 299] <... read resumed>0x7ffd25a57420, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] ioctl(3, LOOP_CLR_FD [pid 299] symlink("/dev/binderfs", "./binderfs" [pid 292] <... mount resumed>) = 0 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 299] <... symlink resumed>) = 0 [pid 292] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL executing program [pid 290] close(3 [pid 299] write(1, "executing program\n", 18 [pid 292] <... mount resumed>) = 0 [pid 290] <... close resumed>) = 0 [pid 299] <... write resumed>) = 18 [pid 292] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 301 attached [pid 299] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... mount resumed>) = 0 [pid 301] set_robust_list(0x555589b676a0, 24 [pid 299] <... futex resumed>) = 0 [pid 292] mkdir("./syz-tmp/pivot", 0777 [pid 290] <... clone resumed>, child_tidptr=0x555589b67690) = 2 [pid 301] <... set_robust_list resumed>) = 0 [pid 299] rt_sigaction(SIGRT_1, {sa_handler=0x7f2524c7d840, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2524c6e9f0}, [pid 292] <... mkdir resumed>) = 0 [pid 301] chdir("./0" [pid 299] <... rt_sigaction resumed>NULL, 8) = 0 [pid 294] <... futex resumed>) = 0 [pid 292] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 301] <... chdir resumed>) = 0 [pid 299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 294] rt_sigaction(SIGRT_1, {sa_handler=0x7f2524c7d840, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2524c6e9f0}, [pid 292] <... pivot_root resumed>) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 294] <... rt_sigaction resumed>NULL, 8) = 0 [pid 292] chdir("/" [pid 301] <... prctl resumed>) = 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 292] <... chdir resumed>) = 0 [pid 301] setpgid(0, 0 [pid 299] <... mmap resumed>) = 0x7f2524bf0000 [pid 292] umount2("./pivot", MNT_DETACH [pid 301] <... setpgid resumed>) = 0 [pid 299] mprotect(0x7f2524bf1000, 131072, PROT_READ|PROT_WRITE [pid 301] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 299] <... mprotect resumed>) = 0 [pid 301] <... symlink resumed>) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... symlink resumed>) = 0 [pid 299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2524c10990, parent_tid=0x7f2524c10990, exit_signal=0, stack=0x7f2524bf0000, stack_size=0x20300, tls=0x7f2524c106c0}./strace-static-x86_64: Process 302 attached [pid 301] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 302] set_robust_list(0x7f2524c109a0, 24 [pid 301] <... symlink resumed>) = 0 [pid 299] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 302] <... set_robust_list resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] rt_sigprocmask(SIG_SETMASK, [], [pid 302] rt_sigprocmask(SIG_SETMASK, [], [pid 301] <... openat resumed>) = 3 [pid 299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] write(3, "1000", 4 [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] memfd_create("syzkaller", 0 [pid 301] <... write resumed>) = 4 [pid 299] <... futex resumed>) = 0 [pid 294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] <... memfd_create resumed>) = 3 [pid 301] close(3 [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 301] <... close resumed>) = 0 [pid 294] <... mmap resumed>) = 0x7f2524bf0000 [pid 302] <... mmap resumed>) = 0x7f251c7f0000 [pid 301] read(200, [pid 294] mprotect(0x7f2524bf1000, 131072, PROT_READ|PROT_WRITE [pid 302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 301] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x24\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\x6f\xb5\x00\x00\x00\x01\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\x00\x00\xaa", 1000) = 90 [pid 294] <... mprotect resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 302] <... write resumed>) = 524288 [pid 301] read(200, [pid 294] rt_sigprocmask(SIG_BLOCK, ~[], [pid 292] chroot("./newroot" [pid 302] munmap(0x7f251c7f0000, 138412032 [pid 301] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 294] <... rt_sigprocmask resumed>[], 8) = 0 [pid 292] <... chroot resumed>) = 0 [pid 302] <... munmap resumed>) = 0 [pid 301] read(200, [pid 294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2524c10990, parent_tid=0x7f2524c10990, exit_signal=0, stack=0x7f2524bf0000, stack_size=0x20300, tls=0x7f2524c106c0} [pid 292] chdir("/"./strace-static-x86_64: Process 303 attached [pid 302] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 301] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 292] <... chdir resumed>) = 0 [pid 303] set_robust_list(0x7f2524c109a0, 24 [pid 302] <... openat resumed>) = 4 [pid 301] read(200, [pid 294] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 292] mkdir("/dev/gadgetfs", 0777 [pid 303] <... set_robust_list resumed>) = 0 [pid 302] ioctl(4, LOOP_SET_FD, 3 [pid 301] <... read resumed>"\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 294] rt_sigprocmask(SIG_SETMASK, [], [pid 292] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 303] rt_sigprocmask(SIG_SETMASK, [], [pid 301] read(200, [pid 294] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 27.632722][ T297] ====================================================== [ 27.632722][ T297] WARNING: the mand mount option is being deprecated and [ 27.632722][ T297] will be removed in v5.15! [ 27.632722][ T297] ====================================================== [ 27.665809][ T297] EXT4-fs (loop3): Ignoring removed nobh option [ 27.675471][ T297] EXT4-fs (loop3): Ignoring removed bh option [pid 292] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 301] <... read resumed>0x7ffd25a57420, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... mount resumed>) = -1 ENODEV (No such device) [pid 303] memfd_create("syzkaller", 0 [pid 301] symlink("/dev/binderfs", "./binderfs" [pid 294] <... futex resumed>) = 0 [pid 292] mkdir("/dev/binderfs", 0777 [pid 303] <... memfd_create resumed>) = 3 [pid 301] <... symlink resumed>) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 292] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 301] write(1, "executing program\n", 18 [pid 292] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 303] <... mmap resumed>) = 0x7f251c7f0000 [pid 301] <... write resumed>) = 18 [pid 292] <... mount resumed>) = 0 [pid 303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 301] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 303] <... write resumed>) = 524288 [pid 301] <... futex resumed>) = 0 [pid 292] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 303] munmap(0x7f251c7f0000, 138412032 [pid 301] rt_sigaction(SIGRT_1, {sa_handler=0x7f2524c7d840, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2524c6e9f0}, [pid 292] getpid( [pid 303] <... munmap resumed>) = 0 [pid 301] <... rt_sigaction resumed>NULL, 8) = 0 [pid 292] <... getpid resumed>) = 1 [pid 303] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 292] mkdir("/syzcgroup/unified/syz1", 0777 [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] <... mkdir resumed>) = 0 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 292] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC [pid 301] <... mmap resumed>) = 0x7f2524bf0000 [pid 292] <... openat resumed>) = 3 [pid 301] mprotect(0x7f2524bf1000, 131072, PROT_READ|PROT_WRITE [pid 292] write(3, "32", 2 [pid 301] <... mprotect resumed>) = 0 [pid 292] <... write resumed>) = 2 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [pid 292] close(3 [pid 301] <... rt_sigprocmask resumed>[], 8) = 0 [pid 292] <... close resumed>) = 0 [pid 303] <... openat resumed>) = 4 [pid 302] <... ioctl resumed>) = 0 [pid 301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2524c10990, parent_tid=0x7f2524c10990, exit_signal=0, stack=0x7f2524bf0000, stack_size=0x20300, tls=0x7f2524c106c0} [pid 292] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 302] close(3./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x7f2524c109a0, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], [pid 292] <... openat resumed>) = 3 [pid 301] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] <... close resumed>) = 0 [pid 301] rt_sigprocmask(SIG_SETMASK, [], [pid 292] write(3, "1", 1 [pid 302] close(4 [pid 301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] <... write resumed>) = 1 [pid 302] <... close resumed>) = 0 [pid 292] close(3 [pid 303] ioctl(4, LOOP_SET_FD, 3 [pid 302] mkdir("./file1", 0777 [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... close resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 301] <... futex resumed>) = 1 [pid 292] mkdir("/syzcgroup/cpu/syz1", 0777 [pid 305] memfd_create("syzkaller", 0 [pid 302] mount("/dev/loop2", "./file1", "ext4", MS_NOSUID|MS_NODEV|MS_MANDLOCK|MS_STRICTATIME|MS_LAZYTIME, "delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b"... [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] <... memfd_create resumed>) = 3 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f251c7f0000 [pid 292] <... mkdir resumed>) = 0 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 303] <... ioctl resumed>) = 0 [pid 305] <... write resumed>) = 524288 [ 27.682583][ T297] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.706625][ T302] EXT4-fs (loop2): Ignoring removed nobh option [pid 305] munmap(0x7f251c7f0000, 138412032 [pid 303] close(3 [pid 292] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 305] <... munmap resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3 [pid 297] <... mount resumed>) = 0 [pid 297] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 297] chdir("./file1") = 0 [pid 297] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 303] <... close resumed>) = 0 [pid 303] close(4 [pid 292] <... openat resumed>) = 3 [pid 292] write(3, "1", 1) = 1 [pid 292] close(3) = 0 [pid 305] <... ioctl resumed>) = 0 [pid 297] <... openat resumed>) = 4 [pid 292] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 292] write(3, "313524224", 9) = 9 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 292] write(3, "314572800", 9) = 9 [pid 292] close(3) = 0 [pid 292] mkdir("/syzcgroup/net/syz1", 0777) = 0 [pid 292] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 292] write(3, "1", 1) = 1 [pid 292] close(3) = 0 [pid 292] mkdir("./0", 0777) = 0 [pid 292] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 292] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 292] close(3) = 0 [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] close(3 [pid 297] ioctl(4, LOOP_CLR_FD [pid 292] <... clone resumed>, child_tidptr=0x555589b67690) = 2 ./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x555589b676a0, 24) = 0 [pid 310] chdir("./0") = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... close resumed>) = 0 [pid 310] <... prctl resumed>) = 0 [pid 305] close(4 [pid 310] setpgid(0, 0) = 0 [pid 310] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 310] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 310] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 [pid 310] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 [pid 310] read(200, "\x33\x33\x00\x00\x00\x16\xaa\xaa\xaa\xaa\xaa\xaa\x86\xdd\x60\x00\x00\x00\x00\x38\x00\x01\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x3a\x00\x05\x02\x00\x00\x01\x00\x8f\x00\xc2\x46\x00\x00\x00\x02\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xff\xaa\xaa\xaa\x04\x00\x00\x00\xff\x02\x00\x00\x00\x00"..., 1000) = 110 executing program [pid 310] read(200, 0x7ffd25a57420, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 310] write(1, "executing program\n", 18) = 18 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] rt_sigaction(SIGRT_1, {sa_handler=0x7f2524c7d840, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2524c6e9f0}, NULL, 8) = 0 [pid 310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2524bf0000 [pid 310] mprotect(0x7f2524bf1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 305] <... close resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 297] <... ioctl resumed>) = 0 [pid 305] mkdir("./file1", 0777 [pid 303] mkdir("./file1", 0777 [pid 297] close(4 [pid 310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2524c10990, parent_tid=0x7f2524c10990, exit_signal=0, stack=0x7f2524bf0000, stack_size=0x20300, tls=0x7f2524c106c0} [pid 305] <... mkdir resumed>) = 0 [pid 303] <... mkdir resumed>) = 0 [pid 305] mount("/dev/loop4", "./file1", "ext4", MS_NOSUID|MS_NODEV|MS_MANDLOCK|MS_STRICTATIME|MS_LAZYTIME, "delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b"... [pid 303] mount("/dev/loop0", "./file1", "ext4", MS_NOSUID|MS_NODEV|MS_MANDLOCK|MS_STRICTATIME|MS_LAZYTIME, "delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b"... [pid 310] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 ./strace-static-x86_64: Process 311 attached [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] set_robust_list(0x7f2524c109a0, 24 [pid 310] <... futex resumed>) = 0 [pid 311] <... set_robust_list resumed>) = 0 [pid 311] rt_sigprocmask(SIG_SETMASK, [], [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 311] memfd_create("syzkaller", 0) = 3 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f251c7f0000 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 27.714684][ T297] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 27.715135][ T302] EXT4-fs (loop2): Ignoring removed bh option [ 27.752161][ T302] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [pid 311] munmap(0x7f251c7f0000, 138412032) = 0 [pid 311] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 302] <... mount resumed>) = 0 [pid 302] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 302] chdir("./file1") = 0 [ 27.787251][ T302] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [pid 302] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 311] <... openat resumed>) = 4 [pid 302] <... openat resumed>) = 4 [pid 297] <... close resumed>) = 0 [pid 311] ioctl(4, LOOP_SET_FD, 3 [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 297] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] <... futex resumed>) = 0 [pid 297] openat(AT_FDCWD, "./file1", O_RDWR|O_APPEND [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] ioctl(4, LOOP_CLR_FD [pid 311] <... ioctl resumed>) = 0 [pid 311] close(3) = 0 [pid 311] close(4 [pid 297] <... openat resumed>) = 4 [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 297] pwrite64(4, "\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 87490, 134220900 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 297] <... pwrite64 resumed>) = 87490 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] symlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] unlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] mount("./file0", "./file0", "incremental-fs", 0, NULL) = 0 [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] openat(5, ".pending_reads", O_WRONLY|O_CREAT|O_APPEND|O_SYNC|O_LARGEFILE|FASYNC, 000) = 6 [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] ioctl(6, _IOC(_IOC_READ|_IOC_WRITE, 0x67, 0x1e, 0x58), 0x2000000009c0) = 0 [ 27.858802][ T305] EXT4-fs (loop4): Ignoring removed nobh option [ 27.864011][ T303] EXT4-fs (loop0): Ignoring removed nobh option [ 27.866790][ T305] EXT4-fs (loop4): Ignoring removed bh option [ 27.874469][ T303] EXT4-fs (loop0): Ignoring removed bh option [ 27.879851][ T305] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [pid 297] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] close(3) = 0 [pid 295] close(4) = 0 [pid 295] close(5) = 0 [pid 295] close(6) = 0 [pid 295] close(7) = -1 EBADF (Bad file descriptor) [pid 295] close(8) = -1 EBADF (Bad file descriptor) [pid 295] close(9) = -1 EBADF (Bad file descriptor) [pid 295] close(10) = -1 EBADF (Bad file descriptor) [pid 295] close(11) = -1 EBADF (Bad file descriptor) [pid 295] close(12) = -1 EBADF (Bad file descriptor) [pid 295] close(13) = -1 EBADF (Bad file descriptor) [pid 295] close(14) = -1 EBADF (Bad file descriptor) [pid 295] close(15) = -1 EBADF (Bad file descriptor) [pid 295] close(16) = -1 EBADF (Bad file descriptor) [pid 295] close(17) = -1 EBADF (Bad file descriptor) [pid 295] close(18) = -1 EBADF (Bad file descriptor) [pid 295] close(19) = -1 EBADF (Bad file descriptor) [pid 295] close(20) = -1 EBADF (Bad file descriptor) [pid 295] close(21) = -1 EBADF (Bad file descriptor) [pid 295] close(22) = -1 EBADF (Bad file descriptor) [pid 295] close(23) = -1 EBADF (Bad file descriptor) [pid 295] close(24) = -1 EBADF (Bad file descriptor) [pid 295] close(25) = -1 EBADF (Bad file descriptor) [pid 295] close(26) = -1 EBADF (Bad file descriptor) [pid 295] close(27) = -1 EBADF (Bad file descriptor) [pid 295] close(28) = -1 EBADF (Bad file descriptor) [pid 295] close(29) = -1 EBADF (Bad file descriptor) [pid 295] exit_group(0) = ? [pid 297] <... futex resumed>) = ? [pid 297] +++ exited with 0 +++ [pid 295] +++ exited with 0 +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 288] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 288] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(3, 0x555589b68730 /* 7 entries */, 32768) = 208 [pid 288] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 288] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 288] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 288] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(4, 0x555589b70770 /* 8 entries */, 32768) = 240 [pid 288] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 [pid 288] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(5, 0x555589b787b0 /* 2 entries */, 32768) = 48 [pid 288] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 288] close(5) = 0 [pid 288] rmdir("./0/file1/lost+found") = 0 [pid 288] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 311] <... close resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 302] <... ioctl resumed>) = 0 [pid 311] mkdir("./file1", 0777 [pid 302] close(4 [pid 311] <... mkdir resumed>) = 0 [pid 311] mount("/dev/loop1", "./file1", "ext4", MS_NOSUID|MS_NODEV|MS_MANDLOCK|MS_STRICTATIME|MS_LAZYTIME, "delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b"... [pid 305] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 305] chdir("./file1") = 0 [ 27.903221][ T303] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.921885][ T305] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [pid 305] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 303] <... mount resumed>) = 0 [pid 288] <... umount2 resumed>) = 0 [pid 303] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 303] chdir("./file1") = 0 [pid 303] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 288] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/file0", {st_mode=S_IFDIR|0755, st_size=128, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 [pid 288] newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=128, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(5, 0x555589b787b0 /* 7 entries */, 32768) = 208 [pid 288] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/file0/file0", {st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./0/file1/file0/file0") = 0 [pid 288] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/file0/file1", {st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./0/file1/file0/file1") = 0 [pid 288] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/file0/.index", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./0/file1/file0/.index", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 6 [pid 288] newfstatat(6, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(6, 0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 288] umount2("./0/file1/file0/.index/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/file0/.index/00000000000000000000000000000003", {st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./0/file1/file0/.index/00000000000000000000000000000003") = 0 [pid 288] getdents64(6, 0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 288] close(6) = 0 [pid 288] rmdir("./0/file1/file0/.index") = 0 [pid 288] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] openat(AT_FDCWD, "./0/file1/file0/.incomplete", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 6 [pid 288] newfstatat(6, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 288] getdents64(6, 0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 288] umount2("./0/file1/file0/.incomplete/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete/00000000000000000000000000000003", {st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./0/file1/file0/.incomplete/00000000000000000000000000000003") = 0 [pid 288] getdents64(6, 0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 288] close(6) = 0 [pid 288] rmdir("./0/file1/file0/.incomplete") = 0 [pid 288] umount2("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 288] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", {st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 27.927813][ T303] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [pid 288] unlink("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b" [pid 305] <... openat resumed>) = 4 [pid 303] <... openat resumed>) = 4 [pid 302] <... close resumed>) = 0 [pid 288] <... unlink resumed>) = 0 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] getdents64(5, [pid 302] <... futex resumed>) = 1 [pid 299] <... futex resumed>) = 0 [pid 288] <... getdents64 resumed>0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] close(5 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 288] <... close resumed>) = 0 [pid 302] openat(AT_FDCWD, "./file1", O_RDWR|O_APPEND [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] rmdir("./0/file1/file0" [pid 302] <... openat resumed>) = 4 [pid 288] <... rmdir resumed>) = 0 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... futex resumed>) = 1 [pid 299] <... futex resumed>) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] newfstatat(AT_FDCWD, "./0/file1/file1", [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 288] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=87500, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] pwrite64(4, "\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 87490, 134220900 [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] unlink("./0/file1/file1" [pid 305] ioctl(4, LOOP_CLR_FD [pid 303] ioctl(4, LOOP_CLR_FD [pid 302] <... pwrite64 resumed>) = 87490 [pid 305] <... ioctl resumed>) = 0 [pid 303] <... ioctl resumed>) = 0 [pid 305] close(4 [pid 303] close(4 [pid 305] <... close resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "./file1", O_RDWR|O_APPEND [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... openat resumed>) = 4 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 28.001468][ T288] EXT4-fs error (device loop3): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 28.019588][ T311] EXT4-fs (loop1): Ignoring removed nobh option [ 28.026796][ T311] EXT4-fs (loop1): Ignoring removed bh option [ 28.037299][ T311] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [pid 301] <... futex resumed>) = 0 [pid 305] pwrite64(4, "\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 87490, 134220900 [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... pwrite64 resumed>) = 87490 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 305] symlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... symlink resumed>) = 0 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 305] unlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... unlink resumed>) = 0 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 305] mount("./file0", "./file0", "incremental-fs", 0, NULL [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... mount resumed>) = 0 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... openat resumed>) = 5 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 305] openat(5, ".pending_reads", O_WRONLY|O_CREAT|O_APPEND|O_SYNC|O_LARGEFILE|FASYNC, 000 [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... openat resumed>) = 6 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 305] ioctl(6, _IOC(_IOC_READ|_IOC_WRITE, 0x67, 0x1e, 0x58) [pid 301] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... ioctl resumed>, 0x2000000009c0) = 0 [pid 305] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 305] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] close(3) = 0 [pid 301] close(4) = 0 [pid 301] close(5) = 0 [pid 301] close(6) = 0 [pid 301] close(7) = -1 EBADF (Bad file descriptor) [pid 301] close(8) = -1 EBADF (Bad file descriptor) [pid 301] close(9) = -1 EBADF (Bad file descriptor) [pid 301] close(10) = -1 EBADF (Bad file descriptor) [pid 301] close(11) = -1 EBADF (Bad file descriptor) [pid 301] close(12) = -1 EBADF (Bad file descriptor) [pid 301] close(13) = -1 EBADF (Bad file descriptor) [pid 301] close(14) = -1 EBADF (Bad file descriptor) [pid 301] close(15) = -1 EBADF (Bad file descriptor) [pid 301] close(16) = -1 EBADF (Bad file descriptor) [pid 301] close(17) = -1 EBADF (Bad file descriptor) [pid 301] close(18) = -1 EBADF (Bad file descriptor) [pid 301] close(19) = -1 EBADF (Bad file descriptor) [pid 301] close(20) = -1 EBADF (Bad file descriptor) [pid 301] close(21) = -1 EBADF (Bad file descriptor) [pid 301] close(22) = -1 EBADF (Bad file descriptor) [pid 301] close(23) = -1 EBADF (Bad file descriptor) [pid 301] close(24) = -1 EBADF (Bad file descriptor) [pid 301] close(25) = -1 EBADF (Bad file descriptor) [pid 301] close(26) = -1 EBADF (Bad file descriptor) [pid 301] close(27) = -1 EBADF (Bad file descriptor) [pid 301] close(28) = -1 EBADF (Bad file descriptor) [pid 301] close(29) = -1 EBADF (Bad file descriptor) [pid 301] exit_group(0 [pid 305] <... futex resumed>) = ? [pid 301] <... exit_group resumed>) = ? [pid 305] +++ exited with 0 +++ [pid 301] +++ exited with 0 +++ [pid 290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 290] restart_syscall(<... resuming interrupted clone ...> [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 290] <... restart_syscall resumed>) = 0 [pid 290] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 290] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(3, 0x555589b68730 /* 7 entries */, 32768) = 208 [pid 290] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 290] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 290] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 290] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(4, 0x555589b70770 /* 8 entries */, 32768) = 240 [pid 290] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 [pid 290] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0 [pid 290] getdents64(5, 0x555589b787b0 /* 2 entries */, 32768) = 48 [pid 290] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 290] close(5) = 0 [pid 290] rmdir("./0/file1/lost+found") = 0 [ 28.038190][ T288] ================================================================== [ 28.065318][ T288] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x3a64/0x4910 [ 28.074556][ T288] Read of size 4 at addr ffff88812212ac18 by task syz-executor363/288 [ 28.083230][ T288] [ 28.086581][ T288] CPU: 0 PID: 288 Comm: syz-executor363 Not tainted 5.10.237-syzkaller-00010-gcf6ed0f1511d #0 [ 28.097387][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [pid 290] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 1 [pid 303] openat(AT_FDCWD, "./file1", O_RDWR|O_APPEND [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... openat resumed>) = 4 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 294] <... futex resumed>) = 0 [pid 303] pwrite64(4, "\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 87490, 134220900 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... pwrite64 resumed>) = 87490 [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] symlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] unlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] mount("./file0", "./file0", "incremental-fs", 0, NULL) = 0 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] openat(5, ".pending_reads", O_WRONLY|O_CREAT|O_APPEND|O_SYNC|O_LARGEFILE|FASYNC, 000) = 6 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... futex resumed>) = 0 [pid 294] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 1 [pid 303] ioctl(6, _IOC(_IOC_READ|_IOC_WRITE, 0x67, 0x1e, 0x58), 0x2000000009c0) = 0 [pid 303] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... futex resumed>) = 0 [pid 294] close(3) = 0 [pid 294] close(4) = 0 [pid 294] close(5) = 0 [pid 294] close(6) = 0 [pid 294] close(7) = -1 EBADF (Bad file descriptor) [pid 294] close(8) = -1 EBADF (Bad file descriptor) [pid 294] close(9) = -1 EBADF (Bad file descriptor) [pid 294] close(10) = -1 EBADF (Bad file descriptor) [pid 294] close(11) = -1 EBADF (Bad file descriptor) [pid 294] close(12) = -1 EBADF (Bad file descriptor) [pid 294] close(13) = -1 EBADF (Bad file descriptor) [pid 294] close(14) = -1 EBADF (Bad file descriptor) [pid 294] close(15) = -1 EBADF (Bad file descriptor) [pid 294] close(16) = -1 EBADF (Bad file descriptor) [pid 294] close(17) = -1 EBADF (Bad file descriptor) [pid 294] close(18) = -1 EBADF (Bad file descriptor) [pid 294] close(19) = -1 EBADF (Bad file descriptor) [pid 294] close(20) = -1 EBADF (Bad file descriptor) [pid 294] close(21) = -1 EBADF (Bad file descriptor) [pid 294] close(22) = -1 EBADF (Bad file descriptor) [pid 294] close(23) = -1 EBADF (Bad file descriptor) [pid 294] close(24) = -1 EBADF (Bad file descriptor) [pid 294] close(25) = -1 EBADF (Bad file descriptor) [pid 294] close(26 [pid 303] <... futex resumed>) = 1 [pid 294] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] close(27) = -1 EBADF (Bad file descriptor) [pid 294] close(28) = -1 EBADF (Bad file descriptor) [pid 294] close(29) = -1 EBADF (Bad file descriptor) [pid 294] exit_group(0) = ? [pid 303] <... futex resumed>) = ? [pid 303] +++ exited with 0 +++ [pid 294] +++ exited with 0 +++ [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 1 [pid 302] symlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... symlink resumed>) = 0 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 302] unlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... unlink resumed>) = 0 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 302] mount("./file0", "./file0", "incremental-fs", 0, NULL [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... mount resumed>) = 0 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 302] openat(AT_FDCWD, "./file0", O_RDONLY [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... openat resumed>) = 5 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 302] openat(5, ".pending_reads", O_WRONLY|O_CREAT|O_APPEND|O_SYNC|O_LARGEFILE|FASYNC, 000 [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... openat resumed>) = 6 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 299] <... futex resumed>) = 0 [pid 302] ioctl(6, _IOC(_IOC_READ|_IOC_WRITE, 0x67, 0x1e, 0x58) [pid 299] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... ioctl resumed>, 0x2000000009c0) = 0 [pid 302] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 299] <... futex resumed>) = 0 [pid 302] futex(0x7f2524cde6e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] close(3) = 0 [pid 299] close(4) = 0 [pid 299] close(5) = 0 [pid 299] close(6) = 0 [pid 299] close(7) = -1 EBADF (Bad file descriptor) [pid 299] close(8) = -1 EBADF (Bad file descriptor) [pid 299] close(9) = -1 EBADF (Bad file descriptor) [pid 299] close(10) = -1 EBADF (Bad file descriptor) [pid 299] close(11) = -1 EBADF (Bad file descriptor) [pid 299] close(12) = -1 EBADF (Bad file descriptor) [pid 299] close(13) = -1 EBADF (Bad file descriptor) [pid 299] close(14) = -1 EBADF (Bad file descriptor) [pid 299] close(15) = -1 EBADF (Bad file descriptor) [pid 299] close(16) = -1 EBADF (Bad file descriptor) [pid 299] close(17) = -1 EBADF (Bad file descriptor) [pid 299] close(18) = -1 EBADF (Bad file descriptor) [pid 299] close(19) = -1 EBADF (Bad file descriptor) [pid 299] close(20) = -1 EBADF (Bad file descriptor) [pid 299] close(21) = -1 EBADF (Bad file descriptor) [pid 299] close(22) = -1 EBADF (Bad file descriptor) [pid 299] close(23) = -1 EBADF (Bad file descriptor) [pid 299] close(24) = -1 EBADF (Bad file descriptor) [pid 299] close(25) = -1 EBADF (Bad file descriptor) [pid 299] close(26) = -1 EBADF (Bad file descriptor) [pid 299] close(27) = -1 EBADF (Bad file descriptor) [pid 299] close(28) = -1 EBADF (Bad file descriptor) [pid 299] close(29) = -1 EBADF (Bad file descriptor) [pid 299] exit_group(0 [pid 302] <... futex resumed>) = ? [pid 299] <... exit_group resumed>) = ? [pid 302] +++ exited with 0 +++ [pid 299] +++ exited with 0 +++ [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 289] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 289] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(3, 0x555589b68730 /* 7 entries */, 32768) = 208 [pid 289] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 289] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 289] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 289] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(4, 0x555589b70770 /* 8 entries */, 32768) = 240 [pid 289] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 [pid 289] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(5, 0x555589b787b0 /* 2 entries */, 32768) = 48 [pid 289] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 289] close(5) = 0 [pid 289] rmdir("./0/file1/lost+found") = 0 [pid 289] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 291] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 291] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(3, 0x555589b68730 /* 7 entries */, 32768) = 208 [pid 291] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 291] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 291] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 291] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(4, 0x555589b70770 /* 8 entries */, 32768) = 240 [pid 291] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 28.108188][ T288] Call Trace: [ 28.111609][ T288] __dump_stack+0x21/0x24 [ 28.116586][ T288] dump_stack_lvl+0x169/0x1d8 [ 28.121601][ T288] ? show_regs_print_info+0x18/0x18 [ 28.127711][ T288] ? thaw_kernel_threads+0x220/0x220 [ 28.133436][ T288] print_address_description+0x7f/0x2c0 [ 28.139195][ T288] ? ext4_ext_remove_space+0x3a64/0x4910 [ 28.145265][ T288] kasan_report+0xe2/0x130 [ 28.149838][ T288] ? __read_extent_tree_block+0x1e8/0x790 [pid 291] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 [pid 291] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0 [pid 291] getdents64(5, [pid 311] <... mount resumed>) = 0 [pid 311] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 311] chdir("./file1") = 0 [pid 311] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 311] ioctl(4, LOOP_CLR_FD) = 0 [pid 311] close(4) = 0 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 28.156403][ T288] ? ext4_ext_remove_space+0x3a64/0x4910 [ 28.162597][ T288] __asan_report_load4_noabort+0x14/0x20 [ 28.164152][ T311] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 28.168783][ T288] ext4_ext_remove_space+0x3a64/0x4910 [ 28.203528][ T288] ? __kasan_slab_free+0x11/0x20 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] openat(AT_FDCWD, "./file1", O_RDWR|O_APPEND) = 4 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] pwrite64(4, "\x32\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 87490, 134220900) = 87490 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] symlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] unlink("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] mount("./file0", "./file0", "incremental-fs", 0, NULL) = 0 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] openat(AT_FDCWD, "./file0", O_RDONLY) = 5 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] openat(5, ".pending_reads", O_WRONLY|O_CREAT|O_APPEND|O_SYNC|O_LARGEFILE|FASYNC, 000) = 6 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f2524cde6e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f2524cde6ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] ioctl(6, _IOC(_IOC_READ|_IOC_WRITE, 0x67, 0x1e, 0x58), 0x2000000009c0) = 0 [pid 311] futex(0x7f2524cde6ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... futex resumed>) = 0 [pid 310] close(3) = 0 [pid 310] close(4) = 0 [pid 310] close(5) = 0 [pid 310] close(6) = 0 [pid 310] close(7) = -1 EBADF (Bad file descriptor) [pid 310] close(8) = -1 EBADF (Bad file descriptor) [pid 310] close(9) = -1 EBADF (Bad file descriptor) [pid 310] close(10) = -1 EBADF (Bad file descriptor) [pid 310] close(11) = -1 EBADF (Bad file descriptor) [pid 310] close(12) = -1 EBADF (Bad file descriptor) [pid 310] close(13) = -1 EBADF (Bad file descriptor) [pid 310] close(14) = -1 EBADF (Bad file descriptor) [pid 310] close(15) = -1 EBADF (Bad file descriptor) [pid 310] close(16) = -1 EBADF (Bad file descriptor) [pid 310] close(17) = -1 EBADF (Bad file descriptor) [pid 310] close(18) = -1 EBADF (Bad file descriptor) [pid 310] close(19) = -1 EBADF (Bad file descriptor) [pid 310] close(20) = -1 EBADF (Bad file descriptor) [pid 310] close(21) = -1 EBADF (Bad file descriptor) [pid 310] close(22) = -1 EBADF (Bad file descriptor) [pid 310] close(23) = -1 EBADF (Bad file descriptor) [pid 310] close(24) = -1 EBADF (Bad file descriptor) [pid 310] close(25) = -1 EBADF (Bad file descriptor) [pid 310] close(26) = -1 EBADF (Bad file descriptor) [pid 310] close(27) = -1 EBADF (Bad file descriptor) [pid 310] close(28) = -1 EBADF (Bad file descriptor) [pid 310] close(29) = -1 EBADF (Bad file descriptor) [pid 310] exit_group(0) = ? [pid 311] <... futex resumed>) = ? [pid 311] +++ exited with 0 +++ [pid 310] +++ exited with 0 +++ [pid 292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 292] restart_syscall(<... resuming interrupted clone ...> [pid 291] <... getdents64 resumed>0x555589b787b0 /* 2 entries */, 32768) = 48 [pid 291] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 291] close(5) = 0 [pid 291] rmdir("./0/file1/lost+found") = 0 [pid 291] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... restart_syscall resumed>) = 0 [pid 292] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(3, 0x555589b68730 /* 7 entries */, 32768) = 208 [pid 292] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 292] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 292] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 292] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(4, 0x555589b70770 /* 8 entries */, 32768) = 240 [pid 292] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 [pid 292] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0 [ 28.208720][ T288] ? slab_free_freelist_hook+0xc5/0x190 [ 28.214923][ T288] ? __es_remove_extent+0xdc5/0x16f0 [ 28.222340][ T288] ? _raw_write_lock+0x8e/0xe0 [ 28.227484][ T288] ? ext4_da_release_space+0x19f/0x410 [ 28.233592][ T288] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 28.241276][ T288] ext4_ext_truncate+0x169/0x1f0 [ 28.247366][ T288] ext4_truncate+0xaa1/0x11e0 [ 28.252683][ T288] ? __ext4_mark_inode_dirty+0x610/0x610 [pid 292] getdents64(5, 0x555589b787b0 /* 2 entries */, 32768) = 48 [pid 292] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 292] close(5) = 0 [pid 292] rmdir("./0/file1/lost+found") = 0 [ 28.260429][ T288] ext4_evict_inode+0xeeb/0x16e0 [ 28.266706][ T288] ? _raw_spin_unlock+0x4d/0x70 [ 28.273867][ T288] ? ext4_inode_is_fast_symlink+0x340/0x340 [ 28.280605][ T288] ? inode_io_list_del_locked+0x1b3/0x210 [ 28.287074][ T288] ? _raw_spin_unlock+0x4d/0x70 [ 28.292686][ T288] ? ext4_inode_is_fast_symlink+0x340/0x340 [ 28.300087][ T288] evict+0x478/0x910 [ 28.304676][ T288] ? mode_strip_sgid+0x160/0x160 [ 28.311185][ T288] ? _raw_spin_lock+0x8e/0xe0 [ 28.317893][ T288] ? _raw_spin_trylock_bh+0x130/0x130 [ 28.323299][ T288] ? iput+0x291/0x7c0 [ 28.328124][ T288] ? __kasan_check_write+0x14/0x20 [ 28.336001][ T288] iput+0x638/0x7c0 [ 28.340802][ T288] do_unlinkat+0x33f/0x670 [ 28.346757][ T288] ? __check_object_size+0x2f4/0x3c0 [ 28.353226][ T288] ? fsnotify_link_count+0x90/0x90 [ 28.359418][ T288] ? getname_flags+0x206/0x500 [ 28.365858][ T288] __x64_sys_unlink+0x49/0x50 [ 28.372060][ T288] do_syscall_64+0x31/0x40 [ 28.378394][ T288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.385790][ T288] RIP: 0033:0x7f2524c550f7 [ 28.391379][ T288] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 28.414717][ T288] RSP: 002b:00007ffd25a55638 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 28.424766][ T288] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2524c550f7 [ 28.434313][ T288] RDX: 00007ffd25a55660 RSI: 00007ffd25a556f0 RDI: 00007ffd25a556f0 [ 28.442886][ T288] RBP: 00007ffd25a556f0 R08: 0000000000000000 R09: 0000000000000000 [ 28.450908][ T288] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd25a567e0 [ 28.459415][ T288] R13: 0000555589b70740 R14: 0000000000006bb3 R15: 0000000000000001 [ 28.468899][ T288] [ 28.471820][ T288] Allocated by task 94: [ 28.476264][ T288] __kasan_slab_alloc+0xbd/0xf0 [ 28.481547][ T288] slab_post_alloc_hook+0x5d/0x2f0 [ 28.487054][ T288] kmem_cache_alloc+0x165/0x2e0 [ 28.492279][ T288] getname_flags+0xb9/0x500 [ 28.498810][ T288] getname+0x19/0x20 [ 28.503503][ T288] do_sys_openat2+0xd9/0x6d0 [ 28.508693][ T288] __x64_sys_openat+0x136/0x160 [ 28.514479][ T288] do_syscall_64+0x31/0x40 [ 28.519673][ T288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.527014][ T288] [ 28.529696][ T288] Freed by task 94: [ 28.534119][ T288] kasan_set_track+0x4a/0x70 [ 28.540040][ T288] kasan_set_free_info+0x23/0x40 [ 28.545698][ T288] ____kasan_slab_free+0x125/0x160 [ 28.552161][ T288] __kasan_slab_free+0x11/0x20 [ 28.557851][ T288] slab_free_freelist_hook+0xc5/0x190 [ 28.564064][ T288] kmem_cache_free+0x100/0x2d0 [ 28.571991][ T288] putname+0xfe/0x150 [ 28.576290][ T288] do_sys_openat2+0x207/0x6d0 [ 28.581346][ T288] __x64_sys_openat+0x136/0x160 [ 28.588033][ T288] do_syscall_64+0x31/0x40 [ 28.592574][ T288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.599597][ T288] [ 28.602561][ T288] The buggy address belongs to the object at ffff88812212a200 [ 28.602561][ T288] which belongs to the cache names_cache of size 4096 [ 28.618924][ T288] The buggy address is located 2584 bytes inside of [ 28.618924][ T288] 4096-byte region [ffff88812212a200, ffff88812212b200) [ 28.633637][ T288] The buggy address belongs to the page: [ 28.639469][ T288] page:ffffea0004884a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122128 [ 28.650219][ T288] head:ffffea0004884a00 order:3 compound_mapcount:0 compound_pincount:0 [ 28.658885][ T288] flags: 0x4000000000010200(slab|head) [ 28.664363][ T288] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018b080 [ 28.673376][ T288] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 28.682586][ T288] page dumped because: kasan: bad access detected [ 28.689305][ T288] page_owner tracks the page as allocated [ 28.696013][ T288] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 94, ts 27770728106, free_ts 0 [ 28.716019][ T288] prep_new_page+0x179/0x180 [ 28.721025][ T288] get_page_from_freelist+0x2235/0x23d0 [ 28.726679][ T288] __alloc_pages_nodemask+0x268/0x5f0 [ 28.732474][ T288] new_slab+0x84/0x3f0 [ 28.736579][ T288] ___slab_alloc+0x2a6/0x450 [ 28.741248][ T288] __slab_alloc+0x63/0xa0 [ 28.746379][ T288] kmem_cache_alloc+0x1af/0x2e0 [ 28.751333][ T288] getname_flags+0xb9/0x500 [ 28.756083][ T288] getname+0x19/0x20 [ 28.760073][ T288] do_sys_openat2+0xd9/0x6d0 [ 28.764750][ T288] __x64_sys_openat+0x136/0x160 [ 28.769915][ T288] do_syscall_64+0x31/0x40 [ 28.774434][ T288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.780487][ T288] page_owner free stack trace missing [ 28.786279][ T288] [ 28.788641][ T288] Memory state around the buggy address: [ 28.794900][ T288] ffff88812212ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.803253][ T288] ffff88812212ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [pid 292] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... unlink resumed>) = 0 [pid 292] <... umount2 resumed>) = 0 [pid 291] <... umount2 resumed>) = 0 [pid 290] <... umount2 resumed>) = 0 [pid 289] <... umount2 resumed>) = 0 [pid 292] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file0", [pid 291] newfstatat(AT_FDCWD, "./0/file1/file0", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/file0", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./0/file1/file0", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] newfstatat(AT_FDCWD, "./0/file1/file2", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] unlink("./0/file1/file2" [pid 292] <... openat resumed>) = 5 [pid 291] <... openat resumed>) = 5 [pid 290] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] <... openat resumed>) = 5 [pid 288] <... unlink resumed>) = 0 [pid 292] newfstatat(5, "", [pid 291] newfstatat(5, "", [pid 290] <... openat resumed>) = 5 [pid 289] newfstatat(5, "", [pid 288] umount2("./0/file1/file3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_EMPTY_PATH) = 0 [pid 290] newfstatat(5, "", [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_EMPTY_PATH) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] getdents64(5, [pid 291] getdents64(5, [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=128, ...}, AT_EMPTY_PATH) = 0 [pid 289] getdents64(5, [pid 292] <... getdents64 resumed>0x555589b787b0 /* 7 entries */, 32768) = 208 [pid 291] <... getdents64 resumed>0x555589b787b0 /* 7 entries */, 32768) = 208 [pid 290] getdents64(5, [pid 289] <... getdents64 resumed>0x555589b787b0 /* 7 entries */, 32768) = 208 [pid 288] newfstatat(AT_FDCWD, "./0/file1/file3", [pid 292] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... getdents64 resumed>0x555589b787b0 /* 7 entries */, 32768) = 208 [pid 289] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] newfstatat(AT_FDCWD, "./0/file1/file0/file0", [pid 291] newfstatat(AT_FDCWD, "./0/file1/file0/file0", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/file0/file0", [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./0/file1/file0/file0", [pid 289] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/file1/file0/file0" [pid 291] unlink("./0/file1/file0/file0" [pid 290] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./0/file1/file0/file0" [pid 288] unlink("./0/file1/file3" [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] unlink("./0/file1/file0/file0" [pid 289] <... unlink resumed>) = 0 [pid 292] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... unlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... unlink resumed>) = 0 [pid 292] newfstatat(AT_FDCWD, "./0/file1/file0/file1", [pid 291] newfstatat(AT_FDCWD, "./0/file1/file0/file1", [pid 290] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./0/file1/file0/file1", [pid 292] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] umount2("./0/file1/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] unlink("./0/file1/file0/file1" [pid 291] unlink("./0/file1/file0/file1" [pid 290] newfstatat(AT_FDCWD, "./0/file1/file0/file1", [pid 289] unlink("./0/file1/file0/file1" [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... unlink resumed>) = 0 [pid 288] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] unlink("./0/file1/file0/file1" [pid 289] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] newfstatat(AT_FDCWD, "./0/file1/file.cold", [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... unlink resumed>) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file0/.index", [pid 291] newfstatat(AT_FDCWD, "./0/file1/file0/.index", [pid 290] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./0/file1/file0/.index", [pid 288] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] unlink("./0/file1/file.cold" [pid 292] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] newfstatat(AT_FDCWD, "./0/file1/file0/.index", [pid 289] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] <... unlink resumed>) = 0 [pid 292] openat(AT_FDCWD, "./0/file1/file0/.index", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./0/file1/file0/.index", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] umount2("./0/file1/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] openat(AT_FDCWD, "./0/file1/file0/.index", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 288] getdents64(4, [pid 292] <... openat resumed>) = 6 [pid 291] <... openat resumed>) = 6 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... openat resumed>) = 6 [pid 288] <... getdents64 resumed>0x555589b70770 /* 0 entries */, 32768) = 0 [pid 292] newfstatat(6, "", [pid 291] newfstatat(6, "", [pid 290] openat(AT_FDCWD, "./0/file1/file0/.index", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] newfstatat(6, "", [pid 288] close(4 [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... openat resumed>) = 6 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(6, [pid 291] getdents64(6, [pid 290] newfstatat(6, "", [pid 289] getdents64(6, [pid 288] <... close resumed>) = 0 [pid 292] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 291] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 289] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 288] rmdir("./0/file1" [pid 292] umount2("./0/file1/file0/.index/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/.index/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(6, [pid 289] umount2("./0/file1/file0/.index/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 288] <... rmdir resumed>) = -1 EBUSY (Device or resource busy) [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 288] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] newfstatat(AT_FDCWD, "./0/file1/file0/.index/00000000000000000000000000000003", [pid 291] newfstatat(AT_FDCWD, "./0/file1/file0/.index/00000000000000000000000000000003", [pid 290] umount2("./0/file1/file0/.index/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] newfstatat(AT_FDCWD, "./0/file1/file0/.index/00000000000000000000000000000003", [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 288] <... umount2 resumed>) = -1 EBUSY (Device or resource busy) [pid 292] unlink("./0/file1/file0/.index/00000000000000000000000000000003" [pid 291] unlink("./0/file1/file0/.index/00000000000000000000000000000003" [pid 290] newfstatat(AT_FDCWD, "./0/file1/file0/.index/00000000000000000000000000000003", [pid 289] unlink("./0/file1/file0/.index/00000000000000000000000000000003" [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... unlink resumed>) = 0 [pid 288] exit_group(1 [pid 292] getdents64(6, [pid 291] getdents64(6, [pid 290] unlink("./0/file1/file0/.index/00000000000000000000000000000003" [pid 289] getdents64(6, [pid 288] <... exit_group resumed>) = ? [pid 292] <... getdents64 resumed>0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 290] <... unlink resumed>) = 0 [pid 289] <... getdents64 resumed>0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 292] close(6 [pid 291] close(6 [pid 289] close(6 [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 292] rmdir("./0/file1/file0/.index" [pid 291] rmdir("./0/file1/file0/.index" [pid 289] rmdir("./0/file1/file0/.index" [pid 292] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] getdents64(6, [pid 289] <... rmdir resumed>) = 0 [pid 292] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete", [pid 291] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete", [pid 289] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] openat(AT_FDCWD, "./0/file1/file0/.incomplete", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 291] openat(AT_FDCWD, "./0/file1/file0/.incomplete", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 290] close(6 [pid 289] openat(AT_FDCWD, "./0/file1/file0/.incomplete", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 292] <... openat resumed>) = 6 [pid 291] <... openat resumed>) = 6 [pid 289] <... openat resumed>) = 6 [pid 292] newfstatat(6, "", [pid 291] newfstatat(6, "", [pid 289] newfstatat(6, "", [pid 292] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 290] <... close resumed>) = 0 [pid 289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 292] getdents64(6, [pid 291] getdents64(6, [pid 290] rmdir("./0/file1/file0/.index" [pid 289] getdents64(6, [pid 292] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 291] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 289] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [pid 292] umount2("./0/file1/file0/.incomplete/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("./0/file1/file0/.incomplete/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] <... rmdir resumed>) = 0 [pid 289] umount2("./0/file1/file0/.incomplete/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete/00000000000000000000000000000003", [pid 291] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete/00000000000000000000000000000003", [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete/00000000000000000000000000000003", [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete", [pid 289] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/file1/file0/.incomplete/00000000000000000000000000000003" [pid 291] unlink("./0/file1/file0/.incomplete/00000000000000000000000000000003" [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./0/file1/file0/.incomplete/00000000000000000000000000000003" [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 290] umount2("./0/file1/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW [pid 289] <... unlink resumed>) = 0 [pid 292] getdents64(6, [pid 291] getdents64(6, [pid 289] getdents64(6, [pid 292] <... getdents64 resumed>0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 291] <... getdents64 resumed>0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 289] <... getdents64 resumed>0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 292] close(6 [pid 291] close(6 [pid 290] openat(AT_FDCWD, "./0/file1/file0/.incomplete", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 289] close(6 [pid 292] <... close resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 290] <... openat resumed>) = 6 [pid 289] <... close resumed>) = 0 [pid 292] rmdir("./0/file1/file0/.incomplete" [pid 291] rmdir("./0/file1/file0/.incomplete" [pid 290] newfstatat(6, "", [pid 289] rmdir("./0/file1/file0/.incomplete" [pid 292] <... rmdir resumed>) = 0 [pid 291] <... rmdir resumed>) = 0 [pid 290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 292] umount2("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] umount2("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW [pid 290] getdents64(6, [pid 289] <... rmdir resumed>) = 0 [pid 292] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 291] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... getdents64 resumed>0x555589b807f0 /* 3 entries */, 32768) = 104 [ 28.812218][ T288] >ffff88812212ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.821945][ T288] ^ [ 28.827540][ T288] ffff88812212ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.836232][ T288] ffff88812212ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.845234][ T288] ================================================================== [ 28.854116][ T288] Disabling lock debugging due to kernel taint [pid 292] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", [pid 290] umount2("./0/file1/file0/.incomplete/00000000000000000000000000000003", MNT_FORCE|UMOUNT_NOFOLLOW [pid 291] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", [pid 289] umount2("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW [pid 292] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 292] unlink("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b" [pid 291] unlink("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b" [pid 290] newfstatat(AT_FDCWD, "./0/file1/file0/.incomplete/00000000000000000000000000000003", [pid 289] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 290] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/file1/file0/.incomplete/00000000000000000000000000000003") = 0 [pid 290] getdents64(6, 0x555589b807f0 /* 0 entries */, 32768) = 0 [pid 290] close(6) = 0 [pid 290] rmdir("./0/file1/file0/.incomplete") = 0 [pid 290] umount2("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", {st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b") = 0 [pid 290] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 290] close(5) = 0 [pid 290] rmdir("./0/file1/file0") = 0 [pid 290] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/file1/file1", {st_mode=S_IFREG|0755, st_size=87500, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/file1/file1" [pid 292] <... unlink resumed>) = 0 [pid 291] <... unlink resumed>) = 0 [pid 289] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", [pid 292] getdents64(5, [pid 289] <... newfstatat resumed>{st_mode=S_IFREG|0222, st_size=101, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 28.892642][ T292] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 28.893452][ T290] EXT4-fs error (device loop4): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 28.909125][ T291] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [pid 292] <... getdents64 resumed>0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 289] unlink("\x2e\x2f\x30\x2f\x66\x69\x6c\x65\x31\x2f\x66\x69\x6c\x65\x30\x2f\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b" [pid 292] close(5) = 0 [pid 292] rmdir("./0/file1/file0") = 0 [pid 292] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file1", {st_mode=S_IFREG|0755, st_size=87500, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/file1/file1") = 0 [pid 292] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file2", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/file1/file2") = 0 [pid 292] umount2("./0/file1/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file3", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/file1/file3") = 0 [pid 292] umount2("./0/file1/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 292] newfstatat(AT_FDCWD, "./0/file1/file.cold", {st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 292] unlink("./0/file1/file.cold") = 0 [pid 292] getdents64(4, 0x555589b70770 /* 0 entries */, 32768) = 0 [pid 292] close(4) = 0 [pid 292] rmdir("./0/file1") = -1 EBUSY (Device or resource busy) [pid 292] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 292] exit_group(1) = ? [pid 289] <... unlink resumed>) = 0 [pid 289] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 289] close(5) = 0 [pid 289] rmdir("./0/file1/file0") = 0 [pid 289] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/file1", {st_mode=S_IFREG|0755, st_size=87500, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./0/file1/file1") = 0 [pid 289] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/file2", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./0/file1/file2") = 0 [pid 289] umount2("./0/file1/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/file3", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./0/file1/file3") = 0 [pid 289] umount2("./0/file1/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 289] newfstatat(AT_FDCWD, "./0/file1/file.cold", {st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 289] unlink("./0/file1/file.cold") = 0 [pid 289] getdents64(4, 0x555589b70770 /* 0 entries */, 32768) = 0 [pid 289] close(4) = 0 [pid 289] rmdir("./0/file1") = -1 EBUSY (Device or resource busy) [pid 289] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 289] exit_group(1) = ? [pid 291] getdents64(5, 0x555589b787b0 /* 0 entries */, 32768) = 0 [pid 291] close(5) = 0 [pid 291] rmdir("./0/file1/file0") = 0 [pid 291] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/file1/file1", {st_mode=S_IFREG|0755, st_size=87500, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./0/file1/file1") = 0 [pid 291] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/file1/file2", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./0/file1/file2") = 0 [pid 291] umount2("./0/file1/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/file1/file3", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./0/file1/file3") = 0 [pid 291] umount2("./0/file1/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 291] newfstatat(AT_FDCWD, "./0/file1/file.cold", {st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 291] unlink("./0/file1/file.cold") = 0 [ 28.926095][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 7696582025232, count = 16 [ 28.942315][ T289] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 28.957399][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 7696582025224, count = 10 [pid 291] getdents64(4, 0x555589b70770 /* 0 entries */, 32768) = 0 [pid 291] close(4) = 0 [pid 291] rmdir("./0/file1") = -1 EBUSY (Device or resource busy) [pid 291] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 291] exit_group(1) = ? [pid 288] +++ exited with 1 +++ [pid 286] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=288, si_uid=0, si_status=1, si_utime=0, si_stime=5} --- [pid 286] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [ 28.989130][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 160109152, count = 16 [ 29.007995][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 160106503, count = 2660 [ 29.025720][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 160106496, count = 16 [ 29.041449][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 44929933328, count = 16 [ 29.056833][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 44929910528, count = 22812 [ 29.073284][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 44929910528, count = 16 [pid 292] +++ exited with 1 +++ [pid 291] +++ exited with 1 +++ [pid 285] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=291, si_uid=0, si_status=1, si_utime=0, si_stime=9} --- [pid 284] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=292, si_uid=0, si_status=1, si_utime=0, si_stime=3} --- [pid 285] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 284] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 285] <... clone resumed>, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 284] <... clone resumed>, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 285] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 284] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 285] <... clone resumed>, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 284] <... clone resumed>, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 284] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [ 29.088545][ T290] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor363: Freeing blocks not in datazone - block = 11330258410480, count = 16 [pid 289] +++ exited with 1 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=289, si_uid=0, si_status=1, si_utime=0, si_stime=9} --- [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555589b67690) = -1 ENOMEM (Cannot allocate memory) [pid 290] <... unlink resumed>) = 0 [pid 290] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/file1/file2", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/file1/file2") = 0 [pid 290] umount2("./0/file1/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/file1/file3", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/file1/file3") = 0 [pid 290] umount2("./0/file1/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 290] newfstatat(AT_FDCWD, "./0/file1/file.cold", {st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 290] unlink("./0/file1/file.cold") = 0 [pid 290] getdents64(4, 0x555589b70770 /* 0 entries */, 32768) = 0 [pid 290] close(4) = 0 [pid 290] rmdir("./0/file1") = -1 EBUSY (Device or resource busy) [pid 290] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 290] exit_group(1) = ? [pid 290] +++ exited with 1 +++ [pid 287] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=290, si_uid=0, si_status=1, si_utime=0, si_stime=21} ---