./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3300425984 <...> Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. execve("./syz-executor3300425984", ["./syz-executor3300425984"], 0x7ffca3f7b280 /* 10 vars */) = 0 brk(NULL) = 0x555570c03000 brk(0x555570c03d00) = 0x555570c03d00 arch_prctl(ARCH_SET_FS, 0x555570c03380) = 0 set_tid_address(0x555570c03650) = 5845 set_robust_list(0x555570c03660, 24) = 0 rseq(0x555570c03ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3300425984", 4096) = 28 getrandom("\xf4\x9f\xc7\xfa\x85\x78\xf0\x7d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555570c03d00 brk(0x555570c24d00) = 0x555570c24d00 brk(0x555570c25000) = 0x555570c25000 mprotect(0x7f08583a1000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555570c03650) = 5846 ./strace-static-x86_64: Process 5846 attached [pid 5845] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] set_robust_list(0x555570c03660, 24 [pid 5845] write(3, "10000000000", 11 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5845] <... write resumed>) = 11 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "20", 2) = 2 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "0", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "0", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "100", 3) = 3 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "0", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "0", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "7 4 1 3", 7) = 7 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "0", 1) = 1 [pid 5845] close(3) = 0 [pid 5845] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "5846", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] kill(5846, SIGKILL) = 0 [pid 5846] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5846, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- chmod("/dev/raw-gadget", 0666) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached , child_tidptr=0x555570c03650) = 5847 [pid 5847] set_robust_list(0x555570c03660, 24 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] <... set_robust_list resumed>) = 0 [pid 5847] mkdir("./syzkaller.wuVzMw", 0700./strace-static-x86_64: Process 5848 attached [pid 5845] <... clone resumed>, child_tidptr=0x555570c03650) = 5848 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] set_robust_list(0x555570c03660, 24) = 0 [pid 5848] mkdir("./syzkaller.s4iSOy", 0700 [pid 5847] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5849 attached [pid 5848] <... mkdir resumed>) = 0 [pid 5845] <... clone resumed>, child_tidptr=0x555570c03650) = 5849 [pid 5847] chmod("./syzkaller.wuVzMw", 0777 [pid 5849] set_robust_list(0x555570c03660, 24 [pid 5848] chmod("./syzkaller.s4iSOy", 0777 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... set_robust_list resumed>) = 0 [pid 5848] <... chmod resumed>) = 0 [pid 5847] <... chmod resumed>) = 0 [pid 5849] mkdir("./syzkaller.D7qndY", 0700 [pid 5848] chdir("./syzkaller.s4iSOy"./strace-static-x86_64: Process 5850 attached [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... chdir resumed>) = 0 [pid 5847] chdir("./syzkaller.wuVzMw" [pid 5845] <... clone resumed>, child_tidptr=0x555570c03650) = 5850 [pid 5850] set_robust_list(0x555570c03660, 24 [pid 5849] chmod("./syzkaller.D7qndY", 0777 [pid 5848] unshare(CLONE_NEWPID [pid 5847] <... chdir resumed>) = 0 [pid 5847] unshare(CLONE_NEWPID [pid 5848] <... unshare resumed>) = 0 [pid 5847] <... unshare resumed>) = 0 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5851 attached [pid 5850] <... set_robust_list resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] <... clone resumed>, child_tidptr=0x555570c03650) = 5851 [pid 5849] chdir("./syzkaller.D7qndY" [pid 5851] set_robust_list(0x555570c03660, 24 [pid 5850] mkdir("./syzkaller.gADq3U", 0700 [pid 5849] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5853 attached ./strace-static-x86_64: Process 5852 attached [pid 5851] <... set_robust_list resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] unshare(CLONE_NEWPID [pid 5853] set_robust_list(0x555570c03660, 24 [pid 5852] set_robust_list(0x555570c03660, 24 [pid 5851] mkdir("./syzkaller.Pnm4US", 0700 [pid 5847] <... clone resumed>, child_tidptr=0x555570c03650) = 5852 [pid 5849] <... unshare resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached [pid 5853] <... set_robust_list resumed>) = 0 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5850] chmod("./syzkaller.gADq3U", 0777 [pid 5848] <... clone resumed>, child_tidptr=0x555570c03650) = 5853 [pid 5854] set_robust_list(0x555570c03660, 24 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] <... set_robust_list resumed>) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... mkdir resumed>) = 0 [pid 5850] <... chmod resumed>) = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] <... prctl resumed>) = 0 [pid 5851] chmod("./syzkaller.Pnm4US", 0777 [pid 5853] <... prctl resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555570c03650) = 5854 [pid 5850] chdir("./syzkaller.gADq3U" [pid 5854] getppid( [pid 5853] getppid( [pid 5852] getppid( [pid 5851] <... chmod resumed>) = 0 [pid 5850] <... chdir resumed>) = 0 [pid 5854] <... getppid resumed>) = 0 [pid 5853] <... getppid resumed>) = 0 [pid 5852] <... getppid resumed>) = 0 [pid 5851] chdir("./syzkaller.Pnm4US" [pid 5850] unshare(CLONE_NEWPID [pid 5854] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5853] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5852] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5851] <... chdir resumed>) = 0 [pid 5850] <... unshare resumed>) = 0 [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5851] unshare(CLONE_NEWPID [pid 5854] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5851] <... unshare resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5853] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached [pid 5854] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, ./strace-static-x86_64: Process 5856 attached [pid 5855] set_robust_list(0x555570c03660, 24 [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5853] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5854] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5856] set_robust_list(0x555570c03660, 24 [pid 5851] <... clone resumed>, child_tidptr=0x555570c03650) = 5856 [pid 5850] <... clone resumed>, child_tidptr=0x555570c03650) = 5855 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5853] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5855] <... prctl resumed>) = 0 [pid 5855] getppid() = 0 [pid 5856] <... set_robust_list resumed>) = 0 [pid 5855] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5854] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5852] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5852] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5856] <... prctl resumed>) = 0 [pid 5855] <... prlimit64 resumed>NULL) = 0 [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5853] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5852] <... prlimit64 resumed>NULL) = 0 [pid 5856] getppid( [pid 5855] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5852] unshare(CLONE_NEWNS [pid 5856] <... getppid resumed>) = 0 [pid 5855] <... prlimit64 resumed>NULL) = 0 [pid 5854] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5853] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5856] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 5855] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5854] <... prlimit64 resumed>NULL) = 0 [pid 5853] <... prlimit64 resumed>NULL) = 0 [pid 5856] <... prlimit64 resumed>NULL) = 0 [pid 5855] <... prlimit64 resumed>NULL) = 0 [pid 5854] unshare(CLONE_NEWNS [pid 5853] unshare(CLONE_NEWNS [pid 5856] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 5855] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5852] <... unshare resumed>) = 0 [pid 5852] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5856] <... prlimit64 resumed>NULL) = 0 [pid 5855] <... prlimit64 resumed>NULL) = 0 [pid 5854] <... unshare resumed>) = 0 [pid 5853] <... unshare resumed>) = 0 [pid 5856] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 5853] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5855] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5854] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5852] <... mount resumed>) = 0 [pid 5856] <... prlimit64 resumed>NULL) = 0 [pid 5855] <... prlimit64 resumed>NULL) = 0 [pid 5854] <... mount resumed>) = 0 [pid 5853] <... mount resumed>) = 0 [pid 5852] unshare(CLONE_NEWIPC [pid 5856] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 5855] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 5854] unshare(CLONE_NEWIPC [pid 5853] unshare(CLONE_NEWIPC [pid 5856] <... prlimit64 resumed>NULL) = 0 [pid 5855] <... prlimit64 resumed>NULL) = 0 [pid 5854] <... unshare resumed>) = 0 [pid 5853] <... unshare resumed>) = 0 [pid 5856] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 5855] unshare(CLONE_NEWNS [pid 5856] <... prlimit64 resumed>NULL) = 0 [pid 5852] <... unshare resumed>) = 0 [pid 5856] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5856] unshare(CLONE_NEWNS [pid 5855] <... unshare resumed>) = 0 [pid 5854] unshare(CLONE_NEWCGROUP [pid 5853] unshare(CLONE_NEWCGROUP [pid 5852] unshare(CLONE_NEWCGROUP [pid 5854] <... unshare resumed>) = 0 [pid 5852] <... unshare resumed>) = 0 [pid 5856] <... unshare resumed>) = 0 [pid 5855] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5854] unshare(CLONE_NEWUTS [pid 5853] <... unshare resumed>) = 0 [pid 5852] unshare(CLONE_NEWUTS [pid 5856] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 5855] <... mount resumed>) = 0 [pid 5854] <... unshare resumed>) = 0 [pid 5853] unshare(CLONE_NEWUTS [pid 5852] <... unshare resumed>) = 0 [pid 5856] <... mount resumed>) = 0 [pid 5855] unshare(CLONE_NEWIPC [pid 5854] unshare(CLONE_SYSVSEM [pid 5853] <... unshare resumed>) = 0 [pid 5856] unshare(CLONE_NEWIPC [pid 5852] unshare(CLONE_SYSVSEM [pid 5854] <... unshare resumed>) = 0 [pid 5852] <... unshare resumed>) = 0 [pid 5856] <... unshare resumed>) = 0 [pid 5855] <... unshare resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5853] unshare(CLONE_SYSVSEM [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5856] unshare(CLONE_NEWCGROUP [pid 5853] <... unshare resumed>) = 0 [pid 5856] <... unshare resumed>) = 0 [pid 5855] unshare(CLONE_NEWCGROUP [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5856] unshare(CLONE_NEWUTS [pid 5855] <... unshare resumed>) = 0 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... openat resumed>) = 3 [pid 5852] <... openat resumed>) = 3 [pid 5856] <... unshare resumed>) = 0 [pid 5855] unshare(CLONE_NEWUTS [pid 5856] unshare(CLONE_SYSVSEM) = 0 [pid 5855] <... unshare resumed>) = 0 [pid 5854] write(3, "16777216", 8 [pid 5853] write(3, "16777216", 8 [pid 5852] write(3, "16777216", 8 [pid 5855] unshare(CLONE_SYSVSEM [pid 5852] <... write resumed>) = 8 [pid 5856] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5855] <... unshare resumed>) = 0 [pid 5854] <... write resumed>) = 8 [pid 5853] <... write resumed>) = 8 [pid 5852] close(3 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 5854] close(3 [pid 5853] close(3 [pid 5852] <... close resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5856] write(3, "16777216", 8 [pid 5854] <... close resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5856] <... write resumed>) = 8 [pid 5853] <... openat resumed>) = 3 [pid 5856] close(3) = 0 [pid 5855] <... openat resumed>) = 3 [pid 5854] <... openat resumed>) = 3 [pid 5853] write(3, "536870912", 9 [pid 5856] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5855] write(3, "16777216", 8 [pid 5854] write(3, "536870912", 9 [pid 5852] <... openat resumed>) = 3 [pid 5856] <... openat resumed>) = 3 [pid 5855] <... write resumed>) = 8 [pid 5854] <... write resumed>) = 9 [pid 5853] <... write resumed>) = 9 [pid 5856] write(3, "536870912", 9 [pid 5855] close(3 [pid 5853] close(3 [pid 5856] <... write resumed>) = 9 [pid 5855] <... close resumed>) = 0 [pid 5854] close(3 [pid 5853] <... close resumed>) = 0 [pid 5852] write(3, "536870912", 9 [pid 5854] <... close resumed>) = 0 [pid 5852] <... write resumed>) = 9 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5852] close(3 [pid 5856] close(3 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5856] <... close resumed>) = 0 [pid 5856] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5855] <... openat resumed>) = 3 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... openat resumed>) = 3 [pid 5852] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5856] <... openat resumed>) = 3 [pid 5852] <... openat resumed>) = 3 [pid 5856] write(3, "1024", 4 [pid 5855] write(3, "536870912", 9 [pid 5854] write(3, "1024", 4 [pid 5853] write(3, "1024", 4 [pid 5856] <... write resumed>) = 4 [pid 5855] <... write resumed>) = 9 [pid 5854] <... write resumed>) = 4 [pid 5853] <... write resumed>) = 4 [pid 5852] write(3, "1024", 4 [pid 5856] close(3 [pid 5855] close(3 [pid 5854] close(3 [pid 5853] close(3 [pid 5852] <... write resumed>) = 4 [pid 5856] <... close resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5852] close(3 [pid 5856] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5852] <... close resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5855] <... openat resumed>) = 3 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... openat resumed>) = 3 [pid 5855] write(3, "1024", 4 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5856] write(3, "8192", 4 [pid 5855] <... write resumed>) = 4 [pid 5854] write(3, "8192", 4 [pid 5853] write(3, "8192", 4 [pid 5855] close(3 [pid 5854] <... write resumed>) = 4 [pid 5856] <... write resumed>) = 4 [pid 5856] close(3 [pid 5855] <... close resumed>) = 0 [pid 5854] close(3 [pid 5853] <... write resumed>) = 4 [pid 5852] <... openat resumed>) = 3 [pid 5856] <... close resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] close(3 [pid 5856] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5853] <... close resumed>) = 0 [pid 5852] write(3, "8192", 4 [pid 5856] <... openat resumed>) = 3 [pid 5856] write(3, "1024", 4 [pid 5855] <... openat resumed>) = 3 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5852] <... write resumed>) = 4 [pid 5856] <... write resumed>) = 4 [pid 5854] <... openat resumed>) = 3 [pid 5856] close(3) = 0 [pid 5855] write(3, "8192", 4 [pid 5854] write(3, "1024", 4 [pid 5852] close(3 [pid 5856] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5855] <... write resumed>) = 4 [pid 5854] <... write resumed>) = 4 [pid 5853] <... openat resumed>) = 3 [pid 5855] close(3 [pid 5852] <... close resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5855] <... close resumed>) = 0 [pid 5854] close(3 [pid 5853] write(3, "1024", 4 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5856] write(3, "1024", 4) = 4 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 5854] <... close resumed>) = 0 [pid 5853] <... write resumed>) = 4 [pid 5856] close(3 [pid 5852] <... openat resumed>) = 3 [pid 5856] <... close resumed>) = 0 [pid 5855] <... openat resumed>) = 3 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5853] close(3 [pid 5852] write(3, "1024", 4 [pid 5855] write(3, "1024", 4 [pid 5856] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5855] <... write resumed>) = 4 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... close resumed>) = 0 [pid 5852] <... write resumed>) = 4 [pid 5855] close(3) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5856] <... openat resumed>) = 3 [pid 5854] write(3, "1024", 4 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5852] close(3 [pid 5855] <... openat resumed>) = 3 [pid 5855] write(3, "1024", 4) = 4 [pid 5855] close(3 [pid 5856] write(3, "1024 1048576 500 1024", 21 [pid 5855] <... close resumed>) = 0 [pid 5854] <... write resumed>) = 4 [pid 5853] <... openat resumed>) = 3 [pid 5852] <... close resumed>) = 0 [pid 5856] <... write resumed>) = 21 [pid 5855] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5854] close(3 [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 5856] close(3 [pid 5855] <... openat resumed>) = 3 [pid 5854] <... close resumed>) = 0 [pid 5853] write(3, "1024", 4 [pid 5856] <... close resumed>) = 0 [pid 5855] write(3, "1024 1048576 500 1024", 21 [pid 5854] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5853] <... write resumed>) = 4 [pid 5852] <... openat resumed>) = 3 [pid 5856] getpid( [pid 5855] <... write resumed>) = 21 [pid 5853] close(3 [pid 5856] <... getpid resumed>) = 1 [pid 5855] close(3 [pid 5854] <... openat resumed>) = 3 [pid 5852] write(3, "1024", 4 [pid 5856] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5855] <... close resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5856] <... capget resumed>{effective=1< [pid 5854] write(3, "1024 1048576 500 1024", 21 [pid 5853] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5852] <... write resumed>) = 4 [pid 5856] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5855] <... getpid resumed>) = 1 [pid 5854] <... write resumed>) = 21 [pid 5856] <... capset resumed>) = 0 [pid 5855] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5854] close(3 [pid 5853] <... openat resumed>) = 3 [pid 5852] close(3 [pid 5856] unshare(CLONE_NEWNET [pid 5855] <... capget resumed>{effective=1<) = 0 [pid 5852] <... close resumed>) = 0 [pid 5853] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5853] close(3) = 0 [pid 5853] getpid() = 1 [pid 5855] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5854] getpid( [pid 5853] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5852] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 5855] <... capset resumed>) = 0 [pid 5854] <... getpid resumed>) = 1 [pid 5855] unshare(CLONE_NEWNET [pid 5854] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 5853] <... capget resumed>{effective=1<) = 3 [pid 5853] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5854] <... capget resumed>{effective=1< [pid 5854] unshare(CLONE_NEWNET [pid 5852] <... close resumed>) = 0 [pid 5852] getpid() = 1 [pid 5852] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5853] <... unshare resumed>) = 0 [pid 5853] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "0 65535", 7) = 7 [pid 5853] close(3) = 0 [pid 5853] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] <... unshare resumed>) = 0 [pid 5853] write(3, "100000", 6) = 6 [pid 5853] close(3) = 0 [pid 5853] mkdir("./syz-tmp", 0777) = 0 [pid 5853] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5856] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] write(3, "0 65535", 7) = 7 [pid 5856] close(3) = 0 [pid 5856] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5853] <... mount resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5856] write(3, "100000", 6 [pid 5853] mkdir("./syz-tmp/newroot", 0777 [pid 5856] <... write resumed>) = 6 [pid 5856] close(3 [pid 5853] <... mkdir resumed>) = 0 [pid 5855] <... unshare resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5856] <... close resumed>) = 0 [pid 5855] <... openat resumed>) = 3 [pid 5853] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5856] mkdir("./syz-tmp", 0777 [pid 5855] write(3, "0 65535", 7) = 7 [pid 5853] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] close(3 [pid 5853] <... mount resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5854] <... unshare resumed>) = 0 [pid 5855] write(3, "100000", 6 [pid 5853] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5856] <... mount resumed>) = 0 [pid 5856] mkdir("./syz-tmp/newroot", 0777 [pid 5854] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5856] <... mkdir resumed>) = 0 [pid 5854] <... openat resumed>) = 3 [pid 5856] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5855] <... write resumed>) = 6 [pid 5854] write(3, "0 65535", 7 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... unshare resumed>) = 0 [pid 5855] close(3) = 0 [pid 5853] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5852] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 5856] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mkdir("./syz-tmp", 0777 [pid 5854] <... write resumed>) = 7 [pid 5856] <... mount resumed>) = 0 [pid 5854] close(3 [pid 5853] <... mount resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5854] <... close resumed>) = 0 [pid 5854] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] <... mkdir resumed>) = 0 [pid 5854] write(3, "100000", 6 [pid 5856] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5855] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5854] <... write resumed>) = 6 [pid 5853] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5852] write(3, "0 65535", 7 [pid 5856] <... mkdir resumed>) = 0 [pid 5854] close(3) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... write resumed>) = 7 [pid 5854] mkdir("./syz-tmp", 0777 [pid 5856] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5854] <... mkdir resumed>) = 0 [pid 5852] close(3 [pid 5855] <... mount resumed>) = 0 [pid 5853] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... close resumed>) = 0 [pid 5856] <... mount resumed>) = 0 [pid 5854] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5852] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 5856] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5855] mkdir("./syz-tmp/newroot", 0777 [pid 5853] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] <... openat resumed>) = 3 [pid 5852] write(3, "100000", 6) = 6 [pid 5852] close(3) = 0 [pid 5854] <... mount resumed>) = 0 [pid 5852] mkdir("./syz-tmp", 0777 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] <... mkdir resumed>) = 0 [pid 5853] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mkdir resumed>) = 0 [pid 5854] mkdir("./syz-tmp/newroot", 0777 [pid 5852] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 5856] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5854] <... mkdir resumed>) = 0 [pid 5853] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5854] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 5852] <... mount resumed>) = 0 [pid 5856] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5855] <... mkdir resumed>) = 0 [pid 5853] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 5856] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5853] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mkdir("./syz-tmp/newroot", 0777 [pid 5856] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5855] <... mount resumed>) = 0 [pid 5853] <... mount resumed>) = 0 [pid 5856] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5852] <... mkdir resumed>) = 0 [pid 5855] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5854] <... mount resumed>) = 0 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] <... mkdir resumed>) = 0 [pid 5854] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5853] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mkdir("./syz-tmp/newroot/dev", 0700 [pid 5856] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5856] <... mount resumed>) = 0 [pid 5855] <... mount resumed>) = 0 [pid 5854] <... mkdir resumed>) = 0 [pid 5855] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5856] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5853] <... mount resumed>) = 0 [pid 5852] <... mkdir resumed>) = 0 [pid 5855] <... mkdir resumed>) = 0 [pid 5852] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mount resumed>) = 0 [pid 5854] <... mount resumed>) = 0 [pid 5855] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5856] <... mount resumed>) = 0 [pid 5855] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mkdir("./syz-tmp/newroot/proc", 0700 [pid 5855] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] <... mkdir resumed>) = 0 [pid 5856] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5854] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5853] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5856] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5855] <... mkdir resumed>) = 0 [pid 5854] <... mkdir resumed>) = 0 [pid 5853] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 5856] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5853] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mount resumed>) = 0 [pid 5852] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 5856] <... mount resumed>) = 0 [pid 5855] <... mount resumed>) = 0 [pid 5854] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5853] <... mount resumed>) = 0 [pid 5855] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mkdir resumed>) = 0 [pid 5855] <... mount resumed>) = 0 [pid 5854] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5853] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5852] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5855] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5853] <... mkdir resumed>) = 0 [pid 5855] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] <... mount resumed>) = 0 [pid 5856] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5854] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5853] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5854] mkdir("./syz-tmp/newroot/sys", 0700 [pid 5853] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] <... mkdir resumed>) = 0 [pid 5855] <... mkdir resumed>) = 0 [pid 5854] <... mkdir resumed>) = 0 [pid 5856] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5855] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5853] mkdir("./syz-tmp/pivot", 0777 [pid 5856] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5855] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5856] mkdir("./syz-tmp/pivot", 0777 [pid 5853] <... mkdir resumed>) = 0 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] mkdir("./syz-tmp/pivot", 0777 [pid 5854] <... mount resumed>) = 0 [pid 5852] <... mount resumed>) = 0 [pid 5856] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5853] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5855] <... mkdir resumed>) = 0 [pid 5854] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5856] <... pivot_root resumed>) = 0 [pid 5855] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5853] <... pivot_root resumed>) = 0 [pid 5852] <... mount resumed>) = 0 [pid 5856] chdir("/" [pid 5854] <... mount resumed>) = 0 [pid 5856] <... chdir resumed>) = 0 [pid 5853] chdir("/" [pid 5856] umount2("./pivot", MNT_DETACH [pid 5853] <... chdir resumed>) = 0 [pid 5855] <... pivot_root resumed>) = 0 [pid 5853] umount2("./pivot", MNT_DETACH [pid 5855] chdir("/" [pid 5854] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5854] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5855] <... chdir resumed>) = 0 [pid 5853] <... umount2 resumed>) = 0 [pid 5854] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5853] chroot("./newroot" [pid 5856] <... umount2 resumed>) = 0 [pid 5855] umount2("./pivot", MNT_DETACH [pid 5854] <... mount resumed>) = 0 [pid 5852] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5856] chroot("./newroot" [pid 5853] <... chroot resumed>) = 0 [pid 5856] <... chroot resumed>) = 0 [pid 5853] chdir("/" [pid 5856] chdir("/") = 0 [pid 5853] <... chdir resumed>) = 0 [pid 5856] mkdir("/dev/gadgetfs", 0777 [pid 5853] mkdir("/dev/gadgetfs", 0777 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] <... umount2 resumed>) = 0 [pid 5854] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5853] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5852] <... mount resumed>) = 0 [pid 5856] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5854] <... mkdir resumed>) = 0 [pid 5853] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5855] chroot("./newroot" [pid 5854] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5852] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 5855] <... chroot resumed>) = 0 [pid 5854] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5852] <... mkdir resumed>) = 0 [pid 5856] <... mount resumed>) = 0 [pid 5854] mkdir("./syz-tmp/pivot", 0777 [pid 5856] mkdir("/dev/binderfs", 0777 [pid 5855] chdir("/" [pid 5854] <... mkdir resumed>) = 0 [pid 5853] <... mount resumed>) = 0 [pid 5852] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 5856] <... mkdir resumed>) = 0 [pid 5855] <... chdir resumed>) = 0 [pid 5854] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5853] mkdir("/dev/binderfs", 0777 [pid 5852] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 5856] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5855] mkdir("/dev/gadgetfs", 0777 [pid 5853] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5855] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5854] <... pivot_root resumed>) = 0 [pid 5853] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5852] mkdir("./syz-tmp/pivot", 0777 [pid 5855] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = 0 [pid 5854] chdir("/" [pid 5852] <... mkdir resumed>) = 0 [pid 5854] <... chdir resumed>) = 0 [pid 5854] umount2("./pivot", MNT_DETACH [pid 5852] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 5855] mkdir("/dev/binderfs", 0777 [pid 5852] <... pivot_root resumed>) = 0 [pid 5855] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5854] <... umount2 resumed>) = 0 [pid 5855] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5856] <... mount resumed>) = 0 [pid 5854] chroot("./newroot" [pid 5853] <... mount resumed>) = 0 [pid 5852] chdir("/" [pid 5855] <... mount resumed>) = 0 [pid 5854] <... chroot resumed>) = 0 [pid 5856] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5855] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5854] chdir("/" [pid 5853] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5852] <... chdir resumed>) = 0 [pid 5852] umount2("./pivot", MNT_DETACH [pid 5856] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5855] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5854] <... chdir resumed>) = 0 [pid 5855] mkdir("./0", 0777 [pid 5854] mkdir("/dev/gadgetfs", 0777 [pid 5856] mkdir("./0", 0777 [pid 5854] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5856] <... mkdir resumed>) = 0 [pid 5854] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 5853] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5855] <... mkdir resumed>) = 0 [pid 5852] <... umount2 resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5852] chroot("./newroot" [pid 5856] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5855] <... openat resumed>) = 3 [pid 5854] <... mount resumed>) = 0 [pid 5853] mkdir("./0", 0777 [pid 5852] <... chroot resumed>) = 0 [pid 5855] ioctl(3, LOOP_CLR_FD [pid 5856] <... openat resumed>) = 3 [pid 5854] mkdir("/dev/binderfs", 0777 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] chdir("/" [pid 5855] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5852] <... chdir resumed>) = 0 [pid 5852] mkdir("/dev/gadgetfs", 0777 [pid 5856] ioctl(3, LOOP_CLR_FD [pid 5854] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5853] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5856] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5855] close(3 [pid 5852] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5856] close(3 [pid 5855] <... close resumed>) = 0 [pid 5854] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5853] <... openat resumed>) = 3 [pid 5852] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = 0 [pid 5856] <... close resumed>) = 0 [pid 5855] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5854] <... mount resumed>) = 0 [pid 5853] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5865 attached [pid 5865] set_robust_list(0x555570c03660, 24 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5854] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5853] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5852] mkdir("/dev/binderfs", 0777 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5865] chdir("./0" [pid 5854] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5865] <... chdir resumed>) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5854] mkdir("./0", 0777 [pid 5865] <... prctl resumed>) = 0 [pid 5853] close(3 [pid 5865] setpgid(0, 0) = 0 [pid 5853] <... close resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5854] <... mkdir resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached [pid 5865] <... openat resumed>) = 3 [pid 5855] <... clone resumed>, child_tidptr=0x555570c03650) = 2 [pid 5854] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5852] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5865] write(3, "1000", 4./strace-static-x86_64: Process 5867 attached [pid 5866] set_robust_list(0x555570c03660, 24 [pid 5865] <... write resumed>) = 4 [pid 5854] <... openat resumed>) = 3 [pid 5852] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 5854] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5854] close(3 [pid 5852] <... mount resumed>) = 0 executing program [pid 5867] set_robust_list(0x555570c03660, 24 [pid 5865] close(3 [pid 5854] <... close resumed>) = 0 [pid 5867] <... set_robust_list resumed>) = 0 [pid 5865] <... close resumed>) = 0 [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5867] chdir("./0" [pid 5865] symlink("/dev/binderfs", "./binderfs" [pid 5866] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5868 attached [pid 5852] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 5865] <... symlink resumed>) = 0 [pid 5852] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 5866] chdir("./0" [pid 5865] write(1, "executing program\n", 18 [pid 5867] <... chdir resumed>) = 0 [pid 5866] <... chdir resumed>) = 0 [pid 5868] set_robust_list(0x555570c03660, 24 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5868] <... set_robust_list resumed>) = 0 [pid 5867] <... prctl resumed>) = 0 [pid 5865] <... write resumed>) = 18 [pid 5866] <... prctl resumed>) = 0 [pid 5867] setpgid(0, 0 [pid 5856] <... clone resumed>, child_tidptr=0x555570c03650) = 2 [pid 5853] <... clone resumed>, child_tidptr=0x555570c03650) = 2 [pid 5852] mkdir("./0", 0777 [pid 5854] <... clone resumed>, child_tidptr=0x555570c03650) = 2 [pid 5852] <... mkdir resumed>) = 0 [pid 5865] memfd_create("syzkaller", 0 [pid 5852] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5867] <... setpgid resumed>) = 0 [pid 5866] setpgid(0, 0 [pid 5868] chdir("./0" [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5866] <... setpgid resumed>) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... openat resumed>) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD [pid 5866] <... openat resumed>) = 3 [pid 5852] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5867] <... openat resumed>) = 3 [pid 5866] write(3, "1000", 4 [pid 5852] close(3 [pid 5868] <... chdir resumed>) = 0 [pid 5867] write(3, "1000", 4 [pid 5866] <... write resumed>) = 4 [pid 5852] <... close resumed>) = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5867] <... write resumed>) = 4 [pid 5866] close(3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5868] <... prctl resumed>) = 0 [pid 5867] close(3 [pid 5866] <... close resumed>) = 0 [pid 5865] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5869 attached [pid 5869] set_robust_list(0x555570c03660, 24) = 0 [pid 5869] chdir("./0" [pid 5852] <... clone resumed>, child_tidptr=0x555570c03650) = 2 [pid 5869] <... chdir resumed>) = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5867] <... close resumed>) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs" [pid 5868] setpgid(0, 0 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5868] <... setpgid resumed>) = 0 [pid 5866] <... symlink resumed>) = 0 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5865] <... mmap resumed>) = 0x7f084fe00000 [pid 5869] <... openat resumed>) = 3 [pid 5867] symlink("/dev/binderfs", "./binderfs" [pid 5866] write(1, "executing program\n", 18 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5869] write(1, "executing program\n", 18executing program executing program ) = 18 [pid 5868] <... openat resumed>) = 3 [pid 5867] <... symlink resumed>) = 0 [pid 5866] <... write resumed>) = 18 executing program [pid 5868] write(3, "1000", 4 [pid 5867] write(1, "executing program\n", 18 [pid 5866] memfd_create("syzkaller", 0 [pid 5868] <... write resumed>) = 4 [pid 5867] <... write resumed>) = 18 [pid 5869] memfd_create("syzkaller", 0 [pid 5868] close(3 [pid 5867] memfd_create("syzkaller", 0 [pid 5866] <... memfd_create resumed>) = 3 [pid 5868] <... close resumed>) = 0 [pid 5867] <... memfd_create resumed>) = 3 [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5869] <... memfd_create resumed>) = 3 [pid 5868] symlink("/dev/binderfs", "./binderfs" [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5866] <... mmap resumed>) = 0x7f084fe00000 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5868] <... symlink resumed>) = 0 [pid 5867] <... mmap resumed>) = 0x7f084fe00000 [pid 5869] <... mmap resumed>) = 0x7f084fe00000 [pid 5868] write(1, "executing program\n", 18executing program ) = 18 [pid 5868] memfd_create("syzkaller", 0) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f084fe00000 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5869] <... write resumed>) = 16777216 [pid 5869] munmap(0x7f084fe00000, 138412032 [pid 5865] <... write resumed>) = 16777216 [pid 5865] munmap(0x7f084fe00000, 138412032 [pid 5869] <... munmap resumed>) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5867] <... write resumed>) = 16777216 [pid 5869] <... openat resumed>) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3 [pid 5867] munmap(0x7f084fe00000, 138412032 [pid 5866] <... write resumed>) = 16777216 [pid 5866] munmap(0x7f084fe00000, 138412032 [pid 5869] <... ioctl resumed>) = 0 [pid 5869] close(3 [pid 5868] <... write resumed>) = 16777216 [pid 5865] <... munmap resumed>) = 0 [pid 5869] <... close resumed>) = 0 [pid 5868] munmap(0x7f084fe00000, 138412032 [pid 5869] close(4 [pid 5865] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 86.625966][ T5869] loop0: detected capacity change from 0 to 32768 [pid 5869] <... close resumed>) = 0 [pid 5865] ioctl(4, LOOP_SET_FD, 3 [pid 5869] mkdir("./file0", 0777) = 0 [pid 5869] mount("/dev/loop0", "./file0", "gfs2", 0, "" [pid 5865] <... ioctl resumed>) = 0 [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] mkdir("./file0", 0777) = 0 [ 86.691842][ T5865] loop3: detected capacity change from 0 to 32768 [pid 5865] mount("/dev/loop3", "./file0", "gfs2", 0, "" [pid 5867] <... munmap resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3 [pid 5868] <... munmap resumed>) = 0 [pid 5867] <... ioctl resumed>) = 0 [pid 5867] close(3) = 0 [ 86.732146][ T5869] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.753292][ T5869] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.767306][ T5865] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 86.768279][ T5867] loop4: detected capacity change from 0 to 32768 [pid 5868] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5867] close(4 [pid 5868] <... openat resumed>) = 4 [pid 5867] <... close resumed>) = 0 [pid 5868] ioctl(4, LOOP_SET_FD, 3 [ 86.808132][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: syz-executor330 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) [ 86.808157][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.808173][ T5865] Call Trace: [ 86.808180][ T5865] [ 86.808187][ T5865] dump_stack_lvl+0x189/0x250 [ 86.808222][ T5865] ? kernfs_path_from_node+0x2c/0x260 [ 86.808246][ T5865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.808258][ T5865] ? __pfx__printk+0x10/0x10 [pid 5867] mkdir("./file0", 0777) = 0 [ 86.808275][ T5865] ? kernfs_path_from_node+0x2c/0x260 [ 86.808290][ T5865] ? kernfs_path_from_node+0x2c/0x260 [ 86.808309][ T5865] ? kernfs_path_from_node+0x22c/0x260 [ 86.808328][ T5865] ? kernfs_path_from_node+0x2c/0x260 [ 86.808350][ T5865] sysfs_create_dir_ns+0x259/0x280 [ 86.808373][ T5865] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 86.808396][ T5865] ? do_raw_spin_unlock+0x122/0x240 [ 86.808420][ T5865] kobject_add_internal+0x59f/0xb40 [ 86.808450][ T5865] kobject_init_and_add+0x125/0x190 [pid 5867] mount("/dev/loop4", "./file0", "gfs2", 0, "" [pid 5868] <... ioctl resumed>) = 0 [pid 5868] close(3) = 0 [pid 5868] close(4) = 0 [pid 5868] mkdir("./file0", 0777) = 0 [ 86.808472][ T5865] ? __pfx_kobject_init_and_add+0x10/0x10 [ 86.808491][ T5865] ? __raw_spin_lock_init+0x45/0x100 [ 86.808512][ T5865] ? __init_swait_queue_head+0xa9/0x150 [ 86.808536][ T5865] gfs2_sys_fs_add+0x237/0x470 [ 86.808555][ T5865] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 86.808578][ T5865] ? is_dynamic_key+0xd6/0x1c0 [ 86.808597][ T5865] ? __pfx_alloc_workqueue+0x10/0x10 [ 86.808625][ T5865] gfs2_fill_super+0x1348/0x2010 [ 86.808658][ T5865] ? __pfx_gfs2_fill_super+0x10/0x10 [pid 5868] mount("/dev/loop2", "./file0", "gfs2", 0, "" [pid 5866] <... munmap resumed>) = 0 [ 86.808683][ T5865] ? sb_set_blocksize+0x104/0x180 [ 86.808707][ T5865] ? setup_bdev_super+0x4c1/0x5b0 [ 86.808725][ T5865] get_tree_bdev_flags+0x40b/0x4d0 [ 86.808739][ T5865] ? __pfx_gfs2_fill_super+0x10/0x10 [ 86.808756][ T5865] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.808772][ T5865] ? rcu_is_watching+0x15/0xb0 [ 86.808790][ T5865] gfs2_get_tree+0x51/0x1e0 [ 86.808810][ T5865] vfs_get_tree+0x8f/0x2b0 [ 86.808828][ T5865] do_new_mount+0x24a/0xa40 [ 86.808852][ T5865] __se_sys_mount+0x317/0x410 [pid 5866] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 86.808873][ T5865] ? __pfx___se_sys_mount+0x10/0x10 [ 86.808889][ T5865] ? rcu_is_watching+0x15/0xb0 [ 86.808909][ T5865] ? __x64_sys_mount+0x20/0xc0 [ 86.808929][ T5865] do_syscall_64+0xfa/0x3b0 [ 86.808942][ T5865] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.808964][ T5865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.808980][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 86.808996][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.809009][ T5865] RIP: 0033:0x7f08582fd78a [ 86.809034][ T5865] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 6e 07 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.809047][ T5865] RSP: 002b:00007ffd5ff82038 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 86.809063][ T5865] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08582fd78a [ 86.809072][ T5865] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007ffd5ff82090 [ 86.809082][ T5865] RBP: 0000000000000004 R08: 00007ffd5ff820d0 R09: 0000000000037f56 [ 86.809090][ T5865] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000001000000 [ 86.809107][ T5865] R13: 00007ffd5ff820d0 R14: 0000200000037f80 R15: 0000000000000003 [ 86.809138][ T5865] [ 86.809970][ T5865] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 86.856693][ T5868] loop2: detected capacity change from 0 to 32768 [ 86.860020][ T5865] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 87.261938][ T5867] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 87.263123][ T5868] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 87.276064][ T5869] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 87.277795][ T5866] loop1: detected capacity change from 0 to 32768 [ 87.291051][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz-executor330 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) [pid 5866] ioctl(4, LOOP_SET_FD, 3) = 0 [ 87.291071][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.291079][ T5867] Call Trace: [ 87.291085][ T5867] [ 87.291092][ T5867] dump_stack_lvl+0x189/0x250 [ 87.291175][ T5867] ? kernfs_path_from_node+0x2c/0x260 [ 87.291195][ T5867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.291209][ T5867] ? __pfx__printk+0x10/0x10 [ 87.291225][ T5867] ? kernfs_path_from_node+0x2c/0x260 [ 87.291240][ T5867] ? kernfs_path_from_node+0x2c/0x260 [pid 5866] close(3) = 0 [pid 5866] close(4) = 0 [pid 5866] mkdir("./file0", 0777) = 0 [ 87.291257][ T5867] ? kernfs_path_from_node+0x22c/0x260 [ 87.291273][ T5867] ? kernfs_path_from_node+0x2c/0x260 [ 87.291291][ T5867] sysfs_create_dir_ns+0x259/0x280 [ 87.291312][ T5867] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.291331][ T5867] ? do_raw_spin_unlock+0x122/0x240 [ 87.291351][ T5867] kobject_add_internal+0x59f/0xb40 [ 87.291373][ T5867] kobject_init_and_add+0x125/0x190 [ 87.291391][ T5867] ? __pfx_kobject_init_and_add+0x10/0x10 [ 87.291405][ T5867] ? __raw_spin_lock_init+0x45/0x100 [ 87.291422][ T5867] ? __init_swait_queue_head+0xa9/0x150 [ 87.291444][ T5867] gfs2_sys_fs_add+0x237/0x470 [ 87.291462][ T5867] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 87.291484][ T5867] ? is_dynamic_key+0xd6/0x1c0 [ 87.291505][ T5867] ? __pfx_alloc_workqueue+0x10/0x10 [ 87.291537][ T5867] gfs2_fill_super+0x1348/0x2010 [ 87.291572][ T5867] ? __pfx_gfs2_fill_super+0x10/0x10 [ 87.291595][ T5867] ? sb_set_blocksize+0x104/0x180 [ 87.291619][ T5867] ? setup_bdev_super+0x4c1/0x5b0 [ 87.291640][ T5867] get_tree_bdev_flags+0x40b/0x4d0 [ 87.291656][ T5867] ? __pfx_gfs2_fill_super+0x10/0x10 [ 87.291675][ T5867] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.291691][ T5867] ? rcu_is_watching+0x15/0xb0 [ 87.291715][ T5867] gfs2_get_tree+0x51/0x1e0 [ 87.291740][ T5867] vfs_get_tree+0x8f/0x2b0 [ 87.291761][ T5867] do_new_mount+0x24a/0xa40 [ 87.291791][ T5867] __se_sys_mount+0x317/0x410 [ 87.291818][ T5867] ? __pfx___se_sys_mount+0x10/0x10 [ 87.291836][ T5867] ? rcu_is_watching+0x15/0xb0 [ 87.291859][ T5867] ? __x64_sys_mount+0x20/0xc0 [ 87.291881][ T5867] do_syscall_64+0xfa/0x3b0 [ 87.291896][ T5867] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.291940][ T5867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.291958][ T5867] ? clear_bhb_loop+0x60/0xb0 [ 87.291979][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.291995][ T5867] RIP: 0033:0x7f08582fd78a [ 87.292012][ T5867] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 6e 07 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.292025][ T5867] RSP: 002b:00007ffd5ff82038 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 87.292044][ T5867] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08582fd78a [ 87.292056][ T5867] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007ffd5ff82090 [ 87.292068][ T5867] RBP: 0000000000000004 R08: 00007ffd5ff820d0 R09: 0000000000037f56 [ 87.292079][ T5867] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000001000000 [ 87.292090][ T5867] R13: 00007ffd5ff820d0 R14: 0000200000037f80 R15: 0000000000000003 [ 87.292130][ T5867] [ 87.292264][ T5867] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 87.305082][ T5868] CPU: 0 UID: 0 PID: 5868 Comm: syz-executor330 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) [ 87.305104][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.305114][ T5868] Call Trace: [ 87.305121][ T5868] [ 87.305128][ T5868] dump_stack_lvl+0x189/0x250 [ 87.305150][ T5868] ? kernfs_path_from_node+0x2c/0x260 [ 87.305174][ T5868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.305190][ T5868] ? __pfx__printk+0x10/0x10 [ 87.305210][ T5868] ? kernfs_path_from_node+0x2c/0x260 [ 87.305230][ T5868] ? kernfs_path_from_node+0x2c/0x260 [ 87.305253][ T5868] ? kernfs_path_from_node+0x22c/0x260 [ 87.305287][ T5868] ? kernfs_path_from_node+0x2c/0x260 [ 87.305311][ T5868] sysfs_create_dir_ns+0x259/0x280 [ 87.305337][ T5868] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.305369][ T5868] ? do_raw_spin_unlock+0x122/0x240 [ 87.305393][ T5868] kobject_add_internal+0x59f/0xb40 [ 87.305420][ T5868] kobject_init_and_add+0x125/0x190 [ 87.305442][ T5868] ? __pfx_kobject_init_and_add+0x10/0x10 [ 87.305461][ T5868] ? __raw_spin_lock_init+0x45/0x100 [ 87.305482][ T5868] ? __init_swait_queue_head+0xa9/0x150 [ 87.305505][ T5868] gfs2_sys_fs_add+0x237/0x470 [ 87.305525][ T5868] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 87.305548][ T5868] ? is_dynamic_key+0xd6/0x1c0 [ 87.305570][ T5868] ? __pfx_alloc_workqueue+0x10/0x10 [ 87.305604][ T5868] gfs2_fill_super+0x1348/0x2010 [ 87.305640][ T5868] ? __pfx_gfs2_fill_super+0x10/0x10 [ 87.305666][ T5868] ? sb_set_blocksize+0x104/0x180 [ 87.305692][ T5868] ? setup_bdev_super+0x4c1/0x5b0 [ 87.305713][ T5868] get_tree_bdev_flags+0x40b/0x4d0 [ 87.305731][ T5868] ? __pfx_gfs2_fill_super+0x10/0x10 [ 87.305752][ T5868] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.305771][ T5868] ? rcu_is_watching+0x15/0xb0 [ 87.305793][ T5868] gfs2_get_tree+0x51/0x1e0 [ 87.305817][ T5868] vfs_get_tree+0x8f/0x2b0 [ 87.305838][ T5868] do_new_mount+0x24a/0xa40 [ 87.305866][ T5868] __se_sys_mount+0x317/0x410 [ 87.305892][ T5868] ? __pfx___se_sys_mount+0x10/0x10 [ 87.305910][ T5868] ? rcu_is_watching+0x15/0xb0 [ 87.305932][ T5868] ? __x64_sys_mount+0x20/0xc0 [ 87.305955][ T5868] do_syscall_64+0xfa/0x3b0 [ 87.305969][ T5868] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.305990][ T5868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.306007][ T5868] ? clear_bhb_loop+0x60/0xb0 [ 87.306027][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.306043][ T5868] RIP: 0033:0x7f08582fd78a [ 87.306059][ T5868] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 6e 07 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.306072][ T5868] RSP: 002b:00007ffd5ff82038 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 87.306089][ T5868] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08582fd78a [ 87.306100][ T5868] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007ffd5ff82090 [ 87.306112][ T5868] RBP: 0000000000000004 R08: 00007ffd5ff820d0 R09: 0000000000037f56 [ 87.306122][ T5868] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000001000000 [ 87.306133][ T5868] R13: 00007ffd5ff820d0 R14: 0000200000037f80 R15: 0000000000000003 [ 87.306160][ T5868] [ 87.306184][ T5868] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 87.319207][ T5865] ================================================================== [ 87.361520][ T5868] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 87.363293][ T5865] BUG: KASAN: null-ptr-deref in gfs2_drop_inode+0x20c/0x3a0 [ 87.381298][ T5868] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] SMP KASAN PTI [ 87.382376][ T5865] Read of size 8 at addr 00000000000000a8 by task syz-executor330/5865 [ 87.387583][ T5868] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 87.392757][ T5865] [ 87.392769][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz-executor330 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) [ 87.392789][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.392799][ T5865] Call Trace: [ 87.392809][ T5865] [ 87.392817][ T5865] dump_stack_lvl+0x189/0x250 [ 87.392839][ T5865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.392855][ T5865] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 87.392879][ T5865] ? gfs2_drop_inode+0x20c/0x3a0 [ 87.392903][ T5865] ? gfs2_drop_inode+0x20c/0x3a0 [ 87.392925][ T5865] kasan_report+0x118/0x150 [ 87.392944][ T5865] ? gfs2_drop_inode+0x20c/0x3a0 [ 87.392970][ T5865] kasan_check_range+0x2b0/0x2c0 [ 87.392988][ T5865] gfs2_drop_inode+0x20c/0x3a0 [ 87.393012][ T5865] iput+0x45d/0x9d0 [ 87.393034][ T5865] gfs2_fill_super+0x1418/0x2010 [ 87.393061][ T5865] ? __pfx_gfs2_fill_super+0x10/0x10 [ 87.393082][ T5865] ? sb_set_blocksize+0x104/0x180 [ 87.393105][ T5865] ? setup_bdev_super+0x4c1/0x5b0 [ 87.393123][ T5865] get_tree_bdev_flags+0x40b/0x4d0 [ 87.393140][ T5865] ? __pfx_gfs2_fill_super+0x10/0x10 [ 87.393160][ T5865] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.393178][ T5865] ? rcu_is_watching+0x15/0xb0 [ 87.393195][ T5865] gfs2_get_tree+0x51/0x1e0 [ 87.393215][ T5865] vfs_get_tree+0x8f/0x2b0 [ 87.393233][ T5865] do_new_mount+0x24a/0xa40 [ 87.393255][ T5865] __se_sys_mount+0x317/0x410 [ 87.393277][ T5865] ? __pfx___se_sys_mount+0x10/0x10 [ 87.393301][ T5865] ? rcu_is_watching+0x15/0xb0 [ 87.393318][ T5865] ? __x64_sys_mount+0x20/0xc0 [ 87.393337][ T5865] do_syscall_64+0xfa/0x3b0 [ 87.393354][ T5865] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.393375][ T5865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.393391][ T5865] ? clear_bhb_loop+0x60/0xb0 [ 87.393409][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.393425][ T5865] RIP: 0033:0x7f08582fd78a [ 87.393442][ T5865] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 6e 07 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.393455][ T5865] RSP: 002b:00007ffd5ff82038 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 87.393473][ T5865] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08582fd78a [ 87.393485][ T5865] RDX: 0000200000037f40 RSI: 0000200000037f80 RDI: 00007ffd5ff82090 [ 87.393496][ T5865] RBP: 0000000000000004 R08: 00007ffd5ff820d0 R09: 0000000000037f56 [ 87.393507][ T5865] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000001000000 [ 87.393517][ T5865] R13: 00007ffd5ff820d0 R14: 0000200000037f80 R15: 0000000000000003 [ 87.393534][ T5865] [ 87.393540][ T5865] ================================================================== [ 87.397951][ T5868] CPU: 0 UID: 0 PID: 5868 Comm: syz-executor330 Not tainted 6.15.0-next-20250530-syzkaller #0 PREEMPT(full) [ 87.405077][ T5865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.319859][ T5865] Kernel Offset: disabled [ 88.325186][ T5865] Rebooting in 86400 seconds..