./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3412599976 <...> DUID 00:04:b8:e6:73:7f:79:fd:ed:d3:a2:45:9d:0b:c9:97:07:5c forked to background, child pid 4665 [ 21.684835][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.698296][ T4666] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.183' (ECDSA) to the list of known hosts. execve("./syz-executor3412599976", ["./syz-executor3412599976"], 0x7ffd5c87a570 /* 10 vars */) = 0 brk(NULL) = 0x555555ac4000 brk(0x555555ac4c40) = 0x555555ac4c40 arch_prctl(ARCH_SET_FS, 0x555555ac4300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3412599976", 4096) = 28 brk(0x555555ae5c40) = 0x555555ae5c40 brk(0x555555ae6000) = 0x555555ae6000 mprotect(0x7f5dc03ce000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 4998 ./strace-static-x86_64: Process 4998 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] getpid() = 4998 [pid 4998] mkdir("./syzkaller.aQJbv6", 0700./strace-static-x86_64: Process 4999 attached ) = 0 [pid 4998] chmod("./syzkaller.aQJbv6", 0777 [pid 4997] <... clone resumed>, child_tidptr=0x555555ac45d0) = 4999 [pid 4998] <... chmod resumed>) = 0 [pid 4998] chdir("./syzkaller.aQJbv6") = 0 [pid 4998] mkdir("./0", 0777 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] getpid( [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4997] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5000 [pid 4999] <... getpid resumed>) = 4999 ./strace-static-x86_64: Process 5000 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] mkdir("./syzkaller.EoL44c", 0700 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3./strace-static-x86_64: Process 5001 attached [pid 4997] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5001 [pid 5000] getpid( [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getpid resumed>) = 5000 [pid 4999] chmod("./syzkaller.EoL44c", 0777 [pid 5000] mkdir("./syzkaller.g0oHOf", 0700 [pid 4999] <... chmod resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5002 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] chdir("./syzkaller.EoL44c" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] chmod("./syzkaller.g0oHOf", 0777 [pid 4999] <... chdir resumed>) = 0 [pid 5000] <... chmod resumed>) = 0 [pid 4999] mkdir("./0", 0777 [pid 4997] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5003 [pid 5000] chdir("./syzkaller.g0oHOf" [pid 4999] <... mkdir resumed>) = 0 [pid 5000] <... chdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] mkdir("./0", 0777 [pid 4999] <... openat resumed>) = 3 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5003 attached ./strace-static-x86_64: Process 5002 attached [pid 5001] getpid( [pid 5000] close(3 [pid 5003] getpid( [pid 5000] <... close resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5005 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... getpid resumed>) = 5003 [pid 5002] getpid( [pid 5001] <... getpid resumed>) = 5001 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] mkdir("./syzkaller.XGE8lx", 0700 [pid 5002] <... getpid resumed>) = 5002 [pid 5001] mkdir("./syzkaller.EF5sxk", 0700 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] mkdir("./syzkaller.vorshp", 0700 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5006 [pid 5003] chmod("./syzkaller.XGE8lx", 0777 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5007 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] chmod("./syzkaller.EF5sxk", 0777 [pid 5003] <... chmod resumed>) = 0 [pid 5002] chmod("./syzkaller.vorshp", 0777 [pid 5001] <... chmod resumed>) = 0 [pid 5003] chdir("./syzkaller.XGE8lx" [pid 5001] chdir("./syzkaller.EF5sxk") = 0 [pid 5001] mkdir("./0", 0777./strace-static-x86_64: Process 5005 attached [pid 5003] <... chdir resumed>) = 0 [pid 5002] <... chmod resumed>) = 0 [pid 5005] chdir("./0" [pid 5003] mkdir("./0", 0777 [pid 5002] chdir("./syzkaller.vorshp" [pid 5005] <... chdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... chdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] mkdir("./0", 0777 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5005] <... prctl resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... mkdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5007 attached [pid 5005] setpgid(0, 0 [pid 5003] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5007] chdir("./0" [pid 5005] <... setpgid resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5007] <... chdir resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5006 attached [pid 5007] <... prctl resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5007] setpgid(0, 0 [pid 5006] chdir("./0" [pid 5005] write(3, "1000", 4 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5008 [pid 5002] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5009 [pid 5007] <... setpgid resumed>) = 0 [pid 5006] <... chdir resumed>) = 0 [pid 5005] <... write resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5007] <... openat resumed>) = 3 [pid 5007] write(3, "1000", 4 [pid 5006] <... prctl resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5007] <... write resumed>) = 4 [pid 5006] setpgid(0, 0 [pid 5005] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5010 [pid 5007] close(3) = 0 [pid 5007] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... symlink resumed>) = 0 [pid 5006] <... setpgid resumed>) = 0 [pid 5007] <... symlink resumed>) = 0 [pid 5005] memfd_create("syzkaller", 0 [pid 5007] memfd_create("syzkaller", 0 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] <... memfd_create resumed>) = 3 [pid 5007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5006] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5008 attached ./strace-static-x86_64: Process 5009 attached [pid 5008] chdir("./0" [pid 5006] write(3, "1000", 4 [pid 5009] chdir("./0" [pid 5008] <... chdir resumed>) = 0 [pid 5006] <... write resumed>) = 4 [pid 5009] <... chdir resumed>) = 0 [pid 5008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] close(3./strace-static-x86_64: Process 5010 attached [pid 5009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5008] <... prctl resumed>) = 0 [pid 5006] <... close resumed>) = 0 [pid 5009] <... prctl resumed>) = 0 [pid 5008] setpgid(0, 0 [pid 5010] chdir("./0" [pid 5006] symlink("/dev/binderfs", "./binderfs" [pid 5009] setpgid(0, 0 [pid 5008] <... setpgid resumed>) = 0 [pid 5006] <... symlink resumed>) = 0 [pid 5010] <... chdir resumed>) = 0 [pid 5010] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5009] <... setpgid resumed>) = 0 [pid 5008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] memfd_create("syzkaller", 0 [pid 5009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5010] <... prctl resumed>) = 0 [pid 5008] <... openat resumed>) = 3 [pid 5006] <... memfd_create resumed>) = 3 [pid 5010] setpgid(0, 0 [pid 5009] <... openat resumed>) = 3 [pid 5008] write(3, "1000", 4 [pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5009] write(3, "1000", 4 [pid 5006] <... mmap resumed>) = 0x7f5db7f12000 [pid 5008] <... write resumed>) = 4 [pid 5010] <... setpgid resumed>) = 0 [pid 5009] <... write resumed>) = 4 [pid 5009] close(3) = 0 [pid 5008] close(3 [pid 5009] symlink("/dev/binderfs", "./binderfs" [pid 5008] <... close resumed>) = 0 [pid 5009] <... symlink resumed>) = 0 [pid 5008] symlink("/dev/binderfs", "./binderfs" [pid 5010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5009] memfd_create("syzkaller", 0 [pid 5010] <... openat resumed>) = 3 [pid 5009] <... memfd_create resumed>) = 3 [pid 5008] <... symlink resumed>) = 0 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5010] write(3, "1000", 4 [pid 5009] <... mmap resumed>) = 0x7f5db7f12000 [pid 5008] memfd_create("syzkaller", 0 [pid 5007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5010] <... write resumed>) = 4 [pid 5009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5008] <... memfd_create resumed>) = 3 [pid 5010] close(3 [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5010] <... close resumed>) = 0 [pid 5008] <... mmap resumed>) = 0x7f5db7f12000 [pid 5010] symlink("/dev/binderfs", "./binderfs" [pid 5005] <... memfd_create resumed>) = 3 [pid 5005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5010] <... symlink resumed>) = 0 [pid 5010] memfd_create("syzkaller", 0) = 3 [pid 5010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 syzkaller login: [ 43.312103][ T5005] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5005 'syz-executor341' [pid 5007] <... write resumed>) = 2097152 [pid 5007] munmap(0x7f5db7f12000, 2097152 [pid 5009] <... write resumed>) = 2097152 [pid 5007] <... munmap resumed>) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5007] <... openat resumed>) = 4 [pid 5007] ioctl(4, LOOP_SET_FD, 3 [pid 5005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5006] <... write resumed>) = 2097152 [pid 5009] munmap(0x7f5db7f12000, 2097152 [pid 5006] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5006] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5006] ioctl(4, LOOP_SET_FD, 3 [pid 5009] <... munmap resumed>) = 0 [pid 5009] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5009] ioctl(4, LOOP_SET_FD, 3 [pid 5010] <... write resumed>) = 2097152 [pid 5008] <... write resumed>) = 2097152 [pid 5007] <... ioctl resumed>) = 0 [pid 5006] <... ioctl resumed>) = 0 [pid 5010] munmap(0x7f5db7f12000, 2097152 [pid 5008] munmap(0x7f5db7f12000, 2097152 [pid 5007] close(3 [pid 5006] close(3 [pid 5010] <... munmap resumed>) = 0 [pid 5008] <... munmap resumed>) = 0 [pid 5007] <... close resumed>) = 0 [pid 5006] <... close resumed>) = 0 [pid 5010] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5008] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5007] mkdir("./file0", 0777 [pid 5006] mkdir("./file0", 0777 [pid 5010] <... openat resumed>) = 4 [pid 5008] <... openat resumed>) = 4 [pid 5007] <... mkdir resumed>) = 0 [pid 5010] ioctl(4, LOOP_SET_FD, 3 [pid 5008] ioctl(4, LOOP_SET_FD, 3 [pid 5007] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5006] <... mkdir resumed>) = 0 [pid 5009] <... ioctl resumed>) = 0 [pid 5009] close(3) = 0 [ 43.401333][ T5007] loop0: detected capacity change from 0 to 4096 [ 43.418640][ T5006] loop2: detected capacity change from 0 to 4096 [ 43.426937][ T5009] loop3: detected capacity change from 0 to 4096 [ 43.443338][ T5010] loop4: detected capacity change from 0 to 4096 [pid 5009] mkdir("./file0", 0777) = 0 [pid 5009] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5005] <... write resumed>) = 2097152 [pid 5006] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5005] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5010] <... ioctl resumed>) = 0 [pid 5008] <... ioctl resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5005] ioctl(4, LOOP_SET_FD, 3 [pid 5010] close(3 [ 43.450295][ T5008] loop5: detected capacity change from 0 to 4096 [ 43.464527][ T5006] NILFS (loop2): invalid segment: Checksum error in segment payload [ 43.470073][ T5007] NILFS (loop0): invalid segment: Checksum error in segment payload [ 43.482030][ T5006] NILFS (loop2): trying rollback from an earlier position [ 43.492196][ T5005] loop1: detected capacity change from 0 to 4096 [pid 5008] close(3 [pid 5010] <... close resumed>) = 0 [pid 5008] <... close resumed>) = 0 [pid 5010] mkdir("./file0", 0777 [pid 5008] mkdir("./file0", 0777 [pid 5010] <... mkdir resumed>) = 0 [pid 5008] <... mkdir resumed>) = 0 [pid 5008] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5005] <... ioctl resumed>) = 0 [pid 5010] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5005] close(3) = 0 [pid 5005] mkdir("./file0", 0777) = 0 [pid 5005] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5006] <... mount resumed>) = 0 [pid 5006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 43.494613][ T5007] NILFS (loop0): trying rollback from an earlier position [ 43.510298][ T5006] NILFS (loop2): recovery complete [ 43.519262][ T5009] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5006] chdir("./file0") = 0 [pid 5006] ioctl(4, LOOP_CLR_FD) = 0 [pid 5006] close(4) = 0 [ 43.544682][ T5010] NILFS (loop4): invalid segment: Checksum error in segment payload [ 43.550839][ T5012] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.554267][ T5008] NILFS (loop5): invalid segment: Checksum error in segment payload [ 43.568264][ T5009] NILFS (loop3): trying rollback from an earlier position [ 43.577843][ T5007] NILFS (loop0): recovery complete [ 43.581030][ T5005] NILFS (loop1): invalid segment: Checksum error in segment payload [ 43.592426][ T5005] NILFS (loop1): trying rollback from an earlier position [pid 5006] creat("./bus", 000) = 4 [pid 5006] open("./bus", O_RDONLY) = 5 [pid 5006] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5006] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [ 43.596885][ T5010] NILFS (loop4): trying rollback from an earlier position [ 43.607025][ T5008] NILFS (loop5): trying rollback from an earlier position [ 43.614789][ T27] audit: type=1804 audit(1684404963.379:2): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/0/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 43.638103][ T5013] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5006] unlink("./bus") = 0 [pid 5006] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5006] exit_group(0) = ? [ 43.649752][ T27] audit: type=1804 audit(1684404963.379:3): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/0/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 43.658557][ T5009] NILFS (loop3): recovery complete [ 43.677864][ T5010] NILFS (loop4): recovery complete [ 43.678367][ T5008] NILFS (loop5): recovery complete [ 43.683141][ T5005] NILFS (loop1): recovery complete [pid 5007] <... mount resumed>) = 0 [pid 5007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5007] chdir("./file0") = 0 [pid 5007] ioctl(4, LOOP_CLR_FD) = 0 [pid 5007] close(4) = 0 [pid 5007] creat("./bus", 000 [pid 5006] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5006, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5008] <... mount resumed>) = 0 [pid 5008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... restart_syscall resumed>) = 0 [pid 5008] <... openat resumed>) = 3 [pid 5008] chdir("./file0" [pid 5009] <... mount resumed>) = 0 [pid 5008] <... chdir resumed>) = 0 [pid 5007] <... creat resumed>) = 4 [pid 5000] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5008] ioctl(4, LOOP_CLR_FD [pid 5007] open("./bus", O_RDONLY [pid 5009] <... openat resumed>) = 3 [pid 5008] <... ioctl resumed>) = 0 [pid 5009] chdir("./file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5007] <... open resumed>) = 5 [pid 5009] <... chdir resumed>) = 0 [pid 5008] close(4 [pid 5010] <... mount resumed>) = 0 [pid 5009] ioctl(4, LOOP_CLR_FD [pid 5008] <... close resumed>) = 0 [pid 5007] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5009] <... ioctl resumed>) = 0 [pid 5008] creat("./bus", 000 [pid 5007] <... open resumed>) = 6 [pid 5000] <... openat resumed>) = 3 [pid 5010] <... openat resumed>) = 3 [ 43.693751][ T5015] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.694606][ T5014] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.720801][ T27] audit: type=1804 audit(1684404963.489:4): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.aQJbv6/0/file0/bus" dev="loop0" ino=12 res=1 errno=0 [pid 5009] close(4 [pid 5007] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] fstat(3, [pid 5010] chdir("./file0" [pid 5009] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./0/binderfs") = 0 [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5010] <... chdir resumed>) = 0 [pid 5010] ioctl(4, LOOP_CLR_FD) = 0 [pid 5010] close(4) = 0 [pid 5009] creat("./bus", 000 [pid 5008] <... creat resumed>) = 4 [pid 5007] <... write resumed>) = 32 [pid 5005] <... mount resumed>) = 0 [pid 5007] unlink("./bus" [pid 5005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5010] creat("./bus", 000 [pid 5008] open("./bus", O_RDONLY [pid 5005] <... openat resumed>) = 3 [pid 5009] <... creat resumed>) = 4 [pid 5008] <... open resumed>) = 5 [pid 5007] <... unlink resumed>) = 0 [pid 5005] chdir("./file0" [pid 5010] <... creat resumed>) = 4 [pid 5009] open("./bus", O_RDONLY [pid 5008] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5007] sendfile(4, 5, NULL, 145139829833722 [pid 5005] <... chdir resumed>) = 0 [pid 5010] open("./bus", O_RDONLY [pid 5009] <... open resumed>) = 5 [pid 5005] ioctl(4, LOOP_CLR_FD [pid 5008] <... open resumed>) = 6 [pid 5010] <... open resumed>) = 5 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5008] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5007] <... sendfile resumed>) = 32 [pid 5005] <... ioctl resumed>) = 0 [pid 5010] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5009] <... open resumed>) = 6 [pid 5007] exit_group(0 [pid 5005] close(4 [pid 5010] <... open resumed>) = 6 [pid 5009] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5008] <... write resumed>) = 32 [pid 5007] <... exit_group resumed>) = ? [pid 5005] <... close resumed>) = 0 [pid 5010] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5008] unlink("./bus" [pid 5005] creat("./bus", 000 [pid 5009] <... write resumed>) = 32 [pid 5008] <... unlink resumed>) = 0 [pid 5010] <... write resumed>) = 32 [pid 5009] unlink("./bus" [pid 5008] sendfile(4, 5, NULL, 145139829833722 [pid 5007] +++ exited with 0 +++ [pid 5010] unlink("./bus" [pid 5009] <... unlink resumed>) = 0 [pid 5008] <... sendfile resumed>) = 32 [ 43.743677][ T5016] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.756099][ T27] audit: type=1804 audit(1684404963.519:5): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.aQJbv6/0/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 43.756350][ T5017] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5007, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5010] <... unlink resumed>) = 0 [pid 5009] sendfile(4, 5, NULL, 145139829833722 [pid 5008] exit_group(0 [pid 5005] <... creat resumed>) = 4 [pid 5010] sendfile(4, 5, NULL, 145139829833722 [pid 5008] <... exit_group resumed>) = ? [pid 5005] open("./bus", O_RDONLY [pid 5008] +++ exited with 0 +++ [pid 5005] <... open resumed>) = 5 [pid 5005] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5005] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5005] unlink("./bus") = 0 [pid 5005] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5005] exit_group(0) = ? [pid 5005] +++ exited with 0 +++ [pid 5010] <... sendfile resumed>) = 32 [pid 5009] <... sendfile resumed>) = 32 [pid 5010] exit_group(0 [pid 5009] exit_group(0 [pid 5010] <... exit_group resumed>) = ? [pid 5009] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./0/file0", [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5008, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4999] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./0/file0" [pid 5003] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] fstat(3, [pid 4999] fstat(3, [pid 5010] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5009] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5010, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] getdents64(3, [pid 4998] fstat(3, [pid 5003] getdents64(3, [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5009, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... restart_syscall resumed>) = 0 [pid 4998] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... restart_syscall resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] lstat("./0/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./0/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./0" [pid 5001] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] unlink("./0/binderfs" [pid 5001] fstat(3, [pid 4999] unlink("./0/binderfs" [pid 4998] lstat("./0/binderfs", [pid 5002] getdents64(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5000] mkdir("./1", 0777 [pid 5001] getdents64(3, [pid 4999] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] unlink("./0/binderfs" [pid 5002] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./0/binderfs", [pid 5001] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] unlink("./0/binderfs" [pid 5001] lstat("./0/binderfs", [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] unlink("./0/binderfs" [pid 5000] <... mkdir resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [ 43.818832][ T27] audit: type=1804 audit(1684404963.569:6): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.XGE8lx/0/file0/bus" dev="loop5" ino=12 res=1 errno=0 [ 43.844324][ T27] audit: type=1804 audit(1684404963.569:7): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EF5sxk/0/file0/bus" dev="loop3" ino=12 res=1 errno=0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5018 ./strace-static-x86_64: Process 5018 attached [pid 5018] chdir("./1") = 0 [pid 5018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5018] setpgid(0, 0) = 0 [pid 5018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5018] write(3, "1000", 4) = 4 [pid 5018] close(3) = 0 [pid 5018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5018] memfd_create("syzkaller", 0) = 3 [pid 5018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 43.880747][ T27] audit: type=1804 audit(1684404963.569:8): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.XGE8lx/0/file0/bus" dev="loop5" ino=12 res=1 errno=0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./0/file0", [pid 4999] lstat("./0/file0", [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 5003] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5003] close(4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] rmdir("./0/file0" [pid 5003] rmdir("./0/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(3, [pid 4999] close(3 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] close(3 [pid 4999] rmdir("./0" [pid 5003] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] rmdir("./0" [pid 4999] mkdir("./1", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] mkdir("./1", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 4999] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5021 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5022 [pid 4998] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5021 attached [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 43.923110][ T27] audit: type=1804 audit(1684404963.579:9): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.vorshp/0/file0/bus" dev="loop4" ino=12 res=1 errno=0 [pid 5021] chdir("./1" [pid 4998] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5022 attached [pid 5021] <... chdir resumed>) = 0 [pid 5018] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5022] chdir("./1" [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5022] <... chdir resumed>) = 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5022] setpgid(0, 0) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5022] write(3, "1000", 4 [pid 4998] close(4 [pid 5022] <... write resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5022] close(3 [pid 4998] rmdir("./0/file0" [pid 5022] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5022] symlink("/dev/binderfs", "./binderfs" [pid 4998] getdents64(3, [pid 5022] <... symlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5022] memfd_create("syzkaller", 0 [pid 4998] close(3 [pid 5022] <... memfd_create resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] rmdir("./0" [pid 5022] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] <... rmdir resumed>) = 0 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] mkdir("./1", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5021] <... prctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5023 [ 43.992144][ T27] audit: type=1804 audit(1684404963.579:10): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EF5sxk/0/file0/bus" dev="loop3" ino=12 res=1 errno=0 [pid 5021] setpgid(0, 0 [pid 5002] lstat("./0/file0", [pid 5001] lstat("./0/file0", ./strace-static-x86_64: Process 5023 attached [pid 5023] chdir("./1") = 0 [pid 5023] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5023] setpgid(0, 0) = 0 [pid 5023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5023] write(3, "1000", 4) = 4 [pid 5023] close(3) = 0 [pid 5023] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5023] memfd_create("syzkaller", 0) = 3 [pid 5023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5021] <... setpgid resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5018] munmap(0x7f5db7f12000, 2097152 [pid 5002] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5021] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5021] write(3, "1000", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5021] memfd_create("syzkaller", 0 [pid 5018] <... munmap resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 4 [pid 5023] <... write resumed>) = 2097152 [pid 5021] <... memfd_create resumed>) = 3 [pid 5018] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] fstat(4, [pid 5001] fstat(4, [pid 5023] munmap(0x7f5db7f12000, 2097152 [pid 5021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5018] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5023] <... munmap resumed>) = 0 [pid 5022] <... write resumed>) = 2097152 [pid 5021] <... mmap resumed>) = 0x7f5db7f12000 [ 44.021189][ T27] audit: type=1804 audit(1684404963.579:11): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.vorshp/0/file0/bus" dev="loop4" ino=12 res=1 errno=0 [pid 5018] ioctl(4, LOOP_SET_FD, 3 [pid 5002] getdents64(4, [pid 5023] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5023] <... openat resumed>) = 4 [pid 5022] munmap(0x7f5db7f12000, 2097152 [pid 5021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5018] <... ioctl resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5023] ioctl(4, LOOP_SET_FD, 3 [pid 5022] <... munmap resumed>) = 0 [pid 5018] close(3 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(4 [pid 5002] rmdir("./0/file0" [pid 5001] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./0/file0" [pid 5002] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 5002] close(3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5022] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5018] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5023] <... ioctl resumed>) = 0 [pid 5022] <... openat resumed>) = 4 [pid 5018] mkdir("./file0", 0777 [pid 5002] rmdir("./0" [pid 5001] <... close resumed>) = 0 [pid 5023] close(3 [pid 5022] ioctl(4, LOOP_SET_FD, 3 [pid 5018] <... mkdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./0" [pid 5002] mkdir("./1", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] mkdir("./1", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5024 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5025 ./strace-static-x86_64: Process 5025 attached [pid 5018] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5023] <... close resumed>) = 0 [pid 5023] mkdir("./file0", 0777) = 0 [pid 5023] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5025] chdir("./1") = 0 [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5024 attached ) = 0 [pid 5025] setpgid(0, 0 [pid 5024] chdir("./1" [pid 5025] <... setpgid resumed>) = 0 [pid 5024] <... chdir resumed>) = 0 [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5025] <... openat resumed>) = 3 [pid 5024] <... prctl resumed>) = 0 [pid 5025] write(3, "1000", 4 [pid 5024] setpgid(0, 0 [pid 5025] <... write resumed>) = 4 [pid 5024] <... setpgid resumed>) = 0 [pid 5025] close(3 [pid 5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5025] <... close resumed>) = 0 [pid 5024] <... openat resumed>) = 3 [pid 5025] symlink("/dev/binderfs", "./binderfs" [pid 5024] write(3, "1000", 4 [pid 5025] <... symlink resumed>) = 0 [pid 5024] <... write resumed>) = 4 [pid 5025] memfd_create("syzkaller", 0 [pid 5024] close(3 [pid 5025] <... memfd_create resumed>) = 3 [ 44.074372][ T5018] loop2: detected capacity change from 0 to 4096 [ 44.084981][ T5023] loop0: detected capacity change from 0 to 4096 [ 44.095896][ T5022] loop5: detected capacity change from 0 to 4096 [pid 5024] <... close resumed>) = 0 [pid 5025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5024] symlink("/dev/binderfs", "./binderfs" [pid 5025] <... mmap resumed>) = 0x7f5db7f12000 [pid 5024] <... symlink resumed>) = 0 [pid 5024] memfd_create("syzkaller", 0) = 3 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5022] <... ioctl resumed>) = 0 [pid 5021] <... write resumed>) = 2097152 [pid 5022] close(3) = 0 [pid 5022] mkdir("./file0", 0777) = 0 [pid 5021] munmap(0x7f5db7f12000, 2097152 [pid 5022] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 44.118456][ T5018] NILFS (loop2): invalid segment: Checksum error in segment payload [ 44.142327][ T5023] NILFS (loop0): invalid segment: Checksum error in segment payload [ 44.156691][ T5018] NILFS (loop2): trying rollback from an earlier position [pid 5025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5021] <... munmap resumed>) = 0 [pid 5021] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5021] close(3) = 0 [pid 5021] mkdir("./file0", 0777 [pid 5025] <... write resumed>) = 2097152 [pid 5025] munmap(0x7f5db7f12000, 2097152 [pid 5024] <... write resumed>) = 2097152 [pid 5025] <... munmap resumed>) = 0 [pid 5024] munmap(0x7f5db7f12000, 2097152 [pid 5025] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5021] <... mkdir resumed>) = 0 [pid 5025] <... openat resumed>) = 4 [pid 5021] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5024] <... munmap resumed>) = 0 [pid 5025] ioctl(4, LOOP_SET_FD, 3 [ 44.167415][ T5022] NILFS (loop5): invalid segment: Checksum error in segment payload [ 44.176523][ T5023] NILFS (loop0): trying rollback from an earlier position [ 44.187939][ T5021] loop1: detected capacity change from 0 to 4096 [ 44.194725][ T5022] NILFS (loop5): trying rollback from an earlier position [ 44.204299][ T5023] NILFS (loop0): recovery complete [ 44.214438][ T5018] NILFS (loop2): recovery complete [pid 5024] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5024] ioctl(4, LOOP_SET_FD, 3 [pid 5025] <... ioctl resumed>) = 0 [pid 5025] close(3) = 0 [pid 5025] mkdir("./file0", 0777) = 0 [pid 5025] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5023] <... mount resumed>) = 0 [pid 5018] <... mount resumed>) = 0 [pid 5024] <... ioctl resumed>) = 0 [pid 5024] close(3) = 0 [pid 5024] mkdir("./file0", 0777) = 0 [ 44.216884][ T5025] loop3: detected capacity change from 0 to 4096 [ 44.223146][ T5021] NILFS (loop1): invalid segment: Checksum error in segment payload [ 44.228250][ T5024] loop4: detected capacity change from 0 to 4096 [ 44.241852][ T5022] NILFS (loop5): recovery complete [ 44.247613][ T5026] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.248644][ T5027] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5024] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5022] <... mount resumed>) = 0 [pid 5018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5023] <... openat resumed>) = 3 [pid 5023] chdir("./file0") = 0 [pid 5023] ioctl(4, LOOP_CLR_FD) = 0 [pid 5023] close(4) = 0 [pid 5023] creat("./bus", 000 [pid 5022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5022] chdir("./file0" [pid 5018] <... openat resumed>) = 3 [pid 5022] <... chdir resumed>) = 0 [pid 5022] ioctl(4, LOOP_CLR_FD) = 0 [pid 5022] close(4) = 0 [pid 5022] creat("./bus", 000 [pid 5023] <... creat resumed>) = 4 [pid 5018] chdir("./file0" [pid 5023] open("./bus", O_RDONLY [pid 5018] <... chdir resumed>) = 0 [pid 5023] <... open resumed>) = 5 [pid 5018] ioctl(4, LOOP_CLR_FD [pid 5023] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5018] <... ioctl resumed>) = 0 [pid 5023] <... open resumed>) = 6 [pid 5018] close(4 [pid 5023] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5018] <... close resumed>) = 0 [ 44.265588][ T5021] NILFS (loop1): trying rollback from an earlier position [ 44.270899][ T5028] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.299408][ T5024] NILFS (loop4): invalid segment: Checksum error in segment payload [ 44.310304][ T5025] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5018] creat("./bus", 000 [pid 5023] <... write resumed>) = 32 [pid 5023] unlink("./bus" [pid 5018] <... creat resumed>) = 4 [pid 5023] <... unlink resumed>) = 0 [pid 5018] open("./bus", O_RDONLY [pid 5023] sendfile(4, 5, NULL, 145139829833722 [pid 5018] <... open resumed>) = 5 [pid 5018] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5018] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5023] <... sendfile resumed>) = 32 [pid 5023] exit_group(0 [pid 5018] <... write resumed>) = 32 [pid 5023] <... exit_group resumed>) = ? [pid 5018] unlink("./bus") = 0 [pid 5023] +++ exited with 0 +++ [pid 5018] sendfile(4, 5, NULL, 145139829833722 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5023, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5018] <... sendfile resumed>) = 32 [pid 4998] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5018] exit_group(0 [pid 4998] <... openat resumed>) = 3 [pid 5018] <... exit_group resumed>) = ? [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./1/binderfs") = 0 [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5018] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5018, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 44.319632][ T5025] NILFS (loop3): trying rollback from an earlier position [ 44.328968][ T5021] NILFS (loop1): recovery complete [ 44.347951][ T5025] NILFS (loop3): recovery complete [ 44.357171][ T5029] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5025] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5025] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5025] <... openat resumed>) = 3 [pid 5021] <... mount resumed>) = 0 [pid 5021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5025] chdir("./file0" [pid 5021] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5025] <... chdir resumed>) = 0 [pid 5021] chdir("./file0" [pid 5000] fstat(3, [pid 5025] ioctl(4, LOOP_CLR_FD [pid 5021] <... chdir resumed>) = 0 [pid 5025] <... ioctl resumed>) = 0 [pid 5021] ioctl(4, LOOP_CLR_FD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5025] close(4 [pid 5021] <... ioctl resumed>) = 0 [pid 5021] close(4 [pid 5000] getdents64(3, [pid 5025] <... close resumed>) = 0 [pid 5021] <... close resumed>) = 0 [pid 5021] creat("./bus", 000 [pid 5025] creat("./bus", 000 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5022] <... creat resumed>) = 4 [pid 5000] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5025] <... creat resumed>) = 4 [pid 5022] open("./bus", O_RDONLY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5025] open("./bus", O_RDONLY [pid 5022] <... open resumed>) = 5 [pid 5000] lstat("./1/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5025] <... open resumed>) = 5 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5025] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5022] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] lstat("./1/file0", [pid 5000] unlink("./1/binderfs" [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4998] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5025] <... open resumed>) = 6 [pid 5022] <... open resumed>) = 6 [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5021] <... creat resumed>) = 4 [pid 5025] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5022] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5021] open("./bus", O_RDONLY [pid 5000] <... umount2 resumed>) = 0 [ 44.357896][ T5030] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.376951][ T5024] NILFS (loop4): trying rollback from an earlier position [pid 4998] <... openat resumed>) = 4 [pid 5025] <... write resumed>) = 32 [pid 5022] <... write resumed>) = 32 [pid 5021] <... open resumed>) = 5 [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 5025] unlink("./bus" [pid 5022] unlink("./bus" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./1/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./1") = 0 [pid 4998] mkdir("./2", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5025] <... unlink resumed>) = 0 [pid 5021] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5025] sendfile(4, 5, NULL, 145139829833722 [pid 5000] lstat("./1/file0", [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5025] <... sendfile resumed>) = 32 [pid 5022] <... unlink resumed>) = 0 [pid 5021] <... open resumed>) = 6 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5025] exit_group(0 [pid 5022] sendfile(4, 5, NULL, 145139829833722 [pid 4998] close(3 [pid 5025] <... exit_group resumed>) = ? [pid 5024] <... mount resumed>) = 0 [pid 5021] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5032 ./strace-static-x86_64: Process 5032 attached [pid 5032] chdir("./2") = 0 [pid 5032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5025] +++ exited with 0 +++ [pid 5024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5022] <... sendfile resumed>) = 32 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] setpgid(0, 0 [pid 5022] exit_group(0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5025, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5032] <... setpgid resumed>) = 0 [pid 5022] <... exit_group resumed>) = ? [pid 5032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5024] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... openat resumed>) = 3 [pid 5024] chdir("./file0" [pid 5021] <... write resumed>) = 32 [pid 5001] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5032] write(3, "1000", 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... write resumed>) = 4 [pid 5021] unlink("./bus" [pid 5001] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(4, [pid 5024] <... chdir resumed>) = 0 [pid 5032] close(3 [pid 5024] ioctl(4, LOOP_CLR_FD [pid 5022] +++ exited with 0 +++ [pid 5021] <... unlink resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5032] <... close resumed>) = 0 [pid 5024] <... ioctl resumed>) = 0 [pid 5021] sendfile(4, 5, NULL, 145139829833722 [pid 5001] fstat(3, [pid 5000] getdents64(4, [pid 5032] symlink("/dev/binderfs", "./binderfs" [pid 5024] close(4 [pid 5021] <... sendfile resumed>) = 32 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5022, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5032] <... symlink resumed>) = 0 [pid 5024] <... close resumed>) = 0 [pid 5021] exit_group(0 [pid 5003] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5000] getdents64(4, [pid 5032] memfd_create("syzkaller", 0 [pid 5024] creat("./bus", 000 [pid 5021] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5032] <... memfd_create resumed>) = 3 [pid 5003] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5021] +++ exited with 0 +++ [pid 5001] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(4 [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5032] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] fstat(3, [pid 5001] lstat("./1/binderfs", [pid 5000] rmdir("./1/file0" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5021, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5024] <... creat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5024] open("./bus", O_RDONLY [pid 5003] getdents64(3, [ 44.426556][ T5024] NILFS (loop4): recovery complete [ 44.436736][ T5031] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] unlink("./1/binderfs" [pid 5000] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5024] <... open resumed>) = 5 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(3, [pid 5003] lstat("./1/binderfs", [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 5003] unlink("./1/binderfs" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./1/binderfs" [pid 5032] <... write resumed>) = 2097152 [pid 5024] <... open resumed>) = 6 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] close(3 [pid 4999] <... unlink resumed>) = 0 [pid 5024] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] munmap(0x7f5db7f12000, 2097152 [pid 5024] <... write resumed>) = 32 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 5024] unlink("./bus" [pid 5000] rmdir("./1" [pid 5024] <... unlink resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5024] sendfile(4, 5, NULL, 145139829833722 [pid 5000] mkdir("./2", 0777 [pid 5024] <... sendfile resumed>) = 32 [pid 5000] <... mkdir resumed>) = 0 [pid 5024] exit_group(0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5024] <... exit_group resumed>) = ? [pid 5000] <... openat resumed>) = 3 [pid 5024] +++ exited with 0 +++ [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5024, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] lstat("./1/file0", [pid 5000] close(3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 5032] <... munmap resumed>) = 0 [pid 5003] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 5003] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5033 [pid 5003] <... openat resumed>) = 4 [pid 5002] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5032] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] fstat(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5032] <... openat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, [pid 5032] ioctl(4, LOOP_SET_FD, 3 [pid 5003] getdents64(4, [pid 5002] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] fstat(3, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(4./strace-static-x86_64: Process 5033 attached [pid 5003] getdents64(4, [pid 5002] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5033] chdir("./2" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] rmdir("./1/file0" [pid 5033] <... chdir resumed>) = 0 [pid 5003] close(4 [pid 5002] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 5033] <... prctl resumed>) = 0 [pid 5003] rmdir("./1/file0" [pid 5002] lstat("./1/binderfs", [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] setpgid(0, 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(3 [pid 5032] <... ioctl resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] unlink("./1/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5033] <... setpgid resumed>) = 0 [pid 5032] close(3 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] rmdir("./1" [pid 4999] lstat("./1/file0", [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5032] <... close resumed>) = 0 [pid 5003] close(3 [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5032] mkdir("./file0", 0777 [pid 5003] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4999] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./1/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./1") = 0 [pid 4999] mkdir("./2", 0777 [pid 5033] <... openat resumed>) = 3 [pid 5003] rmdir("./1" [pid 5001] mkdir("./2", 0777 [pid 4999] <... mkdir resumed>) = 0 [pid 5033] write(3, "1000", 4 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] mkdir("./2", 0777 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5033] <... write resumed>) = 4 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5034 [pid 5033] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5034 attached [pid 5034] chdir("./2") = 0 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5034] write(3, "1000", 4) = 4 [pid 5034] close(3) = 0 [pid 5034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5034] memfd_create("syzkaller", 0) = 3 [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5033] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5002] lstat("./1/file0", [pid 5033] <... symlink resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5033] memfd_create("syzkaller", 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(3 [pid 5033] <... memfd_create resumed>) = 3 [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 44.550437][ T5032] loop0: detected capacity change from 0 to 4096 [ 44.584402][ T5032] NILFS (loop0): invalid segment: Checksum error in segment payload [ 44.593365][ T5032] NILFS (loop0): trying rollback from an earlier position [pid 5001] close(3 [pid 5033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 5033] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... openat resumed>) = 4 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5036 attached [pid 5036] chdir("./2" [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5035 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5036 [pid 5002] getdents64(4, [pid 5036] <... chdir resumed>) = 0 [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5036] <... prctl resumed>) = 0 [pid 5036] setpgid(0, 0) = 0 [pid 5002] rmdir("./1/file0" [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, ./strace-static-x86_64: Process 5035 attached 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5035] chdir("./2" [pid 5002] close(3 [pid 5035] <... chdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5036] <... openat resumed>) = 3 [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] rmdir("./1" [pid 5036] write(3, "1000", 4 [pid 5035] <... prctl resumed>) = 0 [pid 5036] <... write resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5036] close(3) = 0 [pid 5036] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5036] memfd_create("syzkaller", 0) = 3 [pid 5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5035] setpgid(0, 0 [pid 5033] <... write resumed>) = 2097152 [ 44.612451][ T5032] NILFS (loop0): recovery complete [pid 5002] mkdir("./2", 0777 [pid 5036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5035] <... setpgid resumed>) = 0 [pid 5032] <... mount resumed>) = 0 [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... mkdir resumed>) = 0 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5035] <... openat resumed>) = 3 [pid 5032] chdir("./file0" [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5035] write(3, "1000", 4 [pid 5032] <... chdir resumed>) = 0 [pid 5035] <... write resumed>) = 4 [pid 5033] munmap(0x7f5db7f12000, 2097152 [pid 5032] ioctl(4, LOOP_CLR_FD [pid 5002] <... openat resumed>) = 3 [pid 5035] close(3 [pid 5033] <... munmap resumed>) = 0 [pid 5032] <... ioctl resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5035] <... close resumed>) = 0 [pid 5035] symlink("/dev/binderfs", "./binderfs" [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5032] close(4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5035] <... symlink resumed>) = 0 [pid 5034] <... write resumed>) = 2097152 [pid 5033] <... openat resumed>) = 4 [pid 5032] <... close resumed>) = 0 [pid 5002] close(3 [pid 5035] memfd_create("syzkaller", 0 [pid 5033] ioctl(4, LOOP_SET_FD, 3 [pid 5032] creat("./bus", 000 [pid 5002] <... close resumed>) = 0 [pid 5035] <... memfd_create resumed>) = 3 [pid 5032] <... creat resumed>) = 4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5034] munmap(0x7f5db7f12000, 2097152 [pid 5032] open("./bus", O_RDONLY [pid 5035] <... mmap resumed>) = 0x7f5db7f12000 [pid 5034] <... munmap resumed>) = 0 [pid 5032] <... open resumed>) = 5 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5038 ./strace-static-x86_64: Process 5038 attached [pid 5033] <... ioctl resumed>) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5038] chdir("./2") = 0 [pid 5038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5032] <... open resumed>) = 6 [pid 5038] setpgid(0, 0 [pid 5032] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5038] <... setpgid resumed>) = 0 [pid 5036] <... write resumed>) = 2097152 [pid 5034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5033] close(3 [pid 5038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5038] write(3, "1000", 4) = 4 [pid 5032] <... write resumed>) = 32 [pid 5038] close(3 [pid 5033] <... close resumed>) = 0 [pid 5032] unlink("./bus" [pid 5038] <... close resumed>) = 0 [pid 5034] <... openat resumed>) = 4 [pid 5038] symlink("/dev/binderfs", "./binderfs" [pid 5036] munmap(0x7f5db7f12000, 2097152 [pid 5038] <... symlink resumed>) = 0 [pid 5035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 44.647576][ T5037] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.675435][ T5033] loop2: detected capacity change from 0 to 4096 [pid 5034] ioctl(4, LOOP_SET_FD, 3 [pid 5033] mkdir("./file0", 0777 [pid 5032] <... unlink resumed>) = 0 [pid 5038] memfd_create("syzkaller", 0 [pid 5036] <... munmap resumed>) = 0 [pid 5034] <... ioctl resumed>) = 0 [pid 5033] <... mkdir resumed>) = 0 [pid 5032] sendfile(4, 5, NULL, 145139829833722 [pid 5038] <... memfd_create resumed>) = 3 [pid 5036] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5033] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5036] <... openat resumed>) = 4 [pid 5035] <... write resumed>) = 2097152 [pid 5034] close(3 [pid 5032] <... sendfile resumed>) = 32 [pid 5038] <... mmap resumed>) = 0x7f5db7f12000 [pid 5036] ioctl(4, LOOP_SET_FD, 3 [pid 5035] munmap(0x7f5db7f12000, 2097152 [pid 5034] <... close resumed>) = 0 [pid 5032] exit_group(0 [pid 5038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5036] <... ioctl resumed>) = 0 [pid 5035] <... munmap resumed>) = 0 [pid 5034] mkdir("./file0", 0777 [pid 5032] <... exit_group resumed>) = ? [pid 5036] close(3 [pid 5035] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5034] <... mkdir resumed>) = 0 [pid 5036] <... close resumed>) = 0 [pid 5035] <... openat resumed>) = 4 [pid 5034] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5036] mkdir("./file0", 0777 [pid 5035] ioctl(4, LOOP_SET_FD, 3 [pid 5032] +++ exited with 0 +++ [pid 5036] <... mkdir resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5032, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 44.707837][ T5034] loop1: detected capacity change from 0 to 4096 [ 44.725392][ T5033] NILFS (loop2): invalid segment: Checksum error in segment payload [ 44.731728][ T5036] loop3: detected capacity change from 0 to 4096 [ 44.733612][ T5033] NILFS (loop2): trying rollback from an earlier position [ 44.750203][ T5035] loop5: detected capacity change from 0 to 4096 [pid 5036] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5035] <... ioctl resumed>) = 0 [pid 5035] close(3 [pid 4998] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5035] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 5035] mkdir("./file0", 0777 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5035] <... mkdir resumed>) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5035] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./2/binderfs") = 0 [pid 5038] <... write resumed>) = 2097152 [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 44.754724][ T5034] NILFS (loop1): invalid segment: Checksum error in segment payload [ 44.777254][ T5034] NILFS (loop1): trying rollback from an earlier position [ 44.778449][ T5036] NILFS (loop3): invalid segment: Checksum error in segment payload [ 44.784458][ T5033] NILFS (loop2): recovery complete [ 44.800208][ T5035] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5038] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5038] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5038] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5038] close(3) = 0 [pid 5038] mkdir("./file0", 0777) = 0 [pid 5038] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5035] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [ 44.810929][ T5035] NILFS (loop5): trying rollback from an earlier position [ 44.820618][ T5038] loop4: detected capacity change from 0 to 4096 [ 44.820959][ T5036] NILFS (loop3): trying rollback from an earlier position [ 44.829120][ T5034] NILFS (loop1): recovery complete [ 44.843788][ T5035] NILFS (loop5): recovery complete [ 44.846059][ T5039] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5035] chdir("./file0" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5035] <... chdir resumed>) = 0 [pid 4998] lstat("./2/file0", [pid 5035] ioctl(4, LOOP_CLR_FD) = 0 [pid 5033] <... mount resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5035] close(4 [pid 4998] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5035] <... close resumed>) = 0 [pid 5035] creat("./bus", 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5035] <... creat resumed>) = 4 [pid 5033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] <... openat resumed>) = 3 [pid 5033] chdir("./file0") = 0 [pid 5033] ioctl(4, LOOP_CLR_FD) = 0 [pid 5033] close(4) = 0 [pid 5033] creat("./bus", 000 [pid 5035] open("./bus", O_RDONLY [pid 4998] <... openat resumed>) = 4 [pid 5035] <... open resumed>) = 5 [pid 4998] fstat(4, [pid 5035] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5033] <... creat resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5033] open("./bus", O_RDONLY) = 5 [pid 5033] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 44.856820][ T5040] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.870845][ T5036] NILFS (loop3): recovery complete [ 44.880127][ T5038] NILFS (loop4): invalid segment: Checksum error in segment payload [ 44.889511][ T5038] NILFS (loop4): trying rollback from an earlier position [ 44.896146][ T5041] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5033] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5035] <... open resumed>) = 6 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5035] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5034] <... mount resumed>) = 0 [pid 5033] <... write resumed>) = 32 [pid 4998] getdents64(4, [pid 5034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5033] unlink("./bus" [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5034] chdir("./file0" [pid 4998] close(4) = 0 [pid 4998] rmdir("./2/file0" [pid 5035] <... write resumed>) = 32 [pid 5034] <... chdir resumed>) = 0 [pid 5033] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5035] unlink("./bus" [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./2") = 0 [pid 4998] mkdir("./3", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5044 [pid 5034] ioctl(4, LOOP_CLR_FD [pid 5033] sendfile(4, 5, NULL, 145139829833722 [pid 5034] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5044 attached [pid 5035] <... unlink resumed>) = 0 [pid 5033] <... sendfile resumed>) = 32 [pid 5035] sendfile(4, 5, NULL, 145139829833722 [pid 5036] <... mount resumed>) = 0 [pid 5034] close(4 [pid 5033] exit_group(0 [pid 5036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5035] <... sendfile resumed>) = 32 [pid 5034] <... close resumed>) = 0 [pid 5033] <... exit_group resumed>) = ? [pid 5035] exit_group(0) = ? [pid 5034] creat("./bus", 000 [pid 5036] <... openat resumed>) = 3 [pid 5036] chdir("./file0" [pid 5035] +++ exited with 0 +++ [pid 5034] <... creat resumed>) = 4 [pid 5033] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5035, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5036] <... chdir resumed>) = 0 [pid 5034] open("./bus", O_RDONLY [pid 5000] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, [pid 5036] ioctl(4, LOOP_CLR_FD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] chdir("./3" [pid 5036] <... ioctl resumed>) = 0 [pid 5034] <... open resumed>) = 5 [pid 5000] getdents64(3, [pid 5036] close(4 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5036] <... close resumed>) = 0 [pid 5000] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5034] <... open resumed>) = 6 [pid 5000] unlink("./2/binderfs" [pid 5036] creat("./bus", 000 [pid 5044] <... chdir resumed>) = 0 [pid 5034] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 44.905020][ T5038] NILFS (loop4): recovery complete [ 44.919230][ T5042] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5038] <... mount resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5038] chdir("./file0") = 0 [pid 5038] ioctl(4, LOOP_CLR_FD) = 0 [pid 5038] close(4) = 0 [pid 5038] creat("./bus", 000 [pid 5003] fstat(3, [pid 5034] <... write resumed>) = 32 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5044] <... prctl resumed>) = 0 [pid 5034] unlink("./bus" [pid 5003] getdents64(3, [pid 5044] setpgid(0, 0) = 0 [pid 5036] <... creat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5036] open("./bus", O_RDONLY [pid 5003] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... unlink resumed>) = 0 [pid 5036] <... open resumed>) = 5 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] <... openat resumed>) = 3 [pid 5003] lstat("./2/binderfs", [pid 5044] write(3, "1000", 4 [pid 5036] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5034] sendfile(4, 5, NULL, 145139829833722 [pid 5044] <... write resumed>) = 4 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5044] close(3 [pid 5038] <... creat resumed>) = 4 [pid 5036] <... open resumed>) = 6 [pid 5034] <... sendfile resumed>) = 32 [pid 5003] unlink("./2/binderfs" [pid 5038] open("./bus", O_RDONLY [pid 5034] exit_group(0 [pid 5044] <... close resumed>) = 0 [pid 5038] <... open resumed>) = 5 [pid 5034] <... exit_group resumed>) = ? [pid 5044] symlink("/dev/binderfs", "./binderfs" [pid 5038] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5036] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5034] +++ exited with 0 +++ [pid 5003] <... unlink resumed>) = 0 [pid 5038] <... open resumed>) = 6 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5038] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5044] <... symlink resumed>) = 0 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... restart_syscall resumed>) = 0 [pid 5044] memfd_create("syzkaller", 0 [pid 5038] <... write resumed>) = 32 [pid 5036] <... write resumed>) = 32 [pid 4999] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5038] unlink("./bus" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./2/binderfs", [pid 5044] <... memfd_create resumed>) = 3 [pid 5036] unlink("./bus" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./2/binderfs") = 0 [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5038] <... unlink resumed>) = 0 [pid 5038] sendfile(4, 5, NULL, 145139829833722 [pid 5044] <... mmap resumed>) = 0x7f5db7f12000 [pid 5036] <... unlink resumed>) = 0 [pid 5038] <... sendfile resumed>) = 32 [pid 5036] sendfile(4, 5, NULL, 145139829833722 [pid 5038] exit_group(0) = ? [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./2/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./2") = 0 [pid 5000] mkdir("./3", 0777 [pid 5036] <... sendfile resumed>) = 32 [pid 5036] exit_group(0) = ? [pid 5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5038] +++ exited with 0 +++ [pid 5036] +++ exited with 0 +++ [ 44.957817][ T5043] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5038, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] <... mkdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5036, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] fstat(3, [pid 5001] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 5002] getdents64(3, [pid 5001] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] fstat(3, [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5045 attached [pid 5044] <... write resumed>) = 2097152 [pid 5003] lstat("./2/file0", [pid 5002] lstat("./2/binderfs", [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5045 [pid 4999] lstat("./2/file0", [pid 5045] chdir("./3" [pid 5044] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5045] <... chdir resumed>) = 0 [pid 5044] <... munmap resumed>) = 0 [pid 5003] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./2/binderfs" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5044] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... unlink resumed>) = 0 [pid 5001] lstat("./2/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5045] <... prctl resumed>) = 0 [pid 5044] <... openat resumed>) = 4 [pid 5003] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5045] setpgid(0, 0 [pid 5044] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... openat resumed>) = 4 [pid 5001] unlink("./2/binderfs" [pid 4999] <... openat resumed>) = 4 [pid 5045] <... setpgid resumed>) = 0 [pid 5003] fstat(4, [pid 5001] <... unlink resumed>) = 0 [pid 4999] fstat(4, [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5045] <... openat resumed>) = 3 [pid 5003] getdents64(4, [pid 4999] getdents64(4, [pid 5045] write(3, "1000", 4 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5045] <... write resumed>) = 4 [pid 5044] <... ioctl resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] getdents64(4, [pid 5045] close(3 [pid 5044] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5045] <... close resumed>) = 0 [pid 5044] <... close resumed>) = 0 [pid 5003] close(4 [pid 4999] close(4 [pid 5045] symlink("/dev/binderfs", "./binderfs" [pid 5044] mkdir("./file0", 0777 [pid 5003] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5045] <... symlink resumed>) = 0 [pid 5044] <... mkdir resumed>) = 0 [pid 5003] rmdir("./2/file0" [pid 4999] rmdir("./2/file0" [pid 5045] memfd_create("syzkaller", 0 [pid 5044] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5045] <... memfd_create resumed>) = 3 [pid 5003] getdents64(3, [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5045] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] close(3 [pid 5002] lstat("./2/file0", [pid 4999] close(3 [pid 5003] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5003] rmdir("./2" [pid 5002] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./2" [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./2/file0", [pid 5003] mkdir("./3", 0777 [ 45.060526][ T5044] loop0: detected capacity change from 0 to 4096 [pid 5002] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./2/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] rmdir("./2" [pid 4999] mkdir("./3", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] fstat(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./3", 0777 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] getdents64(4, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] close(3 [pid 5002] getdents64(4, [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] close(4 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5046 [pid 4999] close(3 [pid 5002] <... close resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5047 [pid 5002] rmdir("./2/file0" [pid 4999] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5048 attached ./strace-static-x86_64: Process 5047 attached [pid 5045] <... write resumed>) = 2097152 [pid 5002] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5048 [pid 5045] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... close resumed>) = 0 [pid 5048] chdir("./3" [pid 5047] chdir("./3" [pid 5002] rmdir("./2"./strace-static-x86_64: Process 5046 attached ) = 0 [pid 5048] <... chdir resumed>) = 0 [pid 5047] <... chdir resumed>) = 0 [pid 5046] chdir("./3" [pid 5045] <... munmap resumed>) = 0 [pid 5002] mkdir("./3", 0777 [pid 5048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5046] <... chdir resumed>) = 0 [pid 5045] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5048] <... prctl resumed>) = 0 [pid 5047] <... prctl resumed>) = 0 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5045] <... openat resumed>) = 4 [ 45.116219][ T5044] NILFS (loop0): invalid segment: Checksum error in segment payload [ 45.129337][ T5044] NILFS (loop0): trying rollback from an earlier position [pid 5002] <... mkdir resumed>) = 0 [pid 5046] <... prctl resumed>) = 0 [pid 5046] setpgid(0, 0) = 0 [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1000", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] symlink("/dev/binderfs", "./binderfs" [pid 5048] setpgid(0, 0 [pid 5046] <... symlink resumed>) = 0 [pid 5045] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5047] setpgid(0, 0 [pid 5048] <... setpgid resumed>) = 0 [pid 5046] memfd_create("syzkaller", 0) = 3 [pid 5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5047] <... setpgid resumed>) = 0 [pid 5045] <... ioctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5048] <... openat resumed>) = 3 [pid 5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5048] write(3, "1000", 4 [pid 5045] close(3 [pid 5047] <... openat resumed>) = 3 [pid 5048] <... write resumed>) = 4 [pid 5047] write(3, "1000", 4 [pid 5045] <... close resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5048] close(3 [pid 5047] <... write resumed>) = 4 [pid 5045] mkdir("./file0", 0777 [pid 5002] close(3 [pid 5048] <... close resumed>) = 0 [pid 5047] close(3 [pid 5002] <... close resumed>) = 0 [pid 5048] symlink("/dev/binderfs", "./binderfs" [pid 5047] <... close resumed>) = 0 [pid 5045] <... mkdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5048] <... symlink resumed>) = 0 [pid 5047] symlink("/dev/binderfs", "./binderfs" [pid 5048] memfd_create("syzkaller", 0) = 3 [pid 5047] <... symlink resumed>) = 0 [pid 5045] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5050 [pid 5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5047] memfd_create("syzkaller", 0 [pid 5048] <... mmap resumed>) = 0x7f5db7f12000 [pid 5047] <... memfd_create resumed>) = 3 [pid 5048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5044] <... mount resumed>) = 0 [pid 5047] <... mmap resumed>) = 0x7f5db7f12000 [pid 5044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5050 attached [pid 5050] chdir("./3") = 0 [pid 5044] <... openat resumed>) = 3 [pid 5044] chdir("./file0") = 0 [pid 5044] ioctl(4, LOOP_CLR_FD) = 0 [pid 5044] close(4) = 0 [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5044] creat("./bus", 000 [pid 5050] <... prctl resumed>) = 0 [pid 5050] setpgid(0, 0) = 0 [pid 5046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 45.161821][ T5044] NILFS (loop0): recovery complete [ 45.167595][ T5045] loop2: detected capacity change from 0 to 4096 [ 45.185686][ T5049] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5050] write(3, "1000", 4) = 4 [pid 5050] close(3) = 0 [pid 5050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5050] memfd_create("syzkaller", 0) = 3 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5048] <... write resumed>) = 2097152 [ 45.207458][ T5045] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5044] <... creat resumed>) = 4 [pid 5044] open("./bus", O_RDONLY) = 5 [pid 5044] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5044] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5046] <... write resumed>) = 2097152 [pid 5044] unlink("./bus" [pid 5050] <... write resumed>) = 2097152 [pid 5047] <... write resumed>) = 2097152 [pid 5046] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5044] <... unlink resumed>) = 0 [pid 5044] sendfile(4, 5, NULL, 145139829833722 [ 45.238501][ T5045] NILFS (loop2): trying rollback from an earlier position [pid 5046] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5046] ioctl(4, LOOP_SET_FD, 3 [pid 5047] munmap(0x7f5db7f12000, 2097152 [pid 5045] <... mount resumed>) = 0 [pid 5048] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5048] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5048] ioctl(4, LOOP_SET_FD, 3 [pid 5050] munmap(0x7f5db7f12000, 2097152 [pid 5047] <... munmap resumed>) = 0 [pid 5046] <... ioctl resumed>) = 0 [pid 5045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5044] <... sendfile resumed>) = 32 [pid 5047] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5045] <... openat resumed>) = 3 [pid 5044] exit_group(0 [pid 5047] <... openat resumed>) = 4 [pid 5045] chdir("./file0" [pid 5044] <... exit_group resumed>) = ? [pid 5047] ioctl(4, LOOP_SET_FD, 3 [pid 5045] <... chdir resumed>) = 0 [pid 5050] <... munmap resumed>) = 0 [pid 5048] <... ioctl resumed>) = 0 [pid 5046] close(3 [pid 5045] ioctl(4, LOOP_CLR_FD [pid 5050] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5046] <... close resumed>) = 0 [pid 5045] <... ioctl resumed>) = 0 [pid 5050] <... openat resumed>) = 4 [pid 5046] mkdir("./file0", 0777 [pid 5045] close(4 [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5046] <... mkdir resumed>) = 0 [pid 5045] <... close resumed>) = 0 [pid 5046] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5045] creat("./bus", 000 [pid 5044] +++ exited with 0 +++ [pid 5050] <... ioctl resumed>) = 0 [pid 5048] close(3 [pid 5047] <... ioctl resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5047] close(3) = 0 [pid 5047] mkdir("./file0", 0777) = 0 [pid 5048] <... close resumed>) = 0 [pid 4998] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5048] mkdir("./file0", 0777 [pid 5047] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5045] <... creat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5048] <... mkdir resumed>) = 0 [pid 5045] open("./bus", O_RDONLY [pid 4998] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5048] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... openat resumed>) = 3 [pid 5045] <... open resumed>) = 5 [pid 4998] fstat(3, [pid 5045] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5045] <... open resumed>) = 6 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/binderfs", [pid 5050] close(3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5050] <... close resumed>) = 0 [pid 4998] unlink("./3/binderfs" [pid 5050] mkdir("./file0", 0777 [pid 4998] <... unlink resumed>) = 0 [pid 5050] <... mkdir resumed>) = 0 [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 45.280088][ T5045] NILFS (loop2): recovery complete [ 45.281743][ T5046] loop3: detected capacity change from 0 to 4096 [ 45.287067][ T5051] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.296919][ T5048] loop1: detected capacity change from 0 to 4096 [ 45.307376][ T5047] loop5: detected capacity change from 0 to 4096 [ 45.313539][ T5050] loop4: detected capacity change from 0 to 4096 [pid 5050] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5045] <... write resumed>) = 32 [ 45.336636][ T5048] NILFS (loop1): invalid segment: Checksum error in segment payload [ 45.342773][ T5046] NILFS (loop3): invalid segment: Checksum error in segment payload [ 45.353751][ T5046] NILFS (loop3): trying rollback from an earlier position [ 45.364160][ T5047] NILFS (loop5): invalid segment: Checksum error in segment payload [ 45.365508][ T5050] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5045] unlink("./bus") = 0 [pid 5045] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5045] <... sendfile resumed>) = 32 [pid 4998] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5045] exit_group(0) = ? [pid 4998] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./3/file0" [pid 5045] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./3" [pid 5000] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4998] mkdir("./4", 0777 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./3/binderfs", [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./3/binderfs") = 0 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5052 ./strace-static-x86_64: Process 5052 attached [pid 5052] chdir("./4") = 0 [pid 5052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5052] setpgid(0, 0) = 0 [pid 5052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5052] write(3, "1000", 4) = 4 [pid 5052] close(3) = 0 [pid 5052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5052] memfd_create("syzkaller", 0) = 3 [pid 5052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 45.383463][ T5047] NILFS (loop5): trying rollback from an earlier position [ 45.384159][ T5048] NILFS (loop1): trying rollback from an earlier position [ 45.398588][ T5046] NILFS (loop3): recovery complete [pid 5046] <... mount resumed>) = 0 [pid 5046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5046] chdir("./file0") = 0 [pid 5046] ioctl(4, LOOP_CLR_FD) = 0 [pid 5046] close(4) = 0 [pid 5046] creat("./bus", 000 [ 45.444423][ T5050] NILFS (loop4): trying rollback from an earlier position [ 45.449521][ T5053] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.476976][ T5047] NILFS (loop5): recovery complete [ 45.482955][ T5048] NILFS (loop1): recovery complete [pid 5052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5047] <... mount resumed>) = 0 [pid 5046] <... creat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5046] open("./bus", O_RDONLY [pid 5000] lstat("./3/file0", [pid 5047] <... openat resumed>) = 3 [pid 5046] <... open resumed>) = 5 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5047] chdir("./file0" [pid 5046] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5047] <... chdir resumed>) = 0 [pid 5046] <... open resumed>) = 6 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5047] ioctl(4, LOOP_CLR_FD [pid 5046] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5047] <... ioctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5047] close(4 [pid 5000] <... openat resumed>) = 4 [ 45.488895][ T5054] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5052] <... write resumed>) = 2097152 [pid 5048] <... mount resumed>) = 0 [pid 5047] <... close resumed>) = 0 [pid 5046] <... write resumed>) = 32 [pid 5000] fstat(4, [pid 5052] munmap(0x7f5db7f12000, 2097152 [pid 5048] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5047] creat("./bus", 000 [pid 5046] unlink("./bus" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5048] <... openat resumed>) = 3 [pid 5048] chdir("./file0") = 0 [pid 5052] <... munmap resumed>) = 0 [pid 5048] ioctl(4, LOOP_CLR_FD [pid 5046] <... unlink resumed>) = 0 [pid 5000] getdents64(4, [pid 5052] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5048] <... ioctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5052] <... openat resumed>) = 4 [pid 5000] getdents64(4, [pid 5052] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5052] <... ioctl resumed>) = 0 [pid 5000] close(4 [pid 5052] close(3 [pid 5000] <... close resumed>) = 0 [pid 5052] <... close resumed>) = 0 [pid 5000] rmdir("./3/file0" [pid 5052] mkdir("./file0", 0777 [pid 5000] <... rmdir resumed>) = 0 [pid 5052] <... mkdir resumed>) = 0 [pid 5000] getdents64(3, [pid 5052] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5050] <... mount resumed>) = 0 [pid 5048] close(4 [pid 5047] <... creat resumed>) = 4 [pid 5046] sendfile(4, 5, NULL, 145139829833722 [pid 5000] close(3) = 0 [pid 5000] rmdir("./3") = 0 [pid 5000] mkdir("./4", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [ 45.515981][ T5055] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.532693][ T5050] NILFS (loop4): recovery complete [ 45.537948][ T5052] loop0: detected capacity change from 0 to 4096 [ 45.547690][ T5056] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5048] <... close resumed>) = 0 [pid 5047] open("./bus", O_RDONLY [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5057 ./strace-static-x86_64: Process 5057 attached [pid 5057] chdir("./4") = 0 [pid 5057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5057] setpgid(0, 0) = 0 [pid 5057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5057] write(3, "1000", 4) = 4 [pid 5057] close(3) = 0 [pid 5057] symlink("/dev/binderfs", "./binderfs" [pid 5050] <... openat resumed>) = 3 [pid 5048] creat("./bus", 000 [pid 5050] chdir("./file0" [pid 5047] <... open resumed>) = 5 [pid 5046] <... sendfile resumed>) = 32 [pid 5050] <... chdir resumed>) = 0 [pid 5047] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5046] exit_group(0 [pid 5057] <... symlink resumed>) = 0 [pid 5050] ioctl(4, LOOP_CLR_FD [pid 5048] <... creat resumed>) = 4 [pid 5047] <... open resumed>) = 6 [pid 5046] <... exit_group resumed>) = ? [pid 5057] memfd_create("syzkaller", 0 [pid 5050] <... ioctl resumed>) = 0 [pid 5048] open("./bus", O_RDONLY [pid 5047] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5057] <... memfd_create resumed>) = 3 [pid 5057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5050] close(4 [pid 5048] <... open resumed>) = 5 [pid 5047] <... write resumed>) = 32 [pid 5046] +++ exited with 0 +++ [pid 5057] <... mmap resumed>) = 0x7f5db7f12000 [pid 5050] <... close resumed>) = 0 [pid 5048] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5047] unlink("./bus" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5050] creat("./bus", 000 [pid 5048] <... open resumed>) = 6 [pid 5047] <... unlink resumed>) = 0 [pid 5048] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5047] sendfile(4, 5, NULL, 145139829833722 [pid 5001] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5050] <... creat resumed>) = 4 [pid 5048] <... write resumed>) = 32 [pid 5047] <... sendfile resumed>) = 32 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5050] open("./bus", O_RDONLY [pid 5048] unlink("./bus" [pid 5047] exit_group(0 [pid 5001] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5050] <... open resumed>) = 5 [pid 5048] <... unlink resumed>) = 0 [pid 5047] <... exit_group resumed>) = ? [pid 5001] <... openat resumed>) = 3 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5048] sendfile(4, 5, NULL, 145139829833722 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 45.548662][ T5052] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5050] <... open resumed>) = 6 [pid 5047] +++ exited with 0 +++ [pid 5001] getdents64(3, [pid 5048] <... sendfile resumed>) = 32 [pid 5050] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5047, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5050] <... write resumed>) = 32 [pid 5048] exit_group(0 [pid 5001] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5050] unlink("./bus" [pid 5048] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./3/binderfs", [pid 5003] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5050] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./3/binderfs" [pid 5050] sendfile(4, 5, NULL, 145139829833722 [pid 5048] +++ exited with 0 +++ [pid 5003] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... unlink resumed>) = 0 [pid 5057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... openat resumed>) = 3 [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5048, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5050] <... sendfile resumed>) = 32 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5050] exit_group(0 [pid 5003] getdents64(3, [pid 5050] <... exit_group resumed>) = ? [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5050] +++ exited with 0 +++ [pid 5003] lstat("./3/binderfs", [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5003] unlink("./3/binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(3, [pid 5003] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 5002] fstat(3, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] lstat("./3/binderfs", [pid 5002] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./3/binderfs" [pid 5002] unlink("./3/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 45.601639][ T5052] NILFS (loop0): trying rollback from an earlier position [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5057] <... write resumed>) = 2097152 [pid 5057] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./3/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./3/file0", [pid 5002] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(4, [pid 4999] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5002] getdents64(4, [pid 4999] fstat(4, [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4999] getdents64(4, [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5002] rmdir("./3/file0" [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] close(4 [pid 5002] getdents64(3, [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3 [pid 4999] rmdir("./3/file0" [pid 5003] lstat("./3/file0", [pid 5002] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./3" [pid 4999] <... rmdir resumed>) = 0 [pid 5003] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] mkdir("./4", 0777 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5057] <... munmap resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... mkdir resumed>) = 0 [pid 4999] close(3 [pid 5003] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... close resumed>) = 0 [pid 5003] fstat(4, [pid 5002] <... openat resumed>) = 3 [pid 4999] rmdir("./3" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] mkdir("./4", 0777 [pid 5003] getdents64(4, [pid 5002] close(3 [pid 5057] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5058 [pid 4999] <... openat resumed>) = 3 [ 45.658181][ T5052] NILFS (loop0): recovery complete [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./3/file0", [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5057] ioctl(4, LOOP_SET_FD, 3 [pid 5001] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] close(4 [pid 5001] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5001] fstat(4, [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5060 [pid 5003] rmdir("./3/file0" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, ./strace-static-x86_64: Process 5060 attached ./strace-static-x86_64: Process 5058 attached [pid 5052] <... mount resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5060] chdir("./4" [pid 5058] chdir("./4" [pid 5052] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] getdents64(3, [pid 5001] getdents64(4, [pid 5060] <... chdir resumed>) = 0 [pid 5058] <... chdir resumed>) = 0 [pid 5052] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5052] chdir("./file0" [pid 5003] close(3 [pid 5001] close(4 [pid 5060] <... prctl resumed>) = 0 [pid 5058] <... prctl resumed>) = 0 [pid 5052] <... chdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5060] setpgid(0, 0 [pid 5058] setpgid(0, 0 [pid 5052] ioctl(4, LOOP_CLR_FD [pid 5003] rmdir("./3" [pid 5001] rmdir("./3/file0" [pid 5060] <... setpgid resumed>) = 0 [pid 5058] <... setpgid resumed>) = 0 [pid 5052] <... ioctl resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5052] close(4 [pid 5003] mkdir("./4", 0777 [pid 5001] getdents64(3, [pid 5060] <... openat resumed>) = 3 [pid 5058] <... openat resumed>) = 3 [pid 5052] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5060] write(3, "1000", 4 [pid 5058] write(3, "1000", 4 [pid 5052] creat("./bus", 000 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] close(3 [pid 5060] <... write resumed>) = 4 [pid 5058] <... write resumed>) = 4 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 5060] close(3 [pid 5058] close(3 [pid 5003] <... openat resumed>) = 3 [pid 5001] rmdir("./3" [pid 5060] <... close resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [pid 5060] symlink("/dev/binderfs", "./binderfs" [pid 5058] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] mkdir("./4", 0777 [pid 5060] <... symlink resumed>) = 0 [pid 5058] <... symlink resumed>) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5003] close(3 [pid 5001] <... mkdir resumed>) = 0 [pid 5060] memfd_create("syzkaller", 0 [pid 5058] memfd_create("syzkaller", 0 [pid 5057] close(3 [pid 5003] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... memfd_create resumed>) = 3 [pid 5058] <... memfd_create resumed>) = 3 [pid 5057] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 3 [pid 5060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5057] mkdir("./file0", 0777 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5060] <... mmap resumed>) = 0x7f5db7f12000 [pid 5058] <... mmap resumed>) = 0x7f5db7f12000 [pid 5057] <... mkdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5057] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] chdir("./4") = 0 [pid 5058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5061 [ 45.702240][ T5057] loop2: detected capacity change from 0 to 4096 [ 45.711915][ T5059] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... prctl resumed>) = 0 [pid 5062] setpgid(0, 0./strace-static-x86_64: Process 5061 attached ) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] chdir("./4" [pid 5062] <... openat resumed>) = 3 [pid 5061] <... chdir resumed>) = 0 [pid 5062] write(3, "1000", 4 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... write resumed>) = 4 [pid 5061] <... prctl resumed>) = 0 [pid 5052] <... creat resumed>) = 4 [pid 5062] close(3 [pid 5061] setpgid(0, 0 [pid 5052] open("./bus", O_RDONLY [pid 5062] <... close resumed>) = 0 [pid 5061] <... setpgid resumed>) = 0 [pid 5052] <... open resumed>) = 5 [pid 5062] symlink("/dev/binderfs", "./binderfs" [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5052] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... symlink resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5052] <... open resumed>) = 6 [pid 5062] memfd_create("syzkaller", 0 [pid 5061] write(3, "1000", 4 [pid 5052] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5062] <... memfd_create resumed>) = 3 [pid 5061] <... write resumed>) = 4 [pid 5052] <... write resumed>) = 32 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] close(3 [pid 5052] unlink("./bus" [pid 5062] <... mmap resumed>) = 0x7f5db7f12000 [pid 5061] <... close resumed>) = 0 [pid 5052] <... unlink resumed>) = 0 [pid 5061] symlink("/dev/binderfs", "./binderfs" [pid 5052] sendfile(4, 5, NULL, 145139829833722 [pid 5061] <... symlink resumed>) = 0 [pid 5052] <... sendfile resumed>) = 32 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] memfd_create("syzkaller", 0 [pid 5052] exit_group(0 [pid 5061] <... memfd_create resumed>) = 3 [pid 5052] <... exit_group resumed>) = ? [pid 5061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5052] +++ exited with 0 +++ [pid 5061] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5052, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 45.758267][ T5057] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5058] <... write resumed>) = 2097152 [pid 5060] <... write resumed>) = 2097152 [pid 5058] munmap(0x7f5db7f12000, 2097152 [pid 5060] munmap(0x7f5db7f12000, 2097152 [pid 5058] <... munmap resumed>) = 0 [pid 4998] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] getdents64(3, [pid 5058] <... openat resumed>) = 4 [pid 5060] <... munmap resumed>) = 0 [pid 5058] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 4 [pid 4998] lstat("./4/binderfs", [pid 5060] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./4/binderfs") = 0 [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5062] <... write resumed>) = 2097152 [pid 5061] <... write resumed>) = 2097152 [pid 5058] close(3 [pid 5060] <... close resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5062] munmap(0x7f5db7f12000, 2097152 [pid 5061] munmap(0x7f5db7f12000, 2097152 [pid 5060] mkdir("./file0", 0777 [pid 5058] mkdir("./file0", 0777 [pid 5061] <... munmap resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5062] <... munmap resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 45.810102][ T5057] NILFS (loop2): trying rollback from an earlier position [ 45.824553][ T5058] loop4: detected capacity change from 0 to 4096 [ 45.833151][ T5060] loop1: detected capacity change from 0 to 4096 [pid 5060] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5058] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... openat resumed>) = 4 [pid 5058] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5062] <... openat resumed>) = 4 [pid 5061] ioctl(4, LOOP_SET_FD, 3 [pid 5062] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] mkdir("./file0", 0777) = 0 [pid 5061] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file0", 0777 [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [ 45.881750][ T5061] loop5: detected capacity change from 0 to 4096 [ 45.883597][ T5060] NILFS (loop1): invalid segment: Checksum error in segment payload [ 45.890248][ T5062] loop3: detected capacity change from 0 to 4096 [ 45.897519][ T5057] NILFS (loop2): recovery complete [ 45.908305][ T5060] NILFS (loop1): trying rollback from an earlier position [ 45.914145][ T5058] NILFS (loop4): invalid segment: Checksum error in segment payload [ 45.923933][ T5061] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5062] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 45.923968][ T5060] NILFS (loop1): recovery complete [ 45.939303][ T5062] NILFS (loop3): invalid segment: Checksum error in segment payload [ 45.939822][ T5063] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.948203][ T5061] NILFS (loop5): trying rollback from an earlier position [ 45.967590][ T5058] NILFS (loop4): trying rollback from an earlier position [pid 4998] getdents64(4, [pid 5060] <... mount resumed>) = 0 [pid 5057] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5060] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] getdents64(4, [pid 5060] <... openat resumed>) = 3 [pid 5060] chdir("./file0") = 0 [pid 5060] ioctl(4, LOOP_CLR_FD) = 0 [pid 5060] close(4 [pid 5057] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5061] <... mount resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5057] chdir("./file0" [pid 4998] close(4 [pid 5060] creat("./bus", 000 [pid 5061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5057] <... chdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5057] ioctl(4, LOOP_CLR_FD [pid 4998] rmdir("./4/file0" [pid 5061] chdir("./file0" [pid 5057] <... ioctl resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5061] <... chdir resumed>) = 0 [pid 5057] close(4 [pid 4998] getdents64(3, [pid 5061] ioctl(4, LOOP_CLR_FD [pid 5057] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5057] creat("./bus", 000 [pid 4998] close(3 [pid 5061] close(4 [pid 4998] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 4998] rmdir("./4" [pid 5061] creat("./bus", 000 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./5", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5066 [pid 5057] <... creat resumed>) = 4 [pid 5057] open("./bus", O_RDONLY) = 5 [pid 5057] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5057] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5060] <... creat resumed>) = 4 [pid 5057] <... write resumed>) = 32 [pid 5060] open("./bus", O_RDONLY [pid 5057] unlink("./bus" [pid 5060] <... open resumed>) = 5 [pid 5057] <... unlink resumed>) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5057] sendfile(4, 5, NULL, 145139829833722 [pid 5060] <... open resumed>) = 6 [pid 5057] <... sendfile resumed>) = 32 [pid 5057] exit_group(0) = ? [pid 5061] <... creat resumed>) = 4 [pid 5060] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5057] +++ exited with 0 +++ [pid 5061] open("./bus", O_RDONLY) = 5 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5057, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5060] <... write resumed>) = 32 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... open resumed>) = 6 [pid 5060] unlink("./bus" [pid 5000] <... restart_syscall resumed>) = 0 [ 45.969347][ T5064] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.975564][ T5062] NILFS (loop3): trying rollback from an earlier position [ 45.992847][ T5061] NILFS (loop5): recovery complete [ 46.000567][ T5065] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.015517][ T5058] NILFS (loop4): recovery complete [pid 5061] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5060] <... unlink resumed>) = 0 [pid 5000] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./4/binderfs") = 0 [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5066 attached [pid 5061] <... write resumed>) = 32 [pid 5060] sendfile(4, 5, NULL, 145139829833722 [pid 5061] unlink("./bus" [pid 5066] chdir("./5" [pid 5061] <... unlink resumed>) = 0 [pid 5060] <... sendfile resumed>) = 32 [pid 5058] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5061] sendfile(4, 5, NULL, 145139829833722 [pid 5058] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... chdir resumed>) = 0 [pid 5062] <... mount resumed>) = 0 [pid 5061] <... sendfile resumed>) = 32 [pid 5060] exit_group(0 [pid 5058] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] exit_group(0 [pid 5058] chdir("./file0" [pid 5000] lstat("./4/file0", [pid 5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... exit_group resumed>) = ? [pid 5060] <... exit_group resumed>) = ? [pid 5058] <... chdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... openat resumed>) = 3 [pid 5058] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] close(4 [pid 5000] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... prctl resumed>) = 0 [pid 5062] chdir("./file0" [pid 5061] +++ exited with 0 +++ [pid 5060] +++ exited with 0 +++ [pid 5058] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5058] creat("./bus", 000 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./4/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./4") = 0 [pid 5000] mkdir("./5", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = 0 [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5069 ./strace-static-x86_64: Process 5069 attached [pid 5069] chdir("./5") = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] memfd_create("syzkaller", 0) = 3 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5060, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] setpgid(0, 0 [pid 5062] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] ioctl(4, LOOP_CLR_FD [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 4999] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 5062] close(4 [pid 5003] getdents64(3, [pid 5066] <... setpgid resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5062] <... close resumed>) = 0 [pid 5003] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5062] creat("./bus", 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./4/binderfs", [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] unlink("./4/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 5003] <... unlink resumed>) = 0 [pid 4999] lstat("./4/binderfs", [pid 5066] write(3, "1000", 4 [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... write resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] close(3) = 0 [pid 4999] unlink("./4/binderfs" [pid 5058] <... creat resumed>) = 4 [pid 5058] open("./bus", O_RDONLY [pid 5066] symlink("/dev/binderfs", "./binderfs" [pid 5058] <... open resumed>) = 5 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5058] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... symlink resumed>) = 0 [pid 5062] <... creat resumed>) = 4 [pid 5058] <... open resumed>) = 6 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] lstat("./4/file0", [pid 5066] memfd_create("syzkaller", 0 [pid 5062] open("./bus", O_RDONLY [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... memfd_create resumed>) = 3 [pid 5062] <... open resumed>) = 5 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [ 46.039880][ T5062] NILFS (loop3): recovery complete [ 46.043531][ T5067] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.061716][ T5068] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... mmap resumed>) = 0x7f5db7f12000 [pid 5062] <... open resumed>) = 6 [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./4/file0") = 0 [pid 5062] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5058] <... write resumed>) = 32 [pid 5003] getdents64(3, [pid 4999] <... umount2 resumed>) = 0 [pid 5058] unlink("./bus" [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5003] close(3 [pid 5062] <... write resumed>) = 32 [pid 5058] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... close resumed>) = 0 [pid 5062] unlink("./bus" [pid 5058] <... sendfile resumed>) = 32 [pid 5003] rmdir("./4" [pid 5062] <... unlink resumed>) = 0 [pid 5058] exit_group(0 [pid 5003] <... rmdir resumed>) = 0 [pid 5062] sendfile(4, 5, NULL, 145139829833722 [pid 5058] <... exit_group resumed>) = ? [pid 5003] mkdir("./5", 0777 [pid 5062] <... sendfile resumed>) = 32 [pid 5058] +++ exited with 0 +++ [pid 5003] <... mkdir resumed>) = 0 [pid 5062] exit_group(0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5062] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5058, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5070 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5062] +++ exited with 0 +++ [pid 5002] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5070 attached [pid 5002] <... openat resumed>) = 3 [pid 5066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5070] chdir("./5" [pid 5002] fstat(3, [pid 5070] <... chdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... prctl resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] setpgid(0, 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... setpgid resumed>) = 0 [pid 5002] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 5070] <... openat resumed>) = 3 [pid 5002] lstat("./4/binderfs", [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] write(3, "1000", 4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] getdents64(3, [pid 5070] <... write resumed>) = 4 [pid 5002] unlink("./4/binderfs" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5070] close(3 [pid 5001] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... close resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./4/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... symlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5001] unlink("./4/binderfs" [pid 4999] lstat("./4/file0", [pid 5070] <... memfd_create resumed>) = 3 [pid 5001] <... unlink resumed>) = 0 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5070] <... mmap resumed>) = 0x7f5db7f12000 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... write resumed>) = 2097152 [pid 4999] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... write resumed>) = 2097152 [pid 4999] getdents64(4, [pid 5070] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5069] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5069] ioctl(4, LOOP_SET_FD, 3 [pid 5066] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./4/file0", [pid 5001] lstat("./4/file0", [pid 4999] close(4 [pid 5070] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./4/file0" [pid 5070] <... munmap resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5066] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5066] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] close(3 [pid 5066] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 4999] <... close resumed>) = 0 [pid 5066] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 4 [pid 4999] rmdir("./4" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5001] fstat(4, [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./5", 0777 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5069] <... ioctl resumed>) = 0 [pid 5069] close(3) = 0 [pid 5069] mkdir("./file0", 0777) = 0 [pid 5069] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 4999] close(3 [pid 5002] rmdir("./4/file0" [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... rmdir resumed>) = 0 [pid 5001] close(4 [pid 5002] getdents64(3, [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5071 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 5002] close(3 [pid 5001] rmdir("./4/file0" [pid 5002] <... close resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] rmdir("./4" [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 5002] mkdir("./5", 0777 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./4") = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] mkdir("./5", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(3) = 0 [ 46.189683][ T5069] loop2: detected capacity change from 0 to 4096 [ 46.206947][ T5070] loop5: detected capacity change from 0 to 4096 [ 46.207318][ T5066] loop0: detected capacity change from 0 to 4096 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5072 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(3) = 0 [pid 5070] mkdir("./file0", 0777./strace-static-x86_64: Process 5071 attached ) = 0 [pid 5071] chdir("./5") = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setpgid(0, 0) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5071] <... openat resumed>) = 3 [pid 5071] write(3, "1000", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5073 [pid 5071] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5073 attached [pid 5071] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5072 attached [pid 5073] chdir("./5" [pid 5071] <... memfd_create resumed>) = 3 [pid 5073] <... chdir resumed>) = 0 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] chdir("./5" [pid 5071] <... mmap resumed>) = 0x7f5db7f12000 [pid 5073] <... prctl resumed>) = 0 [pid 5072] <... chdir resumed>) = 0 [pid 5073] setpgid(0, 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... setpgid resumed>) = 0 [pid 5072] <... prctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] setpgid(0, 0 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... setpgid resumed>) = 0 [pid 5066] close(3 [pid 5073] write(3, "1000", 4 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... close resumed>) = 0 [ 46.233075][ T5069] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5073] <... write resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5066] mkdir("./file0", 0777 [pid 5073] close(3) = 0 [pid 5072] write(3, "1000", 4 [pid 5073] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... write resumed>) = 4 [pid 5066] <... mkdir resumed>) = 0 [pid 5073] <... symlink resumed>) = 0 [pid 5073] memfd_create("syzkaller", 0 [pid 5072] close(3 [pid 5066] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5073] <... memfd_create resumed>) = 3 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 5073] <... mmap resumed>) = 0x7f5db7f12000 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5072] <... symlink resumed>) = 0 [ 46.268629][ T5070] NILFS (loop5): invalid segment: Checksum error in segment payload [ 46.283519][ T5066] NILFS (loop0): invalid segment: Checksum error in segment payload [ 46.287061][ T5069] NILFS (loop2): trying rollback from an earlier position [ 46.308925][ T5066] NILFS (loop0): trying rollback from an earlier position [pid 5072] memfd_create("syzkaller", 0) = 3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 46.315932][ T5070] NILFS (loop5): trying rollback from an earlier position [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5073] <... write resumed>) = 2097152 [pid 5073] munmap(0x7f5db7f12000, 2097152 [pid 5071] <... write resumed>) = 2097152 [pid 5073] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] munmap(0x7f5db7f12000, 2097152 [pid 5073] <... openat resumed>) = 4 [pid 5071] <... munmap resumed>) = 0 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5071] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... write resumed>) = 2097152 [pid 5066] <... mount resumed>) = 0 [pid 5073] close(3 [pid 5072] munmap(0x7f5db7f12000, 2097152 [pid 5071] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5072] <... munmap resumed>) = 0 [pid 5071] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5073] mkdir("./file0", 0777 [pid 5072] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 5066] chdir("./file0" [pid 5073] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] mkdir("./file0", 0777 [pid 5066] <... chdir resumed>) = 0 [pid 5073] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 46.375820][ T5066] NILFS (loop0): recovery complete [ 46.390544][ T5073] loop3: detected capacity change from 0 to 4096 [ 46.391930][ T5071] loop1: detected capacity change from 0 to 4096 [ 46.400856][ T5074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.408454][ T5069] NILFS (loop2): recovery complete [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5066] ioctl(4, LOOP_CLR_FD [pid 5072] <... ioctl resumed>) = 0 [pid 5071] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5066] <... ioctl resumed>) = 0 [pid 5066] close(4) = 0 [pid 5066] creat("./bus", 000 [pid 5072] close(3) = 0 [pid 5072] mkdir("./file0", 0777) = 0 [pid 5072] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5066] <... creat resumed>) = 4 [pid 5066] open("./bus", O_RDONLY) = 5 [pid 5066] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5070] <... mount resumed>) = 0 [pid 5066] <... open resumed>) = 6 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5070] <... openat resumed>) = 3 [ 46.421911][ T5070] NILFS (loop5): recovery complete [ 46.423143][ T5072] loop4: detected capacity change from 0 to 4096 [ 46.430283][ T5073] NILFS (loop3): invalid segment: Checksum error in segment payload [ 46.442933][ T5073] NILFS (loop3): trying rollback from an earlier position [ 46.451253][ T5075] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.459316][ T5071] NILFS (loop1): invalid segment: Checksum error in segment payload [ 46.469719][ T5073] NILFS (loop3): recovery complete [pid 5070] chdir("./file0" [pid 5073] <... mount resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5070] <... ioctl resumed>) = 0 [pid 5073] chdir("./file0" [pid 5070] close(4 [pid 5073] <... chdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5073] ioctl(4, LOOP_CLR_FD [pid 5070] creat("./bus", 000 [pid 5073] <... ioctl resumed>) = 0 [pid 5070] <... creat resumed>) = 4 [pid 5073] close(4 [pid 5070] open("./bus", O_RDONLY [pid 5073] <... close resumed>) = 0 [pid 5070] <... open resumed>) = 5 [pid 5073] creat("./bus", 000 [pid 5070] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5070] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5070] unlink("./bus") = 0 [pid 5070] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5070] exit_group(0) = ? [pid 5070] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./5/binderfs") = 0 [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... creat resumed>) = 4 [pid 5073] open("./bus", O_RDONLY) = 5 [pid 5073] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5073] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5073] unlink("./bus") = 0 [pid 5073] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5066] <... write resumed>) = 32 [pid 5073] exit_group(0) = ? [pid 5066] unlink("./bus" [pid 5073] +++ exited with 0 +++ [pid 5066] <... unlink resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 46.477179][ T5076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.479221][ T5071] NILFS (loop1): trying rollback from an earlier position [ 46.497622][ T5072] NILFS (loop4): invalid segment: Checksum error in segment payload [ 46.505764][ T5072] NILFS (loop4): trying rollback from an earlier position [pid 5066] sendfile(4, 5, NULL, 145139829833722 [pid 5001] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... mount resumed>) = 0 [pid 5066] <... sendfile resumed>) = 32 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] exit_group(0 [pid 5001] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... exit_group resumed>) = ? [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] chdir("./file0" [pid 5001] getdents64(3, [pid 5069] <... chdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] ioctl(4, LOOP_CLR_FD [pid 5066] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./5/binderfs", [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5069] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5069] close(4 [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./5/binderfs" [pid 4998] <... restart_syscall resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5069] creat("./bus", 000 [pid 5003] lstat("./5/file0", [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 4 [pid 4998] fstat(3, [pid 5003] fstat(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5003] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./5/binderfs", [pid 5003] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 4998] unlink("./5/binderfs" [pid 5003] rmdir("./5/file0" [pid 4998] <... unlink resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./5") = 0 [pid 5003] mkdir("./6", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... mount resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5079 [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5079 attached [pid 5071] chdir("./file0" [pid 5079] chdir("./6" [pid 5071] <... chdir resumed>) = 0 [pid 5079] <... chdir resumed>) = 0 [pid 5071] ioctl(4, LOOP_CLR_FD) = 0 [pid 5071] close(4 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... close resumed>) = 0 [pid 5071] creat("./bus", 000 [pid 5001] <... umount2 resumed>) = 0 [pid 5079] <... prctl resumed>) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5079] <... openat resumed>) = 3 [pid 5001] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] write(3, "1000", 4 [pid 5001] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... write resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] close(3 [pid 5001] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5079] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5079] symlink("/dev/binderfs", "./binderfs" [pid 5001] fstat(4, [pid 5079] <... symlink resumed>) = 0 [pid 5069] <... creat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] memfd_create("syzkaller", 0 [pid 5069] open("./bus", O_RDONLY [pid 5001] getdents64(4, [pid 5079] <... memfd_create resumed>) = 3 [pid 5069] <... open resumed>) = 5 [ 46.532271][ T5077] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.552709][ T5071] NILFS (loop1): recovery complete [ 46.570200][ T5078] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] getdents64(4, [pid 5079] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5069] <... open resumed>) = 6 [pid 5001] close(4 [pid 5069] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./5/file0") = 0 [pid 5069] <... write resumed>) = 32 [pid 5001] getdents64(3, [pid 5069] unlink("./bus" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5069] sendfile(4, 5, NULL, 145139829833722 [pid 5001] rmdir("./5") = 0 [pid 5069] <... sendfile resumed>) = 32 [pid 5001] mkdir("./6", 0777 [pid 5069] exit_group(0 [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5069] <... exit_group resumed>) = ? [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5069] +++ exited with 0 +++ [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] <... close resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... restart_syscall resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5081 [pid 5000] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 46.599902][ T5072] NILFS (loop4): recovery complete [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] <... mount resumed>) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./5/binderfs") = 0 [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5081 attached [pid 5081] chdir("./6") = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] memfd_create("syzkaller", 0) = 3 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5071] <... creat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] chdir("./file0" [pid 5071] open("./bus", O_RDONLY [pid 5072] <... chdir resumed>) = 0 [pid 5071] <... open resumed>) = 5 [pid 4998] lstat("./5/file0", [pid 5072] ioctl(4, LOOP_CLR_FD [pid 5071] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5072] <... ioctl resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5072] close(4 [pid 5071] <... open resumed>) = 6 [pid 4998] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./5/file0" [pid 5072] creat("./bus", 000 [pid 5071] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./5") = 0 [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 46.631211][ T5080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] mkdir("./6", 0777 [pid 5072] <... creat resumed>) = 4 [pid 5071] <... write resumed>) = 32 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... mkdir resumed>) = 0 [pid 5072] open("./bus", O_RDONLY [pid 5071] unlink("./bus" [pid 5000] lstat("./5/file0", [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... open resumed>) = 5 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5000] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5072] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5071] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3 [pid 5072] <... open resumed>) = 6 [pid 5071] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... openat resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5071] <... sendfile resumed>) = 32 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5082 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5072] <... write resumed>) = 32 [pid 5071] exit_group(0 [pid 5000] rmdir("./5/file0" [pid 5072] unlink("./bus" [pid 5071] <... exit_group resumed>) = ? [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./5" [pid 5072] <... unlink resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./6", 0777 [pid 5079] <... write resumed>) = 2097152 [pid 5072] sendfile(4, 5, NULL, 145139829833722 [pid 5071] +++ exited with 0 +++ [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5082 attached ) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5082] chdir("./6" [pid 5079] munmap(0x7f5db7f12000, 2097152 [pid 5072] <... sendfile resumed>) = 32 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... chdir resumed>) = 0 [pid 5079] <... munmap resumed>) = 0 [pid 5072] exit_group(0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... exit_group resumed>) = ? [pid 5000] close(3 [pid 4999] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... prctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5082] setpgid(0, 0 [pid 5079] <... openat resumed>) = 4 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] fstat(3, [pid 5082] <... setpgid resumed>) = 0 [pid 5079] ioctl(4, LOOP_SET_FD, 3 [pid 5072] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5083 [pid 4999] getdents64(3, [pid 5082] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5082] write(3, "1000", 4 [pid 4999] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... write resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] close(3 [pid 4999] lstat("./5/binderfs", [pid 5082] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs" [pid 4999] unlink("./5/binderfs" [pid 5082] <... symlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5082] memfd_create("syzkaller", 0 [pid 5002] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... memfd_create resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5083 attached [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] fstat(3, [pid 5083] chdir("./6" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5083] <... chdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... prctl resumed>) = 0 [pid 5002] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] setpgid(0, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... setpgid resumed>) = 0 [pid 5002] lstat("./5/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5002] unlink("./5/binderfs" [pid 4999] lstat("./5/file0", [pid 5083] write(3, "1000", 4 [pid 5002] <... unlink resumed>) = 0 [pid 5083] <... write resumed>) = 4 [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] close(3) = 0 [pid 5083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5079] <... ioctl resumed>) = 0 [pid 5079] close(3) = 0 [pid 5079] mkdir("./file0", 0777 [pid 4999] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5079] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4999] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [ 46.710974][ T5079] loop5: detected capacity change from 0 to 4096 [pid 4999] rmdir("./5/file0") = 0 [pid 5081] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5081] munmap(0x7f5db7f12000, 2097152 [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5081] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5082] <... write resumed>) = 2097152 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] lstat("./5/file0", [pid 4999] close(3 [pid 5081] <... openat resumed>) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./5" [pid 5081] ioctl(4, LOOP_SET_FD, 3 [ 46.757941][ T5079] NILFS (loop5): invalid segment: Checksum error in segment payload [ 46.765964][ T5079] NILFS (loop5): trying rollback from an earlier position [ 46.795590][ T5079] NILFS (loop5): recovery complete [pid 5002] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5082] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] mkdir("./6", 0777 [pid 5002] fstat(4, [pid 4999] <... mkdir resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5082] <... munmap resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] close(4) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5081] <... ioctl resumed>) = 0 [pid 5002] rmdir("./5/file0" [pid 4999] close(3 [pid 5081] close(3 [pid 5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5082] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5083] <... write resumed>) = 2097152 [pid 5082] <... ioctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5079] <... mount resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] munmap(0x7f5db7f12000, 2097152 [pid 5081] mkdir("./file0", 0777 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5083] <... munmap resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5002] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5085 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... close resumed>) = 0 ./strace-static-x86_64: Process 5085 attached [pid 5082] close(3 [pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] rmdir("./5" [pid 5079] <... openat resumed>) = 3 [pid 5085] chdir("./6" [pid 5079] chdir("./file0") = 0 [pid 5079] ioctl(4, LOOP_CLR_FD) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] close(4 [pid 5085] <... prctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5085] setpgid(0, 0 [pid 5079] creat("./bus", 000 [pid 5085] <... setpgid resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4 [pid 5082] <... close resumed>) = 0 [pid 5085] <... write resumed>) = 4 [pid 5082] mkdir("./file0", 0777 [pid 5085] close(3 [pid 5082] <... mkdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5082] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] memfd_create("syzkaller", 0) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 46.802989][ T5081] loop3: detected capacity change from 0 to 4096 [ 46.817612][ T5082] loop0: detected capacity change from 0 to 4096 [ 46.824907][ T5084] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] mkdir("./6", 0777 [pid 5083] <... openat resumed>) = 4 [pid 5002] <... mkdir resumed>) = 0 [pid 5083] ioctl(4, LOOP_SET_FD, 3 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] <... ioctl resumed>) = 0 [pid 5079] <... creat resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 5079] open("./bus", O_RDONLY) = 5 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5079] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5079] <... write resumed>) = 32 [pid 5079] unlink("./bus" [pid 5002] close(3 [pid 5079] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5079] sendfile(4, 5, NULL, 145139829833722 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] close(3 [pid 5079] <... sendfile resumed>) = 32 [pid 5079] exit_group(0) = ? [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5086 [pid 5079] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./6/binderfs") = 0 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5086 attached [pid 5086] chdir("./6") = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] <... close resumed>) = 0 [ 46.851780][ T5081] NILFS (loop3): invalid segment: Checksum error in segment payload [ 46.852101][ T5082] NILFS (loop0): invalid segment: Checksum error in segment payload [ 46.865293][ T5081] NILFS (loop3): trying rollback from an earlier position [ 46.876797][ T5083] loop2: detected capacity change from 0 to 4096 [pid 5083] mkdir("./file0", 0777 [pid 5086] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1000", 4 [pid 5083] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5086] <... write resumed>) = 4 [pid 5086] close(3) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5086] memfd_create("syzkaller", 0) = 3 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5085] <... write resumed>) = 2097152 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5085] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 46.909630][ T5082] NILFS (loop0): trying rollback from an earlier position [ 46.919353][ T5081] NILFS (loop3): recovery complete [ 46.935028][ T5083] NILFS (loop2): invalid segment: Checksum error in segment payload [ 46.947975][ T5085] loop1: detected capacity change from 0 to 4096 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... mount resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... umount2 resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./6/file0", [pid 5081] chdir("./file0" [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] <... chdir resumed>) = 0 [pid 5081] ioctl(4, LOOP_CLR_FD) = 0 [pid 5003] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./6/file0" [pid 5081] creat("./bus", 000 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] mkdir("./file0", 0777) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./6" [pid 5085] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./7", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5088 [ 46.954644][ T5087] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.956514][ T5082] NILFS (loop0): recovery complete [ 46.978020][ T5083] NILFS (loop2): trying rollback from an earlier position [pid 5086] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5088 attached [pid 5088] chdir("./7" [pid 5081] <... creat resumed>) = 4 [pid 5088] <... chdir resumed>) = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] open("./bus", O_RDONLY [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... open resumed>) = 5 [pid 5088] <... openat resumed>) = 3 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5088] memfd_create("syzkaller", 0) = 3 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... open resumed>) = 6 [pid 5088] <... mmap resumed>) = 0x7f5db7f12000 [pid 5081] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5081] unlink("./bus" [pid 5086] munmap(0x7f5db7f12000, 2097152 [pid 5081] <... unlink resumed>) = 0 [pid 5086] <... munmap resumed>) = 0 [pid 5082] <... mount resumed>) = 0 [pid 5081] sendfile(4, 5, NULL, 145139829833722 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] <... openat resumed>) = 4 [pid 5082] <... openat resumed>) = 3 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [ 47.002629][ T5085] NILFS (loop1): invalid segment: Checksum error in segment payload [ 47.026106][ T5089] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.032511][ T5085] NILFS (loop1): trying rollback from an earlier position [ 47.043382][ T5086] loop4: detected capacity change from 0 to 4096 [pid 5082] chdir("./file0" [pid 5086] <... ioctl resumed>) = 0 [pid 5082] <... chdir resumed>) = 0 [pid 5086] close(3 [pid 5082] ioctl(4, LOOP_CLR_FD [pid 5086] <... close resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5086] mkdir("./file0", 0777 [pid 5082] close(4 [pid 5086] <... mkdir resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] <... sendfile resumed>) = 32 [pid 5086] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5082] creat("./bus", 000 [pid 5081] exit_group(0 [pid 5082] <... creat resumed>) = 4 [pid 5081] <... exit_group resumed>) = ? [pid 5088] <... write resumed>) = 2097152 [pid 5082] open("./bus", O_RDONLY) = 5 [pid 5082] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 47.045986][ T5083] NILFS (loop2): recovery complete [ 47.071029][ T5086] NILFS (loop4): invalid segment: Checksum error in segment payload [ 47.082227][ T5085] NILFS (loop1): recovery complete [ 47.084484][ T5090] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5082] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5088] munmap(0x7f5db7f12000, 2097152 [pid 5083] <... mount resumed>) = 0 [pid 5082] unlink("./bus" [pid 5081] +++ exited with 0 +++ [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5082] <... unlink resumed>) = 0 [pid 5083] chdir("./file0" [pid 5082] sendfile(4, 5, NULL, 145139829833722 [pid 5088] <... munmap resumed>) = 0 [pid 5083] <... chdir resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5083] ioctl(4, LOOP_CLR_FD [pid 5088] <... openat resumed>) = 4 [pid 5083] <... ioctl resumed>) = 0 [pid 5082] <... sendfile resumed>) = 32 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5083] close(4 [pid 5082] exit_group(0) = ? [pid 5082] +++ exited with 0 +++ [pid 5001] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... openat resumed>) = 3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 4998] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5001] lstat("./6/binderfs", [pid 4998] fstat(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] unlink("./6/binderfs" [pid 4998] getdents64(3, [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] creat("./bus", 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./6/binderfs") = 0 [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... ioctl resumed>) = 0 [pid 5083] <... creat resumed>) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5083] open("./bus", O_RDONLY [pid 5088] close(3 [pid 5083] <... open resumed>) = 5 [ 47.092760][ T5086] NILFS (loop4): trying rollback from an earlier position [ 47.110910][ T5088] loop5: detected capacity change from 0 to 4096 [pid 5088] <... close resumed>) = 0 [pid 5085] <... mount resumed>) = 0 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] chdir("./file0") = 0 [pid 5085] ioctl(4, LOOP_CLR_FD) = 0 [pid 5085] close(4) = 0 [pid 5085] creat("./bus", 000 [pid 5088] mkdir("./file0", 0777 [pid 5083] <... open resumed>) = 6 [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/file0", [pid 5088] <... mkdir resumed>) = 0 [pid 5083] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5088] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./6/file0" [pid 5083] <... write resumed>) = 32 [pid 5083] unlink("./bus" [pid 5085] <... creat resumed>) = 4 [pid 5085] open("./bus", O_RDONLY) = 5 [pid 5085] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5085] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5083] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5083] sendfile(4, 5, NULL, 145139829833722 [pid 5085] <... write resumed>) = 32 [pid 5085] unlink("./bus" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./6") = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5085] sendfile(4, 5, NULL, 145139829833722 [pid 4998] mkdir("./7", 0777) = 0 [pid 5085] <... sendfile resumed>) = 32 [pid 5085] exit_group(0) = ? [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5083] <... sendfile resumed>) = 32 [pid 5083] exit_group(0) = ? [pid 5001] lstat("./6/file0", [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5092 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./6/binderfs") = 0 [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] +++ exited with 0 +++ [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, [pid 5001] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./6/binderfs", [pid 5001] fstat(4, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./6/binderfs" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [ 47.154866][ T5091] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.165928][ T5086] NILFS (loop4): recovery complete [ 47.187250][ T5088] NILFS (loop5): invalid segment: Checksum error in segment payload [ 47.196025][ T5088] NILFS (loop5): trying rollback from an earlier position [pid 5088] <... mount resumed>) = 0 [pid 5086] <... mount resumed>) = 0 [pid 5001] getdents64(4, [pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5086] <... openat resumed>) = 3 [pid 5001] close(4 [pid 5086] chdir("./file0" [pid 4999] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5086] <... chdir resumed>) = 0 [pid 5001] rmdir("./6/file0" [pid 4999] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, [pid 5086] ioctl(4, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5086] <... ioctl resumed>) = 0 [pid 4999] getdents64(4, [pid 5086] close(4 [pid 5001] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5086] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5086] creat("./bus", 000 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 5092 attached [pid 4999] rmdir("./6/file0" [pid 5092] chdir("./7" [pid 5088] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5092] <... chdir resumed>) = 0 [pid 5088] chdir("./file0" [pid 5001] rmdir("./6" [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... chdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5092] <... prctl resumed>) = 0 [pid 5088] ioctl(4, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5092] setpgid(0, 0 [pid 5001] mkdir("./7", 0777 [pid 4999] close(3 [pid 5092] <... setpgid resumed>) = 0 [pid 5088] <... ioctl resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] close(4 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] rmdir("./6" [pid 5092] <... openat resumed>) = 3 [pid 5088] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 5092] write(3, "1000", 4 [pid 5088] creat("./bus", 000 [pid 5001] <... openat resumed>) = 3 [pid 4999] mkdir("./7", 0777 [pid 5092] <... write resumed>) = 4 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... mkdir resumed>) = 0 [pid 5092] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5092] <... close resumed>) = 0 [pid 5001] close(3 [pid 4999] <... openat resumed>) = 3 [pid 5092] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5092] <... symlink resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5092] memfd_create("syzkaller", 0 [pid 4999] close(3 [pid 5092] <... memfd_create resumed>) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5095 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5096 [ 47.226199][ T5093] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.236468][ T5088] NILFS (loop5): recovery complete [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./6/file0"./strace-static-x86_64: Process 5096 attached ) = 0 [pid 5000] getdents64(3, [pid 5096] chdir("./7" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5096] <... chdir resumed>) = 0 [pid 5000] close(3 [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... close resumed>) = 0 [pid 5096] <... prctl resumed>) = 0 [pid 5000] rmdir("./6" [pid 5096] setpgid(0, 0) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] mkdir("./7", 0777 [pid 5096] <... openat resumed>) = 3 [pid 5000] <... mkdir resumed>) = 0 [pid 5096] write(3, "1000", 4 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5096] <... write resumed>) = 4 [pid 5000] <... openat resumed>) = 3 [pid 5096] close(3 [pid 5086] <... creat resumed>) = 4 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5096] <... close resumed>) = 0 [pid 5086] open("./bus", O_RDONLY [pid 5096] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... open resumed>) = 5 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5096] <... symlink resumed>) = 0 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5086] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] close(3 [pid 5096] memfd_create("syzkaller", 0 [pid 5086] <... open resumed>) = 6 [pid 5000] <... close resumed>) = 0 [pid 5096] <... memfd_create resumed>) = 3 [pid 5086] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5086] <... write resumed>) = 32 ./strace-static-x86_64: Process 5095 attached [pid 5086] unlink("./bus" [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5097 [pid 5095] chdir("./7") = 0 [pid 5086] <... unlink resumed>) = 0 [pid 5086] sendfile(4, 5, NULL, 145139829833722 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] <... sendfile resumed>) = 32 [pid 5095] setpgid(0, 0 [pid 5086] exit_group(0 [pid 5095] <... setpgid resumed>) = 0 [pid 5086] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5097 attached [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5097] chdir("./7") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] <... openat resumed>) = 3 [pid 5086] +++ exited with 0 +++ [pid 5097] setpgid(0, 0 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5095] write(3, "1000", 4 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5097] <... setpgid resumed>) = 0 [pid 5095] <... write resumed>) = 4 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5095] close(3 [pid 5097] <... openat resumed>) = 3 [pid 5088] <... creat resumed>) = 4 [pid 5002] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] write(3, "1000", 4 [pid 5095] <... close resumed>) = 0 [pid 5088] open("./bus", O_RDONLY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] <... write resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5097] close(3 [pid 5095] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... openat resumed>) = 3 [pid 5097] <... close resumed>) = 0 [pid 5095] <... symlink resumed>) = 0 [pid 5088] <... open resumed>) = 5 [pid 5002] fstat(3, [pid 5097] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5097] <... symlink resumed>) = 0 [pid 5095] memfd_create("syzkaller", 0 [pid 5088] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(3, [pid 5097] memfd_create("syzkaller", 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5097] <... memfd_create resumed>) = 3 [pid 5095] <... memfd_create resumed>) = 3 [pid 5092] <... write resumed>) = 2097152 [pid 5088] <... open resumed>) = 6 [pid 5002] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] <... mmap resumed>) = 0x7f5db7f12000 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./6/binderfs") = 0 [ 47.272782][ T5094] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] <... mmap resumed>) = 0x7f5db7f12000 [pid 5088] <... write resumed>) = 32 [pid 5088] unlink("./bus") = 0 [pid 5088] sendfile(4, 5, NULL, 145139829833722 [pid 5092] munmap(0x7f5db7f12000, 2097152 [pid 5088] <... sendfile resumed>) = 32 [pid 5088] exit_group(0) = ? [pid 5092] <... munmap resumed>) = 0 [pid 5088] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5003] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5092] <... openat resumed>) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./7/binderfs") = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5096] <... write resumed>) = 2097152 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5096] munmap(0x7f5db7f12000, 2097152 [pid 5002] close(4) = 0 [pid 5002] rmdir("./6/file0" [pid 5096] <... munmap resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5096] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 5096] <... openat resumed>) = 4 [pid 5002] rmdir("./6" [pid 5096] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... rmdir resumed>) = 0 [ 47.349623][ T5092] loop0: detected capacity change from 0 to 4096 [pid 5096] <... ioctl resumed>) = 0 [pid 5092] <... ioctl resumed>) = 0 [pid 5002] mkdir("./7", 0777 [pid 5092] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 5092] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5092] mkdir("./file0", 0777 [pid 5002] <... openat resumed>) = 3 [pid 5092] <... mkdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5092] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5097] <... write resumed>) = 2097152 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5098 ./strace-static-x86_64: Process 5098 attached [pid 5098] chdir("./7") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5097] munmap(0x7f5db7f12000, 2097152 [pid 5098] <... openat resumed>) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] memfd_create("syzkaller", 0 [pid 5097] <... munmap resumed>) = 0 [pid 5097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5098] <... memfd_create resumed>) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5097] <... openat resumed>) = 4 [pid 5098] <... mmap resumed>) = 0x7f5db7f12000 [pid 5097] ioctl(4, LOOP_SET_FD, 3 [pid 5095] <... write resumed>) = 2097152 [pid 5003] <... umount2 resumed>) = 0 [pid 5096] close(3) = 0 [pid 5096] mkdir("./file0", 0777) = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5096] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [ 47.389767][ T5096] loop1: detected capacity change from 0 to 4096 [ 47.410723][ T5092] NILFS (loop0): invalid segment: Checksum error in segment payload [ 47.426241][ T5097] loop2: detected capacity change from 0 to 4096 [pid 5003] close(4 [pid 5095] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... close resumed>) = 0 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5097] <... ioctl resumed>) = 0 [pid 5097] close(3) = 0 [pid 5097] mkdir("./file0", 0777) = 0 [pid 5097] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5095] <... munmap resumed>) = 0 [pid 5003] rmdir("./7/file0" [pid 5095] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 5095] <... openat resumed>) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5095] <... ioctl resumed>) = 0 [pid 5003] rmdir("./7" [pid 5095] close(3) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5095] mkdir("./file0", 0777 [pid 5003] mkdir("./8", 0777 [pid 5095] <... mkdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [ 47.449577][ T5096] NILFS (loop1): invalid segment: Checksum error in segment payload [ 47.453711][ T5092] NILFS (loop0): trying rollback from an earlier position [ 47.468635][ T5095] loop3: detected capacity change from 0 to 4096 [ 47.481131][ T5096] NILFS (loop1): trying rollback from an earlier position [ 47.481888][ T5097] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5095] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... mount resumed>) = 0 [pid 5092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5092] chdir("./file0") = 0 [pid 5092] ioctl(4, LOOP_CLR_FD) = 0 [pid 5092] close(4) = 0 [pid 5092] creat("./bus", 000 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5101 ./strace-static-x86_64: Process 5101 attached [pid 5101] chdir("./8") = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3 [pid 5098] <... write resumed>) = 2097152 [ 47.498858][ T5097] NILFS (loop2): trying rollback from an earlier position [ 47.499034][ T5092] NILFS (loop0): recovery complete [ 47.515582][ T5095] NILFS (loop3): invalid segment: Checksum error in segment payload [ 47.521386][ T5097] NILFS (loop2): recovery complete [ 47.524007][ T5096] NILFS (loop1): recovery complete [ 47.534015][ T5099] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5101] <... close resumed>) = 0 [pid 5098] munmap(0x7f5db7f12000, 2097152 [pid 5101] symlink("/dev/binderfs", "./binderfs" [pid 5098] <... munmap resumed>) = 0 [pid 5097] <... mount resumed>) = 0 [pid 5092] <... creat resumed>) = 4 [pid 5092] open("./bus", O_RDONLY) = 5 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5092] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5096] <... mount resumed>) = 0 [pid 5096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5096] chdir("./file0") = 0 [pid 5096] ioctl(4, LOOP_CLR_FD) = 0 [pid 5096] close(4 [pid 5101] <... symlink resumed>) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5092] <... write resumed>) = 32 [pid 5092] unlink("./bus") = 0 [pid 5092] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5092] exit_group(0) = ? [pid 5092] +++ exited with 0 +++ [pid 5101] memfd_create("syzkaller", 0 [pid 5098] <... openat resumed>) = 4 [pid 5097] <... openat resumed>) = 3 [pid 5096] <... close resumed>) = 0 [pid 5101] <... memfd_create resumed>) = 3 [pid 5098] ioctl(4, LOOP_SET_FD, 3 [pid 5097] chdir("./file0" [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5098] <... ioctl resumed>) = 0 [pid 5097] <... chdir resumed>) = 0 [pid 4998] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5097] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] <... mmap resumed>) = 0x7f5db7f12000 [pid 5098] close(3 [pid 5097] <... ioctl resumed>) = 0 [pid 5096] creat("./bus", 000 [ 47.552029][ T5095] NILFS (loop3): trying rollback from an earlier position [ 47.555709][ T5100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.568085][ T5095] NILFS (loop3): recovery complete [ 47.576923][ T5102] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.589505][ T5098] loop4: detected capacity change from 0 to 4096 [pid 4998] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5097] close(4 [pid 4998] <... openat resumed>) = 3 [pid 5097] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 5097] creat("./bus", 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5098] <... close resumed>) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] mkdir("./file0", 0777 [pid 5097] <... creat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] open("./bus", O_RDONLY [pid 4998] lstat("./7/binderfs", [pid 5097] <... open resumed>) = 5 [pid 5097] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5097] <... open resumed>) = 6 [pid 4998] unlink("./7/binderfs" [pid 5097] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] <... write resumed>) = 32 [pid 5098] <... mkdir resumed>) = 0 [pid 5097] unlink("./bus" [pid 5098] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5097] <... unlink resumed>) = 0 [pid 5097] sendfile(4, 5, NULL, 145139829833722 [pid 5096] <... creat resumed>) = 4 [pid 5096] open("./bus", O_RDONLY) = 5 [pid 5097] <... sendfile resumed>) = 32 [pid 5097] exit_group(0 [pid 5096] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5097] <... exit_group resumed>) = ? [pid 5096] <... open resumed>) = 6 [pid 5097] +++ exited with 0 +++ [pid 5096] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5096] <... write resumed>) = 32 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5096] unlink("./bus" [pid 5095] <... mount resumed>) = 0 [pid 5096] <... unlink resumed>) = 0 [pid 5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5096] sendfile(4, 5, NULL, 145139829833722 [pid 5095] <... openat resumed>) = 3 [pid 5000] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] chdir("./file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5096] <... sendfile resumed>) = 32 [pid 5095] <... chdir resumed>) = 0 [ 47.596678][ T5103] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5095] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5095] <... ioctl resumed>) = 0 [pid 5000] fstat(3, [pid 5095] close(4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5095] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 5095] creat("./bus", 000 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./7/binderfs") = 0 [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5096] exit_group(0) = ? [pid 5095] <... creat resumed>) = 4 [pid 5095] open("./bus", O_RDONLY) = 5 [pid 5096] +++ exited with 0 +++ [pid 5095] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5095] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./7/binderfs") = 0 [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] <... write resumed>) = 32 [pid 5095] unlink("./bus") = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5095] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5095] exit_group(0) = ? [pid 5095] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./7/binderfs", [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./7/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] rmdir("./7/file0" [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./7/file0", [pid 5000] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... write resumed>) = 2097152 [pid 5000] rmdir("./7") = 0 [ 47.631449][ T5098] NILFS (loop4): invalid segment: Checksum error in segment payload [ 47.656634][ T5098] NILFS (loop4): trying rollback from an earlier position [pid 5101] munmap(0x7f5db7f12000, 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] mkdir("./8", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] <... munmap resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = 0 [pid 5101] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... openat resumed>) = 4 [pid 5101] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./7/file0", [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] getdents64(4, [pid 5001] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] lstat("./7/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5001] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4999] close(4 [pid 4998] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5104 [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./7/file0" [pid 4998] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5101] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, [pid 4998] fstat(4, [pid 5101] close(3 [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5101] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] getdents64(4, [pid 5101] mkdir("./file0", 0777 [pid 5001] close(4 [pid 4999] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5104 attached [pid 5101] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./7" [pid 4998] getdents64(4, [pid 5104] chdir("./8" [pid 5101] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] rmdir("./7/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] mkdir("./8", 0777 [pid 4998] close(4 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] getdents64(3, [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5104] <... prctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] rmdir("./7/file0" [pid 5104] setpgid(0, 0 [pid 5001] close(3 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5104] <... setpgid resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] getdents64(3, [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] rmdir("./7" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5104] <... openat resumed>) = 3 [pid 4999] close(3 [pid 4998] close(3 [pid 5104] write(3, "1000", 4 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5104] <... write resumed>) = 4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] rmdir("./7" [pid 5104] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5104] <... close resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5105 [pid 4998] mkdir("./8", 0777 [pid 5104] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... mkdir resumed>) = 0 [pid 5104] <... symlink resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5104] memfd_create("syzkaller", 0 [pid 4998] <... openat resumed>) = 3 [pid 5104] <... memfd_create resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5104] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] mkdir("./8", 0777 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5106 [pid 5105] chdir("./8") = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5105] <... prctl resumed>) = 0 [pid 5105] setpgid(0, 0) = 0 [ 47.717060][ T5101] loop5: detected capacity change from 0 to 4096 [ 47.740787][ T5101] NILFS (loop5): invalid segment: Checksum error in segment payload [ 47.753386][ T5098] NILFS (loop4): recovery complete [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] <... mount resumed>) = 0 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5106 attached ) = 0 [pid 5106] chdir("./8" [pid 5105] memfd_create("syzkaller", 0 [pid 5106] <... chdir resumed>) = 0 [pid 5105] <... memfd_create resumed>) = 3 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5106] <... prctl resumed>) = 0 [pid 5105] <... mmap resumed>) = 0x7f5db7f12000 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5106] memfd_create("syzkaller", 0) = 3 [pid 5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5098] chdir("./file0") = 0 [pid 5001] <... openat resumed>) = 3 [pid 5098] ioctl(4, LOOP_CLR_FD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5098] <... ioctl resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5098] close(4 [pid 5001] close(3 [pid 5098] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] creat("./bus", 000 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5108 ./strace-static-x86_64: Process 5108 attached [pid 5108] chdir("./8" [pid 5098] <... creat resumed>) = 4 [pid 5108] <... chdir resumed>) = 0 [pid 5098] open("./bus", O_RDONLY [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5106] <... write resumed>) = 2097152 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] <... open resumed>) = 5 [pid 5108] <... prctl resumed>) = 0 [pid 5106] munmap(0x7f5db7f12000, 2097152 [pid 5098] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5108] setpgid(0, 0 [pid 5106] <... munmap resumed>) = 0 [pid 5098] <... open resumed>) = 6 [pid 5108] <... setpgid resumed>) = 0 [pid 5106] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 47.775964][ T5107] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.809882][ T5101] NILFS (loop5): trying rollback from an earlier position [pid 5098] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5106] <... openat resumed>) = 4 [pid 5108] <... openat resumed>) = 3 [pid 5106] ioctl(4, LOOP_SET_FD, 3 [pid 5108] write(3, "1000", 4 [pid 5098] <... write resumed>) = 32 [pid 5108] <... write resumed>) = 4 [pid 5106] <... ioctl resumed>) = 0 [pid 5098] unlink("./bus" [pid 5108] close(3 [pid 5106] close(3 [pid 5108] <... close resumed>) = 0 [pid 5098] <... unlink resumed>) = 0 [pid 5106] <... close resumed>) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs" [pid 5106] mkdir("./file0", 0777 [pid 5105] <... write resumed>) = 2097152 [pid 5098] sendfile(4, 5, NULL, 145139829833722 [pid 5108] <... symlink resumed>) = 0 [pid 5106] <... mkdir resumed>) = 0 [pid 5105] munmap(0x7f5db7f12000, 2097152 [pid 5108] memfd_create("syzkaller", 0 [pid 5106] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5098] <... sendfile resumed>) = 32 [pid 5108] <... memfd_create resumed>) = 3 [pid 5105] <... munmap resumed>) = 0 [pid 5104] <... write resumed>) = 2097152 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5105] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5108] <... mmap resumed>) = 0x7f5db7f12000 [pid 5105] <... openat resumed>) = 4 [pid 5098] exit_group(0 [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5104] munmap(0x7f5db7f12000, 2097152 [pid 5098] <... exit_group resumed>) = ? [pid 5105] <... ioctl resumed>) = 0 [pid 5105] close(3) = 0 [pid 5105] mkdir("./file0", 0777) = 0 [pid 5105] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5104] <... munmap resumed>) = 0 [ 47.843336][ T5106] loop0: detected capacity change from 0 to 4096 [ 47.856917][ T5101] NILFS (loop5): recovery complete [ 47.868720][ T5106] NILFS (loop0): invalid segment: Checksum error in segment payload [ 47.875042][ T5105] loop1: detected capacity change from 0 to 4096 [ 47.877332][ T5106] NILFS (loop0): trying rollback from an earlier position [pid 5108] <... write resumed>) = 2097152 [pid 5104] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5098] +++ exited with 0 +++ [pid 5104] <... openat resumed>) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5002] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./7/binderfs") = 0 [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5108] ioctl(4, LOOP_SET_FD, 3 [pid 5104] <... ioctl resumed>) = 0 [pid 5108] <... ioctl resumed>) = 0 [pid 5104] close(3) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [ 47.894061][ T5109] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.904339][ T5104] loop2: detected capacity change from 0 to 4096 [ 47.910048][ T5108] loop3: detected capacity change from 0 to 4096 [ 47.915540][ T5105] NILFS (loop1): invalid segment: Checksum error in segment payload [ 47.925743][ T5105] NILFS (loop1): trying rollback from an earlier position [ 47.934628][ T5106] NILFS (loop0): recovery complete [pid 5104] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5108] close(3) = 0 [pid 5108] mkdir("./file0", 0777) = 0 [pid 5108] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5101] <... mount resumed>) = 0 [pid 5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5101] chdir("./file0") = 0 [pid 5101] ioctl(4, LOOP_CLR_FD) = 0 [pid 5101] close(4) = 0 [pid 5101] creat("./bus", 000) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5101] open("./bus", O_RDONLY) = 5 [pid 5101] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5101] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5106] <... mount resumed>) = 0 [pid 5106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5106] chdir("./file0") = 0 [pid 5106] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5106] <... ioctl resumed>) = 0 [pid 5101] <... write resumed>) = 32 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5106] close(4) = 0 [ 47.945561][ T5104] NILFS (loop2): invalid segment: Checksum error in segment payload [ 47.964707][ T5104] NILFS (loop2): trying rollback from an earlier position [ 47.966713][ T5108] NILFS (loop3): invalid segment: Checksum error in segment payload [ 47.977792][ T5105] NILFS (loop1): recovery complete [pid 5105] <... mount resumed>) = 0 [pid 5101] unlink("./bus" [pid 5002] lstat("./7/file0", [pid 5106] creat("./bus", 000 [pid 5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5101] <... unlink resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5101] sendfile(4, 5, NULL, 145139829833722 [pid 5105] <... openat resumed>) = 3 [pid 5002] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] chdir("./file0" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] <... chdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] ioctl(4, LOOP_CLR_FD [pid 5106] <... creat resumed>) = 4 [pid 5105] <... ioctl resumed>) = 0 [pid 5101] <... sendfile resumed>) = 32 [pid 5002] <... openat resumed>) = 4 [pid 5105] close(4 [pid 5002] fstat(4, [pid 5105] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5105] creat("./bus", 000 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./7/file0") = 0 [pid 5002] getdents64(3, [pid 5106] open("./bus", O_RDONLY [pid 5101] exit_group(0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5101] <... exit_group resumed>) = ? [pid 5002] <... close resumed>) = 0 [pid 5106] <... open resumed>) = 5 [pid 5002] rmdir("./7") = 0 [pid 5002] mkdir("./8", 0777 [pid 5106] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... mkdir resumed>) = 0 [pid 5105] <... creat resumed>) = 4 [pid 5101] +++ exited with 0 +++ [pid 5106] <... open resumed>) = 6 [pid 5105] open("./bus", O_RDONLY [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5106] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5105] <... open resumed>) = 5 [pid 5002] <... openat resumed>) = 3 [pid 5105] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5105] <... open resumed>) = 6 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5105] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] close(3) = 0 [pid 5003] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5112 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5105] <... write resumed>) = 32 [pid 5003] unlink("./8/binderfs" [pid 5106] <... write resumed>) = 32 [pid 5106] unlink("./bus" [pid 5105] unlink("./bus" [pid 5003] <... unlink resumed>) = 0 [pid 5106] <... unlink resumed>) = 0 [pid 5105] <... unlink resumed>) = 0 [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5106] sendfile(4, 5, NULL, 145139829833722 [ 47.988462][ T5111] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.997150][ T5110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.005483][ T5108] NILFS (loop3): trying rollback from an earlier position [ 48.012945][ T5104] NILFS (loop2): recovery complete [ 48.032663][ T5108] NILFS (loop3): recovery complete [pid 5105] sendfile(4, 5, NULL, 145139829833722 [pid 5106] <... sendfile resumed>) = 32 [pid 5105] <... sendfile resumed>) = 32 [pid 5003] <... umount2 resumed>) = 0 [pid 5106] exit_group(0 [pid 5105] exit_group(0 [pid 5106] <... exit_group resumed>) = ? [pid 5105] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5112 attached [pid 5106] +++ exited with 0 +++ [pid 5105] +++ exited with 0 +++ [pid 5104] <... mount resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... restart_syscall resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5112] chdir("./8" [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] <... chdir resumed>) = 0 [pid 5104] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5104] chdir("./file0" [pid 4999] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 4998] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] lstat("./8/file0", [pid 4999] getdents64(3, [pid 4998] getdents64(3, [pid 5112] <... prctl resumed>) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5112] setpgid(0, 0 [pid 5108] <... mount resumed>) = 0 [pid 5104] ioctl(4, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5112] <... setpgid resumed>) = 0 [pid 5104] <... ioctl resumed>) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5104] close(4 [pid 5112] <... openat resumed>) = 3 [pid 5108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5104] <... close resumed>) = 0 [pid 5003] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] write(3, "1000", 4 [pid 5108] <... openat resumed>) = 3 [pid 5104] creat("./bus", 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5112] <... write resumed>) = 4 [pid 5108] chdir("./file0" [pid 5003] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./8/binderfs", [pid 4998] lstat("./8/binderfs", [pid 5112] close(3 [pid 5108] <... chdir resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5112] <... close resumed>) = 0 [pid 5108] ioctl(4, LOOP_CLR_FD [pid 5003] fstat(4, [pid 4999] unlink("./8/binderfs" [pid 4998] unlink("./8/binderfs" [pid 5112] symlink("/dev/binderfs", "./binderfs" [pid 5108] <... ioctl resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5112] <... symlink resumed>) = 0 [pid 5108] close(4 [pid 5003] getdents64(4, [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] memfd_create("syzkaller", 0 [pid 5108] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5112] <... memfd_create resumed>) = 3 [pid 5108] creat("./bus", 000 [pid 5003] getdents64(4, [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5112] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] rmdir("./8/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./8") = 0 [pid 5003] mkdir("./9", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5115 ./strace-static-x86_64: Process 5115 attached [pid 5115] chdir("./9") = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5108] <... creat resumed>) = 4 [pid 5104] <... creat resumed>) = 4 [pid 5108] open("./bus", O_RDONLY [pid 5104] open("./bus", O_RDONLY [pid 5108] <... open resumed>) = 5 [pid 5104] <... open resumed>) = 5 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5115] <... symlink resumed>) = 0 [pid 5115] memfd_create("syzkaller", 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5108] <... open resumed>) = 6 [pid 5115] <... memfd_create resumed>) = 3 [pid 5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5108] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5104] <... open resumed>) = 6 [pid 5104] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5108] <... write resumed>) = 32 [pid 5115] <... mmap resumed>) = 0x7f5db7f12000 [ 48.046554][ T5113] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.077086][ T5114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5108] unlink("./bus") = 0 [pid 5108] sendfile(4, 5, NULL, 145139829833722 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] <... sendfile resumed>) = 32 [pid 5108] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5108] <... exit_group resumed>) = ? [pid 4998] lstat("./8/file0", [pid 5104] <... write resumed>) = 32 [pid 4999] lstat("./8/file0", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5104] unlink("./bus" [pid 4998] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5108] +++ exited with 0 +++ [pid 5104] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] sendfile(4, 5, NULL, 145139829833722 [pid 4999] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... sendfile resumed>) = 32 [pid 5001] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 4 [pid 5104] exit_group(0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... exit_group resumed>) = ? [pid 5001] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5104] +++ exited with 0 +++ [pid 5001] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... restart_syscall resumed>) = 0 [pid 5001] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./8/binderfs" [pid 5000] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(3, [pid 4998] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5000] lstat("./8/binderfs", [pid 4999] close(4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] unlink("./8/binderfs" [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./8/file0" [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./8/file0" [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(3, [pid 4998] close(3 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./8" [pid 4999] <... close resumed>) = 0 [pid 5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] rmdir("./8" [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] mkdir("./9", 0777 [pid 4999] mkdir("./9", 0777 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5116 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5117 ./strace-static-x86_64: Process 5116 attached [pid 5116] chdir("./9" [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5116] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5117 attached [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] lstat("./8/file0", [pid 5116] <... prctl resumed>) = 0 [pid 5117] chdir("./9" [pid 5116] setpgid(0, 0) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] <... chdir resumed>) = 0 [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5117] <... prctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5117] setpgid(0, 0) = 0 [pid 5001] lstat("./8/file0", [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5117] <... openat resumed>) = 3 [pid 5001] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] write(3, "1000", 4 [pid 5116] write(3, "1000", 4 [pid 5117] <... write resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5116] <... write resumed>) = 4 [pid 5117] close(3 [pid 5000] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5117] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5116] close(3 [pid 5117] symlink("/dev/binderfs", "./binderfs" [pid 5116] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 4 [pid 5117] <... symlink resumed>) = 0 [pid 5001] fstat(4, [pid 5117] memfd_create("syzkaller", 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5117] <... memfd_create resumed>) = 3 [pid 5001] getdents64(4, [pid 5000] fstat(4, [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5116] <... symlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5117] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5116] memfd_create("syzkaller", 0 [pid 5112] <... write resumed>) = 2097152 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 5116] <... memfd_create resumed>) = 3 [pid 5112] munmap(0x7f5db7f12000, 2097152 [pid 5001] close(4 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5115] <... write resumed>) = 2097152 [pid 5112] <... munmap resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5116] <... mmap resumed>) = 0x7f5db7f12000 [pid 5112] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] rmdir("./8/file0") = 0 [pid 5000] getdents64(4, [pid 5001] getdents64(3, [pid 5115] munmap(0x7f5db7f12000, 2097152 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5115] <... munmap resumed>) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./8" [pid 5112] <... openat resumed>) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5001] mkdir("./9", 0777 [pid 5000] close(4 [pid 5115] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5115] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5115] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 3 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5000] rmdir("./8/file0" [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5119 ./strace-static-x86_64: Process 5119 attached [pid 5119] chdir("./9") = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5000] getdents64(3, [pid 5112] close(3 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5112] <... close resumed>) = 0 [pid 5000] close(3 [pid 5112] mkdir("./file0", 0777 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./8") = 0 [pid 5000] mkdir("./9", 0777 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5112] <... mkdir resumed>) = 0 [pid 5119] <... prctl resumed>) = 0 [pid 5119] setpgid(0, 0 [pid 5112] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] <... mkdir resumed>) = 0 [pid 5119] <... setpgid resumed>) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5119] <... openat resumed>) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... openat resumed>) = 3 [pid 5119] memfd_create("syzkaller", 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5119] <... memfd_create resumed>) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5115] <... ioctl resumed>) = 0 [pid 5115] close(3) = 0 [pid 5115] mkdir("./file0", 0777) = 0 [pid 5115] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5120 [ 48.227731][ T5112] loop4: detected capacity change from 0 to 4096 [ 48.233844][ T5115] loop5: detected capacity change from 0 to 4096 [ 48.261079][ T5112] NILFS (loop4): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5120 attached [pid 5117] <... write resumed>) = 2097152 [pid 5116] <... write resumed>) = 2097152 [pid 5120] chdir("./9" [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5117] munmap(0x7f5db7f12000, 2097152 [pid 5116] munmap(0x7f5db7f12000, 2097152 [pid 5120] <... chdir resumed>) = 0 [pid 5117] <... munmap resumed>) = 0 [pid 5116] <... munmap resumed>) = 0 [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5120] <... prctl resumed>) = 0 [pid 5116] <... openat resumed>) = 4 [pid 5120] setpgid(0, 0 [pid 5117] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5120] <... setpgid resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] write(3, "1000", 4) = 4 [pid 5117] <... openat resumed>) = 4 [pid 5116] <... ioctl resumed>) = 0 [pid 5119] <... write resumed>) = 2097152 [pid 5119] munmap(0x7f5db7f12000, 2097152 [pid 5120] close(3 [pid 5117] ioctl(4, LOOP_SET_FD, 3 [pid 5120] <... close resumed>) = 0 [pid 5116] close(3 [pid 5119] <... munmap resumed>) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 48.286194][ T5112] NILFS (loop4): trying rollback from an earlier position [ 48.292752][ T5115] NILFS (loop5): invalid segment: Checksum error in segment payload [ 48.302627][ T5115] NILFS (loop5): trying rollback from an earlier position [ 48.305590][ T5116] loop0: detected capacity change from 0 to 4096 [ 48.320233][ T5112] NILFS (loop4): recovery complete [ 48.326962][ T5117] loop1: detected capacity change from 0 to 4096 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5120] symlink("/dev/binderfs", "./binderfs" [pid 5117] <... ioctl resumed>) = 0 [pid 5116] <... close resumed>) = 0 [pid 5120] <... symlink resumed>) = 0 [pid 5120] memfd_create("syzkaller", 0) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5119] <... ioctl resumed>) = 0 [pid 5117] close(3 [pid 5116] mkdir("./file0", 0777 [pid 5117] <... close resumed>) = 0 [pid 5116] <... mkdir resumed>) = 0 [pid 5117] mkdir("./file0", 0777 [pid 5119] close(3 [pid 5117] <... mkdir resumed>) = 0 [pid 5116] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5117] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5112] <... mount resumed>) = 0 [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [ 48.329260][ T5119] loop3: detected capacity change from 0 to 4096 [ 48.348616][ T5121] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.360050][ T5116] NILFS (loop0): invalid segment: Checksum error in segment payload [ 48.360559][ T5117] NILFS (loop1): invalid segment: Checksum error in segment payload [ 48.376545][ T5115] NILFS (loop5): recovery complete [pid 5112] close(4 [pid 5119] <... close resumed>) = 0 [pid 5112] <... close resumed>) = 0 [pid 5119] mkdir("./file0", 0777 [pid 5112] creat("./bus", 000 [pid 5119] <... mkdir resumed>) = 0 [pid 5115] <... mount resumed>) = 0 [pid 5119] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5112] <... creat resumed>) = 4 [pid 5115] <... openat resumed>) = 3 [pid 5112] open("./bus", O_RDONLY [pid 5115] chdir("./file0" [pid 5112] <... open resumed>) = 5 [pid 5115] <... chdir resumed>) = 0 [pid 5112] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5115] ioctl(4, LOOP_CLR_FD [pid 5112] <... open resumed>) = 6 [pid 5115] <... ioctl resumed>) = 0 [pid 5112] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5115] close(4) = 0 [pid 5112] <... write resumed>) = 32 [pid 5115] creat("./bus", 000 [pid 5112] unlink("./bus") = 0 [ 48.381936][ T5117] NILFS (loop1): trying rollback from an earlier position [ 48.390876][ T5122] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.401537][ T5116] NILFS (loop0): trying rollback from an earlier position [ 48.416030][ T5117] NILFS (loop1): recovery complete [ 48.421779][ T5119] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5112] sendfile(4, 5, NULL, 145139829833722 [pid 5120] <... write resumed>) = 2097152 [pid 5112] <... sendfile resumed>) = 32 [pid 5112] exit_group(0) = ? [pid 5112] +++ exited with 0 +++ [pid 5120] munmap(0x7f5db7f12000, 2097152 [pid 5115] <... creat resumed>) = 4 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5115] open("./bus", O_RDONLY) = 5 [pid 5115] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5120] <... munmap resumed>) = 0 [pid 5115] <... open resumed>) = 6 [pid 5120] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5115] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5120] <... openat resumed>) = 4 [pid 5117] <... mount resumed>) = 0 [pid 5115] <... write resumed>) = 32 [pid 5115] unlink("./bus" [pid 5119] <... mount resumed>) = 0 [pid 5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file0") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4 [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5119] <... close resumed>) = 0 [pid 5117] <... openat resumed>) = 3 [pid 5119] creat("./bus", 000 [pid 5120] <... ioctl resumed>) = 0 [pid 5117] chdir("./file0" [pid 5002] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5117] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5117] <... ioctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5117] close(4 [pid 5002] fstat(3, [pid 5117] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5117] creat("./bus", 000 [pid 5002] getdents64(3, [pid 5117] <... creat resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5120] close(3 [pid 5117] open("./bus", O_RDONLY [pid 5002] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] <... close resumed>) = 0 [pid 5117] <... open resumed>) = 5 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5120] mkdir("./file0", 0777 [pid 5117] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] lstat("./8/binderfs", [pid 5120] <... mkdir resumed>) = 0 [pid 5117] <... open resumed>) = 6 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5120] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5117] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] unlink("./8/binderfs" [pid 5117] <... write resumed>) = 32 [pid 5115] <... unlink resumed>) = 0 [pid 5115] sendfile(4, 5, NULL, 145139829833722 [pid 5002] <... unlink resumed>) = 0 [pid 5117] unlink("./bus" [pid 5115] <... sendfile resumed>) = 32 [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] <... unlink resumed>) = 0 [pid 5115] exit_group(0 [pid 5117] sendfile(4, 5, NULL, 145139829833722 [pid 5115] <... exit_group resumed>) = ? [ 48.432886][ T5119] NILFS (loop3): trying rollback from an earlier position [ 48.447180][ T5123] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.450245][ T5119] NILFS (loop3): recovery complete [ 48.460977][ T5116] NILFS (loop0): recovery complete [ 48.469810][ T5120] loop2: detected capacity change from 0 to 4096 [ 48.474735][ T5124] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5119] <... creat resumed>) = 4 [pid 5119] open("./bus", O_RDONLY) = 5 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5119] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5115] +++ exited with 0 +++ [pid 5117] <... sendfile resumed>) = 32 [pid 5117] exit_group(0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5117] <... exit_group resumed>) = ? [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5119] <... write resumed>) = 32 [pid 5119] unlink("./bus") = 0 [pid 5119] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5003] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] exit_group(0 [pid 5117] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 5119] <... exit_group resumed>) = ? [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5116] <... mount resumed>) = 0 [pid 5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] getdents64(3, [pid 5116] <... openat resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5116] chdir("./file0" [pid 5003] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5116] <... chdir resumed>) = 0 [pid 5003] lstat("./9/binderfs", [pid 5116] ioctl(4, LOOP_CLR_FD [pid 4999] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5116] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./9/binderfs" [pid 5116] close(4 [pid 4999] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5116] <... close resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5116] creat("./bus", 000 [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./9/binderfs") = 0 [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5116] <... creat resumed>) = 4 [pid 5116] open("./bus", O_RDONLY) = 5 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 48.494361][ T5120] NILFS (loop2): invalid segment: Checksum error in segment payload [ 48.509554][ T5120] NILFS (loop2): trying rollback from an earlier position [ 48.516808][ T5125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5116] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5116] unlink("./bus") = 0 [pid 5116] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5116] exit_group(0) = ? [pid 5119] +++ exited with 0 +++ [pid 5116] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... restart_syscall resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [ 48.544941][ T5120] NILFS (loop2): recovery complete [pid 5001] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5120] <... mount resumed>) = 0 [pid 5001] lstat("./9/binderfs", [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] <... openat resumed>) = 3 [pid 5001] unlink("./9/binderfs" [pid 4999] lstat("./9/file0", [pid 5120] chdir("./file0" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5120] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./9/binderfs", [pid 5120] ioctl(4, LOOP_CLR_FD [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5120] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./8/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./9/binderfs" [pid 5120] close(4 [pid 5003] lstat("./9/file0", [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... unlink resumed>) = 0 [pid 5120] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5120] creat("./bus", 000 [pid 5003] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 4 [pid 4999] getdents64(4, [pid 5120] <... creat resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5120] open("./bus", O_RDONLY [pid 5003] fstat(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5120] <... open resumed>) = 5 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5120] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] getdents64(4, [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] close(4 [pid 5120] <... open resumed>) = 6 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 5120] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] getdents64(4, [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./9/file0" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4999] <... rmdir resumed>) = 0 [pid 5120] <... write resumed>) = 32 [pid 5003] close(4 [pid 5002] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5120] unlink("./bus" [pid 5003] <... close resumed>) = 0 [pid 5002] rmdir("./8/file0" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./9/file0" [pid 5002] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./9" [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 5002] <... close resumed>) = 0 [pid 4999] mkdir("./10", 0777 [pid 5003] <... close resumed>) = 0 [pid 5002] rmdir("./8" [pid 4999] <... mkdir resumed>) = 0 [pid 5003] rmdir("./9" [pid 5002] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 5002] mkdir("./9", 0777 [pid 4999] <... openat resumed>) = 3 [pid 5003] mkdir("./10", 0777 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5003] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5003] close(3 [pid 5002] <... close resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5127 [pid 5003] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5120] <... unlink resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5128 [pid 4998] <... umount2 resumed>) = 0 [pid 5120] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5129 [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5120] <... sendfile resumed>) = 32 [pid 4998] lstat("./9/file0", [pid 5120] exit_group(0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5120] <... exit_group resumed>) = ? [pid 4998] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5120] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] close(4 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./9/file0" [pid 5000] <... restart_syscall resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5127 attached [pid 4998] getdents64(3, [pid 5127] chdir("./10" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5129 attached [pid 5127] <... chdir resumed>) = 0 [pid 5000] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [pid 5129] chdir("./10" [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5129] <... chdir resumed>) = 0 [pid 5127] <... prctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] rmdir("./9" [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5127] setpgid(0, 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5129] <... prctl resumed>) = 0 [pid 5127] <... setpgid resumed>) = 0 [pid 5000] fstat(3, [pid 4998] mkdir("./10", 0777 [pid 5129] setpgid(0, 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5129] <... setpgid resumed>) = 0 [pid 5127] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5127] write(3, "1000", 4 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... openat resumed>) = 3 [pid 5129] <... openat resumed>) = 3 [pid 5127] <... write resumed>) = 4 [pid 5000] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5129] write(3, "1000", 4 [pid 5127] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... ioctl resumed>) = 0 [pid 5129] <... write resumed>) = 4 [pid 5127] <... close resumed>) = 0 [pid 5000] lstat("./9/binderfs", [pid 4998] close(3 [pid 5129] close(3 [pid 5127] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5129] <... close resumed>) = 0 [pid 5127] <... symlink resumed>) = 0 [pid 5000] unlink("./9/binderfs" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5129] symlink("/dev/binderfs", "./binderfs" [pid 5127] memfd_create("syzkaller", 0 [pid 5000] <... unlink resumed>) = 0 [pid 5129] <... symlink resumed>) = 0 [pid 5127] <... memfd_create resumed>) = 3 [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5130 [pid 5129] memfd_create("syzkaller", 0 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5129] <... memfd_create resumed>) = 3 [pid 5127] <... mmap resumed>) = 0x7f5db7f12000 [ 48.576924][ T5126] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5128 attached [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5129] <... mmap resumed>) = 0x7f5db7f12000 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5128] chdir("./9" [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5130 attached [pid 5001] lstat("./9/file0", [pid 5130] chdir("./10" [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5130] <... chdir resumed>) = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5128] <... prctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5130] setpgid(0, 0 [pid 5128] setpgid(0, 0 [pid 5130] <... setpgid resumed>) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5128] <... setpgid resumed>) = 0 [pid 5001] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... openat resumed>) = 3 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] write(3, "1000", 4) = 4 [pid 5001] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5130] close(3) = 0 [pid 5128] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 5128] write(3, "1000", 4 [pid 5130] <... symlink resumed>) = 0 [pid 5128] <... write resumed>) = 4 [pid 5001] fstat(4, [pid 5130] memfd_create("syzkaller", 0 [pid 5128] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5130] <... memfd_create resumed>) = 3 [pid 5128] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5128] symlink("/dev/binderfs", "./binderfs" [pid 5001] getdents64(4, [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5128] <... symlink resumed>) = 0 [pid 5127] <... write resumed>) = 2097152 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5128] memfd_create("syzkaller", 0 [pid 5001] getdents64(4, [pid 5000] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5128] <... memfd_create resumed>) = 3 [pid 5000] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5128] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./9/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./9") = 0 [pid 5000] mkdir("./10", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] rmdir("./9/file0" [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5131 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./9") = 0 [pid 5001] mkdir("./10", 0777) = 0 ./strace-static-x86_64: Process 5131 attached [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5131] chdir("./10") = 0 [pid 5001] <... openat resumed>) = 3 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5131] <... prctl resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5131] setpgid(0, 0 [pid 5001] close(3 [pid 5131] <... setpgid resumed>) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... close resumed>) = 0 [pid 5131] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5131] write(3, "1000", 4) = 4 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5132 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5132 attached [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5127] munmap(0x7f5db7f12000, 2097152 [pid 5132] chdir("./10" [pid 5129] <... write resumed>) = 2097152 [pid 5129] munmap(0x7f5db7f12000, 2097152 [pid 5132] <... chdir resumed>) = 0 [pid 5129] <... munmap resumed>) = 0 [pid 5127] <... munmap resumed>) = 0 [pid 5129] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5127] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5132] <... prctl resumed>) = 0 [pid 5132] setpgid(0, 0) = 0 [pid 5129] <... openat resumed>) = 4 [pid 5127] <... openat resumed>) = 4 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 5132] <... openat resumed>) = 3 [pid 5129] <... ioctl resumed>) = 0 [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5132] write(3, "1000", 4 [pid 5130] <... write resumed>) = 2097152 [pid 5132] <... write resumed>) = 4 [pid 5130] munmap(0x7f5db7f12000, 2097152 [pid 5132] close(3) = 0 [pid 5132] symlink("/dev/binderfs", "./binderfs" [pid 5127] <... ioctl resumed>) = 0 [pid 5132] <... symlink resumed>) = 0 [pid 5127] close(3 [pid 5132] memfd_create("syzkaller", 0 [pid 5127] <... close resumed>) = 0 [pid 5132] <... memfd_create resumed>) = 3 [pid 5127] mkdir("./file0", 0777 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5132] <... mmap resumed>) = 0x7f5db7f12000 [pid 5128] <... write resumed>) = 2097152 [pid 5127] <... mkdir resumed>) = 0 [pid 5130] <... munmap resumed>) = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5130] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5129] close(3 [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5129] <... close resumed>) = 0 [pid 5127] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5129] mkdir("./file0", 0777 [pid 5128] munmap(0x7f5db7f12000, 2097152 [pid 5129] <... mkdir resumed>) = 0 [ 48.739137][ T5129] loop5: detected capacity change from 0 to 4096 [ 48.746585][ T5127] loop1: detected capacity change from 0 to 4096 [ 48.776630][ T5130] loop0: detected capacity change from 0 to 4096 [pid 5129] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5130] close(3) = 0 [pid 5130] mkdir("./file0", 0777 [pid 5128] <... munmap resumed>) = 0 [pid 5130] <... mkdir resumed>) = 0 [pid 5130] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5128] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5128] ioctl(4, LOOP_SET_FD, 3 [pid 5132] <... write resumed>) = 2097152 [pid 5131] <... write resumed>) = 2097152 [pid 5131] munmap(0x7f5db7f12000, 2097152 [pid 5132] munmap(0x7f5db7f12000, 2097152 [pid 5131] <... munmap resumed>) = 0 [pid 5128] <... ioctl resumed>) = 0 [pid 5132] <... munmap resumed>) = 0 [pid 5128] close(3 [pid 5132] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5128] <... close resumed>) = 0 [pid 5132] <... openat resumed>) = 4 [pid 5131] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 48.789701][ T5127] NILFS (loop1): invalid segment: Checksum error in segment payload [ 48.801413][ T5129] NILFS (loop5): invalid segment: Checksum error in segment payload [ 48.809532][ T5127] NILFS (loop1): trying rollback from an earlier position [ 48.818755][ T5128] loop4: detected capacity change from 0 to 4096 [pid 5128] mkdir("./file0", 0777 [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5131] <... openat resumed>) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3 [pid 5128] <... mkdir resumed>) = 0 [pid 5127] <... mount resumed>) = 0 [pid 5132] <... ioctl resumed>) = 0 [pid 5131] <... ioctl resumed>) = 0 [pid 5128] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5132] close(3 [pid 5127] <... openat resumed>) = 3 [pid 5132] <... close resumed>) = 0 [pid 5127] chdir("./file0" [pid 5132] mkdir("./file0", 0777 [pid 5127] <... chdir resumed>) = 0 [pid 5132] <... mkdir resumed>) = 0 [pid 5127] ioctl(4, LOOP_CLR_FD [pid 5131] close(3) = 0 [pid 5131] mkdir("./file0", 0777) = 0 [pid 5127] <... ioctl resumed>) = 0 [pid 5132] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5127] close(4) = 0 [ 48.832484][ T5130] NILFS (loop0): invalid segment: Checksum error in segment payload [ 48.835660][ T5127] NILFS (loop1): recovery complete [ 48.842613][ T5131] loop2: detected capacity change from 0 to 4096 [ 48.846428][ T5132] loop3: detected capacity change from 0 to 4096 [ 48.853068][ T5129] NILFS (loop5): trying rollback from an earlier position [ 48.860081][ T5133] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.869044][ T5130] NILFS (loop0): trying rollback from an earlier position [ 48.881352][ T5129] NILFS (loop5): recovery complete [pid 5131] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5127] creat("./bus", 000) = 4 [pid 5129] <... mount resumed>) = 0 [pid 5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5129] chdir("./file0") = 0 [pid 5129] ioctl(4, LOOP_CLR_FD) = 0 [pid 5129] close(4) = 0 [pid 5129] creat("./bus", 000 [ 48.896371][ T5128] NILFS (loop4): invalid segment: Checksum error in segment payload [ 48.903923][ T5130] NILFS (loop0): recovery complete [ 48.909903][ T5131] NILFS (loop2): invalid segment: Checksum error in segment payload [ 48.916351][ T5132] NILFS (loop3): invalid segment: Checksum error in segment payload [ 48.926007][ T5134] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.937766][ T27] kauditd_printk_skb: 108 callbacks suppressed [pid 5127] open("./bus", O_RDONLY) = 5 [pid 5127] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5127] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5127] unlink("./bus" [pid 5129] <... creat resumed>) = 4 [pid 5129] open("./bus", O_RDONLY [pid 5127] <... unlink resumed>) = 0 [pid 5129] <... open resumed>) = 5 [pid 5127] sendfile(4, 5, NULL, 145139829833722 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5129] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5127] <... sendfile resumed>) = 32 [pid 5129] <... write resumed>) = 32 [pid 5127] exit_group(0 [pid 5129] unlink("./bus" [pid 5127] <... exit_group resumed>) = ? [ 48.937780][ T27] audit: type=1804 audit(1684404968.709:120): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EoL44c/10/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 48.967458][ T5132] NILFS (loop3): trying rollback from an earlier position [ 48.969052][ T5128] NILFS (loop4): trying rollback from an earlier position [ 48.980823][ T5131] NILFS (loop2): trying rollback from an earlier position [pid 5130] <... mount resumed>) = 0 [pid 5127] +++ exited with 0 +++ [pid 5129] <... unlink resumed>) = 0 [pid 5129] sendfile(4, 5, NULL, 145139829833722 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5129] <... sendfile resumed>) = 32 [pid 4999] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5129] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5129] +++ exited with 0 +++ [pid 4999] fstat(3, [pid 5130] <... openat resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4999] getdents64(3, [pid 5130] chdir("./file0") = 0 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] <... restart_syscall resumed>) = 0 [pid 4999] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./10/binderfs", [pid 5003] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] unlink("./10/binderfs" [ 49.001668][ T27] audit: type=1804 audit(1684404968.759:121): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EoL44c/10/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 49.009260][ T5135] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.028331][ T5128] NILFS (loop4): recovery complete [ 49.041295][ T5132] NILFS (loop3): recovery complete [pid 5003] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... unlink resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5130] ioctl(4, LOOP_CLR_FD [pid 5003] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... ioctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] close(4 [pid 5003] lstat("./10/binderfs", [pid 5130] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./10/binderfs") = 0 [pid 5003] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] <... mount resumed>) = 0 [ 49.048094][ T5131] NILFS (loop2): recovery complete [ 49.058993][ T5136] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.064294][ T27] audit: type=1804 audit(1684404968.759:122): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.XGE8lx/10/file0/bus" dev="loop5" ino=12 res=1 errno=0 [pid 5130] creat("./bus", 000 [pid 5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5132] chdir("./file0") = 0 [pid 5132] ioctl(4, LOOP_CLR_FD) = 0 [pid 5132] close(4) = 0 [pid 5132] creat("./bus", 000) = 4 [pid 5131] <... mount resumed>) = 0 [pid 5130] <... creat resumed>) = 4 [pid 5132] open("./bus", O_RDONLY [pid 5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5130] open("./bus", O_RDONLY [pid 5132] <... open resumed>) = 5 [pid 5131] <... openat resumed>) = 3 [pid 5130] <... open resumed>) = 5 [pid 4999] <... umount2 resumed>) = 0 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5131] chdir("./file0" [pid 5130] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5132] <... open resumed>) = 6 [pid 5131] <... chdir resumed>) = 0 [pid 5130] <... open resumed>) = 6 [pid 5132] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5131] ioctl(4, LOOP_CLR_FD [pid 5130] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5132] <... write resumed>) = 32 [pid 5131] <... ioctl resumed>) = 0 [pid 5130] <... write resumed>) = 32 [pid 5132] unlink("./bus" [pid 5131] close(4 [pid 5130] unlink("./bus" [pid 5132] <... unlink resumed>) = 0 [pid 5131] <... close resumed>) = 0 [pid 5130] <... unlink resumed>) = 0 [pid 5128] <... mount resumed>) = 0 [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] sendfile(4, 5, NULL, 145139829833722 [pid 5131] creat("./bus", 000 [pid 5130] sendfile(4, 5, NULL, 145139829833722 [pid 5132] <... sendfile resumed>) = 32 [pid 5131] <... creat resumed>) = 4 [pid 5130] <... sendfile resumed>) = 32 [pid 5128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5132] exit_group(0 [pid 5131] open("./bus", O_RDONLY [pid 5132] <... exit_group resumed>) = ? [pid 5132] +++ exited with 0 +++ [pid 5131] <... open resumed>) = 5 [pid 5130] exit_group(0 [pid 5128] <... openat resumed>) = 3 [ 49.092985][ T5137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.097183][ T27] audit: type=1804 audit(1684404968.759:123): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.XGE8lx/10/file0/bus" dev="loop5" ino=12 res=1 errno=0 [ 49.135935][ T5138] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] lstat("./10/file0", [pid 5131] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5130] <... exit_group resumed>) = ? [pid 5128] chdir("./file0" [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5131] <... open resumed>) = 6 [pid 5128] <... chdir resumed>) = 0 [pid 5003] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5128] ioctl(4, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5131] <... write resumed>) = 32 [pid 5128] <... ioctl resumed>) = 0 [pid 5003] lstat("./10/file0", [pid 4999] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5131] unlink("./bus" [pid 5128] close(4 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5131] <... unlink resumed>) = 0 [pid 5128] <... close resumed>) = 0 [pid 5003] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] fstat(4, [pid 5131] sendfile(4, 5, NULL, 145139829833722 [pid 5130] +++ exited with 0 +++ [pid 5128] creat("./bus", 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5131] <... sendfile resumed>) = 32 [pid 5128] <... creat resumed>) = 4 [pid 5003] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 5131] exit_group(0 [pid 5128] open("./bus", O_RDONLY [pid 5003] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5131] <... exit_group resumed>) = ? [pid 5128] <... open resumed>) = 5 [pid 5003] fstat(4, [pid 4999] getdents64(4, [pid 5131] +++ exited with 0 +++ [pid 5128] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5128] <... open resumed>) = 6 [pid 5003] getdents64(4, [pid 4999] close(4 [pid 5128] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... close resumed>) = 0 [pid 5128] <... write resumed>) = 32 [pid 5003] getdents64(4, [pid 4999] rmdir("./10/file0" [pid 5128] unlink("./bus" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5128] <... unlink resumed>) = 0 [pid 5003] close(4 [pid 4999] getdents64(3, [pid 5128] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5128] <... sendfile resumed>) = 32 [pid 5003] rmdir("./10/file0" [pid 4999] close(3 [pid 5128] exit_group(0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5128] <... exit_group resumed>) = ? [ 49.167344][ T27] audit: type=1804 audit(1684404968.899:124): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EF5sxk/10/file0/bus" dev="loop3" ino=12 res=1 errno=0 [pid 5003] getdents64(3, [pid 4999] rmdir("./10" [pid 5128] +++ exited with 0 +++ [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 4999] mkdir("./11", 0777 [pid 5003] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] rmdir("./10" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] mkdir("./11", 0777 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] <... mkdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4999] close(3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5128, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5139 [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5140 ./strace-static-x86_64: Process 5139 attached ./strace-static-x86_64: Process 5140 attached [pid 5139] chdir("./11" [pid 5140] chdir("./11" [pid 5139] <... chdir resumed>) = 0 [pid 5140] <... chdir resumed>) = 0 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5139] <... prctl resumed>) = 0 [pid 5140] <... prctl resumed>) = 0 [pid 5139] setpgid(0, 0 [pid 5140] setpgid(0, 0 [pid 5139] <... setpgid resumed>) = 0 [pid 5140] <... setpgid resumed>) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5139] <... openat resumed>) = 3 [pid 5140] <... openat resumed>) = 3 [pid 5140] write(3, "1000", 4 [pid 5139] write(3, "1000", 4 [pid 5140] <... write resumed>) = 4 [pid 5139] <... write resumed>) = 4 [pid 5140] close(3 [pid 5139] close(3 [pid 5140] <... close resumed>) = 0 [pid 5139] <... close resumed>) = 0 [pid 5140] symlink("/dev/binderfs", "./binderfs" [pid 5139] symlink("/dev/binderfs", "./binderfs" [pid 5140] <... symlink resumed>) = 0 [pid 5139] <... symlink resumed>) = 0 [pid 5140] memfd_create("syzkaller", 0 [pid 5139] memfd_create("syzkaller", 0 [pid 5140] <... memfd_create resumed>) = 3 [pid 5139] <... memfd_create resumed>) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5140] <... mmap resumed>) = 0x7f5db7f12000 [pid 5139] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... restart_syscall resumed>) = 0 [ 49.196506][ T27] audit: type=1804 audit(1684404968.899:125): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.aQJbv6/10/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 49.223105][ T27] audit: type=1804 audit(1684404968.899:126): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EF5sxk/10/file0/bus" dev="loop3" ino=12 res=1 errno=0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(3, [pid 5001] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] <... write resumed>) = 2097152 [pid 5139] <... write resumed>) = 2097152 [pid 5139] munmap(0x7f5db7f12000, 2097152 [pid 5140] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5139] <... munmap resumed>) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5139] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3 [ 49.248177][ T27] audit: type=1804 audit(1684404968.899:127): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.aQJbv6/10/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 49.271780][ T27] audit: type=1804 audit(1684404968.929:128): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/10/file0/bus" dev="loop2" ino=12 res=1 errno=0 [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 5001] fstat(3, [pid 5000] fstat(3, [pid 4998] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 5000] getdents64(3, [pid 4998] fstat(3, [pid 5002] lstat("./9/binderfs", [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(3, [pid 5002] unlink("./9/binderfs" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./10/binderfs", [pid 5000] lstat("./10/binderfs", [pid 4998] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5139] <... ioctl resumed>) = 0 [pid 5139] close(3) = 0 [pid 5139] mkdir("./file0", 0777) = 0 [pid 5139] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] unlink("./10/binderfs" [pid 5000] unlink("./10/binderfs" [pid 4998] lstat("./10/binderfs", [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4998] unlink("./10/binderfs" [pid 5001] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 5140] close(3 [pid 5002] lstat("./9/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./10/file0", [pid 5140] <... close resumed>) = 0 [pid 5002] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5140] mkdir("./file0", 0777 [pid 5002] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 5000] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] <... mkdir resumed>) = 0 [pid 5002] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./10/file0", [pid 5140] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 49.296536][ T27] audit: type=1804 audit(1684404968.949:129): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/10/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 49.318680][ T5139] loop1: detected capacity change from 0 to 4096 [ 49.330175][ T5140] loop5: detected capacity change from 0 to 4096 [ 49.345385][ T5139] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5000] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 4998] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./10/file0" [pid 5002] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] close(4 [pid 5001] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./10") = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 5002] rmdir("./9/file0" [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] fstat(4, [pid 5002] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./10/file0" [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] rmdir("./9" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 4998] <... close resumed>) = 0 [pid 5002] mkdir("./10", 0777 [pid 5001] mkdir("./11", 0777 [pid 5000] <... close resumed>) = 0 [ 49.391501][ T5139] NILFS (loop1): trying rollback from an earlier position [ 49.404706][ T5140] NILFS (loop5): invalid segment: Checksum error in segment payload [ 49.418360][ T5140] NILFS (loop5): trying rollback from an earlier position [ 49.421481][ T5139] NILFS (loop1): recovery complete [ 49.434469][ T5140] NILFS (loop5): recovery complete [pid 4998] rmdir("./10/file0" [pid 5139] <... mount resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] rmdir("./10" [pid 4998] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5002] <... openat resumed>) = 3 [pid 5000] mkdir("./11", 0777 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5002] close(3 [pid 5000] <... openat resumed>) = 3 [pid 4998] rmdir("./10" [pid 5002] <... close resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./11", 0777 [pid 5000] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5142 [pid 5000] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5143 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5144 ./strace-static-x86_64: Process 5144 attached [pid 5144] chdir("./11"./strace-static-x86_64: Process 5142 attached [pid 5142] chdir("./10" [pid 5144] <... chdir resumed>) = 0 [pid 5144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] <... chdir resumed>) = 0 [pid 5144] setpgid(0, 0) = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5142] <... prctl resumed>) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5144] <... openat resumed>) = 3 [pid 5144] write(3, "1000", 4 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5144] <... write resumed>) = 4 [pid 5142] <... openat resumed>) = 3 [pid 5144] close(3) = 0 [pid 5142] write(3, "1000", 4 [pid 5139] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5144] symlink("/dev/binderfs", "./binderfs" [pid 5142] <... write resumed>) = 4 [pid 5139] chdir("./file0" [pid 5001] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5143 attached [pid 5144] <... symlink resumed>) = 0 [pid 5142] close(3 [pid 5139] <... chdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5144] memfd_create("syzkaller", 0 [pid 5143] chdir("./11" [pid 5142] <... close resumed>) = 0 [pid 5139] ioctl(4, LOOP_CLR_FD [pid 5001] close(3 [pid 5144] <... memfd_create resumed>) = 3 [pid 5143] <... chdir resumed>) = 0 [pid 5142] symlink("/dev/binderfs", "./binderfs" [pid 5139] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5142] <... symlink resumed>) = 0 [pid 5139] close(4 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5144] <... mmap resumed>) = 0x7f5db7f12000 [pid 5143] <... prctl resumed>) = 0 [pid 5142] memfd_create("syzkaller", 0 [pid 5139] <... close resumed>) = 0 ./strace-static-x86_64: Process 5146 attached [pid 5143] setpgid(0, 0 [pid 5142] <... memfd_create resumed>) = 3 [pid 5140] <... mount resumed>) = 0 [pid 5139] creat("./bus", 000 [pid 5146] chdir("./11" [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5143] <... setpgid resumed>) = 0 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5146 [pid 5146] <... chdir resumed>) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5142] <... mmap resumed>) = 0x7f5db7f12000 [pid 5140] <... openat resumed>) = 3 [pid 5139] <... creat resumed>) = 4 [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5143] <... openat resumed>) = 3 [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5140] chdir("./file0" [pid 5139] open("./bus", O_RDONLY [pid 5146] <... prctl resumed>) = 0 [pid 5143] write(3, "1000", 4 [pid 5140] <... chdir resumed>) = 0 [pid 5139] <... open resumed>) = 5 [pid 5146] setpgid(0, 0 [pid 5143] <... write resumed>) = 4 [pid 5140] ioctl(4, LOOP_CLR_FD [pid 5139] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5146] <... setpgid resumed>) = 0 [pid 5143] close(3 [pid 5140] <... ioctl resumed>) = 0 [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5143] <... close resumed>) = 0 [pid 5140] close(4 [pid 5139] <... open resumed>) = 6 [pid 5146] <... openat resumed>) = 3 [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5140] <... close resumed>) = 0 [pid 5140] creat("./bus", 000 [pid 5139] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5146] write(3, "1000", 4) = 4 [pid 5143] <... symlink resumed>) = 0 [pid 5146] close(3) = 0 [ 49.434775][ T5141] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.475917][ T5145] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5143] memfd_create("syzkaller", 0 [pid 5139] <... write resumed>) = 32 [pid 5146] symlink("/dev/binderfs", "./binderfs" [pid 5144] <... write resumed>) = 2097152 [pid 5143] <... memfd_create resumed>) = 3 [pid 5140] <... creat resumed>) = 4 [pid 5139] unlink("./bus" [pid 5146] <... symlink resumed>) = 0 [pid 5144] munmap(0x7f5db7f12000, 2097152 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5140] open("./bus", O_RDONLY [pid 5146] memfd_create("syzkaller", 0 [pid 5140] <... open resumed>) = 5 [pid 5139] <... unlink resumed>) = 0 [pid 5146] <... memfd_create resumed>) = 3 [pid 5144] <... munmap resumed>) = 0 [pid 5143] <... mmap resumed>) = 0x7f5db7f12000 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5139] sendfile(4, 5, NULL, 145139829833722 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5140] <... open resumed>) = 6 [pid 5140] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5146] <... mmap resumed>) = 0x7f5db7f12000 [pid 5144] <... openat resumed>) = 4 [pid 5142] <... write resumed>) = 2097152 [pid 5142] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3 [pid 5140] <... write resumed>) = 32 [pid 5139] <... sendfile resumed>) = 32 [pid 5140] unlink("./bus" [pid 5139] exit_group(0) = ? [pid 5142] ioctl(4, LOOP_SET_FD, 3 [pid 5144] <... ioctl resumed>) = 0 [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5144] close(3 [pid 5140] <... unlink resumed>) = 0 [pid 5139] +++ exited with 0 +++ [pid 5144] <... close resumed>) = 0 [pid 5140] sendfile(4, 5, NULL, 145139829833722 [pid 5144] mkdir("./file0", 0777 [pid 5142] <... ioctl resumed>) = 0 [pid 5144] <... mkdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5144] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5140] <... sendfile resumed>) = 32 [pid 4999] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5140] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5140] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 5140] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] getdents64(3, [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./11/binderfs", [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] unlink("./11/binderfs" [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 4999] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5142] close(3) = 0 [pid 5142] mkdir("./file0", 0777) = 0 [pid 5142] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./11/binderfs") = 0 [ 49.547390][ T5144] loop0: detected capacity change from 0 to 4096 [ 49.551180][ T5142] loop4: detected capacity change from 0 to 4096 [ 49.572305][ T5144] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5003] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5146] munmap(0x7f5db7f12000, 2097152 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, [pid 5146] <... munmap resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... umount2 resumed>) = 0 [pid 5146] <... openat resumed>) = 4 [pid 5003] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5143] <... write resumed>) = 2097152 [pid 5143] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5146] <... ioctl resumed>) = 0 [ 49.599896][ T5142] NILFS (loop4): invalid segment: Checksum error in segment payload [ 49.604526][ T5144] NILFS (loop0): trying rollback from an earlier position [ 49.639557][ T5146] loop3: detected capacity change from 0 to 4096 [pid 5003] lstat("./11/file0", [pid 4999] getdents64(4, [pid 5146] close(3 [pid 5143] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5146] <... close resumed>) = 0 [pid 5144] <... mount resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5146] mkdir("./file0", 0777 [pid 5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5143] <... ioctl resumed>) = 0 [pid 5003] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(4 [pid 5146] <... mkdir resumed>) = 0 [pid 5144] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 5146] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5144] chdir("./file0" [pid 5003] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./11/file0" [pid 5143] close(3) = 0 [pid 5143] mkdir("./file0", 0777) = 0 [pid 5143] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5144] <... chdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [ 49.649306][ T5144] NILFS (loop0): recovery complete [ 49.652948][ T5143] loop2: detected capacity change from 0 to 4096 [ 49.655639][ T5147] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.662624][ T5142] NILFS (loop4): trying rollback from an earlier position [ 49.677112][ T5146] NILFS (loop3): invalid segment: Checksum error in segment payload [ 49.687329][ T5146] NILFS (loop3): trying rollback from an earlier position [ 49.691915][ T5142] NILFS (loop4): recovery complete [pid 5144] ioctl(4, LOOP_CLR_FD [pid 5003] rmdir("./11/file0" [pid 4999] getdents64(3, [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./11") = 0 [pid 5003] mkdir("./12", 0777 [pid 5144] <... ioctl resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5144] close(4 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5146] <... mount resumed>) = 0 [pid 5144] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5144] creat("./bus", 000 [pid 5003] <... close resumed>) = 0 [pid 4999] close(3 [pid 5146] <... openat resumed>) = 3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 5146] chdir("./file0" [pid 5144] <... creat resumed>) = 4 [pid 4999] rmdir("./11" [pid 5146] <... chdir resumed>) = 0 [pid 5144] open("./bus", O_RDONLY [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5149 [pid 5146] ioctl(4, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5146] <... ioctl resumed>) = 0 [pid 5144] <... open resumed>) = 5 [pid 4999] mkdir("./12", 0777 [pid 5146] close(4 [pid 5144] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5146] <... close resumed>) = 0 [pid 5144] <... open resumed>) = 6 [pid 4999] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5149 attached [pid 5146] creat("./bus", 000 [pid 5144] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5149] chdir("./12") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0 [pid 5144] <... write resumed>) = 32 [pid 4999] <... openat resumed>) = 3 [pid 5149] <... setpgid resumed>) = 0 [pid 5144] unlink("./bus" [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5144] <... unlink resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5149] write(3, "1000", 4 [pid 5144] sendfile(4, 5, NULL, 145139829833722 [pid 4999] close(3 [pid 5149] <... write resumed>) = 4 [pid 5149] close(3) = 0 [pid 5144] <... sendfile resumed>) = 32 [ 49.703031][ T5143] NILFS (loop2): invalid segment: Checksum error in segment payload [ 49.703510][ T5146] NILFS (loop3): recovery complete [ 49.718190][ T5148] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] <... close resumed>) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5146] <... creat resumed>) = 4 [pid 5144] exit_group(0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5149] <... symlink resumed>) = 0 [pid 5146] open("./bus", O_RDONLY [pid 5144] <... exit_group resumed>) = ? [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5146] <... open resumed>) = 5 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5151 attached [pid 5146] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5144] +++ exited with 0 +++ [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5151 [pid 5151] chdir("./12" [pid 5146] <... open resumed>) = 6 [pid 5151] <... chdir resumed>) = 0 [pid 5146] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5144, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5143] <... mount resumed>) = 0 [pid 4998] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./11/binderfs") = 0 [pid 4998] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] <... write resumed>) = 2097152 [pid 5146] <... write resumed>) = 32 [pid 5143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5142] <... mount resumed>) = 0 [pid 5151] setpgid(0, 0 [pid 5146] unlink("./bus" [pid 5143] <... openat resumed>) = 3 [pid 5142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5151] <... setpgid resumed>) = 0 [pid 5146] <... unlink resumed>) = 0 [pid 5143] chdir("./file0" [pid 5142] <... openat resumed>) = 3 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5146] sendfile(4, 5, NULL, 145139829833722 [pid 5143] <... chdir resumed>) = 0 [pid 5142] chdir("./file0" [pid 5151] <... openat resumed>) = 3 [pid 5143] ioctl(4, LOOP_CLR_FD [pid 5142] <... chdir resumed>) = 0 [pid 5151] write(3, "1000", 4 [pid 5146] <... sendfile resumed>) = 32 [pid 5143] <... ioctl resumed>) = 0 [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5151] <... write resumed>) = 4 [pid 5146] exit_group(0 [pid 5143] close(4 [pid 5142] <... ioctl resumed>) = 0 [pid 5151] close(3 [pid 5143] <... close resumed>) = 0 [pid 5142] close(4 [pid 5151] <... close resumed>) = 0 [pid 5143] creat("./bus", 000 [pid 5142] <... close resumed>) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs" [pid 5142] creat("./bus", 000 [pid 5151] <... symlink resumed>) = 0 [pid 5151] memfd_create("syzkaller", 0) = 3 [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5146] <... exit_group resumed>) = ? [pid 5149] munmap(0x7f5db7f12000, 2097152 [pid 5146] +++ exited with 0 +++ [pid 5143] <... creat resumed>) = 4 [pid 5143] open("./bus", O_RDONLY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5143] <... open resumed>) = 5 [pid 5143] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5001] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5143] <... write resumed>) = 32 [pid 5001] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5149] <... munmap resumed>) = 0 [pid 5143] unlink("./bus" [pid 5001] <... openat resumed>) = 3 [pid 5149] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5143] <... unlink resumed>) = 0 [pid 5001] fstat(3, [pid 5149] <... openat resumed>) = 4 [pid 5143] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5149] ioctl(4, LOOP_SET_FD, 3 [pid 5143] <... sendfile resumed>) = 32 [ 49.750558][ T5143] NILFS (loop2): trying rollback from an earlier position [ 49.770967][ T5143] NILFS (loop2): recovery complete [ 49.778316][ T5152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.789317][ T5150] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] getdents64(3, [pid 5143] exit_group(0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5143] <... exit_group resumed>) = ? [pid 5001] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5143] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./11/binderfs", [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./11/binderfs") = 0 [pid 5001] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./11/binderfs") = 0 [pid 5000] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... ioctl resumed>) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./file0", 0777 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5142] <... creat resumed>) = 4 [pid 4998] lstat("./11/file0", [pid 5142] open("./bus", O_RDONLY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5149] <... mkdir resumed>) = 0 [pid 5142] <... open resumed>) = 5 [pid 4998] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5149] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5142] <... open resumed>) = 6 [pid 5142] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5151] <... write resumed>) = 2097152 [pid 5142] <... write resumed>) = 32 [pid 5000] <... umount2 resumed>) = 0 [pid 5151] munmap(0x7f5db7f12000, 2097152 [pid 5142] unlink("./bus" [pid 5000] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5142] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./11/file0", [pid 4998] getdents64(4, [pid 5142] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 49.826420][ T5149] loop5: detected capacity change from 0 to 4096 [pid 4998] close(4 [pid 5142] <... sendfile resumed>) = 32 [pid 5000] fstat(4, [pid 5142] exit_group(0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5142] <... exit_group resumed>) = ? [pid 5000] getdents64(4, [pid 4998] rmdir("./11/file0" [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 5151] <... munmap resumed>) = 0 [pid 5142] +++ exited with 0 +++ [pid 5000] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 5151] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] <... umount2 resumed>) = 0 [pid 5000] rmdir("./11/file0" [pid 5151] <... openat resumed>) = 4 [pid 5001] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5151] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5000] close(3) = 0 [pid 5000] rmdir("./11" [pid 5151] <... ioctl resumed>) = 0 [pid 5001] lstat("./11/file0", [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5151] close(3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] rmdir("./11" [pid 5151] <... close resumed>) = 0 [pid 5001] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 5151] mkdir("./file0", 0777 [pid 5002] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] mkdir("./12", 0777 [pid 5151] <... mkdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] mkdir("./12", 0777 [pid 4998] <... mkdir resumed>) = 0 [pid 5151] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... openat resumed>) = 3 [pid 5001] fstat(4, [pid 4998] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] getdents64(3, [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] close(3 [pid 5149] <... mount resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] getdents64(4, [pid 4998] <... close resumed>) = 0 [ 49.899808][ T5151] loop1: detected capacity change from 0 to 4096 [ 49.903888][ T5149] NILFS (loop5): invalid segment: Checksum error in segment payload [ 49.914638][ T5149] NILFS (loop5): trying rollback from an earlier position [ 49.926682][ T5151] NILFS (loop1): invalid segment: Checksum error in segment payload [ 49.931901][ T5149] NILFS (loop5): recovery complete [ 49.934666][ T5151] NILFS (loop1): trying rollback from an earlier position [pid 5002] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(4 [pid 5002] lstat("./10/binderfs", [pid 5001] <... close resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5154 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] rmdir("./11/file0" [pid 5002] unlink("./10/binderfs" [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5001] getdents64(3, [pid 5002] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./11") = 0 [pid 5001] mkdir("./12", 0777) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5155 ./strace-static-x86_64: Process 5154 attached [pid 5154] chdir("./12") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5155 attached [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5155] chdir("./12" [pid 5149] <... openat resumed>) = 3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5155] <... chdir resumed>) = 0 [pid 5149] chdir("./file0" [pid 5000] close(3 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5154] <... openat resumed>) = 3 [pid 5149] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5155] <... prctl resumed>) = 0 [pid 5149] ioctl(4, LOOP_CLR_FD [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 49.948475][ T5153] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5155] setpgid(0, 0 [pid 5154] write(3, "1000", 4 [pid 5149] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5156 attached [pid 5154] <... write resumed>) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5156] chdir("./12" [pid 5155] <... setpgid resumed>) = 0 [pid 5154] close(3 [pid 5149] close(4 [pid 5002] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] <... chdir resumed>) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5154] <... close resumed>) = 0 [pid 5151] <... mount resumed>) = 0 [pid 5149] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5156 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5154] symlink("/dev/binderfs", "./binderfs" [pid 5002] lstat("./10/file0", [pid 5156] <... prctl resumed>) = 0 [pid 5154] <... symlink resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5156] setpgid(0, 0 [pid 5155] <... openat resumed>) = 3 [pid 5154] memfd_create("syzkaller", 0 [pid 5151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] creat("./bus", 000 [pid 5156] <... setpgid resumed>) = 0 [pid 5155] write(3, "1000", 4 [pid 5154] <... memfd_create resumed>) = 3 [pid 5151] <... openat resumed>) = 3 [pid 5149] <... creat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5155] <... write resumed>) = 4 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5151] chdir("./file0" [pid 5149] open("./bus", O_RDONLY [pid 5002] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5155] close(3 [pid 5154] <... mmap resumed>) = 0x7f5db7f12000 [pid 5151] <... chdir resumed>) = 0 [pid 5149] <... open resumed>) = 5 [pid 5155] <... close resumed>) = 0 [pid 5151] ioctl(4, LOOP_CLR_FD [pid 5149] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... openat resumed>) = 4 [pid 5155] symlink("/dev/binderfs", "./binderfs" [pid 5151] <... ioctl resumed>) = 0 [pid 5149] <... open resumed>) = 6 [pid 5155] <... symlink resumed>) = 0 [pid 5151] close(4 [pid 5149] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5155] memfd_create("syzkaller", 0 [pid 5151] <... close resumed>) = 0 [pid 5155] <... memfd_create resumed>) = 3 [pid 5151] creat("./bus", 000 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5151] <... creat resumed>) = 4 [pid 5155] <... mmap resumed>) = 0x7f5db7f12000 [pid 5151] open("./bus", O_RDONLY [pid 5156] <... openat resumed>) = 3 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5151] <... open resumed>) = 5 [pid 5149] <... write resumed>) = 32 [pid 5002] fstat(4, [pid 5151] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5149] unlink("./bus" [pid 5156] write(3, "1000", 4 [pid 5151] <... open resumed>) = 6 [pid 5149] <... unlink resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5156] <... write resumed>) = 4 [pid 5151] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5149] sendfile(4, 5, NULL, 145139829833722 [pid 5156] close(3 [pid 5151] <... write resumed>) = 32 [pid 5149] <... sendfile resumed>) = 32 [pid 5002] getdents64(4, [pid 5156] <... close resumed>) = 0 [pid 5151] unlink("./bus" [pid 5149] exit_group(0 [pid 5156] symlink("/dev/binderfs", "./binderfs" [pid 5151] <... unlink resumed>) = 0 [pid 5149] <... exit_group resumed>) = ? [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5156] <... symlink resumed>) = 0 [pid 5151] sendfile(4, 5, NULL, 145139829833722 [pid 5149] +++ exited with 0 +++ [pid 5002] getdents64(4, [pid 5156] memfd_create("syzkaller", 0 [pid 5151] <... sendfile resumed>) = 32 [pid 5156] <... memfd_create resumed>) = 3 [pid 5155] <... write resumed>) = 2097152 [pid 5154] <... write resumed>) = 2097152 [pid 5151] exit_group(0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5151] <... exit_group resumed>) = ? [ 49.993467][ T5151] NILFS (loop1): recovery complete [ 50.001112][ T5157] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] close(4 [pid 5156] <... mmap resumed>) = 0x7f5db7f12000 [pid 5151] +++ exited with 0 +++ [pid 5003] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... close resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5155] <... munmap resumed>) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./10/file0" [pid 5003] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5155] <... ioctl resumed>) = 0 [pid 5155] close(3) = 0 [pid 5155] mkdir("./file0", 0777) = 0 [pid 5155] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... rmdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 5002] getdents64(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(3, [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] close(3 [pid 4999] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(3, [pid 5003] lstat("./12/binderfs", [pid 5002] rmdir("./10" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] unlink("./12/binderfs" [pid 4999] getdents64(3, [pid 5002] mkdir("./11", 0777 [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./12/binderfs", [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./12/binderfs") = 0 [pid 4999] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = 0 [pid 5002] close(3 [pid 4999] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./12/file0", [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5158 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./12/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./12") = 0 [pid 4999] mkdir("./13", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = 0 [ 50.058098][ T5155] loop3: detected capacity change from 0 to 4096 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5158 attached [pid 5158] chdir("./11") = 0 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] setpgid(0, 0) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5159 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5158] write(3, "1000", 4) = 4 [pid 5158] close(3) = 0 [pid 5158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5158] memfd_create("syzkaller", 0) = 3 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5159 attached ) = 0x7f5db7f12000 [pid 5154] munmap(0x7f5db7f12000, 2097152 [pid 5003] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] chdir("./13" [pid 5154] <... munmap resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] <... chdir resumed>) = 0 [pid 5003] lstat("./12/file0", [pid 5154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5154] ioctl(4, LOOP_SET_FD, 3 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5156] <... write resumed>) = 2097152 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5154] <... ioctl resumed>) = 0 [pid 5154] close(3) = 0 [pid 5154] mkdir("./file0", 0777 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5154] <... mkdir resumed>) = 0 [pid 5159] <... prctl resumed>) = 0 [pid 5156] munmap(0x7f5db7f12000, 2097152 [pid 5003] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5156] <... munmap resumed>) = 0 [pid 5159] setpgid(0, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] <... setpgid resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5159] <... openat resumed>) = 3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5159] write(3, "1000", 4 [pid 5003] getdents64(4, [pid 5159] <... write resumed>) = 4 [pid 5156] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5159] close(3 [pid 5003] getdents64(4, [pid 5156] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [ 50.098427][ T5155] NILFS (loop3): invalid segment: Checksum error in segment payload [ 50.124368][ T5154] loop0: detected capacity change from 0 to 4096 [ 50.129985][ T5155] NILFS (loop3): trying rollback from an earlier position [pid 5159] <... close resumed>) = 0 [pid 5156] ioctl(4, LOOP_SET_FD, 3 [pid 5003] close(4 [pid 5159] symlink("/dev/binderfs", "./binderfs" [pid 5156] <... ioctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5159] <... symlink resumed>) = 0 [pid 5003] rmdir("./12/file0") = 0 [pid 5159] memfd_create("syzkaller", 0) = 3 [pid 5003] getdents64(3, [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5159] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] close(3) = 0 [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5156] close(3 [pid 5003] rmdir("./12") = 0 [pid 5156] <... close resumed>) = 0 [pid 5003] mkdir("./13", 0777) = 0 [pid 5156] mkdir("./file0", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5156] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5156] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5160 ./strace-static-x86_64: Process 5160 attached [pid 5160] chdir("./13") = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5158] <... write resumed>) = 2097152 [pid 5160] <... prctl resumed>) = 0 [pid 5160] setpgid(0, 0 [pid 5158] munmap(0x7f5db7f12000, 2097152 [pid 5160] <... setpgid resumed>) = 0 [ 50.147472][ T5156] loop2: detected capacity change from 0 to 4096 [ 50.159770][ T5154] NILFS (loop0): invalid segment: Checksum error in segment payload [ 50.186664][ T5155] NILFS (loop3): recovery complete [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5159] <... write resumed>) = 2097152 [pid 5155] <... mount resumed>) = 0 [pid 5160] <... openat resumed>) = 3 [pid 5158] <... munmap resumed>) = 0 [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] memfd_create("syzkaller", 0 [pid 5158] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5160] <... memfd_create resumed>) = 3 [pid 5158] ioctl(4, LOOP_SET_FD, 3 [pid 5159] munmap(0x7f5db7f12000, 2097152 [pid 5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5159] <... munmap resumed>) = 0 [pid 5155] <... openat resumed>) = 3 [pid 5159] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5155] chdir("./file0" [pid 5159] <... openat resumed>) = 4 [pid 5155] <... chdir resumed>) = 0 [pid 5159] ioctl(4, LOOP_SET_FD, 3 [pid 5155] ioctl(4, LOOP_CLR_FD [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5155] <... ioctl resumed>) = 0 [pid 5155] close(4) = 0 [pid 5159] <... ioctl resumed>) = 0 [ 50.194310][ T5156] NILFS (loop2): invalid segment: Checksum error in segment payload [ 50.197729][ T5161] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.206028][ T5158] loop4: detected capacity change from 0 to 4096 [ 50.213451][ T5154] NILFS (loop0): trying rollback from an earlier position [ 50.224143][ T5156] NILFS (loop2): trying rollback from an earlier position [ 50.235366][ T5159] loop1: detected capacity change from 0 to 4096 [pid 5155] creat("./bus", 000 [pid 5158] <... ioctl resumed>) = 0 [pid 5158] close(3) = 0 [pid 5155] <... creat resumed>) = 4 [pid 5155] open("./bus", O_RDONLY [pid 5158] mkdir("./file0", 0777 [pid 5155] <... open resumed>) = 5 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5155] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5158] <... mkdir resumed>) = 0 [pid 5158] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5155] <... write resumed>) = 32 [pid 5155] unlink("./bus") = 0 [pid 5155] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5155] exit_group(0) = ? [pid 5155] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5159] close(3 [pid 5001] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5159] <... close resumed>) = 0 [pid 5159] mkdir("./file0", 0777 [pid 5001] <... openat resumed>) = 3 [pid 5159] <... mkdir resumed>) = 0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5159] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./12/binderfs") = 0 [ 50.244666][ T5154] NILFS (loop0): recovery complete [pid 5001] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... write resumed>) = 2097152 [pid 5160] munmap(0x7f5db7f12000, 2097152 [pid 5154] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5160] <... munmap resumed>) = 0 [pid 5154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5154] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 50.278670][ T5156] NILFS (loop2): recovery complete [ 50.285069][ T5158] NILFS (loop4): invalid segment: Checksum error in segment payload [ 50.288822][ T5159] NILFS (loop1): invalid segment: Checksum error in segment payload [ 50.301442][ T5162] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.302984][ T5158] NILFS (loop4): trying rollback from an earlier position [ 50.318201][ T5159] NILFS (loop1): trying rollback from an earlier position [pid 5160] <... openat resumed>) = 4 [pid 5154] chdir("./file0" [pid 5001] lstat("./12/file0", [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5154] <... chdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5156] <... mount resumed>) = 0 [pid 5154] ioctl(4, LOOP_CLR_FD [pid 5001] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] close(4 [pid 5001] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5154] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5154] creat("./bus", 000 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./12/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./12" [pid 5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./13", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5156] <... openat resumed>) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5164 [pid 5156] chdir("./file0" [pid 5154] <... creat resumed>) = 4 [pid 5156] <... chdir resumed>) = 0 [pid 5154] open("./bus", O_RDONLY [pid 5156] ioctl(4, LOOP_CLR_FD [pid 5154] <... open resumed>) = 5 [pid 5156] <... ioctl resumed>) = 0 [pid 5154] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5156] close(4 [pid 5154] <... open resumed>) = 6 [pid 5156] <... close resumed>) = 0 [pid 5154] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5156] creat("./bus", 000 [pid 5154] <... write resumed>) = 32 [pid 5154] unlink("./bus" [pid 5160] <... ioctl resumed>) = 0 [pid 5160] close(3) = 0 [pid 5160] mkdir("./file0", 0777) = 0 [pid 5154] <... unlink resumed>) = 0 [pid 5160] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5154] sendfile(4, 5, NULL, 145139829833722./strace-static-x86_64: Process 5164 attached ) = 32 [pid 5164] chdir("./13" [pid 5154] exit_group(0 [pid 5164] <... chdir resumed>) = 0 [pid 5154] <... exit_group resumed>) = ? [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5164] setpgid(0, 0) = 0 [pid 5154] +++ exited with 0 +++ [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5164] write(3, "1000", 4 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5164] <... write resumed>) = 4 [ 50.325416][ T5160] loop5: detected capacity change from 0 to 4096 [ 50.329383][ T5163] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.352705][ T5158] NILFS (loop4): recovery complete [ 50.365982][ T5160] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5164] close(3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5164] <... close resumed>) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] memfd_create("syzkaller", 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5164] <... memfd_create resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... openat resumed>) = 3 [pid 5164] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./12/binderfs") = 0 [pid 4998] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5158] <... mount resumed>) = 0 [pid 5158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./file0") = 0 [pid 5158] ioctl(4, LOOP_CLR_FD) = 0 [pid 5158] close(4) = 0 [pid 5158] creat("./bus", 000 [ 50.380960][ T5159] NILFS (loop1): recovery complete [ 50.394844][ T5165] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.419450][ T5160] NILFS (loop5): trying rollback from an earlier position [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5159] <... mount resumed>) = 0 [pid 5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5159] chdir("./file0") = 0 [pid 5159] ioctl(4, LOOP_CLR_FD) = 0 [pid 5159] close(4) = 0 [pid 5159] creat("./bus", 000 [pid 5156] <... creat resumed>) = 4 [pid 5156] open("./bus", O_RDONLY) = 5 [pid 5156] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5158] <... creat resumed>) = 4 [pid 5156] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5158] open("./bus", O_RDONLY) = 5 [pid 5158] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5158] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5156] <... write resumed>) = 32 [pid 5156] unlink("./bus" [pid 5158] <... write resumed>) = 32 [pid 5158] unlink("./bus" [pid 5156] <... unlink resumed>) = 0 [pid 5156] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... umount2 resumed>) = 0 [pid 5158] <... unlink resumed>) = 0 [pid 5158] sendfile(4, 5, NULL, 145139829833722 [pid 5156] <... sendfile resumed>) = 32 [pid 4998] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5158] <... sendfile resumed>) = 32 [pid 5156] exit_group(0 [pid 5158] exit_group(0 [pid 5156] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5158] <... exit_group resumed>) = ? [pid 5158] +++ exited with 0 +++ [pid 5156] +++ exited with 0 +++ [pid 5164] <... write resumed>) = 2097152 [pid 4998] lstat("./12/file0", [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5164] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... munmap resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5164] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5164] <... openat resumed>) = 4 [pid 5159] <... creat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5164] ioctl(4, LOOP_SET_FD, 3 [pid 5159] open("./bus", O_RDONLY [pid 5002] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 4 [pid 5159] <... open resumed>) = 5 [pid 5002] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4998] fstat(4, [pid 5159] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] fstat(3, [ 50.426411][ T5166] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.470180][ T5164] loop3: detected capacity change from 0 to 4096 [pid 5000] fstat(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5159] <... open resumed>) = 6 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5159] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./12/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3 [pid 5164] <... ioctl resumed>) = 0 [pid 5159] <... write resumed>) = 32 [pid 5002] getdents64(3, [pid 5000] getdents64(3, [pid 5164] close(3 [pid 5159] unlink("./bus" [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... close resumed>) = 0 [pid 5159] <... unlink resumed>) = 0 [pid 4998] rmdir("./12" [pid 5159] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... rmdir resumed>) = 0 [pid 5159] <... sendfile resumed>) = 32 [pid 4998] mkdir("./13", 0777 [pid 5159] exit_group(0 [pid 4998] <... mkdir resumed>) = 0 [pid 5159] <... exit_group resumed>) = ? [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5159] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5164] <... close resumed>) = 0 [pid 5002] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] <... close resumed>) = 0 [pid 5164] mkdir("./file0", 0777 [pid 5160] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5164] <... mkdir resumed>) = 0 [pid 5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] lstat("./11/binderfs", [pid 5000] lstat("./12/binderfs", [pid 5164] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5168 attached [pid 5160] <... openat resumed>) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5168 [pid 5168] chdir("./13" [pid 5160] chdir("./file0" [pid 5168] <... chdir resumed>) = 0 [pid 5160] <... chdir resumed>) = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5160] ioctl(4, LOOP_CLR_FD [pid 5002] unlink("./11/binderfs" [pid 5000] unlink("./12/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] <... prctl resumed>) = 0 [pid 5160] <... ioctl resumed>) = 0 [pid 5168] setpgid(0, 0 [pid 5160] close(4 [pid 5168] <... setpgid resumed>) = 0 [pid 5160] <... close resumed>) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5160] creat("./bus", 000 [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5168] <... openat resumed>) = 3 [pid 5002] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] write(3, "1000", 4 [pid 5160] <... creat resumed>) = 4 [pid 5000] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5168] <... write resumed>) = 4 [pid 5160] open("./bus", O_RDONLY [pid 4999] fstat(3, [pid 5168] close(3 [pid 5160] <... open resumed>) = 5 [pid 5168] <... close resumed>) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs" [pid 5160] <... open resumed>) = 6 [pid 5168] <... symlink resumed>) = 0 [pid 5160] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4999] getdents64(3, [pid 5160] <... write resumed>) = 32 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5160] unlink("./bus" [pid 4999] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5160] <... sendfile resumed>) = 32 [pid 4999] unlink("./13/binderfs" [pid 5160] exit_group(0) = ? [ 50.487573][ T5160] NILFS (loop5): recovery complete [ 50.494798][ T5167] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.512606][ T5164] NILFS (loop3): invalid segment: Checksum error in segment payload [ 50.521356][ T5164] NILFS (loop3): trying rollback from an earlier position [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5003] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5002] <... umount2 resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] lstat("./13/binderfs", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] lstat("./11/file0", [pid 5003] unlink("./13/binderfs" [pid 5000] lstat("./12/file0", [pid 5003] <... unlink resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(4, [pid 5000] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(4 [pid 5000] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] rmdir("./11/file0") = 0 [pid 5000] getdents64(4, [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5000] close(4 [pid 5002] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] rmdir("./11" [pid 5000] rmdir("./12/file0" [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] mkdir("./12", 0777 [pid 5000] getdents64(3, [pid 5164] <... mount resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [ 50.576933][ T5164] NILFS (loop3): recovery complete [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] close(3 [pid 5002] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] rmdir("./12" [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 5002] close(3 [pid 5000] mkdir("./13", 0777 [pid 5164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5164] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5170 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5164] chdir("./file0" [pid 5000] close(3 [pid 5164] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5164] ioctl(4, LOOP_CLR_FD [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = 0 [pid 5003] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... ioctl resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5171 ./strace-static-x86_64: Process 5170 attached [pid 5164] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... close resumed>) = 0 [pid 5003] lstat("./13/file0", [pid 5164] creat("./bus", 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5170] chdir("./12" [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5170] <... chdir resumed>) = 0 [pid 5003] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./13/file0", ./strace-static-x86_64: Process 5171 attached [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] chdir("./13" [pid 5170] <... prctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5171] <... chdir resumed>) = 0 [pid 5170] setpgid(0, 0 [pid 5003] <... openat resumed>) = 4 [pid 4999] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] getdents64(4, [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5170] <... setpgid resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 4 [pid 5171] <... prctl resumed>) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5171] setpgid(0, 0 [pid 5170] <... openat resumed>) = 3 [pid 5171] <... setpgid resumed>) = 0 [pid 5170] write(3, "1000", 4 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5170] <... write resumed>) = 4 [pid 5171] <... openat resumed>) = 3 [pid 5170] close(3 [pid 5171] write(3, "1000", 4 [pid 5170] <... close resumed>) = 0 [pid 5171] <... write resumed>) = 4 [pid 5170] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(4, [pid 4999] fstat(4, [pid 5171] close(3 [pid 5170] <... symlink resumed>) = 0 [pid 5168] <... write resumed>) = 2097152 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5171] <... close resumed>) = 0 [pid 5170] memfd_create("syzkaller", 0 [pid 5168] munmap(0x7f5db7f12000, 2097152 [pid 5003] close(4 [pid 4999] getdents64(4, [pid 5171] symlink("/dev/binderfs", "./binderfs" [pid 5170] <... memfd_create resumed>) = 3 [pid 5003] <... close resumed>) = 0 [pid 5171] <... symlink resumed>) = 0 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5168] <... munmap resumed>) = 0 [pid 5003] rmdir("./13/file0" [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5171] memfd_create("syzkaller", 0 [pid 5170] <... mmap resumed>) = 0x7f5db7f12000 [pid 5171] <... memfd_create resumed>) = 3 [pid 5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5164] <... creat resumed>) = 4 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5168] <... openat resumed>) = 4 [pid 5164] open("./bus", O_RDONLY [pid 5003] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5171] <... mmap resumed>) = 0x7f5db7f12000 [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 5164] <... open resumed>) = 5 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [ 50.608417][ T5169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] close(4 [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5168] <... ioctl resumed>) = 0 [pid 5164] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] close(3 [pid 4999] <... close resumed>) = 0 [pid 5164] <... open resumed>) = 6 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5168] close(3 [pid 5164] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... close resumed>) = 0 [pid 4999] rmdir("./13/file0" [pid 5003] rmdir("./13" [pid 4999] <... rmdir resumed>) = 0 [pid 5168] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./14", 0777 [pid 4999] getdents64(3, [pid 5168] mkdir("./file0", 0777 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5164] <... write resumed>) = 32 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] close(3 [pid 5164] unlink("./bus" [pid 5003] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./13" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5164] <... unlink resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5164] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] mkdir("./14", 0777) = 0 [pid 5003] close(3 [pid 5164] <... sendfile resumed>) = 32 [pid 5003] <... close resumed>) = 0 [pid 5164] exit_group(0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5168] <... mkdir resumed>) = 0 [pid 5168] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5164] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5172 [pid 4999] <... openat resumed>) = 3 [pid 5164] +++ exited with 0 +++ [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5173 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5171] <... write resumed>) = 2097152 [pid 5001] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5172 attached [pid 5001] lstat("./13/binderfs", [pid 5172] chdir("./14" [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5173 attached [pid 5172] <... chdir resumed>) = 0 [pid 5001] unlink("./13/binderfs" [pid 5173] chdir("./14" [ 50.666788][ T5168] loop0: detected capacity change from 0 to 4096 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... unlink resumed>) = 0 [pid 5173] <... chdir resumed>) = 0 [pid 5172] <... prctl resumed>) = 0 [pid 5171] munmap(0x7f5db7f12000, 2097152 [pid 5170] <... write resumed>) = 2097152 [pid 5172] setpgid(0, 0 [pid 5171] <... munmap resumed>) = 0 [pid 5170] munmap(0x7f5db7f12000, 2097152 [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5172] <... setpgid resumed>) = 0 [pid 5170] <... munmap resumed>) = 0 [pid 5001] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5170] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5172] <... openat resumed>) = 3 [pid 5171] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5170] <... openat resumed>) = 4 [pid 5172] write(3, "1000", 4 [pid 5171] <... openat resumed>) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3 [pid 5173] <... prctl resumed>) = 0 [pid 5172] <... write resumed>) = 4 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5173] write(3, "1000", 4) = 4 [pid 5173] close(3) = 0 [pid 5173] symlink("/dev/binderfs", "./binderfs" [pid 5172] close(3 [pid 5173] <... symlink resumed>) = 0 [pid 5172] <... close resumed>) = 0 [ 50.711972][ T5168] NILFS (loop0): invalid segment: Checksum error in segment payload [ 50.720457][ T5168] NILFS (loop0): trying rollback from an earlier position [ 50.722640][ T5170] loop4: detected capacity change from 0 to 4096 [ 50.747242][ T5168] NILFS (loop0): recovery complete [ 50.750634][ T5171] loop2: detected capacity change from 0 to 4096 [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5170] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5173] memfd_create("syzkaller", 0 [pid 5172] symlink("/dev/binderfs", "./binderfs" [pid 5170] close(3 [pid 5168] <... mount resumed>) = 0 [pid 5001] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... symlink resumed>) = 0 [pid 5170] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5172] memfd_create("syzkaller", 0 [pid 5170] mkdir("./file0", 0777 [pid 5001] lstat("./13/file0", [pid 5172] <... memfd_create resumed>) = 3 [pid 5170] <... mkdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5170] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5173] <... memfd_create resumed>) = 3 [pid 5171] <... ioctl resumed>) = 0 [pid 5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5171] close(3 [pid 5168] <... openat resumed>) = 3 [pid 5173] <... mmap resumed>) = 0x7f5db7f12000 [pid 5171] <... close resumed>) = 0 [pid 5168] chdir("./file0" [pid 5001] fstat(4, [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5171] mkdir("./file0", 0777 [pid 5168] <... chdir resumed>) = 0 [pid 5171] <... mkdir resumed>) = 0 [pid 5168] ioctl(4, LOOP_CLR_FD [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5171] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5168] <... ioctl resumed>) = 0 [pid 5168] close(4) = 0 [pid 5168] creat("./bus", 000 [pid 5001] getdents64(4, [pid 5168] <... creat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5168] open("./bus", O_RDONLY [pid 5001] getdents64(4, [pid 5168] <... open resumed>) = 5 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] close(4 [pid 5168] <... open resumed>) = 6 [pid 5001] <... close resumed>) = 0 [pid 5168] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] rmdir("./13/file0" [pid 5168] <... write resumed>) = 32 [pid 5168] unlink("./bus") = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5168] sendfile(4, 5, NULL, 145139829833722 [pid 5001] getdents64(3, [pid 5168] <... sendfile resumed>) = 32 [pid 5168] exit_group(0) = ? [pid 5168] +++ exited with 0 +++ [ 50.754103][ T5174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.776844][ T5170] NILFS (loop4): invalid segment: Checksum error in segment payload [ 50.787053][ T5170] NILFS (loop4): trying rollback from an earlier position [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5173] <... write resumed>) = 2097152 [pid 5173] munmap(0x7f5db7f12000, 2097152 [pid 4998] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./13/binderfs") = 0 [pid 4998] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] <... munmap resumed>) = 0 [pid 5001] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./13" [pid 4998] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... write resumed>) = 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5172] munmap(0x7f5db7f12000, 2097152 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5001] mkdir("./14", 0777 [pid 4998] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] rmdir("./13/file0" [pid 5172] <... munmap resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... rmdir resumed>) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5172] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 4998] getdents64(3, [pid 5173] <... openat resumed>) = 4 [pid 5172] <... openat resumed>) = 4 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [ 50.808105][ T5171] NILFS (loop2): invalid segment: Checksum error in segment payload [ 50.820134][ T5171] NILFS (loop2): trying rollback from an earlier position [ 50.845174][ T5170] NILFS (loop4): recovery complete [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5172] <... ioctl resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./13") = 0 [pid 4998] mkdir("./14", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5176 ./strace-static-x86_64: Process 5176 attached [pid 5176] chdir("./14") = 0 [pid 5176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5176] setpgid(0, 0 [pid 5001] close(3 [pid 5172] close(3 [pid 5176] <... setpgid resumed>) = 0 [pid 5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5176] write(3, "1000", 4) = 4 [pid 5176] close(3) = 0 [pid 5176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5172] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5172] mkdir("./file0", 0777 [pid 5170] <... mount resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5172] <... mkdir resumed>) = 0 [pid 5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5170] <... openat resumed>) = 3 [pid 5172] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5170] chdir("./file0" [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5178 [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5170] <... chdir resumed>) = 0 [pid 5171] <... mount resumed>) = 0 [pid 5171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5171] <... openat resumed>) = 3 [pid 5170] <... ioctl resumed>) = 0 [pid 5171] chdir("./file0" [pid 5170] close(4 [pid 5171] <... chdir resumed>) = 0 [pid 5170] <... close resumed>) = 0 [pid 5171] ioctl(4, LOOP_CLR_FD [pid 5170] creat("./bus", 000 [pid 5171] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5178 attached [pid 5171] close(4) = 0 [ 50.856740][ T5172] loop5: detected capacity change from 0 to 4096 [ 50.857083][ T5173] loop1: detected capacity change from 0 to 4096 [ 50.871165][ T5171] NILFS (loop2): recovery complete [ 50.875706][ T5175] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.900109][ T5172] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5178] chdir("./14" [pid 5171] creat("./bus", 000 [pid 5178] <... chdir resumed>) = 0 [pid 5173] <... ioctl resumed>) = 0 [pid 5173] close(3) = 0 [pid 5173] mkdir("./file0", 0777) = 0 [pid 5173] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5178] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5178] write(3, "1000", 4) = 4 [pid 5178] close(3) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5178] memfd_create("syzkaller", 0) = 3 [pid 5170] <... creat resumed>) = 4 [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 50.913189][ T5177] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.928646][ T5172] NILFS (loop5): trying rollback from an earlier position [ 50.945225][ T5172] NILFS (loop5): recovery complete [pid 5170] open("./bus", O_RDONLY [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5170] <... open resumed>) = 5 [pid 5170] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5170] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5170] unlink("./bus" [pid 5172] <... mount resumed>) = 0 [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5170] <... unlink resumed>) = 0 [pid 5176] <... write resumed>) = 2097152 [pid 5171] <... creat resumed>) = 4 [pid 5171] open("./bus", O_RDONLY [pid 5172] <... openat resumed>) = 3 [pid 5171] <... open resumed>) = 5 [pid 5170] sendfile(4, 5, NULL, 145139829833722 [pid 5172] chdir("./file0" [pid 5171] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5172] <... chdir resumed>) = 0 [pid 5171] <... open resumed>) = 6 [pid 5170] <... sendfile resumed>) = 32 [pid 5172] ioctl(4, LOOP_CLR_FD [pid 5171] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5170] exit_group(0 [pid 5178] <... write resumed>) = 2097152 [pid 5172] <... ioctl resumed>) = 0 [pid 5176] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 50.956173][ T5173] NILFS (loop1): invalid segment: Checksum error in segment payload [ 50.979040][ T5179] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.998212][ T5173] NILFS (loop1): trying rollback from an earlier position [ 51.003639][ T5176] loop0: detected capacity change from 0 to 4096 [pid 5176] ioctl(4, LOOP_SET_FD, 3 [pid 5178] munmap(0x7f5db7f12000, 2097152 [pid 5172] close(4 [pid 5171] <... write resumed>) = 32 [pid 5170] <... exit_group resumed>) = ? [pid 5171] unlink("./bus") = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5172] <... close resumed>) = 0 [pid 5171] sendfile(4, 5, NULL, 145139829833722 [pid 5172] creat("./bus", 000 [pid 5171] <... sendfile resumed>) = 32 [pid 5171] exit_group(0) = ? [pid 5171] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5176] <... ioctl resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5170] +++ exited with 0 +++ [pid 5178] <... openat resumed>) = 4 [pid 5000] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(3, [pid 5000] lstat("./13/binderfs", [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] unlink("./13/binderfs" [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... unlink resumed>) = 0 [pid 5002] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] <... ioctl resumed>) = 0 [pid 5176] close(3 [pid 5172] <... creat resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5178] close(3) = 0 [pid 5178] mkdir("./file0", 0777) = 0 [pid 5178] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5172] open("./bus", O_RDONLY [pid 5002] lstat("./12/binderfs", [pid 5172] <... open resumed>) = 5 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5172] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] unlink("./12/binderfs" [pid 5172] <... open resumed>) = 6 [pid 5172] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... write resumed>) = 32 [ 51.011990][ T5173] NILFS (loop1): recovery complete [ 51.027583][ T5178] loop3: detected capacity change from 0 to 4096 [pid 5172] unlink("./bus") = 0 [pid 5172] sendfile(4, 5, NULL, 145139829833722 [pid 5176] <... close resumed>) = 0 [pid 5172] <... sendfile resumed>) = 32 [pid 5002] <... umount2 resumed>) = 0 [pid 5176] mkdir("./file0", 0777 [pid 5172] exit_group(0) = ? [pid 5173] <... mount resumed>) = 0 [pid 5176] <... mkdir resumed>) = 0 [pid 5172] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = 0 [pid 5176] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5173] chdir("./file0" [pid 5003] <... restart_syscall resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5173] <... chdir resumed>) = 0 [pid 5000] lstat("./13/file0", [pid 5173] ioctl(4, LOOP_CLR_FD [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5173] <... ioctl resumed>) = 0 [pid 5003] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5173] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5173] creat("./bus", 000 [pid 5003] unlink("./14/binderfs") = 0 [pid 5003] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 51.054420][ T5178] NILFS (loop3): invalid segment: Checksum error in segment payload [ 51.073309][ T5180] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] getdents64(4, [pid 5173] <... creat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5173] open("./bus", O_RDONLY [pid 5002] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5173] <... open resumed>) = 5 [pid 5002] <... openat resumed>) = 4 [pid 5000] getdents64(4, [pid 5173] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(4, [pid 5173] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] close(4 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./12/file0" [pid 5173] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] <... close resumed>) = 0 [pid 5003] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./13/file0" [pid 5173] <... write resumed>) = 32 [pid 5173] unlink("./bus" [pid 5003] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5173] <... unlink resumed>) = 0 [ 51.102397][ T5176] NILFS (loop0): invalid segment: Checksum error in segment payload [ 51.105434][ T5178] NILFS (loop3): trying rollback from an earlier position [pid 5173] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5173] exit_group(0) = ? [pid 5173] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5178] <... mount resumed>) = 0 [pid 5178] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5178] chdir("./file0") = 0 [pid 5178] ioctl(4, LOOP_CLR_FD) = 0 [pid 5178] close(4) = 0 [pid 5178] creat("./bus", 000) = 4 [pid 5178] open("./bus", O_RDONLY) = 5 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5178] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5176] <... mount resumed>) = 0 [pid 5176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file0") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] close(4) = 0 [pid 5176] creat("./bus", 000 [pid 5178] unlink("./bus" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] getdents64(4, [pid 5002] getdents64(3, [pid 4999] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 5003] close(4 [pid 5002] close(3 [pid 4999] lstat("./14/binderfs", [pid 5000] <... close resumed>) = 0 [pid 5178] <... unlink resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] rmdir("./13" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5178] sendfile(4, 5, NULL, 145139829833722 [pid 5003] rmdir("./14/file0" [pid 5002] rmdir("./12" [pid 4999] unlink("./14/binderfs" [pid 5000] <... rmdir resumed>) = 0 [pid 5178] <... sendfile resumed>) = 32 [pid 5176] <... creat resumed>) = 4 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] mkdir("./14", 0777 [pid 4999] <... unlink resumed>) = 0 [pid 5178] exit_group(0 [pid 5176] open("./bus", O_RDONLY [pid 5003] getdents64(3, [pid 5002] mkdir("./13", 0777 [pid 4999] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 5178] <... exit_group resumed>) = ? [pid 5176] <... open resumed>) = 5 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5176] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 5178] +++ exited with 0 +++ [pid 5176] <... open resumed>) = 6 [pid 5003] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5176] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] rmdir("./14" [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... rmdir resumed>) = 0 [pid 5001] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 5176] <... write resumed>) = 32 [pid 5003] mkdir("./15", 0777 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5176] unlink("./bus" [pid 5003] <... mkdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5183 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./14/binderfs") = 0 [pid 5001] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 51.148776][ T5176] NILFS (loop0): trying rollback from an earlier position [ 51.150157][ T5178] NILFS (loop3): recovery complete [ 51.164335][ T5181] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.172034][ T5176] NILFS (loop0): recovery complete [ 51.186622][ T5182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5183 attached [pid 5176] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] close(3 [pid 4999] <... umount2 resumed>) = 0 [pid 5176] sendfile(4, 5, NULL, 145139829833722 [pid 5183] chdir("./14" [pid 5003] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5183] <... chdir resumed>) = 0 [pid 5176] <... sendfile resumed>) = 32 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5176] exit_group(0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5183] <... prctl resumed>) = 0 [pid 5176] <... exit_group resumed>) = ? [pid 5003] close(3 [pid 5183] setpgid(0, 0 [pid 5003] <... close resumed>) = 0 [pid 4999] lstat("./14/file0", [pid 5183] <... setpgid resumed>) = 0 [pid 5176] +++ exited with 0 +++ [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5184 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5184 attached [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5176, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5183] <... openat resumed>) = 3 [pid 4999] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5185 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5183] write(3, "1000", 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] chdir("./13" [pid 5183] <... write resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5184] <... chdir resumed>) = 0 [pid 5183] close(3 [pid 4998] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5183] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5185 attached [pid 5184] <... prctl resumed>) = 0 [pid 5183] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... umount2 resumed>) = 0 [pid 4999] fstat(4, [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5185] chdir("./15" [pid 5184] setpgid(0, 0 [pid 5001] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5184] <... setpgid resumed>) = 0 [pid 5183] <... symlink resumed>) = 0 [pid 5185] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] lstat("./14/file0", [pid 4998] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] memfd_create("syzkaller", 0 [pid 4999] getdents64(4, [pid 4998] lstat("./14/binderfs", [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5185] <... prctl resumed>) = 0 [pid 5184] <... openat resumed>) = 3 [pid 5183] <... memfd_create resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 4998] unlink("./14/binderfs" [pid 5185] setpgid(0, 0 [pid 5184] write(3, "1000", 4 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5001] fstat(4, [pid 4998] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... setpgid resumed>) = 0 [pid 5184] <... write resumed>) = 4 [pid 5183] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(4 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5184] close(3 [pid 5001] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5185] <... openat resumed>) = 3 [pid 5184] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] rmdir("./14/file0" [pid 5185] write(3, "1000", 4 [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5001] getdents64(4, [pid 4998] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... write resumed>) = 4 [pid 5184] <... symlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5185] close(3 [pid 5001] rmdir("./14/file0" [pid 4998] lstat("./14/file0", [pid 5185] <... close resumed>) = 0 [pid 5184] memfd_create("syzkaller", 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs" [pid 5184] <... memfd_create resumed>) = 3 [pid 5001] getdents64(3, [pid 4999] close(3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5185] <... symlink resumed>) = 0 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] memfd_create("syzkaller", 0 [pid 5001] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... memfd_create resumed>) = 3 [pid 5184] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./14" [pid 4998] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] rmdir("./14" [pid 4998] <... openat resumed>) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] fstat(4, [pid 5001] mkdir("./15", 0777 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(4 [pid 5001] close(3 [pid 4998] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] rmdir("./14/file0" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5186 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./14" [pid 5185] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./15", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5187 ./strace-static-x86_64: Process 5186 attached [pid 5186] chdir("./15") = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0 [pid 4999] mkdir("./15", 0777 [pid 5186] <... setpgid resumed>) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... mkdir resumed>) = 0 [pid 5186] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5186] write(3, "1000", 4 [pid 4999] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5187 attached [pid 5186] <... write resumed>) = 4 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5187] chdir("./15" [pid 5186] close(3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5187] <... chdir resumed>) = 0 [pid 5186] <... close resumed>) = 0 [pid 4999] close(3 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5186] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 5187] <... prctl resumed>) = 0 [pid 5186] <... symlink resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5187] setpgid(0, 0 [pid 5186] memfd_create("syzkaller", 0 [pid 5187] <... setpgid resumed>) = 0 [pid 5186] <... memfd_create resumed>) = 3 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5188 [pid 5187] <... openat resumed>) = 3 [pid 5186] <... mmap resumed>) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5188 attached [pid 5187] write(3, "1000", 4 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5187] <... write resumed>) = 4 [pid 5188] chdir("./15" [pid 5187] close(3) = 0 [pid 5188] <... chdir resumed>) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs" [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5187] <... symlink resumed>) = 0 [pid 5188] <... prctl resumed>) = 0 [pid 5187] memfd_create("syzkaller", 0 [pid 5188] setpgid(0, 0 [pid 5187] <... memfd_create resumed>) = 3 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5188] <... setpgid resumed>) = 0 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5188] write(3, "1000", 4) = 4 [pid 5188] close(3) = 0 [pid 5188] symlink("/dev/binderfs", "./binderfs" [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5188] <... symlink resumed>) = 0 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5184] <... write resumed>) = 2097152 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5186] <... write resumed>) = 2097152 [pid 5185] <... write resumed>) = 2097152 [pid 5183] <... write resumed>) = 2097152 [pid 5183] munmap(0x7f5db7f12000, 2097152 [pid 5184] munmap(0x7f5db7f12000, 2097152 [pid 5185] munmap(0x7f5db7f12000, 2097152 [pid 5183] <... munmap resumed>) = 0 [pid 5184] <... munmap resumed>) = 0 [pid 5183] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5185] <... munmap resumed>) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5183] <... openat resumed>) = 4 [pid 5185] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5184] <... openat resumed>) = 4 [pid 5183] ioctl(4, LOOP_SET_FD, 3 [pid 5185] <... openat resumed>) = 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5188] <... write resumed>) = 2097152 [pid 5187] <... write resumed>) = 2097152 [pid 5186] munmap(0x7f5db7f12000, 2097152 [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5183] <... ioctl resumed>) = 0 [pid 5188] munmap(0x7f5db7f12000, 2097152 [pid 5187] munmap(0x7f5db7f12000, 2097152 [pid 5186] <... munmap resumed>) = 0 [pid 5184] <... ioctl resumed>) = 0 [pid 5184] close(3) = 0 [pid 5184] mkdir("./file0", 0777) = 0 [pid 5184] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5183] close(3 [pid 5188] <... munmap resumed>) = 0 [pid 5186] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5183] <... close resumed>) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5187] <... munmap resumed>) = 0 [pid 5186] <... openat resumed>) = 4 [pid 5185] <... ioctl resumed>) = 0 [pid 5183] mkdir("./file0", 0777 [pid 5188] <... openat resumed>) = 4 [pid 5187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5187] ioctl(4, LOOP_SET_FD, 3 [pid 5188] ioctl(4, LOOP_SET_FD, 3 [pid 5186] ioctl(4, LOOP_SET_FD, 3 [pid 5185] close(3 [pid 5183] <... mkdir resumed>) = 0 [pid 5187] <... ioctl resumed>) = 0 [pid 5187] close(3) = 0 [pid 5187] mkdir("./file0", 0777) = 0 [ 51.392018][ T5183] loop2: detected capacity change from 0 to 4096 [ 51.392731][ T5184] loop4: detected capacity change from 0 to 4096 [ 51.405498][ T5185] loop5: detected capacity change from 0 to 4096 [ 51.416720][ T5184] NILFS (loop4): invalid segment: Checksum error in segment payload [ 51.419174][ T5187] loop0: detected capacity change from 0 to 4096 [ 51.425295][ T5184] NILFS (loop4): trying rollback from an earlier position [pid 5187] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5188] <... ioctl resumed>) = 0 [pid 5188] close(3 [pid 5186] <... ioctl resumed>) = 0 [pid 5185] <... close resumed>) = 0 [pid 5188] <... close resumed>) = 0 [pid 5186] close(3 [pid 5185] mkdir("./file0", 0777 [pid 5183] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5188] mkdir("./file0", 0777 [pid 5186] <... close resumed>) = 0 [pid 5185] <... mkdir resumed>) = 0 [pid 5188] <... mkdir resumed>) = 0 [pid 5186] mkdir("./file0", 0777 [pid 5185] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5188] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5186] <... mkdir resumed>) = 0 [ 51.438970][ T5188] loop1: detected capacity change from 0 to 4096 [ 51.445521][ T5186] loop3: detected capacity change from 0 to 4096 [ 51.445730][ T5187] NILFS (loop0): invalid segment: Checksum error in segment payload [ 51.461517][ T5187] NILFS (loop0): trying rollback from an earlier position [ 51.465091][ T5183] NILFS (loop2): invalid segment: Checksum error in segment payload [ 51.475986][ T5187] NILFS (loop0): recovery complete [ 51.480695][ T5185] NILFS (loop5): invalid segment: Checksum error in segment payload [ 51.485740][ T5183] NILFS (loop2): trying rollback from an earlier position [ 51.494047][ T5188] NILFS (loop1): invalid segment: Checksum error in segment payload [ 51.499440][ T5184] NILFS (loop4): recovery complete [ 51.505421][ T5188] NILFS (loop1): trying rollback from an earlier position [ 51.510774][ T5189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.522880][ T5186] NILFS (loop3): invalid segment: Checksum error in segment payload [ 51.531598][ T5185] NILFS (loop5): trying rollback from an earlier position [pid 5186] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5187] <... mount resumed>) = 0 [pid 5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5184] <... mount resumed>) = 0 [pid 5187] <... openat resumed>) = 3 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5184] close(4) = 0 [pid 5184] creat("./bus", 000 [pid 5187] chdir("./file0") = 0 [pid 5187] ioctl(4, LOOP_CLR_FD) = 0 [pid 5187] close(4) = 0 [pid 5187] creat("./bus", 000) = 4 [pid 5187] open("./bus", O_RDONLY) = 5 [pid 5187] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 51.541127][ T5186] NILFS (loop3): trying rollback from an earlier position [ 51.551156][ T5190] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.552200][ T5183] NILFS (loop2): recovery complete [ 51.572135][ T5188] NILFS (loop1): recovery complete [ 51.584807][ T5185] NILFS (loop5): recovery complete [pid 5187] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5183] <... mount resumed>) = 0 [pid 5183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5183] chdir("./file0") = 0 [pid 5183] ioctl(4, LOOP_CLR_FD) = 0 [pid 5183] close(4) = 0 [pid 5183] creat("./bus", 000 [pid 5187] <... write resumed>) = 32 [pid 5187] unlink("./bus" [pid 5188] <... mount resumed>) = 0 [pid 5187] <... unlink resumed>) = 0 [pid 5184] <... creat resumed>) = 4 [pid 5187] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5187] exit_group(0) = ? [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5187] +++ exited with 0 +++ [pid 5184] open("./bus", O_RDONLY [pid 5188] <... openat resumed>) = 3 [pid 5184] <... open resumed>) = 5 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5188] chdir("./file0" [pid 5184] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5188] <... chdir resumed>) = 0 [pid 5184] <... open resumed>) = 6 [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] chdir("./file0" [pid 4998] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5185] <... chdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5185] ioctl(4, LOOP_CLR_FD [pid 4998] fstat(3, [pid 5188] ioctl(4, LOOP_CLR_FD [pid 5185] <... ioctl resumed>) = 0 [pid 5184] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5185] close(4 [pid 4998] getdents64(3, [pid 5185] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5185] creat("./bus", 000 [ 51.586422][ T5192] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.598434][ T5191] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.612655][ T5186] NILFS (loop3): recovery complete [ 51.623623][ T5193] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5188] <... ioctl resumed>) = 0 [pid 4998] unlink("./15/binderfs" [pid 5188] close(4 [pid 5186] <... mount resumed>) = 0 [pid 5184] <... write resumed>) = 32 [pid 4998] <... unlink resumed>) = 0 [pid 5188] <... close resumed>) = 0 [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5184] unlink("./bus" [pid 5183] <... creat resumed>) = 4 [pid 4998] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5188] creat("./bus", 000 [pid 5186] <... openat resumed>) = 3 [pid 5185] <... creat resumed>) = 4 [pid 5184] <... unlink resumed>) = 0 [pid 5183] open("./bus", O_RDONLY [pid 5186] chdir("./file0" [pid 5185] open("./bus", O_RDONLY [pid 5184] sendfile(4, 5, NULL, 145139829833722 [pid 5183] <... open resumed>) = 5 [pid 5186] <... chdir resumed>) = 0 [pid 5185] <... open resumed>) = 5 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5188] <... creat resumed>) = 4 [pid 5186] ioctl(4, LOOP_CLR_FD [pid 5185] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5184] <... sendfile resumed>) = 32 [pid 5183] <... open resumed>) = 6 [pid 5188] open("./bus", O_RDONLY [pid 5186] <... ioctl resumed>) = 0 [pid 5183] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5188] <... open resumed>) = 5 [pid 5186] close(4 [pid 5188] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5186] <... close resumed>) = 0 [pid 5184] exit_group(0 [pid 5188] <... open resumed>) = 6 [pid 5186] creat("./bus", 000 [pid 5185] <... open resumed>) = 6 [pid 5184] <... exit_group resumed>) = ? [pid 5183] <... write resumed>) = 32 [pid 5188] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5185] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5183] unlink("./bus") = 0 [pid 5183] sendfile(4, 5, NULL, 145139829833722 [pid 5188] <... write resumed>) = 32 [pid 5185] <... write resumed>) = 32 [pid 5184] +++ exited with 0 +++ [pid 5183] <... sendfile resumed>) = 32 [pid 5188] unlink("./bus" [pid 5186] <... creat resumed>) = 4 [pid 5185] unlink("./bus" [pid 5183] exit_group(0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5186] open("./bus", O_RDONLY [pid 5183] <... exit_group resumed>) = ? [pid 5188] <... unlink resumed>) = 0 [pid 5186] <... open resumed>) = 5 [pid 5185] <... unlink resumed>) = 0 [pid 5183] +++ exited with 0 +++ [pid 5188] sendfile(4, 5, NULL, 145139829833722 [pid 5186] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5185] sendfile(4, 5, NULL, 145139829833722 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5186] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5188] <... sendfile resumed>) = 32 [pid 5185] <... sendfile resumed>) = 32 [pid 5002] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] <... write resumed>) = 32 [pid 5188] exit_group(0 [pid 5186] unlink("./bus" [pid 5185] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] <... exit_group resumed>) = ? [pid 5186] <... unlink resumed>) = 0 [pid 5185] <... exit_group resumed>) = ? [pid 5002] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5186] sendfile(4, 5, NULL, 145139829833722 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5186] <... sendfile resumed>) = 32 [pid 5002] getdents64(3, [pid 5000] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] exit_group(0 [pid 5185] +++ exited with 0 +++ [pid 5188] +++ exited with 0 +++ [pid 5186] <... exit_group resumed>) = ? [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 5002] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5188, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5186] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./13/binderfs", [pid 5000] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 51.634991][ T5194] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] unlink("./13/binderfs" [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] fstat(3, [pid 4999] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./15/file0", [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(3, [pid 5002] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] fstat(4, [pid 5003] getdents64(3, [pid 5001] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... openat resumed>) = 3 [pid 5000] lstat("./14/binderfs", [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 5000] unlink("./14/binderfs" [pid 4999] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] lstat("./15/binderfs", [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./15/file0" [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] getdents64(3, [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./15") = 0 [pid 4998] mkdir("./16", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] lstat("./15/binderfs", [pid 5003] unlink("./15/binderfs" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5195 [pid 5003] <... unlink resumed>) = 0 [pid 4999] unlink("./15/binderfs" [pid 5003] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5195 attached [pid 4999] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] chdir("./16" [pid 5001] lstat("./15/binderfs", [pid 5195] <... chdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./15/binderfs" [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... prctl resumed>) = 0 [pid 5195] setpgid(0, 0) = 0 [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5195] write(3, "1000", 4) = 4 [pid 5195] close(3) = 0 [pid 5195] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5195] memfd_create("syzkaller", 0) = 3 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 5001] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./14/file0", [pid 5001] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 5000] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] rmdir("./15/file0") = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./14/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./15") = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./14") = 0 [pid 5001] mkdir("./16", 0777) = 0 [pid 5000] mkdir("./15", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 5001] close(3) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5196 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5197 [pid 5003] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./15/file0", [pid 5002] lstat("./13/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./15/file0", [pid 5003] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5002] <... openat resumed>) = 4 [pid 4999] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 4999] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5197 attached [pid 5003] getdents64(4, [pid 5197] chdir("./15" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 4 [pid 5197] <... chdir resumed>) = 0 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5197] setpgid(0, 0 [pid 5003] close(4 [pid 5002] getdents64(4, [pid 4999] fstat(4, ./strace-static-x86_64: Process 5196 attached [pid 5197] <... setpgid resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5196] chdir("./16" [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] rmdir("./15/file0" [pid 5002] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5197] <... openat resumed>) = 3 [pid 5196] <... chdir resumed>) = 0 [pid 5197] write(3, "1000", 4 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5197] <... write resumed>) = 4 [pid 5196] <... prctl resumed>) = 0 [pid 5197] close(3 [pid 5196] setpgid(0, 0 [pid 5197] <... close resumed>) = 0 [pid 5196] <... setpgid resumed>) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs" [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5197] <... symlink resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5197] memfd_create("syzkaller", 0 [pid 5196] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5002] rmdir("./13/file0" [pid 5197] <... memfd_create resumed>) = 3 [pid 5196] write(3, "1000", 4 [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5196] <... write resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5197] <... mmap resumed>) = 0x7f5db7f12000 [pid 5196] close(3) = 0 [pid 5003] close(3 [pid 5002] getdents64(3, [pid 4999] getdents64(4, [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5196] memfd_create("syzkaller", 0) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./15" [pid 5002] close(3 [pid 4999] close(4 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] mkdir("./16", 0777 [pid 5002] rmdir("./13" [pid 4999] rmdir("./15/file0" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./14", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5002] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] close(3 [pid 5003] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] rmdir("./15" [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] mkdir("./16", 0777 [pid 5002] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5198 [pid 4999] <... openat resumed>) = 3 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5199 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5200 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5195] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5199 attached [pid 5199] chdir("./16" [pid 5195] munmap(0x7f5db7f12000, 2097152./strace-static-x86_64: Process 5200 attached [pid 5199] <... chdir resumed>) = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5198 attached [pid 5200] chdir("./16" [pid 5199] setpgid(0, 0 [pid 5195] <... munmap resumed>) = 0 [pid 5200] <... chdir resumed>) = 0 [pid 5199] <... setpgid resumed>) = 0 [pid 5198] chdir("./14" [pid 5195] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5198] <... chdir resumed>) = 0 [pid 5195] <... openat resumed>) = 4 [pid 5200] <... prctl resumed>) = 0 [pid 5199] <... openat resumed>) = 3 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5200] setpgid(0, 0 [pid 5199] write(3, "1000", 4 [pid 5198] <... prctl resumed>) = 0 [pid 5199] <... write resumed>) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] memfd_create("syzkaller", 0 [pid 5200] <... setpgid resumed>) = 0 [pid 5198] setpgid(0, 0 [pid 5199] <... memfd_create resumed>) = 3 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5200] <... openat resumed>) = 3 [pid 5198] <... setpgid resumed>) = 0 [pid 5200] write(3, "1000", 4 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5200] <... write resumed>) = 4 [pid 5200] close(3 [pid 5198] <... openat resumed>) = 3 [pid 5200] <... close resumed>) = 0 [pid 5198] write(3, "1000", 4 [pid 5200] symlink("/dev/binderfs", "./binderfs" [pid 5198] <... write resumed>) = 4 [pid 5200] <... symlink resumed>) = 0 [pid 5198] close(3 [pid 5197] <... write resumed>) = 2097152 [pid 5200] memfd_create("syzkaller", 0 [pid 5198] <... close resumed>) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5200] <... memfd_create resumed>) = 3 [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5198] <... symlink resumed>) = 0 [pid 5195] <... ioctl resumed>) = 0 [pid 5198] memfd_create("syzkaller", 0 [pid 5200] <... mmap resumed>) = 0x7f5db7f12000 [pid 5198] <... memfd_create resumed>) = 3 [pid 5195] close(3) = 0 [pid 5195] mkdir("./file0", 0777) = 0 [pid 5195] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5197] munmap(0x7f5db7f12000, 2097152 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5197] <... munmap resumed>) = 0 [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5197] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5196] <... write resumed>) = 2097152 [pid 5197] <... openat resumed>) = 4 [pid 5196] munmap(0x7f5db7f12000, 2097152 [pid 5197] ioctl(4, LOOP_SET_FD, 3 [pid 5196] <... munmap resumed>) = 0 [ 51.805862][ T5195] loop0: detected capacity change from 0 to 4096 [pid 5196] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5200] <... write resumed>) = 2097152 [pid 5197] <... ioctl resumed>) = 0 [pid 5197] close(3) = 0 [pid 5197] mkdir("./file0", 0777) = 0 [pid 5197] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5196] <... ioctl resumed>) = 0 [pid 5196] close(3) = 0 [pid 5196] mkdir("./file0", 0777) = 0 [ 51.852857][ T5197] loop2: detected capacity change from 0 to 4096 [ 51.863430][ T5196] loop3: detected capacity change from 0 to 4096 [ 51.877148][ T5195] NILFS (loop0): invalid segment: Checksum error in segment payload [ 51.885152][ T5195] NILFS (loop0): trying rollback from an earlier position [pid 5196] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5200] munmap(0x7f5db7f12000, 2097152 [pid 5198] <... write resumed>) = 2097152 [pid 5199] <... write resumed>) = 2097152 [pid 5198] munmap(0x7f5db7f12000, 2097152 [pid 5200] <... munmap resumed>) = 0 [pid 5198] <... munmap resumed>) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5198] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5200] ioctl(4, LOOP_SET_FD, 3 [pid 5199] munmap(0x7f5db7f12000, 2097152 [pid 5200] <... ioctl resumed>) = 0 [pid 5198] <... openat resumed>) = 4 [pid 5199] <... munmap resumed>) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 51.909846][ T5197] NILFS (loop2): invalid segment: Checksum error in segment payload [ 51.923814][ T5200] loop1: detected capacity change from 0 to 4096 [ 51.927887][ T5196] NILFS (loop3): invalid segment: Checksum error in segment payload [ 51.933457][ T5197] NILFS (loop2): trying rollback from an earlier position [ 51.940451][ T5199] loop5: detected capacity change from 0 to 4096 [ 51.948831][ T5196] NILFS (loop3): trying rollback from an earlier position [pid 5199] ioctl(4, LOOP_SET_FD, 3 [pid 5200] close(3 [pid 5199] <... ioctl resumed>) = 0 [pid 5198] ioctl(4, LOOP_SET_FD, 3 [pid 5200] <... close resumed>) = 0 [pid 5200] mkdir("./file0", 0777) = 0 [pid 5200] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5199] close(3) = 0 [pid 5199] mkdir("./file0", 0777 [pid 5196] <... mount resumed>) = 0 [pid 5199] <... mkdir resumed>) = 0 [pid 5199] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5198] <... ioctl resumed>) = 0 [ 51.953772][ T5197] NILFS (loop2): recovery complete [ 51.962158][ T5198] loop4: detected capacity change from 0 to 4096 [ 51.965859][ T5196] NILFS (loop3): recovery complete [ 51.978147][ T5200] NILFS (loop1): invalid segment: Checksum error in segment payload [ 51.978930][ T5201] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.986128][ T5200] NILFS (loop1): trying rollback from an earlier position [ 51.986650][ T5195] NILFS (loop0): recovery complete [pid 5198] close(3) = 0 [pid 5198] mkdir("./file0", 0777) = 0 [pid 5198] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5197] <... mount resumed>) = 0 [pid 5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5196] <... openat resumed>) = 3 [pid 5197] <... openat resumed>) = 3 [pid 5196] chdir("./file0" [pid 5197] chdir("./file0" [pid 5196] <... chdir resumed>) = 0 [pid 5197] <... chdir resumed>) = 0 [pid 5196] ioctl(4, LOOP_CLR_FD [pid 5197] ioctl(4, LOOP_CLR_FD [pid 5196] <... ioctl resumed>) = 0 [pid 5197] <... ioctl resumed>) = 0 [pid 5196] close(4 [pid 5197] close(4 [pid 5196] <... close resumed>) = 0 [pid 5197] <... close resumed>) = 0 [pid 5196] creat("./bus", 000 [pid 5197] creat("./bus", 000) = 4 [pid 5196] <... creat resumed>) = 4 [pid 5197] open("./bus", O_RDONLY [pid 5196] open("./bus", O_RDONLY [pid 5197] <... open resumed>) = 5 [pid 5196] <... open resumed>) = 5 [ 51.998043][ T5202] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.025181][ T5200] NILFS (loop1): recovery complete [ 52.033068][ T5199] NILFS (loop5): invalid segment: Checksum error in segment payload [ 52.041557][ T5199] NILFS (loop5): trying rollback from an earlier position [pid 5197] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5200] <... mount resumed>) = 0 [pid 5197] <... open resumed>) = 6 [pid 5196] <... open resumed>) = 6 [pid 5200] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5197] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5196] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5200] <... openat resumed>) = 3 [pid 5200] chdir("./file0") = 0 [pid 5200] ioctl(4, LOOP_CLR_FD) = 0 [pid 5200] close(4) = 0 [pid 5200] creat("./bus", 000 [pid 5197] <... write resumed>) = 32 [pid 5196] <... write resumed>) = 32 [pid 5197] unlink("./bus" [pid 5196] unlink("./bus" [pid 5195] <... mount resumed>) = 0 [pid 5197] <... unlink resumed>) = 0 [pid 5196] <... unlink resumed>) = 0 [pid 5195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5197] sendfile(4, 5, NULL, 145139829833722 [pid 5196] sendfile(4, 5, NULL, 145139829833722 [pid 5200] <... creat resumed>) = 4 [pid 5195] <... openat resumed>) = 3 [pid 5200] open("./bus", O_RDONLY [pid 5195] chdir("./file0" [pid 5197] <... sendfile resumed>) = 32 [pid 5200] <... open resumed>) = 5 [pid 5197] exit_group(0 [pid 5196] <... sendfile resumed>) = 32 [pid 5195] <... chdir resumed>) = 0 [pid 5197] <... exit_group resumed>) = ? [pid 5200] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5196] exit_group(0 [pid 5195] ioctl(4, LOOP_CLR_FD [pid 5200] <... open resumed>) = 6 [pid 5196] <... exit_group resumed>) = ? [pid 5195] <... ioctl resumed>) = 0 [pid 5200] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5195] close(4 [pid 5197] +++ exited with 0 +++ [pid 5200] <... write resumed>) = 32 [pid 5196] +++ exited with 0 +++ [pid 5195] <... close resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5200] unlink("./bus" [pid 5195] creat("./bus", 000 [pid 5200] <... unlink resumed>) = 0 [pid 5195] <... creat resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5200] sendfile(4, 5, NULL, 145139829833722 [pid 5195] open("./bus", O_RDONLY [pid 5001] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] <... sendfile resumed>) = 32 [pid 5195] <... open resumed>) = 5 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5200] exit_group(0 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5200] <... exit_group resumed>) = ? [pid 5195] <... open resumed>) = 6 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5200] +++ exited with 0 +++ [pid 5195] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [ 52.060301][ T5203] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.061154][ T5199] NILFS (loop5): recovery complete [ 52.073630][ T5204] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.078705][ T5198] NILFS (loop4): invalid segment: Checksum error in segment payload [ 52.094658][ T5198] NILFS (loop4): trying rollback from an earlier position [pid 5001] fstat(3, [pid 5000] fstat(3, [pid 5195] <... write resumed>) = 32 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5199] <... mount resumed>) = 0 [pid 5195] unlink("./bus" [pid 5001] getdents64(3, [pid 5000] getdents64(3, [pid 5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5195] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5199] <... openat resumed>) = 3 [pid 5195] sendfile(4, 5, NULL, 145139829833722 [pid 5001] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] chdir("./file0" [pid 5195] <... sendfile resumed>) = 32 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5199] <... chdir resumed>) = 0 [pid 5195] exit_group(0 [pid 5001] lstat("./16/binderfs", [pid 5000] lstat("./15/binderfs", [pid 5199] ioctl(4, LOOP_CLR_FD [pid 5195] <... exit_group resumed>) = ? [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5199] <... ioctl resumed>) = 0 [pid 5195] +++ exited with 0 +++ [pid 5001] unlink("./16/binderfs" [pid 5000] unlink("./15/binderfs" [pid 5199] close(4 [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5199] <... close resumed>) = 0 [pid 5001] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5200, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5199] creat("./bus", 000 [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] <... creat resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 4998] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] open("./bus", O_RDONLY [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5199] <... open resumed>) = 5 [pid 4998] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... openat resumed>) = 3 [pid 5199] <... open resumed>) = 6 [pid 4998] fstat(3, [pid 5199] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 52.128104][ T5205] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5199] <... write resumed>) = 32 [pid 4999] getdents64(3, [pid 4998] lstat("./16/binderfs", [pid 5199] unlink("./bus" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./16/binderfs") = 0 [pid 4998] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5199] <... unlink resumed>) = 0 [pid 4999] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] sendfile(4, 5, NULL, 145139829833722 [pid 5001] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./16/binderfs", [pid 5001] lstat("./16/file0", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5001] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./15/file0", [pid 5001] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 5001] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 5001] close(4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5001] rmdir("./16/file0" [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 5001] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./15/file0" [pid 5001] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 5001] rmdir("./16" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 5001] mkdir("./17", 0777 [pid 5000] <... close resumed>) = 0 [pid 5199] <... sendfile resumed>) = 32 [pid 5000] rmdir("./15" [pid 4999] unlink("./16/binderfs" [pid 5199] exit_group(0) = ? [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] mkdir("./16", 0777 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] close(3) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5206 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5207 ./strace-static-x86_64: Process 5207 attached [pid 5207] chdir("./16") = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5207] setpgid(0, 0) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5206 attached [pid 5206] chdir("./17" [pid 5199] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 5206] <... chdir resumed>) = 0 [pid 5207] <... symlink resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] memfd_create("syzkaller", 0 [pid 5206] <... prctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] <... memfd_create resumed>) = 3 [pid 5206] setpgid(0, 0 [pid 5003] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5206] <... setpgid resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 5207] <... mmap resumed>) = 0x7f5db7f12000 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5206] <... openat resumed>) = 3 [pid 5206] write(3, "1000", 4 [pid 5003] getdents64(3, [pid 5206] <... write resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5206] close(3 [pid 5003] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5206] symlink("/dev/binderfs", "./binderfs" [pid 5003] lstat("./16/binderfs", [pid 5206] <... symlink resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5206] memfd_create("syzkaller", 0 [pid 5003] unlink("./16/binderfs" [pid 5206] <... memfd_create resumed>) = 3 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... unlink resumed>) = 0 [pid 5206] <... mmap resumed>) = 0x7f5db7f12000 [ 52.172454][ T5198] NILFS (loop4): recovery complete [pid 5003] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5198] <... mount resumed>) = 0 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5198] chdir("./file0" [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5198] <... chdir resumed>) = 0 [pid 5198] ioctl(4, LOOP_CLR_FD) = 0 [pid 5198] close(4) = 0 [pid 5198] creat("./bus", 000 [pid 4998] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = 0 [pid 4998] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./16/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... creat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] open("./bus", O_RDONLY) = 5 [pid 4998] <... openat resumed>) = 4 [pid 5198] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] fstat(4, [pid 5198] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5198] <... write resumed>) = 32 [pid 4998] getdents64(4, [pid 5198] unlink("./bus" [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] close(4 [pid 5198] <... unlink resumed>) = 0 [pid 5198] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] rmdir("./16/file0" [pid 5198] <... sendfile resumed>) = 32 [pid 5198] exit_group(0) = ? [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 4999] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5198] +++ exited with 0 +++ [pid 4998] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./16" [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 5002] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./16/file0" [pid 4998] mkdir("./17", 0777 [pid 5002] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] fstat(3, [pid 4998] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] getdents64(3, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(3, [pid 4998] close(3 [pid 5002] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5207] <... write resumed>) = 2097152 [pid 5206] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3) = 0 [pid 4999] rmdir("./16" [pid 5207] munmap(0x7f5db7f12000, 2097152 [pid 5002] lstat("./14/binderfs", [pid 4999] <... rmdir resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 52.217133][ T5208] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] mkdir("./17", 0777 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./14/binderfs" [pid 4999] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] lstat("./16/file0", [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5207] <... munmap resumed>) = 0 [pid 5003] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... unlink resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5209 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... openat resumed>) = 4 [pid 5002] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5210 [pid 5003] getdents64(4, [pid 5207] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5207] ioctl(4, LOOP_SET_FD, 3 [pid 5003] close(4) = 0 [pid 5003] rmdir("./16/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./16") = 0 [pid 5003] mkdir("./17", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5210 attached [pid 5003] close(3 [pid 5210] chdir("./17" [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5210] <... chdir resumed>) = 0 [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5211 [pid 5210] <... prctl resumed>) = 0 [pid 5210] setpgid(0, 0) = 0 [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5210] write(3, "1000", 4) = 4 [pid 5210] close(3) = 0 [pid 5210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5210] memfd_create("syzkaller", 0) = 3 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5211 attached [pid 5211] chdir("./17") = 0 [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5206] munmap(0x7f5db7f12000, 2097152 [pid 5211] <... prctl resumed>) = 0 [pid 5211] setpgid(0, 0) = 0 [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5209 attached [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] <... munmap resumed>) = 0 [pid 5211] write(3, "1000", 4 [pid 5209] chdir("./17" [pid 5207] <... ioctl resumed>) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5211] <... write resumed>) = 4 [pid 5206] <... openat resumed>) = 4 [pid 5211] close(3 [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5211] <... close resumed>) = 0 [pid 5209] <... chdir resumed>) = 0 [pid 5207] close(3 [pid 5002] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5211] memfd_create("syzkaller", 0) = 3 [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5207] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] <... prctl resumed>) = 0 [pid 5207] mkdir("./file0", 0777 [pid 5002] lstat("./14/file0", [pid 5209] setpgid(0, 0 [pid 5207] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5209] <... setpgid resumed>) = 0 [pid 5207] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5209] <... openat resumed>) = 3 [pid 5002] fstat(4, [pid 5209] write(3, "1000", 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5209] <... write resumed>) = 4 [pid 5002] getdents64(4, [pid 5209] close(3 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5209] <... close resumed>) = 0 [pid 5206] <... ioctl resumed>) = 0 [ 52.282153][ T5207] loop2: detected capacity change from 0 to 4096 [ 52.304110][ T5206] loop3: detected capacity change from 0 to 4096 [pid 5206] close(3 [pid 5209] symlink("/dev/binderfs", "./binderfs" [pid 5002] getdents64(4, [pid 5206] <... close resumed>) = 0 [pid 5206] mkdir("./file0", 0777) = 0 [pid 5206] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5209] <... symlink resumed>) = 0 [pid 5002] close(4 [pid 5209] memfd_create("syzkaller", 0 [pid 5002] <... close resumed>) = 0 [pid 5209] <... memfd_create resumed>) = 3 [pid 5002] rmdir("./14/file0" [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5209] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./14" [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./15", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5212 [ 52.325824][ T5207] NILFS (loop2): invalid segment: Checksum error in segment payload [ 52.348590][ T5206] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5210] <... write resumed>) = 2097152 [pid 5210] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5210] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5212 attached [pid 5212] chdir("./15") = 0 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5212] setpgid(0, 0) = 0 [pid 5211] <... write resumed>) = 2097152 [pid 5211] munmap(0x7f5db7f12000, 2097152 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5212] write(3, "1000", 4 [pid 5211] <... munmap resumed>) = 0 [pid 5212] <... write resumed>) = 4 [pid 5211] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5212] close(3 [pid 5211] <... openat resumed>) = 4 [pid 5212] <... close resumed>) = 0 [pid 5211] ioctl(4, LOOP_SET_FD, 3 [pid 5212] symlink("/dev/binderfs", "./binderfs" [pid 5210] <... ioctl resumed>) = 0 [pid 5209] <... write resumed>) = 2097152 [pid 5212] <... symlink resumed>) = 0 [pid 5210] close(3 [pid 5209] munmap(0x7f5db7f12000, 2097152 [pid 5212] memfd_create("syzkaller", 0 [pid 5211] <... ioctl resumed>) = 0 [pid 5210] <... close resumed>) = 0 [pid 5209] <... munmap resumed>) = 0 [pid 5212] <... memfd_create resumed>) = 3 [pid 5211] close(3 [ 52.380159][ T5207] NILFS (loop2): trying rollback from an earlier position [ 52.388021][ T5210] loop1: detected capacity change from 0 to 4096 [ 52.402461][ T5206] NILFS (loop3): trying rollback from an earlier position [ 52.419250][ T5211] loop5: detected capacity change from 0 to 4096 [pid 5210] mkdir("./file0", 0777 [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5211] <... close resumed>) = 0 [pid 5210] <... mkdir resumed>) = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5212] <... mmap resumed>) = 0x7f5db7f12000 [pid 5211] mkdir("./file0", 0777 [pid 5210] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5209] <... openat resumed>) = 4 [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5211] <... mkdir resumed>) = 0 [pid 5211] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5206] <... mount resumed>) = 0 [pid 5206] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5206] chdir("./file0") = 0 [pid 5206] ioctl(4, LOOP_CLR_FD) = 0 [pid 5206] close(4) = 0 [pid 5206] creat("./bus", 000 [pid 5209] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5209] close(3) = 0 [pid 5209] mkdir("./file0", 0777) = 0 [ 52.429243][ T5206] NILFS (loop3): recovery complete [ 52.431021][ T5207] NILFS (loop2): recovery complete [ 52.440375][ T5213] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.449079][ T5210] NILFS (loop1): invalid segment: Checksum error in segment payload [ 52.461426][ T5209] loop0: detected capacity change from 0 to 4096 [pid 5209] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5207] <... mount resumed>) = 0 [pid 5206] <... creat resumed>) = 4 [pid 5207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5206] open("./bus", O_RDONLY [pid 5207] <... openat resumed>) = 3 [pid 5206] <... open resumed>) = 5 [pid 5207] chdir("./file0" [pid 5206] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5207] <... chdir resumed>) = 0 [pid 5206] <... open resumed>) = 6 [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5206] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5207] <... ioctl resumed>) = 0 [pid 5207] close(4) = 0 [pid 5207] creat("./bus", 000 [pid 5206] <... write resumed>) = 32 [pid 5206] unlink("./bus" [pid 5207] <... creat resumed>) = 4 [pid 5206] <... unlink resumed>) = 0 [pid 5207] open("./bus", O_RDONLY [pid 5206] sendfile(4, 5, NULL, 145139829833722 [pid 5207] <... open resumed>) = 5 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5206] <... sendfile resumed>) = 32 [pid 5207] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [ 52.473034][ T5211] NILFS (loop5): invalid segment: Checksum error in segment payload [ 52.473767][ T5210] NILFS (loop1): trying rollback from an earlier position [ 52.488542][ T5214] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.503556][ T5209] NILFS (loop0): invalid segment: Checksum error in segment payload [ 52.507992][ T5210] NILFS (loop1): recovery complete [ 52.515735][ T5211] NILFS (loop5): trying rollback from an earlier position [pid 5206] exit_group(0) = ? [pid 5206] +++ exited with 0 +++ [pid 5212] <... write resumed>) = 2097152 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5207] <... write resumed>) = 32 [pid 5210] <... mount resumed>) = 0 [pid 5212] munmap(0x7f5db7f12000, 2097152 [pid 5210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5207] unlink("./bus" [pid 5001] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5210] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5210] chdir("./file0" [pid 5001] <... openat resumed>) = 3 [pid 5210] <... chdir resumed>) = 0 [pid 5210] ioctl(4, LOOP_CLR_FD [pid 5001] fstat(3, [pid 5210] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5210] close(4) = 0 [pid 5207] <... unlink resumed>) = 0 [pid 5001] getdents64(3, [pid 5207] sendfile(4, 5, NULL, 145139829833722 [pid 5210] creat("./bus", 000 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5207] <... sendfile resumed>) = 32 [pid 5001] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5207] exit_group(0 [pid 5001] lstat("./17/binderfs", [pid 5207] <... exit_group resumed>) = ? [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./17/binderfs" [pid 5210] <... creat resumed>) = 4 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5210] open("./bus", O_RDONLY) = 5 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5207] +++ exited with 0 +++ [pid 5210] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5210] <... write resumed>) = 32 [pid 5000] <... openat resumed>) = 3 [pid 5210] unlink("./bus" [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5210] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [ 52.533360][ T5215] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.541591][ T5209] NILFS (loop0): trying rollback from an earlier position [ 52.562756][ T5209] NILFS (loop0): recovery complete [pid 5212] <... munmap resumed>) = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5212] ioctl(4, LOOP_SET_FD, 3 [pid 5210] sendfile(4, 5, NULL, 145139829833722 [pid 5000] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5210] <... sendfile resumed>) = 32 [pid 5000] lstat("./16/binderfs", [pid 5210] exit_group(0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5210] <... exit_group resumed>) = ? [pid 5000] unlink("./16/binderfs" [pid 5212] <... ioctl resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5212] close(3) = 0 [pid 5212] mkdir("./file0", 0777) = 0 [pid 5212] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5210] +++ exited with 0 +++ [pid 5001] getdents64(4, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5210, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5209] <... mount resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] close(4 [pid 5209] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 4999] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] chdir("./file0" [pid 5001] rmdir("./17/file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] <... chdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5209] ioctl(4, LOOP_CLR_FD [pid 5001] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 5209] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] fstat(3, [pid 5209] close(4 [pid 5001] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5209] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5209] creat("./bus", 000 [pid 5001] rmdir("./17" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] mkdir("./18", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... mkdir resumed>) = 0 [pid 4999] lstat("./17/binderfs", [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] unlink("./17/binderfs" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... unlink resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5218 ./strace-static-x86_64: Process 5218 attached [pid 5218] chdir("./18") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... umount2 resumed>) = 0 [pid 5218] <... symlink resumed>) = 0 [ 52.582673][ T5211] NILFS (loop5): recovery complete [ 52.589111][ T5212] loop4: detected capacity change from 0 to 4096 [ 52.601805][ T5216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5211] <... mount resumed>) = 0 [pid 5000] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5211] chdir("./file0") = 0 [pid 5211] ioctl(4, LOOP_CLR_FD) = 0 [pid 5211] close(4) = 0 [pid 5211] creat("./bus", 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5209] <... creat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5209] open("./bus", O_RDONLY) = 5 [pid 5209] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5209] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] close(4) = 0 [pid 5000] rmdir("./16/file0" [pid 5209] <... write resumed>) = 32 [pid 5211] <... creat resumed>) = 4 [pid 5209] unlink("./bus" [pid 5000] <... rmdir resumed>) = 0 [pid 5211] open("./bus", O_RDONLY [pid 5000] getdents64(3, [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5211] <... open resumed>) = 5 [pid 5209] <... unlink resumed>) = 0 [ 52.633758][ T5217] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.654384][ T5212] NILFS (loop4): invalid segment: Checksum error in segment payload [ 52.673464][ T5212] NILFS (loop4): trying rollback from an earlier position [pid 5211] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5209] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5211] <... open resumed>) = 6 [pid 5211] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] close(3 [pid 5211] <... write resumed>) = 32 [pid 5209] <... sendfile resumed>) = 32 [pid 5000] <... close resumed>) = 0 [pid 5211] unlink("./bus" [pid 5209] exit_group(0 [pid 5000] rmdir("./16" [pid 5211] <... unlink resumed>) = 0 [pid 5209] <... exit_group resumed>) = ? [pid 5211] sendfile(4, 5, NULL, 145139829833722 [pid 5209] +++ exited with 0 +++ [pid 5000] <... rmdir resumed>) = 0 [pid 5211] <... sendfile resumed>) = 32 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5211] exit_group(0 [pid 5000] mkdir("./17", 0777 [pid 5211] <... exit_group resumed>) = ? [pid 5211] +++ exited with 0 +++ [pid 5000] <... mkdir resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 52.695081][ T5212] NILFS (loop4): recovery complete [pid 5003] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 3 [pid 5218] <... write resumed>) = 2097152 [pid 5212] <... mount resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5003] fstat(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5218] munmap(0x7f5db7f12000, 2097152 [pid 5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(3, [pid 5218] <... munmap resumed>) = 0 [pid 5212] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5000] close(3 [pid 5218] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5212] chdir("./file0" [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5218] <... openat resumed>) = 4 [pid 5212] <... chdir resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] ioctl(4, LOOP_SET_FD, 3 [pid 5212] ioctl(4, LOOP_CLR_FD [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5220 attached [pid 5212] <... ioctl resumed>) = 0 [pid 5003] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5220 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] lstat("./17/binderfs", [pid 5220] chdir("./17" [pid 5218] <... ioctl resumed>) = 0 [pid 5212] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5220] <... chdir resumed>) = 0 [pid 5212] <... close resumed>) = 0 [pid 5003] lstat("./17/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./17/binderfs" [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5212] creat("./bus", 000 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] lstat("./17/file0", [pid 4998] <... unlink resumed>) = 0 [pid 5220] <... prctl resumed>) = 0 [pid 5003] unlink("./17/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] setpgid(0, 0 [pid 5218] close(3 [pid 5003] <... unlink resumed>) = 0 [pid 4999] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] <... setpgid resumed>) = 0 [pid 5003] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5218] mkdir("./file0", 0777 [pid 4999] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5220] <... openat resumed>) = 3 [pid 5218] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5220] write(3, "1000", 4 [pid 4999] fstat(4, [pid 5220] <... write resumed>) = 4 [pid 5218] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] close(3 [pid 4999] getdents64(4, [pid 5220] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5220] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(4, [pid 5220] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5220] memfd_create("syzkaller", 0 [pid 4999] close(4 [pid 5220] <... memfd_create resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] rmdir("./17/file0" [pid 5220] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... rmdir resumed>) = 0 [pid 5212] <... creat resumed>) = 4 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 5212] open("./bus", O_RDONLY [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5212] <... open resumed>) = 5 [pid 4999] <... close resumed>) = 0 [pid 5212] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] rmdir("./17" [pid 5212] <... open resumed>) = 6 [pid 4999] <... rmdir resumed>) = 0 [pid 5212] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] mkdir("./18", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5212] <... write resumed>) = 32 [ 52.718928][ T5219] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.739046][ T5218] loop3: detected capacity change from 0 to 4096 [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5212] unlink("./bus" [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5221 [pid 5003] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4./strace-static-x86_64: Process 5221 attached ) = 0 [pid 5003] rmdir("./17/file0") = 0 [pid 5221] chdir("./18") = 0 [pid 5003] getdents64(3, [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5221] <... prctl resumed>) = 0 [pid 5003] close(3 [pid 5221] setpgid(0, 0 [pid 5003] <... close resumed>) = 0 [pid 5221] <... setpgid resumed>) = 0 [pid 5003] rmdir("./17" [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... rmdir resumed>) = 0 [pid 5221] <... openat resumed>) = 3 [pid 5003] mkdir("./18", 0777 [pid 5221] write(3, "1000", 4 [pid 5003] <... mkdir resumed>) = 0 [pid 5221] <... write resumed>) = 4 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5221] close(3 [pid 5212] <... unlink resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5212] sendfile(4, 5, NULL, 145139829833722 [pid 5221] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5221] <... symlink resumed>) = 0 [pid 5003] close(3 [pid 5221] memfd_create("syzkaller", 0 [pid 5003] <... close resumed>) = 0 [pid 5221] <... memfd_create resumed>) = 3 [pid 5212] <... sendfile resumed>) = 32 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5212] exit_group(0 [pid 5221] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5222 [pid 5212] <... exit_group resumed>) = ? [pid 4998] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5212] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, ./strace-static-x86_64: Process 5222 attached 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5222] chdir("./18" [pid 5002] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5222] <... chdir resumed>) = 0 [pid 5002] lstat("./15/binderfs", [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5222] <... prctl resumed>) = 0 [pid 5002] unlink("./15/binderfs" [pid 5222] setpgid(0, 0 [pid 5002] <... unlink resumed>) = 0 [pid 5222] <... setpgid resumed>) = 0 [pid 5002] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5222] write(3, "1000", 4) = 4 [pid 5222] close(3) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5222] memfd_create("syzkaller", 0) = 3 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4998] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./17/file0") = 0 [pid 5220] <... write resumed>) = 2097152 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./17") = 0 [pid 4998] mkdir("./18", 0777 [pid 5220] munmap(0x7f5db7f12000, 2097152 [pid 4998] <... mkdir resumed>) = 0 [ 52.783691][ T5218] NILFS (loop3): invalid segment: Checksum error in segment payload [ 52.816817][ T5218] NILFS (loop3): trying rollback from an earlier position [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5220] <... munmap resumed>) = 0 [pid 5220] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5220] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5218] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] lstat("./15/file0", ./strace-static-x86_64: Process 5224 attached [pid 5218] <... openat resumed>) = 3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5224] chdir("./18" [pid 5218] chdir("./file0" [pid 5002] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] <... chdir resumed>) = 0 [pid 5218] <... chdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5224 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5218] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5224] <... prctl resumed>) = 0 [pid 5224] setpgid(0, 0 [pid 5218] <... ioctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5224] <... setpgid resumed>) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5218] close(4 [pid 5002] <... openat resumed>) = 4 [pid 5224] <... openat resumed>) = 3 [pid 5218] <... close resumed>) = 0 [pid 5002] fstat(4, [pid 5224] write(3, "1000", 4 [pid 5221] <... write resumed>) = 2097152 [pid 5218] creat("./bus", 000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5221] munmap(0x7f5db7f12000, 2097152 [pid 5220] <... ioctl resumed>) = 0 [pid 5224] <... write resumed>) = 4 [pid 5220] close(3 [pid 5002] getdents64(4, [pid 5224] close(3 [pid 5220] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5224] <... close resumed>) = 0 [pid 5220] mkdir("./file0", 0777 [pid 5002] getdents64(4, [pid 5221] <... munmap resumed>) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs" [pid 5220] <... mkdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5224] <... symlink resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5220] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] close(4 [pid 5224] memfd_create("syzkaller", 0 [pid 5002] <... close resumed>) = 0 [pid 5224] <... memfd_create resumed>) = 3 [pid 5002] rmdir("./15/file0" [ 52.850690][ T5220] loop2: detected capacity change from 0 to 4096 [ 52.857183][ T5218] NILFS (loop3): recovery complete [ 52.869528][ T5223] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5221] <... openat resumed>) = 4 [pid 5218] <... creat resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5221] ioctl(4, LOOP_SET_FD, 3 [pid 5218] open("./bus", O_RDONLY [pid 5002] getdents64(3, [pid 5218] <... open resumed>) = 5 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5218] <... open resumed>) = 6 [pid 5002] close(3 [pid 5218] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./15") = 0 [pid 5218] <... write resumed>) = 32 [pid 5002] mkdir("./16", 0777 [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5218] unlink("./bus" [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5224] <... write resumed>) = 2097152 [pid 5218] <... unlink resumed>) = 0 [pid 5224] munmap(0x7f5db7f12000, 2097152 [pid 5221] <... ioctl resumed>) = 0 [pid 5218] sendfile(4, 5, NULL, 145139829833722 [pid 5002] <... openat resumed>) = 3 [pid 5224] <... munmap resumed>) = 0 [pid 5221] close(3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5221] <... close resumed>) = 0 [pid 5222] <... write resumed>) = 2097152 [pid 5222] munmap(0x7f5db7f12000, 2097152 [pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5221] mkdir("./file0", 0777 [pid 5218] <... sendfile resumed>) = 32 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5218] exit_group(0 [pid 5224] <... openat resumed>) = 4 [pid 5221] <... mkdir resumed>) = 0 [pid 5218] <... exit_group resumed>) = ? [ 52.911357][ T5221] loop1: detected capacity change from 0 to 4096 [ 52.926446][ T5220] NILFS (loop2): invalid segment: Checksum error in segment payload [ 52.934629][ T5220] NILFS (loop2): trying rollback from an earlier position [ 52.954511][ T5222] loop5: detected capacity change from 0 to 4096 [pid 5002] close(3 [pid 5224] ioctl(4, LOOP_SET_FD, 3 [pid 5222] <... munmap resumed>) = 0 [pid 5221] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] <... close resumed>) = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5222] close(3) = 0 [pid 5222] mkdir("./file0", 0777) = 0 [pid 5222] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5224] <... ioctl resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5225 [pid 5224] close(3) = 0 [pid 5218] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5224] mkdir("./file0", 0777 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./18/binderfs") = 0 [pid 5001] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] <... mkdir resumed>) = 0 [pid 5224] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, ""./strace-static-x86_64: Process 5225 attached [pid 5225] chdir("./16") = 0 [pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 52.956548][ T5224] loop0: detected capacity change from 0 to 4096 [ 52.966090][ T5220] NILFS (loop2): recovery complete [ 52.981062][ T5221] NILFS (loop1): invalid segment: Checksum error in segment payload [ 52.982503][ T5222] NILFS (loop5): invalid segment: Checksum error in segment payload [ 52.989167][ T5221] NILFS (loop1): trying rollback from an earlier position [pid 5225] setpgid(0, 0) = 0 [pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5225] write(3, "1000", 4) = 4 [pid 5220] <... mount resumed>) = 0 [pid 5225] close(3 [pid 5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5225] <... close resumed>) = 0 [pid 5225] symlink("/dev/binderfs", "./binderfs" [pid 5220] chdir("./file0" [pid 5225] <... symlink resumed>) = 0 [pid 5220] <... chdir resumed>) = 0 [pid 5225] memfd_create("syzkaller", 0 [pid 5220] ioctl(4, LOOP_CLR_FD [pid 5225] <... memfd_create resumed>) = 3 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5220] <... ioctl resumed>) = 0 [pid 5220] close(4 [pid 5225] <... mmap resumed>) = 0x7f5db7f12000 [pid 5220] <... close resumed>) = 0 [pid 5220] creat("./bus", 000 [ 53.008082][ T5226] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.012562][ T5224] NILFS (loop0): invalid segment: Checksum error in segment payload [ 53.028293][ T5222] NILFS (loop5): trying rollback from an earlier position [ 53.037933][ T5224] NILFS (loop0): trying rollback from an earlier position [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... mount resumed>) = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5220] <... creat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] open("./bus", O_RDONLY [pid 5221] <... openat resumed>) = 3 [pid 5220] <... open resumed>) = 5 [pid 5001] lstat("./18/file0", [pid 5225] <... write resumed>) = 2097152 [pid 5221] chdir("./file0" [pid 5220] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5225] munmap(0x7f5db7f12000, 2097152 [pid 5221] <... chdir resumed>) = 0 [pid 5220] <... open resumed>) = 6 [pid 5001] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] <... munmap resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] ioctl(4, LOOP_CLR_FD [pid 5220] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5221] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5222] <... mount resumed>) = 0 [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] close(4 [pid 5001] <... openat resumed>) = 4 [pid 5222] chdir("./file0" [pid 5221] <... close resumed>) = 0 [pid 5001] fstat(4, [pid 5222] <... chdir resumed>) = 0 [pid 5222] ioctl(4, LOOP_CLR_FD) = 0 [pid 5222] close(4) = 0 [ 53.070203][ T5221] NILFS (loop1): recovery complete [ 53.072348][ T5222] NILFS (loop5): recovery complete [ 53.083160][ T5227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.096871][ T5224] NILFS (loop0): recovery complete [ 53.109156][ T5228] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5222] creat("./bus", 000 [pid 5225] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5221] creat("./bus", 000 [pid 5220] <... write resumed>) = 32 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5225] <... openat resumed>) = 4 [pid 5224] <... mount resumed>) = 0 [pid 5220] unlink("./bus" [pid 5001] getdents64(4, [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5225] ioctl(4, LOOP_SET_FD, 3 [pid 5224] chdir("./file0" [pid 5220] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5224] <... chdir resumed>) = 0 [pid 5224] ioctl(4, LOOP_CLR_FD [pid 5222] <... creat resumed>) = 4 [pid 5221] <... creat resumed>) = 4 [pid 5220] sendfile(4, 5, NULL, 145139829833722 [pid 5001] getdents64(4, [pid 5224] <... ioctl resumed>) = 0 [pid 5222] open("./bus", O_RDONLY [pid 5221] open("./bus", O_RDONLY [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5224] close(4 [pid 5222] <... open resumed>) = 5 [pid 5221] <... open resumed>) = 5 [pid 5001] close(4 [pid 5225] <... ioctl resumed>) = 0 [pid 5224] <... close resumed>) = 0 [pid 5220] <... sendfile resumed>) = 32 [pid 5224] creat("./bus", 000 [pid 5220] exit_group(0 [pid 5001] <... close resumed>) = 0 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5221] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5220] <... exit_group resumed>) = ? [pid 5001] rmdir("./18/file0" [pid 5222] <... open resumed>) = 6 [pid 5221] <... open resumed>) = 6 [pid 5225] close(3) = 0 [pid 5225] mkdir("./file0", 0777) = 0 [pid 5222] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5221] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] <... rmdir resumed>) = 0 [pid 5225] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5221] <... write resumed>) = 32 [pid 5001] <... close resumed>) = 0 [pid 5222] <... write resumed>) = 32 [pid 5222] unlink("./bus" [pid 5001] rmdir("./18" [pid 5221] unlink("./bus" [pid 5222] <... unlink resumed>) = 0 [pid 5221] <... unlink resumed>) = 0 [pid 5220] +++ exited with 0 +++ [pid 5001] <... rmdir resumed>) = 0 [pid 5222] sendfile(4, 5, NULL, 145139829833722 [pid 5221] sendfile(4, 5, NULL, 145139829833722 [pid 5001] mkdir("./19", 0777) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5221] <... sendfile resumed>) = 32 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5222] <... sendfile resumed>) = 32 [pid 5221] exit_group(0 [pid 5001] <... openat resumed>) = 3 [pid 5222] exit_group(0 [pid 5221] <... exit_group resumed>) = ? [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... restart_syscall resumed>) = 0 [pid 5222] <... exit_group resumed>) = ? [ 53.121940][ T5229] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.136423][ T5225] loop4: detected capacity change from 0 to 4096 [pid 5222] +++ exited with 0 +++ [pid 5221] +++ exited with 0 +++ [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5224] <... creat resumed>) = 4 [pid 5003] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5230 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./18/binderfs"./strace-static-x86_64: Process 5230 attached [pid 5224] open("./bus", O_RDONLY [pid 5003] <... unlink resumed>) = 0 [pid 5000] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5224] <... open resumed>) = 5 [pid 5003] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5230] chdir("./19" [pid 5224] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... restart_syscall resumed>) = 0 [pid 5230] <... chdir resumed>) = 0 [pid 5224] <... open resumed>) = 6 [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5224] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5230] <... prctl resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 5230] setpgid(0, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] <... setpgid resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5230] <... openat resumed>) = 3 [pid 5000] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 5230] <... write resumed>) = 4 [pid 5000] lstat("./17/binderfs", [pid 4999] fstat(3, [pid 5230] close(3 [pid 5224] <... write resumed>) = 32 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5230] <... close resumed>) = 0 [pid 5224] unlink("./bus" [pid 5000] unlink("./17/binderfs" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5230] symlink("/dev/binderfs", "./binderfs" [pid 5224] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] getdents64(3, [pid 5230] <... symlink resumed>) = 0 [pid 5224] sendfile(4, 5, NULL, 145139829833722 [pid 5000] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] memfd_create("syzkaller", 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5230] <... memfd_create resumed>) = 3 [pid 5224] <... sendfile resumed>) = 32 [pid 4999] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5224] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] <... mmap resumed>) = 0x7f5db7f12000 [pid 5224] <... exit_group resumed>) = ? [pid 4999] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./18/binderfs") = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 53.164203][ T5225] NILFS (loop4): invalid segment: Checksum error in segment payload [ 53.172764][ T5225] NILFS (loop4): trying rollback from an earlier position [pid 5003] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5224] +++ exited with 0 +++ [pid 4999] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./18/binderfs") = 0 [pid 4998] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./18/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./18" [pid 5000] <... umount2 resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./19", 0777 [pid 5000] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5230] <... write resumed>) = 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... close resumed>) = 0 [ 53.237651][ T5225] NILFS (loop4): recovery complete [pid 5000] lstat("./17/file0", [pid 5230] <... munmap resumed>) = 0 [pid 5225] <... mount resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = 0 [pid 5225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./18/file0", [pid 5225] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5225] chdir("./file0" [pid 5000] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] <... openat resumed>) = 4 [pid 5225] <... chdir resumed>) = 0 [pid 5230] ioctl(4, LOOP_SET_FD, 3 [pid 5225] ioctl(4, LOOP_CLR_FD [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5232 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5225] <... ioctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(4 [pid 5225] close(4 [pid 5000] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5232 attached [pid 5230] <... ioctl resumed>) = 0 [pid 5225] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5232] chdir("./19" [pid 5230] close(3 [pid 5225] creat("./bus", 000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] <... chdir resumed>) = 0 [pid 5230] <... close resumed>) = 0 [pid 5225] <... creat resumed>) = 4 [pid 5000] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./18/file0" [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5230] mkdir("./file0", 0777 [pid 5225] open("./bus", O_RDONLY [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] lstat("./18/file0", [pid 5232] <... prctl resumed>) = 0 [pid 5230] <... mkdir resumed>) = 0 [pid 5225] <... open resumed>) = 5 [pid 5000] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5232] setpgid(0, 0 [pid 5230] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5225] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] <... setpgid resumed>) = 0 [pid 5225] <... open resumed>) = 6 [pid 4998] getdents64(3, [pid 5225] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] close(4) = 0 [pid 5000] rmdir("./17/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./17") = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] mkdir("./18", 0777 [pid 5225] <... write resumed>) = 32 [ 53.267461][ T5231] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.284460][ T5230] loop3: detected capacity change from 0 to 4096 [ 53.306512][ T5230] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5000] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5225] unlink("./bus" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5232] <... openat resumed>) = 3 [pid 5225] <... unlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] close(3 [pid 5232] write(3, "1000", 4 [pid 5225] sendfile(4, 5, NULL, 145139829833722 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] fstat(4, [pid 4998] <... close resumed>) = 0 [pid 5232] <... write resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] rmdir("./18" [pid 5232] close(3 [pid 5225] <... sendfile resumed>) = 32 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5233 [pid 4999] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5232] <... close resumed>) = 0 [pid 5225] exit_group(0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] mkdir("./19", 0777 [pid 5232] symlink("/dev/binderfs", "./binderfs" [pid 5225] <... exit_group resumed>) = ? [pid 4999] getdents64(4, [pid 4998] <... mkdir resumed>) = 0 [pid 5232] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5232] memfd_create("syzkaller", 0 [pid 4999] close(4 [pid 4998] <... openat resumed>) = 3 [pid 5232] <... memfd_create resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] rmdir("./18/file0" [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5232] <... mmap resumed>) = 0x7f5db7f12000 [pid 5225] +++ exited with 0 +++ [pid 4999] <... rmdir resumed>) = 0 [pid 4998] close(3./strace-static-x86_64: Process 5233 attached [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4999] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5233] chdir("./18" [pid 4999] close(3) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5235 [pid 4999] rmdir("./18" [pid 5233] <... chdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./19", 0777 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5233] <... prctl resumed>) = 0 [pid 4999] close(3 [pid 5233] setpgid(0, 0 [pid 5002] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5233] <... setpgid resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5236 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, ./strace-static-x86_64: Process 5235 attached [pid 5233] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5233] write(3, "1000", 4 [pid 5002] getdents64(3, [pid 5233] <... write resumed>) = 4 [pid 5233] close(3 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5233] <... close resumed>) = 0 [pid 5002] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] chdir("./19" [pid 5233] <... symlink resumed>) = 0 [pid 5235] <... chdir resumed>) = 0 [pid 5002] lstat("./16/binderfs", [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5233] memfd_create("syzkaller", 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5235] <... prctl resumed>) = 0 [pid 5233] <... memfd_create resumed>) = 3 [pid 5002] unlink("./16/binderfs" [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5235] setpgid(0, 0) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5233] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] <... openat resumed>) = 3 [ 53.315450][ T5230] NILFS (loop3): trying rollback from an earlier position [ 53.336251][ T5230] NILFS (loop3): recovery complete [pid 5235] write(3, "1000", 4./strace-static-x86_64: Process 5236 attached ) = 4 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5230] <... mount resumed>) = 0 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5230] <... openat resumed>) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5230] chdir("./file0" [pid 5236] chdir("./19" [pid 5235] <... mmap resumed>) = 0x7f5db7f12000 [pid 5232] <... write resumed>) = 2097152 [pid 5230] <... chdir resumed>) = 0 [pid 5236] <... chdir resumed>) = 0 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5230] ioctl(4, LOOP_CLR_FD [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5230] <... ioctl resumed>) = 0 [pid 5236] <... prctl resumed>) = 0 [pid 5230] close(4 [pid 5236] setpgid(0, 0 [pid 5230] <... close resumed>) = 0 [pid 5236] <... setpgid resumed>) = 0 [pid 5230] creat("./bus", 000 [pid 5232] munmap(0x7f5db7f12000, 2097152 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5232] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] write(3, "1000", 4) = 4 [pid 5232] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5236] close(3 [pid 5232] <... openat resumed>) = 4 [pid 5002] lstat("./16/file0", [pid 5236] <... close resumed>) = 0 [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs" [pid 5002] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] <... symlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5230] <... creat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5236] memfd_create("syzkaller", 0 [pid 5230] open("./bus", O_RDONLY [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5236] <... memfd_create resumed>) = 3 [pid 5230] <... open resumed>) = 5 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] close(4 [pid 5236] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./16/file0" [pid 5230] <... open resumed>) = 6 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./16") = 0 [pid 5002] mkdir("./17", 0777) = 0 [pid 5230] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5230] <... write resumed>) = 32 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5230] unlink("./bus" [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5237 [pid 5230] <... unlink resumed>) = 0 [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5230] sendfile(4, 5, NULL, 145139829833722./strace-static-x86_64: Process 5237 attached ) = 32 [pid 5230] exit_group(0) = ? [pid 5232] <... ioctl resumed>) = 0 [pid 5232] close(3) = 0 [pid 5232] mkdir("./file0", 0777 [pid 5237] chdir("./17" [pid 5230] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5237] <... chdir resumed>) = 0 [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5232] <... mkdir resumed>) = 0 [pid 5001] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... prctl resumed>) = 0 [pid 5232] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5237] setpgid(0, 0 [pid 5001] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5237] <... setpgid resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] fstat(3, [pid 5237] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5237] write(3, "1000", 4) = 4 [pid 5001] getdents64(3, [pid 5237] close(3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5237] <... close resumed>) = 0 [ 53.366600][ T5234] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.403715][ T5232] loop5: detected capacity change from 0 to 4096 [pid 5001] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5237] <... symlink resumed>) = 0 [pid 5235] <... write resumed>) = 2097152 [pid 5233] <... write resumed>) = 2097152 [pid 5001] lstat("./19/binderfs", [pid 5237] memfd_create("syzkaller", 0 [pid 5233] munmap(0x7f5db7f12000, 2097152 [pid 5237] <... memfd_create resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5001] unlink("./19/binderfs" [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5236] <... write resumed>) = 2097152 [pid 5233] <... munmap resumed>) = 0 [pid 5235] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5235] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [pid 5236] munmap(0x7f5db7f12000, 2097152 [pid 5233] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... unlink resumed>) = 0 [pid 5236] <... munmap resumed>) = 0 [pid 5233] <... openat resumed>) = 4 [pid 5001] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5236] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 53.438926][ T5232] NILFS (loop5): invalid segment: Checksum error in segment payload [ 53.464038][ T5232] NILFS (loop5): trying rollback from an earlier position [ 53.468489][ T5235] loop0: detected capacity change from 0 to 4096 [ 53.480367][ T5233] loop2: detected capacity change from 0 to 4096 [pid 5236] ioctl(4, LOOP_SET_FD, 3 [pid 5235] <... ioctl resumed>) = 0 [pid 5235] close(3) = 0 [pid 5235] mkdir("./file0", 0777) = 0 [pid 5235] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5236] <... ioctl resumed>) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [pid 5236] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5233] <... ioctl resumed>) = 0 [pid 5233] close(3) = 0 [pid 5233] mkdir("./file0", 0777) = 0 [pid 5233] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5237] <... write resumed>) = 2097152 [ 53.491728][ T5232] NILFS (loop5): recovery complete [ 53.497454][ T5236] loop1: detected capacity change from 0 to 4096 [ 53.522829][ T5236] NILFS (loop1): invalid segment: Checksum error in segment payload [ 53.533450][ T5235] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5237] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5237] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./19/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./19") = 0 [pid 5001] mkdir("./20", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5239 [pid 5237] <... ioctl resumed>) = 0 [pid 5232] <... mount resumed>) = 0 [pid 5232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5237] close(3 [pid 5232] chdir("./file0" [pid 5237] <... close resumed>) = 0 [pid 5237] mkdir("./file0", 0777) = 0 [pid 5232] <... chdir resumed>) = 0 [pid 5232] ioctl(4, LOOP_CLR_FD) = 0 [pid 5232] close(4) = 0 ./strace-static-x86_64: Process 5239 attached [pid 5239] chdir("./20" [pid 5232] creat("./bus", 000 [pid 5239] <... chdir resumed>) = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5237] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [ 53.533469][ T5233] NILFS (loop2): invalid segment: Checksum error in segment payload [ 53.543081][ T5237] loop4: detected capacity change from 0 to 4096 [ 53.550735][ T5236] NILFS (loop1): trying rollback from an earlier position [ 53.564725][ T5238] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.569900][ T5235] NILFS (loop0): trying rollback from an earlier position [pid 5239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5239] memfd_create("syzkaller", 0) = 3 [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5232] <... creat resumed>) = 4 [pid 5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5236] <... mount resumed>) = 0 [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file0") = 0 [pid 5236] ioctl(4, LOOP_CLR_FD [pid 5232] open("./bus", O_RDONLY [pid 5236] <... ioctl resumed>) = 0 [pid 5232] <... open resumed>) = 5 [pid 5236] close(4 [pid 5232] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5236] <... close resumed>) = 0 [pid 5232] <... open resumed>) = 6 [pid 5236] creat("./bus", 000 [ 53.593815][ T5233] NILFS (loop2): trying rollback from an earlier position [ 53.604782][ T5237] NILFS (loop4): invalid segment: Checksum error in segment payload [ 53.617697][ T5236] NILFS (loop1): recovery complete [ 53.621916][ T5235] NILFS (loop0): recovery complete [ 53.622968][ T5233] NILFS (loop2): recovery complete [ 53.632246][ T5237] NILFS (loop4): trying rollback from an earlier position [pid 5232] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5239] <... write resumed>) = 2097152 [pid 5232] <... write resumed>) = 32 [pid 5232] unlink("./bus" [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file0") = 0 [pid 5233] ioctl(4, LOOP_CLR_FD) = 0 [pid 5233] close(4) = 0 [pid 5233] creat("./bus", 000 [pid 5239] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5235] <... mount resumed>) = 0 [pid 5239] ioctl(4, LOOP_SET_FD, 3 [pid 5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5232] <... unlink resumed>) = 0 [pid 5235] <... openat resumed>) = 3 [pid 5235] chdir("./file0") = 0 [pid 5235] ioctl(4, LOOP_CLR_FD) = 0 [pid 5235] close(4) = 0 [pid 5232] sendfile(4, 5, NULL, 145139829833722 [pid 5235] creat("./bus", 000 [pid 5239] <... ioctl resumed>) = 0 [pid 5239] close(3) = 0 [pid 5239] mkdir("./file0", 0777 [pid 5236] <... creat resumed>) = 4 [pid 5232] <... sendfile resumed>) = 32 [pid 5236] open("./bus", O_RDONLY [pid 5235] <... creat resumed>) = 4 [pid 5232] exit_group(0 [pid 5239] <... mkdir resumed>) = 0 [pid 5236] <... open resumed>) = 5 [pid 5235] open("./bus", O_RDONLY [pid 5232] <... exit_group resumed>) = ? [pid 5239] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5236] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5235] <... open resumed>) = 5 [pid 5235] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5236] <... open resumed>) = 6 [pid 5235] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5232] +++ exited with 0 +++ [pid 5236] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5235] <... write resumed>) = 32 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5235] unlink("./bus" [pid 5236] <... write resumed>) = 32 [pid 5235] <... unlink resumed>) = 0 [pid 5236] unlink("./bus" [pid 5235] sendfile(4, 5, NULL, 145139829833722 [ 53.641787][ T5241] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.659709][ T5240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.669346][ T5242] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.682595][ T5239] loop3: detected capacity change from 0 to 4096 [ 53.683461][ T5237] NILFS (loop4): recovery complete [pid 5003] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] <... unlink resumed>) = 0 [pid 5235] <... sendfile resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] exit_group(0 [pid 5003] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 3 [pid 5235] +++ exited with 0 +++ [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5236] sendfile(4, 5, NULL, 145139829833722 [pid 5003] getdents64(3, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5237] <... mount resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5237] chdir("./file0" [pid 5003] lstat("./19/binderfs", [pid 5237] <... chdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5237] ioctl(4, LOOP_CLR_FD [pid 5003] unlink("./19/binderfs" [pid 5237] <... ioctl resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5237] close(4 [pid 5003] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... close resumed>) = 0 [pid 5237] creat("./bus", 000 [pid 5236] <... sendfile resumed>) = 32 [pid 5236] exit_group(0) = ? [pid 5236] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4999] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./19/binderfs") = 0 [pid 4999] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... creat resumed>) = 4 [pid 5237] open("./bus", O_RDONLY) = 5 [pid 5237] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5237] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5237] unlink("./bus" [pid 5233] <... creat resumed>) = 4 [pid 5237] <... unlink resumed>) = 0 [pid 5233] open("./bus", O_RDONLY [pid 5237] sendfile(4, 5, NULL, 145139829833722 [pid 5233] <... open resumed>) = 5 [pid 4998] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5233] <... open resumed>) = 6 [pid 5237] <... sendfile resumed>) = 32 [pid 5233] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... openat resumed>) = 3 [pid 5237] exit_group(0 [pid 4998] fstat(3, [pid 5237] <... exit_group resumed>) = ? [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5233] <... write resumed>) = 32 [pid 4998] getdents64(3, [pid 5233] unlink("./bus" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5237] +++ exited with 0 +++ [pid 5233] <... unlink resumed>) = 0 [pid 4998] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./19/binderfs" [pid 5233] <... sendfile resumed>) = 32 [pid 4998] <... unlink resumed>) = 0 [pid 5233] exit_group(0 [pid 4998] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... exit_group resumed>) = ? [pid 5002] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5233] +++ exited with 0 +++ [pid 5002] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./17/binderfs" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] <... unlink resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5002] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./18/binderfs") = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 4999] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5002] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./17/file0", [pid 4999] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 4999] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5003] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] fstat(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] lstat("./19/file0", [pid 4999] getdents64(4, [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5003] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [ 53.714767][ T5243] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 53.727757][ T5239] NILFS (loop3): invalid segment: Checksum error in segment payload [ 53.745650][ T5239] NILFS (loop3): trying rollback from an earlier position [pid 4999] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./17/file0" [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] close(4 [pid 5003] <... openat resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 5003] fstat(4, [pid 4999] rmdir("./19/file0" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(4, [pid 4999] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] close(4 [pid 4999] rmdir("./19" [pid 5003] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] rmdir("./19/file0" [pid 4999] mkdir("./20", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] getdents64(3, [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] getdents64(3, [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] rmdir("./19") = 0 [pid 5002] close(3 [pid 4999] close(3 [pid 5002] <... close resumed>) = 0 [pid 5003] mkdir("./20", 0777 [pid 5002] rmdir("./17" [pid 4999] <... close resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5244 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5245 [pid 4998] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5244 attached [pid 5002] mkdir("./18", 0777 [pid 4998] getdents64(4, [pid 5244] chdir("./20") = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5244] <... prctl resumed>) = 0 [pid 4998] getdents64(4, ./strace-static-x86_64: Process 5245 attached [pid 5244] setpgid(0, 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5244] <... setpgid resumed>) = 0 [pid 5245] chdir("./20" [pid 4998] close(4 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] <... chdir resumed>) = 0 [pid 5244] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] write(3, "1000", 4 [pid 5000] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./19/file0" [pid 5245] <... prctl resumed>) = 0 [pid 5244] <... write resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 5245] setpgid(0, 0 [pid 5244] close(3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] lstat("./18/file0", [pid 4998] getdents64(3, [pid 5245] <... setpgid resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 4998] close(3 [pid 5244] <... symlink resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5244] memfd_create("syzkaller", 0 [pid 4998] rmdir("./19" [pid 5244] <... memfd_create resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 53.816046][ T5239] NILFS (loop3): recovery complete [pid 4998] mkdir("./20", 0777 [pid 5245] <... openat resumed>) = 3 [pid 5244] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] close(3 [pid 5000] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5245] write(3, "1000", 4 [pid 5002] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5245] <... write resumed>) = 4 [pid 5239] <... mount resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] close(3 [pid 5239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 5245] <... close resumed>) = 0 [pid 5239] <... openat resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5247 [pid 5000] fstat(4, [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5248 [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 5239] chdir("./file0" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] <... symlink resumed>) = 0 [pid 5239] <... chdir resumed>) = 0 [pid 5000] getdents64(4, [pid 5245] memfd_create("syzkaller", 0 [pid 5239] ioctl(4, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5245] <... memfd_create resumed>) = 3 [pid 5239] <... ioctl resumed>) = 0 [pid 5000] getdents64(4, [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5239] close(4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5247 attached [pid 5245] <... mmap resumed>) = 0x7f5db7f12000 [pid 5239] <... close resumed>) = 0 [pid 5000] close(4./strace-static-x86_64: Process 5248 attached [pid 5247] chdir("./18" [pid 5248] chdir("./20" [pid 5247] <... chdir resumed>) = 0 [pid 5248] <... chdir resumed>) = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5247] <... prctl resumed>) = 0 [pid 5239] creat("./bus", 000 [pid 5000] <... close resumed>) = 0 [pid 5248] <... prctl resumed>) = 0 [pid 5247] setpgid(0, 0 [pid 5248] setpgid(0, 0 [pid 5247] <... setpgid resumed>) = 0 [pid 5000] rmdir("./18/file0" [pid 5248] <... setpgid resumed>) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5247] <... openat resumed>) = 3 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5239] <... creat resumed>) = 4 [pid 5000] <... rmdir resumed>) = 0 [pid 5248] <... openat resumed>) = 3 [pid 5247] write(3, "1000", 4 [pid 5239] open("./bus", O_RDONLY [pid 5000] getdents64(3, [pid 5248] write(3, "1000", 4 [pid 5247] <... write resumed>) = 4 [pid 5239] <... open resumed>) = 5 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5248] <... write resumed>) = 4 [pid 5247] close(3 [pid 5239] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] close(3 [pid 5248] close(3 [pid 5247] <... close resumed>) = 0 [pid 5239] <... open resumed>) = 6 [pid 5000] <... close resumed>) = 0 [pid 5248] <... close resumed>) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5239] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] rmdir("./18" [pid 5248] symlink("/dev/binderfs", "./binderfs" [pid 5247] <... symlink resumed>) = 0 [pid 5248] <... symlink resumed>) = 0 [pid 5247] memfd_create("syzkaller", 0 [pid 5239] <... write resumed>) = 32 [pid 5000] <... rmdir resumed>) = 0 [pid 5248] memfd_create("syzkaller", 0 [pid 5247] <... memfd_create resumed>) = 3 [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5239] unlink("./bus" [pid 5000] mkdir("./19", 0777 [pid 5248] <... memfd_create resumed>) = 3 [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 53.842311][ T5246] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5247] <... mmap resumed>) = 0x7f5db7f12000 [pid 5239] <... unlink resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5248] <... mmap resumed>) = 0x7f5db7f12000 [pid 5245] <... write resumed>) = 2097152 [pid 5244] <... write resumed>) = 2097152 [pid 5239] sendfile(4, 5, NULL, 145139829833722 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5239] <... sendfile resumed>) = 32 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5239] exit_group(0 [pid 5000] close(3 [pid 5239] <... exit_group resumed>) = ? [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5239] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5249 ./strace-static-x86_64: Process 5249 attached [pid 5249] chdir("./19") = 0 [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5249] setpgid(0, 0) = 0 [pid 5001] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./20/binderfs") = 0 [pid 5001] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5249] write(3, "1000", 4) = 4 [pid 5249] close(3) = 0 [pid 5249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5249] memfd_create("syzkaller", 0) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5245] munmap(0x7f5db7f12000, 2097152 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5245] <... munmap resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5245] ioctl(4, LOOP_SET_FD, 3 [pid 5244] munmap(0x7f5db7f12000, 2097152 [pid 5001] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] <... munmap resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5244] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./20/file0" [pid 5244] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./20") = 0 [pid 5001] mkdir("./21", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5250 [pid 5245] <... ioctl resumed>) = 0 [pid 5245] close(3) = 0 [pid 5245] mkdir("./file0", 0777) = 0 [pid 5245] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, ""./strace-static-x86_64: Process 5250 attached [pid 5250] chdir("./21" [pid 5244] <... ioctl resumed>) = 0 [pid 5244] close(3 [pid 5250] <... chdir resumed>) = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5244] <... close resumed>) = 0 [pid 5244] mkdir("./file0", 0777 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... mkdir resumed>) = 0 [pid 5247] <... write resumed>) = 2097152 [pid 5244] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5250] <... openat resumed>) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5250] memfd_create("syzkaller", 0) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5248] <... write resumed>) = 2097152 [ 53.942482][ T5245] loop5: detected capacity change from 0 to 4096 [ 53.957719][ T5244] loop1: detected capacity change from 0 to 4096 [pid 5249] <... write resumed>) = 2097152 [pid 5249] munmap(0x7f5db7f12000, 2097152 [pid 5248] munmap(0x7f5db7f12000, 2097152 [pid 5247] munmap(0x7f5db7f12000, 2097152 [pid 5249] <... munmap resumed>) = 0 [pid 5247] <... munmap resumed>) = 0 [pid 5247] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5248] <... munmap resumed>) = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5247] <... openat resumed>) = 4 [pid 5248] <... openat resumed>) = 4 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5249] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5248] <... ioctl resumed>) = 0 [pid 5247] <... ioctl resumed>) = 0 [pid 5248] close(3 [pid 5247] close(3 [pid 5248] <... close resumed>) = 0 [pid 5247] <... close resumed>) = 0 [pid 5248] mkdir("./file0", 0777 [pid 5247] mkdir("./file0", 0777 [pid 5248] <... mkdir resumed>) = 0 [pid 5247] <... mkdir resumed>) = 0 [pid 5248] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 53.987764][ T5244] NILFS (loop1): invalid segment: Checksum error in segment payload [ 53.989912][ T5245] NILFS (loop5): invalid segment: Checksum error in segment payload [ 53.995802][ T5244] NILFS (loop1): trying rollback from an earlier position [ 54.017009][ T5248] loop0: detected capacity change from 0 to 4096 [ 54.018680][ T5249] loop2: detected capacity change from 0 to 4096 [ 54.023626][ T5247] loop4: detected capacity change from 0 to 4096 [pid 5247] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5250] <... write resumed>) = 2097152 [pid 5250] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5249] <... ioctl resumed>) = 0 [pid 5249] close(3) = 0 [pid 5249] mkdir("./file0", 0777) = 0 [pid 5250] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5249] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 54.046462][ T5248] NILFS (loop0): invalid segment: Checksum error in segment payload [ 54.054509][ T5248] NILFS (loop0): trying rollback from an earlier position [ 54.055756][ T5245] NILFS (loop5): trying rollback from an earlier position [ 54.062189][ T5247] NILFS (loop4): invalid segment: Checksum error in segment payload [ 54.082199][ T5250] loop3: detected capacity change from 0 to 4096 [ 54.085010][ T5247] NILFS (loop4): trying rollback from an earlier position [pid 5250] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5250] close(3) = 0 [pid 5250] mkdir("./file0", 0777) = 0 [ 54.097943][ T5244] NILFS (loop1): recovery complete [ 54.099523][ T5249] NILFS (loop2): invalid segment: Checksum error in segment payload [ 54.112247][ T5248] NILFS (loop0): recovery complete [ 54.114069][ T5245] NILFS (loop5): recovery complete [ 54.121390][ T5249] NILFS (loop2): trying rollback from an earlier position [ 54.127969][ T5250] NILFS (loop3): invalid segment: Checksum error in segment payload [ 54.137797][ T5251] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5250] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5244] <... mount resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5245] <... mount resumed>) = 0 [pid 5244] chdir("./file0" [pid 5248] <... mount resumed>) = 0 [pid 5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5244] <... chdir resumed>) = 0 [pid 5248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5245] <... openat resumed>) = 3 [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5245] chdir("./file0" [pid 5244] <... ioctl resumed>) = 0 [pid 5248] <... openat resumed>) = 3 [pid 5245] <... chdir resumed>) = 0 [pid 5244] close(4 [pid 5245] ioctl(4, LOOP_CLR_FD [pid 5248] chdir("./file0" [pid 5245] <... ioctl resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 5248] <... chdir resumed>) = 0 [pid 5248] ioctl(4, LOOP_CLR_FD) = 0 [pid 5248] close(4) = 0 [ 54.140393][ T5249] NILFS (loop2): recovery complete [ 54.150781][ T5252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.154120][ T5250] NILFS (loop3): trying rollback from an earlier position [ 54.172330][ T5247] NILFS (loop4): recovery complete [ 54.173271][ T5253] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5248] creat("./bus", 000 [pid 5245] close(4 [pid 5244] creat("./bus", 000 [pid 5248] <... creat resumed>) = 4 [pid 5248] open("./bus", O_RDONLY) = 5 [pid 5245] <... close resumed>) = 0 [pid 5248] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5248] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5248] unlink("./bus") = 0 [pid 5248] sendfile(4, 5, NULL, 145139829833722 [pid 5249] <... mount resumed>) = 0 [pid 5249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5248] <... sendfile resumed>) = 32 [pid 5249] chdir("./file0" [pid 5248] exit_group(0 [pid 5249] <... chdir resumed>) = 0 [pid 5248] <... exit_group resumed>) = ? [pid 5249] ioctl(4, LOOP_CLR_FD) = 0 [pid 5248] +++ exited with 0 +++ [pid 5249] close(4) = 0 [pid 5249] creat("./bus", 000 [pid 5245] creat("./bus", 000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5248, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5247] <... mount resumed>) = 0 [ 54.196616][ T5250] NILFS (loop3): recovery complete [ 54.203024][ T5254] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.214470][ T27] kauditd_printk_skb: 108 callbacks suppressed [ 54.214483][ T27] audit: type=1804 audit(1684404973.979:238): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.aQJbv6/20/file0/bus" dev="loop0" ino=12 res=1 errno=0 [pid 5247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5247] chdir("./file0") = 0 [pid 5247] ioctl(4, LOOP_CLR_FD) = 0 [pid 5247] close(4) = 0 [pid 5247] creat("./bus", 000 [pid 5250] <... mount resumed>) = 0 [pid 5250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5250] chdir("./file0") = 0 [pid 5250] ioctl(4, LOOP_CLR_FD [pid 5244] <... creat resumed>) = 4 [pid 5250] <... ioctl resumed>) = 0 [pid 5247] <... creat resumed>) = 4 [pid 5245] <... creat resumed>) = 4 [pid 5244] open("./bus", O_RDONLY [pid 5250] close(4 [pid 5247] open("./bus", O_RDONLY [pid 5244] <... open resumed>) = 5 [pid 5250] <... close resumed>) = 0 [pid 5247] <... open resumed>) = 5 [pid 5244] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5250] creat("./bus", 000 [pid 5247] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5244] <... open resumed>) = 6 [pid 5247] <... open resumed>) = 6 [pid 5244] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5247] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5249] <... creat resumed>) = 4 [pid 5245] open("./bus", O_RDONLY [pid 5249] open("./bus", O_RDONLY) = 5 [pid 5245] <... open resumed>) = 5 [pid 5250] <... creat resumed>) = 4 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5247] <... write resumed>) = 32 [pid 5244] <... write resumed>) = 32 [pid 5250] open("./bus", O_RDONLY [pid 5249] <... open resumed>) = 6 [pid 5247] unlink("./bus" [pid 5244] unlink("./bus" [pid 5250] <... open resumed>) = 5 [ 54.244332][ T5255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.256189][ T5256] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.268665][ T27] audit: type=1804 audit(1684404973.979:239): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.aQJbv6/20/file0/bus" dev="loop0" ino=12 res=1 errno=0 [pid 5249] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5250] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5249] <... write resumed>) = 32 [pid 5250] <... open resumed>) = 6 [pid 5249] unlink("./bus" [pid 5250] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5249] <... unlink resumed>) = 0 [pid 5249] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5249] exit_group(0) = ? [pid 5249] +++ exited with 0 +++ [pid 5245] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5245] <... open resumed>) = 6 [pid 4998] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5247] <... unlink resumed>) = 0 [pid 5244] <... unlink resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5247] sendfile(4, 5, NULL, 145139829833722 [pid 5244] sendfile(4, 5, NULL, 145139829833722 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5000] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... write resumed>) = 32 [pid 5250] unlink("./bus" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5245] <... write resumed>) = 32 [pid 5000] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] <... sendfile resumed>) = 32 [pid 5244] <... sendfile resumed>) = 32 [pid 5247] exit_group(0 [pid 5244] exit_group(0 [pid 5247] <... exit_group resumed>) = ? [pid 5244] <... exit_group resumed>) = ? [pid 5244] +++ exited with 0 +++ [pid 5245] unlink("./bus" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5000] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(3, [pid 4998] lstat("./20/binderfs", [pid 4999] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... unlink resumed>) = 0 [pid 5245] <... unlink resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 54.294826][ T27] audit: type=1804 audit(1684404974.039:240): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EoL44c/20/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 54.324451][ T27] audit: type=1804 audit(1684404974.049:241): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.vorshp/18/file0/bus" dev="loop4" ino=12 res=1 errno=0 [pid 5250] sendfile(4, 5, NULL, 145139829833722 [pid 5247] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 4999] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 5002] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5002] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... openat resumed>) = 3 [pid 4999] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./20/binderfs", [pid 5002] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] unlink("./20/binderfs" [pid 5002] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./18/binderfs") = 0 [pid 5002] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] sendfile(4, 5, NULL, 145139829833722 [pid 5000] getdents64(3, [pid 4998] unlink("./20/binderfs" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... unlink resumed>) = 0 [pid 5000] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... sendfile resumed>) = 32 [pid 5245] <... sendfile resumed>) = 32 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 54.350677][ T27] audit: type=1804 audit(1684404974.049:242): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EoL44c/20/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 54.376476][ T27] audit: type=1804 audit(1684404974.049:243): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.vorshp/18/file0/bus" dev="loop4" ino=12 res=1 errno=0 [pid 5250] exit_group(0) = ? [pid 5245] exit_group(0 [pid 5000] lstat("./19/binderfs", [pid 5245] <... exit_group resumed>) = ? [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./18/file0") = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./18") = 0 [pid 5002] mkdir("./19", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = 0 [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5257 [pid 5000] unlink("./19/binderfs") = 0 [pid 5250] +++ exited with 0 +++ [pid 5245] +++ exited with 0 +++ [pid 5000] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5003] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5003] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... restart_syscall resumed>) = 0 [pid 5003] lstat("./20/binderfs", [pid 5000] <... umount2 resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./20/binderfs") = 0 [pid 5000] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./19/file0", [pid 5001] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(3, [pid 5000] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [ 54.399556][ T27] audit: type=1804 audit(1684404974.059:244): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.XGE8lx/20/file0/bus" dev="loop5" ino=12 res=1 errno=0 [ 54.423745][ T27] audit: type=1804 audit(1684404974.059:245): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/19/file0/bus" dev="loop2" ino=12 res=1 errno=0 [pid 5000] fstat(4, [pid 5001] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5257 attached [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] chdir("./19" [pid 5003] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4998] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... chdir resumed>) = 0 [pid 5003] lstat("./20/file0", [pid 5001] lstat("./21/binderfs", [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [ 54.492399][ T27] audit: type=1804 audit(1684404974.059:246): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/19/file0/bus" dev="loop2" ino=12 res=1 errno=0 [pid 4998] lstat("./20/file0", [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5257] <... prctl resumed>) = 0 [pid 5001] unlink("./21/binderfs" [pid 5000] close(4 [pid 4998] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] setpgid(0, 0 [pid 5003] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] <... setpgid resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./19/file0" [pid 4998] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 4998] fstat(4, [pid 5257] write(3, "1000", 4) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5257] close(3 [pid 5003] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5257] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] close(3 [pid 5257] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./19" [pid 4999] lstat("./20/file0", [pid 4998] getdents64(4, [pid 5257] memfd_create("syzkaller", 0) = 3 [pid 5003] close(4 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... close resumed>) = 0 [pid 5000] mkdir("./20", 0777 [pid 4998] close(4 [pid 5257] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] rmdir("./20/file0" [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4998] rmdir("./20/file0" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] getdents64(3, [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5000] <... openat resumed>) = 3 [pid 4998] getdents64(3, [pid 5003] <... close resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5003] rmdir("./20" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 54.521190][ T27] audit: type=1804 audit(1684404974.069:247): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EF5sxk/21/file0/bus" dev="loop3" ino=12 res=1 errno=0 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 4998] close(3 [pid 5003] mkdir("./21", 0777 [pid 5000] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./20" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5258 [pid 4999] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] mkdir("./21", 0777 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 4998] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 4999] fstat(4, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5259 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] getdents64(4, [pid 4998] close(3 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 4998] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] rmdir("./20/file0" [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5260 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./20" [pid 5001] close(4) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./21", 0777 [pid 5001] rmdir("./21/file0") = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5260 attached [pid 5001] close(3 [pid 4999] close(3./strace-static-x86_64: Process 5258 attached [pid 5260] chdir("./21" [pid 5001] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 5259 attached [pid 5260] <... chdir resumed>) = 0 [pid 5258] chdir("./20" [pid 5257] <... write resumed>) = 2097152 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5259] chdir("./21" [pid 5257] munmap(0x7f5db7f12000, 2097152 [pid 5260] <... prctl resumed>) = 0 [pid 5259] <... chdir resumed>) = 0 [pid 5257] <... munmap resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5261 [pid 5260] setpgid(0, 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5258] <... chdir resumed>) = 0 [pid 5257] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] rmdir("./21" [pid 5260] <... setpgid resumed>) = 0 [pid 5259] <... prctl resumed>) = 0 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5257] <... openat resumed>) = 4 [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5259] setpgid(0, 0 [pid 5258] <... prctl resumed>) = 0 [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5260] <... openat resumed>) = 3 [pid 5259] <... setpgid resumed>) = 0 [pid 5258] setpgid(0, 0 [pid 5001] mkdir("./22", 0777 [pid 5260] write(3, "1000", 4 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5258] <... setpgid resumed>) = 0 [pid 5260] <... write resumed>) = 4 [pid 5259] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 5260] close(3 [pid 5259] write(3, "1000", 4 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5260] <... close resumed>) = 0 [pid 5259] <... write resumed>) = 4 [pid 5260] symlink("/dev/binderfs", "./binderfs" [pid 5259] close(3 [pid 5258] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5261 attached [pid 5260] <... symlink resumed>) = 0 [pid 5259] <... close resumed>) = 0 [pid 5261] chdir("./21" [pid 5260] memfd_create("syzkaller", 0 [pid 5259] symlink("/dev/binderfs", "./binderfs" [pid 5258] write(3, "1000", 4 [pid 5257] <... ioctl resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5261] <... chdir resumed>) = 0 [pid 5260] <... memfd_create resumed>) = 3 [pid 5259] <... symlink resumed>) = 0 [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] memfd_create("syzkaller", 0 [pid 5258] <... write resumed>) = 4 [pid 5257] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5261] <... prctl resumed>) = 0 [pid 5260] <... mmap resumed>) = 0x7f5db7f12000 [pid 5259] <... memfd_create resumed>) = 3 [pid 5258] close(3 [pid 5257] <... close resumed>) = 0 [pid 5001] close(3 [pid 5261] setpgid(0, 0 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 5261] <... setpgid resumed>) = 0 [pid 5259] <... mmap resumed>) = 0x7f5db7f12000 [pid 5258] <... close resumed>) = 0 [pid 5257] mkdir("./file0", 0777 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5258] symlink("/dev/binderfs", "./binderfs" [pid 5261] <... openat resumed>) = 3 [pid 5257] <... mkdir resumed>) = 0 [pid 5261] write(3, "1000", 4 [pid 5258] <... symlink resumed>) = 0 [pid 5257] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5261] <... write resumed>) = 4 [pid 5258] memfd_create("syzkaller", 0 [pid 5261] close(3 [pid 5258] <... memfd_create resumed>) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5262 [pid 5261] <... close resumed>) = 0 [ 54.608757][ T5257] loop4: detected capacity change from 0 to 4096 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5261] symlink("/dev/binderfs", "./binderfs" [pid 5258] <... mmap resumed>) = 0x7f5db7f12000 [pid 5261] <... symlink resumed>) = 0 [pid 5261] memfd_create("syzkaller", 0) = 3 [pid 5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5260] <... write resumed>) = 2097152 [pid 5260] munmap(0x7f5db7f12000, 2097152 [pid 5259] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5262 attached [pid 5260] <... munmap resumed>) = 0 [pid 5262] chdir("./22") = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5260] <... openat resumed>) = 4 [pid 5262] <... prctl resumed>) = 0 [ 54.649383][ T5257] NILFS (loop4): invalid segment: Checksum error in segment payload [ 54.687840][ T5260] loop0: detected capacity change from 0 to 4096 [pid 5260] ioctl(4, LOOP_SET_FD, 3 [pid 5262] setpgid(0, 0 [pid 5261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5262] <... setpgid resumed>) = 0 [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5259] munmap(0x7f5db7f12000, 2097152 [pid 5262] <... openat resumed>) = 3 [pid 5262] write(3, "1000", 4) = 4 [pid 5259] <... munmap resumed>) = 0 [pid 5262] close(3) = 0 [pid 5262] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5259] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5262] memfd_create("syzkaller", 0 [pid 5259] <... openat resumed>) = 4 [pid 5262] <... memfd_create resumed>) = 3 [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5260] <... ioctl resumed>) = 0 [pid 5260] close(3) = 0 [pid 5260] mkdir("./file0", 0777) = 0 [pid 5260] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5258] <... write resumed>) = 2097152 [pid 5258] munmap(0x7f5db7f12000, 2097152 [pid 5261] <... write resumed>) = 2097152 [pid 5261] munmap(0x7f5db7f12000, 2097152 [pid 5258] <... munmap resumed>) = 0 [pid 5258] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5258] ioctl(4, LOOP_SET_FD, 3 [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5259] <... ioctl resumed>) = 0 [pid 5259] close(3) = 0 [pid 5259] mkdir("./file0", 0777) = 0 [ 54.690871][ T5257] NILFS (loop4): trying rollback from an earlier position [ 54.698770][ T5259] loop5: detected capacity change from 0 to 4096 [ 54.731279][ T5258] loop2: detected capacity change from 0 to 4096 [ 54.738227][ T5260] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5261] <... munmap resumed>) = 0 [pid 5259] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5261] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5258] <... ioctl resumed>) = 0 [pid 5262] <... write resumed>) = 2097152 [pid 5262] munmap(0x7f5db7f12000, 2097152 [pid 5261] <... openat resumed>) = 4 [pid 5258] close(3) = 0 [pid 5261] ioctl(4, LOOP_SET_FD, 3 [pid 5258] mkdir("./file0", 0777 [pid 5262] <... munmap resumed>) = 0 [pid 5262] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5262] ioctl(4, LOOP_SET_FD, 3 [pid 5261] <... ioctl resumed>) = 0 [pid 5258] <... mkdir resumed>) = 0 [pid 5257] <... mount resumed>) = 0 [pid 5262] <... ioctl resumed>) = 0 [pid 5262] close(3) = 0 [pid 5262] mkdir("./file0", 0777) = 0 [ 54.745291][ T5257] NILFS (loop4): recovery complete [ 54.752191][ T5260] NILFS (loop0): trying rollback from an earlier position [ 54.760620][ T5261] loop1: detected capacity change from 0 to 4096 [ 54.764521][ T5262] loop3: detected capacity change from 0 to 4096 [ 54.769126][ T5263] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.773703][ T5259] NILFS (loop5): invalid segment: Checksum error in segment payload [ 54.790870][ T5260] NILFS (loop0): recovery complete [pid 5262] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5261] close(3 [pid 5258] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5261] <... close resumed>) = 0 [pid 5257] <... openat resumed>) = 3 [pid 5261] mkdir("./file0", 0777 [pid 5257] chdir("./file0" [pid 5261] <... mkdir resumed>) = 0 [pid 5257] <... chdir resumed>) = 0 [pid 5261] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5257] ioctl(4, LOOP_CLR_FD) = 0 [pid 5257] close(4 [pid 5260] <... mount resumed>) = 0 [pid 5257] <... close resumed>) = 0 [pid 5257] creat("./bus", 000 [ 54.794743][ T5259] NILFS (loop5): trying rollback from an earlier position [ 54.809834][ T5262] NILFS (loop3): invalid segment: Checksum error in segment payload [ 54.812275][ T5264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.819239][ T5262] NILFS (loop3): trying rollback from an earlier position [ 54.828437][ T5258] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5260] chdir("./file0") = 0 [pid 5257] <... creat resumed>) = 4 [pid 5257] open("./bus", O_RDONLY) = 5 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5257] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5260] ioctl(4, LOOP_CLR_FD) = 0 [pid 5260] close(4 [pid 5257] <... write resumed>) = 32 [pid 5260] <... close resumed>) = 0 [pid 5257] unlink("./bus" [pid 5260] creat("./bus", 000 [pid 5257] <... unlink resumed>) = 0 [pid 5257] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5257] exit_group(0) = ? [pid 5257] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5260] <... creat resumed>) = 4 [pid 5260] open("./bus", O_RDONLY [pid 5002] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... open resumed>) = 5 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5260] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... openat resumed>) = 3 [pid 5260] <... open resumed>) = 6 [pid 5002] fstat(3, [pid 5260] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 54.853260][ T5259] NILFS (loop5): recovery complete [ 54.859966][ T5261] NILFS (loop1): invalid segment: Checksum error in segment payload [ 54.868607][ T5261] NILFS (loop1): trying rollback from an earlier position [ 54.879222][ T5262] NILFS (loop3): recovery complete [ 54.881723][ T5258] NILFS (loop2): trying rollback from an earlier position [pid 5259] <... mount resumed>) = 0 [pid 5002] getdents64(3, [pid 5259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5260] <... write resumed>) = 32 [pid 5259] <... openat resumed>) = 3 [pid 5260] unlink("./bus" [pid 5002] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] chdir("./file0" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5260] <... unlink resumed>) = 0 [pid 5259] <... chdir resumed>) = 0 [pid 5260] sendfile(4, 5, NULL, 145139829833722 [pid 5259] ioctl(4, LOOP_CLR_FD [pid 5002] lstat("./19/binderfs", [pid 5259] <... ioctl resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5260] <... sendfile resumed>) = 32 [pid 5259] close(4 [pid 5002] unlink("./19/binderfs" [pid 5260] exit_group(0 [pid 5259] <... close resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5260] <... exit_group resumed>) = ? [pid 5259] creat("./bus", 000 [pid 5002] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] <... mount resumed>) = 0 [pid 5262] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5262] chdir("./file0") = 0 [pid 5262] ioctl(4, LOOP_CLR_FD) = 0 [ 54.894470][ T5265] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.898785][ T5261] NILFS (loop1): recovery complete [ 54.926856][ T5266] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.931649][ T5258] NILFS (loop2): recovery complete [pid 5262] close(4) = 0 [pid 5261] <... mount resumed>) = 0 [pid 5260] +++ exited with 0 +++ [pid 5262] creat("./bus", 000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4998] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./21/binderfs") = 0 [pid 4998] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] <... creat resumed>) = 4 [pid 5261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5259] open("./bus", O_RDONLY [pid 5261] <... openat resumed>) = 3 [pid 5261] chdir("./file0") = 0 [pid 5261] ioctl(4, LOOP_CLR_FD [pid 5259] <... open resumed>) = 5 [pid 5261] <... ioctl resumed>) = 0 [pid 5261] close(4) = 0 [pid 5261] creat("./bus", 000 [pid 5259] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5262] <... creat resumed>) = 4 [pid 5262] open("./bus", O_RDONLY) = 5 [pid 5262] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5261] <... creat resumed>) = 4 [pid 5259] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5258] <... mount resumed>) = 0 [pid 5261] open("./bus", O_RDONLY [pid 5258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5262] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5261] <... open resumed>) = 5 [pid 5258] <... openat resumed>) = 3 [pid 5261] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5258] chdir("./file0" [pid 5259] <... write resumed>) = 32 [pid 5261] <... open resumed>) = 6 [pid 5259] unlink("./bus" [pid 5258] <... chdir resumed>) = 0 [pid 5261] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5258] ioctl(4, LOOP_CLR_FD) = 0 [pid 5258] close(4 [pid 5262] <... write resumed>) = 32 [pid 5258] <... close resumed>) = 0 [pid 5262] unlink("./bus" [pid 5261] <... write resumed>) = 32 [pid 5259] <... unlink resumed>) = 0 [pid 5258] creat("./bus", 000 [pid 5261] unlink("./bus" [pid 5259] sendfile(4, 5, NULL, 145139829833722 [pid 5262] <... unlink resumed>) = 0 [pid 5261] <... unlink resumed>) = 0 [pid 5259] <... sendfile resumed>) = 32 [pid 5261] sendfile(4, 5, NULL, 145139829833722 [pid 5262] sendfile(4, 5, NULL, 145139829833722 [pid 5259] exit_group(0 [pid 5261] <... sendfile resumed>) = 32 [pid 5259] <... exit_group resumed>) = ? [pid 5262] <... sendfile resumed>) = 32 [pid 5261] exit_group(0) = ? [pid 5262] exit_group(0 [pid 5261] +++ exited with 0 +++ [pid 5259] +++ exited with 0 +++ [pid 5262] <... exit_group resumed>) = ? [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... restart_syscall resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5003] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 5002] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 4999] fstat(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 4999] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] lstat("./19/file0", [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 54.948611][ T5267] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.967630][ T5268] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] lstat("./21/binderfs", [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./21/binderfs", [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... restart_syscall resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./21/binderfs" [pid 4999] unlink("./21/binderfs" [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5003] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5001] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5258] <... creat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5258] open("./bus", O_RDONLY) = 5 [pid 5002] getdents64(4, [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./21/file0", [pid 5258] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 4999] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] close(4 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5001] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./21/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] rmdir("./19/file0" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5258] <... write resumed>) = 32 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] lstat("./22/binderfs", [pid 4998] <... openat resumed>) = 4 [pid 5258] unlink("./bus" [pid 5003] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 5258] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] unlink("./22/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] sendfile(4, 5, NULL, 145139829833722 [pid 5003] lstat("./21/file0", [pid 5002] close(3 [pid 5001] <... unlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(4, [pid 5258] <... sendfile resumed>) = 32 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5258] exit_group(0 [pid 5003] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./19" [pid 4999] fstat(4, [pid 4998] getdents64(4, [pid 5258] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] mkdir("./20", 0777 [pid 4998] close(4 [pid 5003] <... openat resumed>) = 4 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] fstat(4, [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] rmdir("./21/file0" [pid 5258] +++ exited with 0 +++ [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] getdents64(4, [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 4998] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(4, [pid 5002] close(3 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] getdents64(4, [pid 4998] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] close(4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] close(4 [pid 4998] rmdir("./21" [pid 5003] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] rmdir("./21/file0" [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5269 [pid 5000] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./21/file0" [pid 4998] mkdir("./22", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5000] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] close(3 [pid 5000] fstat(3, [pid 4999] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] rmdir("./21" [pid 5000] getdents64(3, [pid 4999] rmdir("./21" [pid 4998] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... close resumed>) = 0 [pid 5003] mkdir("./22", 0777 [pid 5000] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] mkdir("./22", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./20/binderfs", [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5270 ./strace-static-x86_64: Process 5269 attached [pid 5003] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5269] chdir("./20" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] lstat("./22/file0", [pid 5000] unlink("./20/binderfs" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5269] <... chdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] close(3 [pid 5001] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5269] <... prctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5270 attached [pid 5269] setpgid(0, 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5271 attached [pid 5270] chdir("./22" [pid 5269] <... setpgid resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5271] chdir("./22" [pid 5270] <... chdir resumed>) = 0 [pid 5269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5271 [pid 5001] <... openat resumed>) = 4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5271] <... chdir resumed>) = 0 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5269] <... openat resumed>) = 3 [pid 5001] fstat(4, [pid 4999] close(3 [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5270] <... prctl resumed>) = 0 [pid 5269] write(3, "1000", 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5271] <... prctl resumed>) = 0 [pid 5270] setpgid(0, 0 [pid 5269] <... write resumed>) = 4 [pid 5270] <... setpgid resumed>) = 0 [pid 5269] close(3 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5269] <... close resumed>) = 0 [pid 5270] <... openat resumed>) = 3 [pid 5269] symlink("/dev/binderfs", "./binderfs" [pid 5270] write(3, "1000", 4 [pid 5269] <... symlink resumed>) = 0 [pid 5270] <... write resumed>) = 4 [pid 5269] memfd_create("syzkaller", 0 [pid 5270] close(3 [pid 5269] <... memfd_create resumed>) = 3 [pid 5001] getdents64(4, [pid 5271] setpgid(0, 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5270] <... close resumed>) = 0 [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5269] <... mmap resumed>) = 0x7f5db7f12000 [pid 5271] <... setpgid resumed>) = 0 [pid 5270] <... symlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5270] memfd_create("syzkaller", 0 [pid 5001] getdents64(4, [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5272 [pid 5271] <... openat resumed>) = 3 [pid 5270] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5271] write(3, "1000", 4 [pid 5270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] close(4 [pid 5271] <... write resumed>) = 4 [pid 5270] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 ./strace-static-x86_64: Process 5272 attached [pid 5271] close(3 [pid 5270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] rmdir("./22/file0" [pid 5000] lstat("./20/file0", [pid 5272] chdir("./22" [pid 5271] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5272] <... chdir resumed>) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... rmdir resumed>) = 0 [pid 5000] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5271] <... symlink resumed>) = 0 [pid 5001] getdents64(3, [pid 5272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5271] memfd_create("syzkaller", 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5272] <... prctl resumed>) = 0 [pid 5271] <... memfd_create resumed>) = 3 [pid 5001] close(3 [pid 5000] fstat(4, [pid 5272] setpgid(0, 0 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5271] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] rmdir("./22" [pid 5272] <... setpgid resumed>) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./20/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 5272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] mkdir("./23", 0777 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./20") = 0 [pid 5000] mkdir("./21", 0777 [pid 5272] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5272] write(3, "1000", 4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5272] <... write resumed>) = 4 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5272] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5272] <... close resumed>) = 0 [pid 5001] close(3 [pid 5000] close(3 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5273 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5274 ./strace-static-x86_64: Process 5273 attached [pid 5273] chdir("./23") = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5272] symlink("/dev/binderfs", "./binderfs" [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5272] <... symlink resumed>) = 0 [pid 5273] <... openat resumed>) = 3 [pid 5273] write(3, "1000", 4) = 4 [pid 5273] close(3./strace-static-x86_64: Process 5274 attached ) = 0 [pid 5272] memfd_create("syzkaller", 0 [pid 5274] chdir("./21" [pid 5273] symlink("/dev/binderfs", "./binderfs" [pid 5274] <... chdir resumed>) = 0 [pid 5273] <... symlink resumed>) = 0 [pid 5272] <... memfd_create resumed>) = 3 [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5273] memfd_create("syzkaller", 0 [pid 5272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5274] <... prctl resumed>) = 0 [pid 5273] <... memfd_create resumed>) = 3 [pid 5274] setpgid(0, 0 [pid 5273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5272] <... mmap resumed>) = 0x7f5db7f12000 [pid 5274] <... setpgid resumed>) = 0 [pid 5273] <... mmap resumed>) = 0x7f5db7f12000 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5274] write(3, "1000", 4) = 4 [pid 5274] close(3) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5270] <... write resumed>) = 2097152 [pid 5270] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5270] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5270] ioctl(4, LOOP_SET_FD, 3 [pid 5273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5271] <... write resumed>) = 2097152 [pid 5269] <... write resumed>) = 2097152 [pid 5270] <... ioctl resumed>) = 0 [pid 5270] close(3) = 0 [pid 5270] mkdir("./file0", 0777) = 0 [pid 5270] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5272] <... write resumed>) = 2097152 [pid 5271] munmap(0x7f5db7f12000, 2097152 [pid 5269] munmap(0x7f5db7f12000, 2097152 [pid 5271] <... munmap resumed>) = 0 [pid 5269] <... munmap resumed>) = 0 [pid 5271] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5269] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5269] ioctl(4, LOOP_SET_FD, 3 [pid 5271] <... openat resumed>) = 4 [pid 5269] <... ioctl resumed>) = 0 [ 55.201385][ T5270] loop0: detected capacity change from 0 to 4096 [ 55.220440][ T5270] NILFS (loop0): invalid segment: Checksum error in segment payload [ 55.229606][ T5270] NILFS (loop0): trying rollback from an earlier position [ 55.238747][ T5269] loop4: detected capacity change from 0 to 4096 [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5273] <... write resumed>) = 2097152 [pid 5272] munmap(0x7f5db7f12000, 2097152 [pid 5271] <... ioctl resumed>) = 0 [pid 5269] close(3 [pid 5272] <... munmap resumed>) = 0 [pid 5269] <... close resumed>) = 0 [pid 5273] munmap(0x7f5db7f12000, 2097152 [pid 5269] mkdir("./file0", 0777) = 0 [pid 5274] <... write resumed>) = 2097152 [pid 5274] munmap(0x7f5db7f12000, 2097152 [pid 5273] <... munmap resumed>) = 0 [pid 5269] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5273] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5272] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5271] close(3 [pid 5274] <... munmap resumed>) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5273] <... openat resumed>) = 4 [pid 5272] <... openat resumed>) = 4 [pid 5273] ioctl(4, LOOP_SET_FD, 3 [pid 5272] ioctl(4, LOOP_SET_FD, 3 [pid 5274] <... openat resumed>) = 4 [pid 5274] ioctl(4, LOOP_SET_FD, 3 [pid 5270] <... mount resumed>) = 0 [pid 5270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5270] chdir("./file0") = 0 [pid 5270] ioctl(4, LOOP_CLR_FD) = 0 [pid 5270] close(4) = 0 [ 55.245870][ T5271] loop5: detected capacity change from 0 to 4096 [ 55.250272][ T5270] NILFS (loop0): recovery complete [ 55.265769][ T5269] NILFS (loop4): invalid segment: Checksum error in segment payload [ 55.265782][ T5274] loop2: detected capacity change from 0 to 4096 [ 55.274149][ T5272] loop1: detected capacity change from 0 to 4096 [ 55.280935][ T5275] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5270] creat("./bus", 000 [pid 5274] <... ioctl resumed>) = 0 [pid 5274] close(3) = 0 [pid 5274] mkdir("./file0", 0777) = 0 [pid 5274] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5271] <... close resumed>) = 0 [pid 5271] mkdir("./file0", 0777) = 0 [pid 5271] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5270] <... creat resumed>) = 4 [pid 5270] open("./bus", O_RDONLY) = 5 [pid 5270] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5270] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5270] unlink("./bus") = 0 [pid 5270] sendfile(4, 5, NULL, 145139829833722 [pid 5273] <... ioctl resumed>) = 0 [pid 5272] <... ioctl resumed>) = 0 [pid 5273] close(3 [pid 5272] close(3 [pid 5273] <... close resumed>) = 0 [pid 5272] <... close resumed>) = 0 [pid 5273] mkdir("./file0", 0777 [pid 5272] mkdir("./file0", 0777 [pid 5273] <... mkdir resumed>) = 0 [pid 5272] <... mkdir resumed>) = 0 [pid 5273] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5272] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5270] <... sendfile resumed>) = 32 [ 55.286726][ T5273] loop3: detected capacity change from 0 to 4096 [ 55.312180][ T5271] NILFS (loop5): invalid segment: Checksum error in segment payload [ 55.320345][ T5269] NILFS (loop4): trying rollback from an earlier position [ 55.327867][ T5271] NILFS (loop5): trying rollback from an earlier position [ 55.334775][ T5274] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5270] exit_group(0) = ? [pid 5270] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 55.346858][ T5274] NILFS (loop2): trying rollback from an earlier position [ 55.347376][ T5271] NILFS (loop5): recovery complete [ 55.362696][ T5273] NILFS (loop3): invalid segment: Checksum error in segment payload [ 55.371559][ T5272] NILFS (loop1): invalid segment: Checksum error in segment payload [ 55.371788][ T5269] NILFS (loop4): recovery complete [ 55.380835][ T5272] NILFS (loop1): trying rollback from an earlier position [ 55.385358][ T5273] NILFS (loop3): trying rollback from an earlier position [pid 4998] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5271] <... mount resumed>) = 0 [pid 5269] <... mount resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./22/binderfs") = 0 [pid 4998] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5271] <... openat resumed>) = 3 [pid 5269] <... openat resumed>) = 3 [pid 5271] chdir("./file0" [pid 5269] chdir("./file0" [pid 5271] <... chdir resumed>) = 0 [pid 5269] <... chdir resumed>) = 0 [pid 5271] ioctl(4, LOOP_CLR_FD [pid 5269] ioctl(4, LOOP_CLR_FD [pid 5271] <... ioctl resumed>) = 0 [pid 5269] <... ioctl resumed>) = 0 [pid 5271] close(4 [pid 5269] close(4 [pid 5271] <... close resumed>) = 0 [pid 5269] <... close resumed>) = 0 [pid 5269] creat("./bus", 000 [pid 5271] creat("./bus", 000 [pid 5269] <... creat resumed>) = 4 [pid 5269] open("./bus", O_RDONLY) = 5 [pid 5269] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5271] <... creat resumed>) = 4 [pid 5269] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5271] open("./bus", O_RDONLY) = 5 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5269] <... write resumed>) = 32 [pid 5271] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5269] unlink("./bus" [pid 5271] <... write resumed>) = 32 [pid 5269] <... unlink resumed>) = 0 [pid 5271] unlink("./bus" [pid 5269] sendfile(4, 5, NULL, 145139829833722 [pid 5271] <... unlink resumed>) = 0 [pid 5269] <... sendfile resumed>) = 32 [pid 5271] sendfile(4, 5, NULL, 145139829833722 [pid 5269] exit_group(0) = ? [pid 5271] <... sendfile resumed>) = 32 [pid 5271] exit_group(0) = ? [pid 5269] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5269, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5002] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 55.399493][ T5276] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.401297][ T5277] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.421677][ T5274] NILFS (loop2): recovery complete [ 55.427729][ T5272] NILFS (loop1): recovery complete [ 55.435884][ T5273] NILFS (loop3): recovery complete [pid 5002] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5272] <... mount resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./20/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./20/binderfs" [pid 4998] lstat("./22/file0", [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5274] <... mount resumed>) = 0 [pid 5272] <... openat resumed>) = 3 [pid 5271] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 4 [pid 5274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5272] chdir("./file0" [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] fstat(4, [pid 5274] <... openat resumed>) = 3 [pid 5272] <... chdir resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5274] chdir("./file0" [pid 5272] ioctl(4, LOOP_CLR_FD [pid 4998] getdents64(4, [pid 5274] <... chdir resumed>) = 0 [pid 5272] <... ioctl resumed>) = 0 [pid 5003] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5274] ioctl(4, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 5274] <... ioctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5274] close(4 [pid 5003] <... openat resumed>) = 3 [pid 4998] close(4 [pid 5274] <... close resumed>) = 0 [pid 5003] fstat(3, [pid 4998] <... close resumed>) = 0 [pid 5274] creat("./bus", 000 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] rmdir("./22/file0" [pid 5273] <... mount resumed>) = 0 [pid 5272] close(4 [pid 5003] getdents64(3, [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5272] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(3, [pid 5003] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] close(3 [pid 5003] lstat("./22/binderfs", [pid 4998] <... close resumed>) = 0 [pid 5273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5272] creat("./bus", 000 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] rmdir("./22" [pid 5273] <... openat resumed>) = 3 [pid 5003] unlink("./22/binderfs" [pid 4998] <... rmdir resumed>) = 0 [pid 5273] chdir("./file0" [pid 5003] <... unlink resumed>) = 0 [pid 4998] mkdir("./23", 0777 [pid 5273] <... chdir resumed>) = 0 [pid 5003] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... mkdir resumed>) = 0 [pid 5273] ioctl(4, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5273] <... ioctl resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5281 [pid 5273] close(4 [pid 5002] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5273] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5281 attached [pid 5281] chdir("./23" [pid 5273] creat("./bus", 000 [pid 5002] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... chdir resumed>) = 0 [pid 5281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5281] <... prctl resumed>) = 0 [pid 5281] setpgid(0, 0) = 0 [pid 5002] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] <... openat resumed>) = 4 [pid 5281] write(3, "1000", 4 [pid 5002] fstat(4, [pid 5281] <... write resumed>) = 4 [pid 5281] close(3) = 0 [pid 5281] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5281] memfd_create("syzkaller", 0) = 3 [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5272] <... creat resumed>) = 4 [pid 5272] open("./bus", O_RDONLY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5272] <... open resumed>) = 5 [pid 5272] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(4, [pid 5272] <... open resumed>) = 6 [pid 5272] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5272] <... write resumed>) = 32 [pid 5272] unlink("./bus" [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5272] <... unlink resumed>) = 0 [pid 5272] sendfile(4, 5, NULL, 145139829833722 [pid 5002] close(4) = 0 [pid 5272] <... sendfile resumed>) = 32 [pid 5002] rmdir("./20/file0" [pid 5272] exit_group(0 [pid 5273] <... creat resumed>) = 4 [pid 5272] <... exit_group resumed>) = ? [pid 5002] <... rmdir resumed>) = 0 [ 55.457907][ T5279] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.462835][ T5278] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.492979][ T5280] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5273] open("./bus", O_RDONLY) = 5 [pid 5002] getdents64(3, [pid 5273] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5272] +++ exited with 0 +++ [pid 5273] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5273] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] close(3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5272, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4999] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5273] <... write resumed>) = 32 [pid 4999] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5273] unlink("./bus" [pid 5002] rmdir("./20" [pid 4999] <... openat resumed>) = 3 [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5273] <... unlink resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] fstat(3, [pid 5273] sendfile(4, 5, NULL, 145139829833722 [pid 5002] mkdir("./21", 0777 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5273] <... sendfile resumed>) = 32 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5273] exit_group(0 [pid 5002] <... openat resumed>) = 3 [pid 4999] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5273] <... exit_group resumed>) = ? [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./22/binderfs") = 0 [pid 4999] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... creat resumed>) = 4 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5274] open("./bus", O_RDONLY [pid 5273] +++ exited with 0 +++ [pid 5274] <... open resumed>) = 5 [pid 5003] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3 [pid 4999] <... umount2 resumed>) = 0 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... close resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5273, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5274] <... open resumed>) = 6 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] lstat("./22/file0", [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5282 [pid 5001] fstat(3, [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./23/binderfs", [pid 5003] <... openat resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./23/binderfs" [pid 5003] fstat(4, [pid 5001] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5282 attached [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... write resumed>) = 32 [pid 5282] chdir("./21" [pid 5274] unlink("./bus" [pid 5003] getdents64(4, [pid 5282] <... chdir resumed>) = 0 [pid 4999] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] <... prctl resumed>) = 0 [pid 4999] lstat("./22/file0", [pid 5282] setpgid(0, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5282] <... setpgid resumed>) = 0 [pid 4999] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5282] write(3, "1000", 4 [pid 4999] <... openat resumed>) = 4 [pid 5282] <... write resumed>) = 4 [pid 4999] fstat(4, [pid 5282] close(3 [pid 5274] <... unlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5282] <... close resumed>) = 0 [pid 5274] sendfile(4, 5, NULL, 145139829833722 [pid 4999] getdents64(4, [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5274] <... sendfile resumed>) = 32 [pid 5003] getdents64(4, [pid 5282] <... symlink resumed>) = 0 [pid 5274] exit_group(0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5282] memfd_create("syzkaller", 0 [pid 5274] <... exit_group resumed>) = ? [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] getdents64(4, [pid 5282] <... memfd_create resumed>) = 3 [pid 5003] close(4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] close(4 [pid 5282] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5281] <... write resumed>) = 2097152 [pid 5274] +++ exited with 0 +++ [pid 5003] rmdir("./22/file0" [pid 4999] rmdir("./22/file0" [pid 5281] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] <... rmdir resumed>) = 0 [pid 5281] <... munmap resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5001] lstat("./23/file0", [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5281] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5281] <... openat resumed>) = 4 [pid 5003] close(3 [pid 5001] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 5281] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./22" [pid 5001] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] fstat(3, [pid 4999] mkdir("./23", 0777 [pid 5001] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] getdents64(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] lstat("./21/binderfs", [pid 4999] close(3 [pid 5001] close(4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] unlink("./21/binderfs" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] rmdir("./23/file0" [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5283 [pid 5001] getdents64(3, [pid 5003] rmdir("./22" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./23") = 0 [pid 5001] mkdir("./24", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5003] mkdir("./23", 0777 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5284 [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5283 attached [pid 5003] close(3 [pid 5283] chdir("./23" [pid 5003] <... close resumed>) = 0 ./strace-static-x86_64: Process 5284 attached [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5283] <... chdir resumed>) = 0 [pid 5284] chdir("./24" [pid 5281] <... ioctl resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5285 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5283] setpgid(0, 0 [pid 5281] close(3) = 0 [pid 5283] <... setpgid resumed>) = 0 [pid 5281] mkdir("./file0", 0777 [pid 5284] <... chdir resumed>) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5283] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] <... prctl resumed>) = 0 [pid 5283] write(3, "1000", 4 [pid 5000] lstat("./21/file0", [pid 5284] setpgid(0, 0 [pid 5283] <... write resumed>) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5284] <... setpgid resumed>) = 0 [pid 5283] close(3 [pid 5000] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5283] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] <... openat resumed>) = 3 [pid 5283] symlink("/dev/binderfs", "./binderfs" [pid 5000] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5284] write(3, "1000", 4 [pid 5283] <... symlink resumed>) = 0 [pid 5281] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5284] <... write resumed>) = 4 [pid 5283] memfd_create("syzkaller", 0 [pid 5281] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] fstat(4, [pid 5284] close(3 [pid 5283] <... memfd_create resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5284] <... close resumed>) = 0 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] getdents64(4, [pid 5284] symlink("/dev/binderfs", "./binderfs" [pid 5283] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5285 attached [pid 5284] <... symlink resumed>) = 0 [ 55.618192][ T5281] loop0: detected capacity change from 0 to 4096 [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] getdents64(4, [pid 5285] chdir("./23" [pid 5284] memfd_create("syzkaller", 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5284] <... memfd_create resumed>) = 3 [pid 5000] close(4 [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... close resumed>) = 0 [pid 5284] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] rmdir("./21/file0" [pid 5285] <... chdir resumed>) = 0 [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 5285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] getdents64(3, [pid 5285] <... prctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5285] setpgid(0, 0 [pid 5000] close(3 [pid 5285] <... setpgid resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] rmdir("./21" [pid 5285] <... openat resumed>) = 3 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5282] <... write resumed>) = 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 5285] write(3, "1000", 4 [pid 5000] mkdir("./22", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5285] <... write resumed>) = 4 [pid 5282] munmap(0x7f5db7f12000, 2097152 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5286 ./strace-static-x86_64: Process 5286 attached [pid 5286] chdir("./22") = 0 [pid 5285] close(3) = 0 [pid 5285] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... munmap resumed>) = 0 [pid 5286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5285] <... symlink resumed>) = 0 [pid 5282] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5286] <... prctl resumed>) = 0 [pid 5286] setpgid(0, 0) = 0 [pid 5286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5285] memfd_create("syzkaller", 0 [pid 5286] <... openat resumed>) = 3 [pid 5285] <... memfd_create resumed>) = 3 [pid 5282] <... openat resumed>) = 4 [ 55.665258][ T5281] NILFS (loop0): invalid segment: Checksum error in segment payload [ 55.695370][ T5281] NILFS (loop0): trying rollback from an earlier position [pid 5286] write(3, "1000", 4 [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] ioctl(4, LOOP_SET_FD, 3 [pid 5286] <... write resumed>) = 4 [pid 5285] <... mmap resumed>) = 0x7f5db7f12000 [pid 5286] close(3) = 0 [pid 5286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5286] memfd_create("syzkaller", 0) = 3 [pid 5286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5282] <... ioctl resumed>) = 0 [pid 5282] close(3) = 0 [pid 5282] mkdir("./file0", 0777) = 0 [pid 5282] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5281] <... mount resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5281] chdir("./file0") = 0 [pid 5281] ioctl(4, LOOP_CLR_FD) = 0 [pid 5281] close(4) = 0 [pid 5281] creat("./bus", 000 [pid 5284] <... write resumed>) = 2097152 [pid 5284] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5284] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 55.718499][ T5281] NILFS (loop0): recovery complete [ 55.725141][ T5282] loop4: detected capacity change from 0 to 4096 [ 55.745832][ T5287] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.758738][ T5284] loop3: detected capacity change from 0 to 4096 [pid 5284] ioctl(4, LOOP_SET_FD, 3 [pid 5285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5283] <... write resumed>) = 2097152 [pid 5283] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5283] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5283] ioctl(4, LOOP_SET_FD, 3 [pid 5284] <... ioctl resumed>) = 0 [pid 5284] close(3) = 0 [pid 5284] mkdir("./file0", 0777) = 0 [pid 5286] <... write resumed>) = 2097152 [pid 5284] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5283] <... ioctl resumed>) = 0 [pid 5283] close(3 [pid 5286] munmap(0x7f5db7f12000, 2097152 [pid 5285] <... write resumed>) = 2097152 [pid 5283] <... close resumed>) = 0 [pid 5286] <... munmap resumed>) = 0 [pid 5285] munmap(0x7f5db7f12000, 2097152 [pid 5283] mkdir("./file0", 0777 [pid 5281] <... creat resumed>) = 4 [pid 5286] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5285] <... munmap resumed>) = 0 [pid 5283] <... mkdir resumed>) = 0 [pid 5286] <... openat resumed>) = 4 [pid 5285] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5283] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5286] ioctl(4, LOOP_SET_FD, 3 [pid 5285] <... openat resumed>) = 4 [ 55.768335][ T5282] NILFS (loop4): invalid segment: Checksum error in segment payload [ 55.785136][ T5283] loop1: detected capacity change from 0 to 4096 [ 55.797581][ T5282] NILFS (loop4): trying rollback from an earlier position [ 55.810268][ T5282] NILFS (loop4): recovery complete [pid 5285] ioctl(4, LOOP_SET_FD, 3 [pid 5281] open("./bus", O_RDONLY) = 5 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5286] <... ioctl resumed>) = 0 [pid 5286] close(3) = 0 [pid 5286] mkdir("./file0", 0777) = 0 [pid 5286] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5285] <... ioctl resumed>) = 0 [pid 5285] close(3) = 0 [pid 5285] mkdir("./file0", 0777) = 0 [pid 5285] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5282] <... mount resumed>) = 0 [pid 5281] <... open resumed>) = 6 [pid 5282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 55.813285][ T5286] loop2: detected capacity change from 0 to 4096 [ 55.817459][ T5284] NILFS (loop3): invalid segment: Checksum error in segment payload [ 55.822253][ T5285] loop5: detected capacity change from 0 to 4096 [ 55.839215][ T5283] NILFS (loop1): invalid segment: Checksum error in segment payload [ 55.847584][ T5283] NILFS (loop1): trying rollback from an earlier position [ 55.848001][ T5288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5281] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5282] <... openat resumed>) = 3 [pid 5282] chdir("./file0") = 0 [pid 5282] ioctl(4, LOOP_CLR_FD) = 0 [pid 5282] close(4) = 0 [pid 5282] creat("./bus", 000 [pid 5281] <... write resumed>) = 32 [pid 5281] unlink("./bus" [pid 5282] <... creat resumed>) = 4 [pid 5282] open("./bus", O_RDONLY) = 5 [ 55.861869][ T5284] NILFS (loop3): trying rollback from an earlier position [ 55.881491][ T5285] NILFS (loop5): invalid segment: Checksum error in segment payload [ 55.885558][ T5286] NILFS (loop2): invalid segment: Checksum error in segment payload [ 55.897783][ T5283] NILFS (loop1): recovery complete [ 55.898513][ T5285] NILFS (loop5): trying rollback from an earlier position [ 55.905208][ T5286] NILFS (loop2): trying rollback from an earlier position [pid 5282] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5284] <... mount resumed>) = 0 [pid 5282] <... open resumed>) = 6 [pid 5281] <... unlink resumed>) = 0 [pid 5283] <... mount resumed>) = 0 [pid 5283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5283] chdir("./file0") = 0 [pid 5283] ioctl(4, LOOP_CLR_FD) = 0 [pid 5283] close(4) = 0 [pid 5283] creat("./bus", 000 [pid 5284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5282] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5281] sendfile(4, 5, NULL, 145139829833722 [pid 5284] <... openat resumed>) = 3 [pid 5284] chdir("./file0") = 0 [pid 5282] <... write resumed>) = 32 [pid 5281] <... sendfile resumed>) = 32 [pid 5284] ioctl(4, LOOP_CLR_FD [pid 5282] unlink("./bus" [pid 5281] exit_group(0 [pid 5284] <... ioctl resumed>) = 0 [pid 5282] <... unlink resumed>) = 0 [pid 5281] <... exit_group resumed>) = ? [pid 5284] close(4 [pid 5282] sendfile(4, 5, NULL, 145139829833722 [pid 5284] <... close resumed>) = 0 [pid 5284] creat("./bus", 000 [pid 5285] <... mount resumed>) = 0 [pid 5282] <... sendfile resumed>) = 32 [pid 5281] +++ exited with 0 +++ [pid 5285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5282] exit_group(0 [pid 5284] <... creat resumed>) = 4 [pid 5285] <... openat resumed>) = 3 [pid 5284] open("./bus", O_RDONLY [pid 5283] <... creat resumed>) = 4 [pid 5282] <... exit_group resumed>) = ? [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5281, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5285] chdir("./file0" [pid 5284] <... open resumed>) = 5 [pid 5283] open("./bus", O_RDONLY [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5285] <... chdir resumed>) = 0 [ 55.918916][ T5284] NILFS (loop3): recovery complete [ 55.918977][ T5285] NILFS (loop5): recovery complete [ 55.928931][ T5289] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.931684][ T5290] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.957392][ T5291] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5284] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5283] <... open resumed>) = 5 [pid 5282] +++ exited with 0 +++ [pid 4998] <... restart_syscall resumed>) = 0 [pid 5285] ioctl(4, LOOP_CLR_FD [pid 5284] <... open resumed>) = 6 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5285] <... ioctl resumed>) = 0 [pid 5285] close(4) = 0 [pid 5284] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5283] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5285] creat("./bus", 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] <... open resumed>) = 6 [pid 5002] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... openat resumed>) = 3 [pid 5284] <... write resumed>) = 32 [pid 4998] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5285] <... creat resumed>) = 4 [pid 5002] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5285] open("./bus", O_RDONLY [pid 5284] unlink("./bus" [pid 5283] <... write resumed>) = 32 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5285] <... open resumed>) = 5 [pid 5284] <... unlink resumed>) = 0 [pid 5283] unlink("./bus" [ 55.975915][ T5286] NILFS (loop2): recovery complete [pid 5002] getdents64(3, [pid 5285] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5284] sendfile(4, 5, NULL, 145139829833722 [pid 5283] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... openat resumed>) = 3 [pid 5002] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./21/binderfs") = 0 [pid 5002] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5286] <... mount resumed>) = 0 [pid 5286] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5286] chdir("./file0") = 0 [pid 5286] ioctl(4, LOOP_CLR_FD) = 0 [pid 5286] close(4) = 0 [pid 5286] creat("./bus", 000 [pid 5285] <... open resumed>) = 6 [pid 5283] sendfile(4, 5, NULL, 145139829833722 [pid 4998] fstat(3, [pid 5285] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5284] <... sendfile resumed>) = 32 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5284] exit_group(0 [pid 5283] <... sendfile resumed>) = 32 [pid 4998] getdents64(3, [pid 5284] <... exit_group resumed>) = ? [pid 5283] exit_group(0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5285] <... write resumed>) = 32 [pid 5284] +++ exited with 0 +++ [pid 4998] lstat("./23/binderfs", [pid 5283] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5284, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5285] unlink("./bus" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./23/binderfs" [pid 5285] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5001] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5285] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5001] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5285] <... sendfile resumed>) = 32 [pid 4999] getdents64(3, [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5285] exit_group(0 [pid 5001] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5285] <... exit_group resumed>) = ? [pid 4999] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./23/binderfs", [pid 5001] lstat("./24/binderfs", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5285] +++ exited with 0 +++ [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./23/binderfs" [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5285, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5003] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./24/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... unlink resumed>) = 0 [pid 4999] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5001] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./23/binderfs") = 0 [pid 5003] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [ 55.997783][ T5292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] <... umount2 resumed>) = 0 [pid 4998] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./23/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] lstat("./24/file0", [pid 5286] <... creat resumed>) = 4 [pid 5003] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 4 [pid 5286] open("./bus", O_RDONLY) = 5 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] fstat(4, [pid 5286] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5003] lstat("./23/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5286] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(4, [pid 4999] fstat(4, [pid 5286] <... write resumed>) = 32 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5286] unlink("./bus" [pid 5001] fstat(4, [pid 4999] getdents64(4, [pid 4998] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] close(4 [pid 5286] <... unlink resumed>) = 0 [pid 5003] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 5286] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./23/file0" [pid 5286] <... sendfile resumed>) = 32 [pid 5003] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5286] exit_group(0 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] close(4 [pid 5286] <... exit_group resumed>) = ? [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5002] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 4999] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] fstat(4, [pid 5002] <... openat resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./23/file0" [pid 4998] getdents64(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] rmdir("./24/file0" [pid 5003] getdents64(4, [pid 5002] getdents64(4, [pid 4999] getdents64(3, [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] close(3 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 5286] +++ exited with 0 +++ [pid 5003] getdents64(4, [pid 5002] rmdir("./21/file0" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5286, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./23" [pid 5003] close(4 [pid 5002] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./21" [pid 5003] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./24" [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] rmdir("./23" [pid 4998] <... rmdir resumed>) = 0 [pid 5003] rmdir("./23/file0" [pid 5002] mkdir("./22", 0777) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... restart_syscall resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] mkdir("./25", 0777 [pid 4999] mkdir("./24", 0777 [pid 4998] mkdir("./24", 0777 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5003] rmdir("./23" [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5293 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] fstat(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] mkdir("./24", 0777 [pid 5001] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 4998] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5293 attached [pid 5003] <... openat resumed>) = 3 [pid 5000] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5294 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5295 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5296 [pid 5293] chdir("./22" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] lstat("./22/binderfs", [pid 5293] <... chdir resumed>) = 0 [pid 5003] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5294 attached [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... close resumed>) = 0 [pid 5000] unlink("./22/binderfs"./strace-static-x86_64: Process 5296 attached [pid 5294] chdir("./25" [pid 5293] <... prctl resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... unlink resumed>) = 0 [pid 5296] chdir("./24" [pid 5294] <... chdir resumed>) = 0 [pid 5293] setpgid(0, 0 [pid 5000] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... chdir resumed>) = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5293] <... setpgid resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5297 ./strace-static-x86_64: Process 5297 attached ./strace-static-x86_64: Process 5295 attached [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] <... prctl resumed>) = 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5297] chdir("./24" [pid 5296] <... prctl resumed>) = 0 [pid 5295] chdir("./24" [pid 5294] setpgid(0, 0 [pid 5293] <... openat resumed>) = 3 [pid 5297] <... chdir resumed>) = 0 [pid 5296] setpgid(0, 0 [pid 5295] <... chdir resumed>) = 0 [pid 5294] <... setpgid resumed>) = 0 [pid 5293] write(3, "1000", 4 [pid 5297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5296] <... setpgid resumed>) = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5293] <... write resumed>) = 4 [pid 5297] <... prctl resumed>) = 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5295] <... prctl resumed>) = 0 [pid 5294] <... openat resumed>) = 3 [pid 5293] close(3 [pid 5297] setpgid(0, 0 [pid 5296] <... openat resumed>) = 3 [pid 5295] setpgid(0, 0 [pid 5294] write(3, "1000", 4 [pid 5293] <... close resumed>) = 0 [pid 5297] <... setpgid resumed>) = 0 [pid 5296] write(3, "1000", 4 [pid 5295] <... setpgid resumed>) = 0 [pid 5294] <... write resumed>) = 4 [pid 5293] symlink("/dev/binderfs", "./binderfs" [pid 5297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5296] <... write resumed>) = 4 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] close(3 [pid 5293] <... symlink resumed>) = 0 [pid 5297] <... openat resumed>) = 3 [pid 5296] close(3 [pid 5295] <... openat resumed>) = 3 [pid 5294] <... close resumed>) = 0 [pid 5293] memfd_create("syzkaller", 0 [pid 5297] write(3, "1000", 4 [pid 5296] <... close resumed>) = 0 [pid 5295] write(3, "1000", 4 [pid 5294] symlink("/dev/binderfs", "./binderfs" [pid 5293] <... memfd_create resumed>) = 3 [pid 5297] <... write resumed>) = 4 [pid 5296] symlink("/dev/binderfs", "./binderfs" [pid 5295] <... write resumed>) = 4 [pid 5294] <... symlink resumed>) = 0 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5297] close(3 [pid 5295] close(3 [pid 5294] memfd_create("syzkaller", 0 [pid 5293] <... mmap resumed>) = 0x7f5db7f12000 [pid 5297] <... close resumed>) = 0 [pid 5296] <... symlink resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5294] <... memfd_create resumed>) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5297] symlink("/dev/binderfs", "./binderfs" [pid 5296] memfd_create("syzkaller", 0 [pid 5295] symlink("/dev/binderfs", "./binderfs" [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5297] <... symlink resumed>) = 0 [pid 5296] <... memfd_create resumed>) = 3 [pid 5295] <... symlink resumed>) = 0 [pid 5294] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] memfd_create("syzkaller", 0 [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5295] memfd_create("syzkaller", 0 [pid 5000] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./22/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./22") = 0 [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5297] <... memfd_create resumed>) = 3 [pid 5296] <... mmap resumed>) = 0x7f5db7f12000 [pid 5295] <... memfd_create resumed>) = 3 [pid 5000] mkdir("./23", 0777 [pid 5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... mkdir resumed>) = 0 [pid 5297] <... mmap resumed>) = 0x7f5db7f12000 [pid 5295] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5298 ./strace-static-x86_64: Process 5298 attached [pid 5298] chdir("./23") = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 [pid 5298] close(3) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5298] memfd_create("syzkaller", 0) = 3 [pid 5298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5293] <... write resumed>) = 2097152 [pid 5293] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5296] <... write resumed>) = 2097152 [pid 5295] <... write resumed>) = 2097152 [pid 5294] <... write resumed>) = 2097152 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5297] <... write resumed>) = 2097152 [pid 5296] munmap(0x7f5db7f12000, 2097152 [pid 5295] munmap(0x7f5db7f12000, 2097152 [pid 5294] munmap(0x7f5db7f12000, 2097152 [pid 5296] <... munmap resumed>) = 0 [pid 5295] <... munmap resumed>) = 0 [pid 5294] <... munmap resumed>) = 0 [pid 5293] <... ioctl resumed>) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5294] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5293] close(3 [pid 5296] <... openat resumed>) = 4 [pid 5295] <... openat resumed>) = 4 [pid 5294] <... openat resumed>) = 4 [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5295] ioctl(4, LOOP_SET_FD, 3 [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5293] <... close resumed>) = 0 [pid 5297] munmap(0x7f5db7f12000, 2097152 [pid 5298] <... write resumed>) = 2097152 [pid 5297] <... munmap resumed>) = 0 [pid 5296] <... ioctl resumed>) = 0 [pid 5298] munmap(0x7f5db7f12000, 2097152 [pid 5297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5298] <... munmap resumed>) = 0 [pid 5297] <... openat resumed>) = 4 [pid 5298] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5297] ioctl(4, LOOP_SET_FD, 3 [pid 5298] <... openat resumed>) = 4 [pid 5297] <... ioctl resumed>) = 0 [pid 5298] ioctl(4, LOOP_SET_FD, 3 [pid 5297] close(3 [pid 5296] close(3 [pid 5295] <... ioctl resumed>) = 0 [pid 5294] <... ioctl resumed>) = 0 [pid 5293] mkdir("./file0", 0777 [pid 5297] <... close resumed>) = 0 [pid 5296] <... close resumed>) = 0 [pid 5295] close(3 [pid 5294] close(3 [pid 5293] <... mkdir resumed>) = 0 [pid 5297] mkdir("./file0", 0777 [pid 5296] mkdir("./file0", 0777 [pid 5295] <... close resumed>) = 0 [pid 5294] <... close resumed>) = 0 [pid 5293] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5298] <... ioctl resumed>) = 0 [pid 5297] <... mkdir resumed>) = 0 [pid 5296] <... mkdir resumed>) = 0 [pid 5295] mkdir("./file0", 0777 [pid 5298] close(3) = 0 [pid 5298] mkdir("./file0", 0777) = 0 [pid 5298] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5294] mkdir("./file0", 0777) = 0 [ 56.243134][ T5293] loop4: detected capacity change from 0 to 4096 [ 56.254548][ T5296] loop0: detected capacity change from 0 to 4096 [ 56.261592][ T5295] loop1: detected capacity change from 0 to 4096 [ 56.267326][ T5297] loop5: detected capacity change from 0 to 4096 [ 56.268118][ T5294] loop3: detected capacity change from 0 to 4096 [ 56.275579][ T5298] loop2: detected capacity change from 0 to 4096 [pid 5294] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5297] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5296] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5295] <... mkdir resumed>) = 0 [ 56.286823][ T5293] NILFS (loop4): invalid segment: Checksum error in segment payload [ 56.299539][ T5296] NILFS (loop0): invalid segment: Checksum error in segment payload [ 56.303300][ T5298] NILFS (loop2): invalid segment: Checksum error in segment payload [ 56.310387][ T5296] NILFS (loop0): trying rollback from an earlier position [ 56.316932][ T5293] NILFS (loop4): trying rollback from an earlier position [ 56.328050][ T5298] NILFS (loop2): trying rollback from an earlier position [pid 5295] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5296] <... mount resumed>) = 0 [ 56.333827][ T5295] NILFS (loop1): invalid segment: Checksum error in segment payload [ 56.342544][ T5294] NILFS (loop3): invalid segment: Checksum error in segment payload [ 56.350125][ T5297] NILFS (loop5): invalid segment: Checksum error in segment payload [ 56.355379][ T5296] NILFS (loop0): recovery complete [ 56.361259][ T5295] NILFS (loop1): trying rollback from an earlier position [ 56.368295][ T5298] NILFS (loop2): recovery complete [ 56.374008][ T5297] NILFS (loop5): trying rollback from an earlier position [ 56.378885][ T5294] NILFS (loop3): trying rollback from an earlier position [pid 5296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5296] chdir("./file0") = 0 [pid 5296] ioctl(4, LOOP_CLR_FD) = 0 [pid 5296] close(4) = 0 [pid 5296] creat("./bus", 000 [pid 5298] <... mount resumed>) = 0 [pid 5298] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5298] chdir("./file0") = 0 [pid 5298] ioctl(4, LOOP_CLR_FD) = 0 [pid 5298] close(4) = 0 [ 56.393447][ T5299] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.408163][ T5293] NILFS (loop4): recovery complete [ 56.411681][ T5300] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.433634][ T5295] NILFS (loop1): recovery complete [pid 5298] creat("./bus", 000 [pid 5297] <... mount resumed>) = 0 [pid 5295] <... mount resumed>) = 0 [pid 5293] <... mount resumed>) = 0 [pid 5297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5297] <... openat resumed>) = 3 [pid 5295] <... openat resumed>) = 3 [pid 5297] chdir("./file0" [pid 5295] chdir("./file0" [pid 5297] <... chdir resumed>) = 0 [pid 5295] <... chdir resumed>) = 0 [pid 5297] ioctl(4, LOOP_CLR_FD [pid 5295] ioctl(4, LOOP_CLR_FD [pid 5297] <... ioctl resumed>) = 0 [pid 5295] <... ioctl resumed>) = 0 [pid 5297] close(4 [pid 5295] close(4 [pid 5297] <... close resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5297] creat("./bus", 000 [pid 5295] creat("./bus", 000 [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5293] chdir("./file0") = 0 [pid 5293] ioctl(4, LOOP_CLR_FD) = 0 [pid 5293] close(4) = 0 [pid 5293] creat("./bus", 000) = 4 [pid 5293] open("./bus", O_RDONLY) = 5 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5298] <... creat resumed>) = 4 [pid 5296] <... creat resumed>) = 4 [pid 5293] <... open resumed>) = 6 [pid 5293] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5295] <... creat resumed>) = 4 [pid 5295] open("./bus", O_RDONLY [pid 5298] open("./bus", O_RDONLY [pid 5296] open("./bus", O_RDONLY [pid 5295] <... open resumed>) = 5 [pid 5295] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5298] <... open resumed>) = 5 [pid 5296] <... open resumed>) = 5 [pid 5295] <... open resumed>) = 6 [pid 5298] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5296] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5295] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5298] <... open resumed>) = 6 [pid 5298] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5296] <... open resumed>) = 6 [pid 5296] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5298] <... write resumed>) = 32 [pid 5298] unlink("./bus" [pid 5296] <... write resumed>) = 32 [pid 5293] <... write resumed>) = 32 [pid 5298] <... unlink resumed>) = 0 [pid 5296] unlink("./bus" [pid 5295] <... write resumed>) = 32 [pid 5293] unlink("./bus" [pid 5298] sendfile(4, 5, NULL, 145139829833722 [pid 5296] <... unlink resumed>) = 0 [pid 5295] unlink("./bus" [pid 5298] <... sendfile resumed>) = 32 [pid 5296] sendfile(4, 5, NULL, 145139829833722 [pid 5295] <... unlink resumed>) = 0 [pid 5293] <... unlink resumed>) = 0 [pid 5295] sendfile(4, 5, NULL, 145139829833722 [pid 5293] sendfile(4, 5, NULL, 145139829833722 [pid 5298] exit_group(0 [pid 5296] <... sendfile resumed>) = 32 [pid 5295] <... sendfile resumed>) = 32 [pid 5293] <... sendfile resumed>) = 32 [pid 5298] <... exit_group resumed>) = ? [pid 5296] exit_group(0 [pid 5295] exit_group(0 [pid 5293] exit_group(0 [pid 5295] <... exit_group resumed>) = ? [pid 5296] <... exit_group resumed>) = ? [pid 5293] <... exit_group resumed>) = ? [ 56.440095][ T5297] NILFS (loop5): recovery complete [ 56.447027][ T5301] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.457330][ T5294] NILFS (loop3): recovery complete [ 56.460116][ T5303] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.462736][ T5302] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5298] +++ exited with 0 +++ [pid 5295] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5000] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./23/binderfs") = 0 [pid 5000] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5296] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5297] <... creat resumed>) = 4 [pid 5294] <... mount resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5296, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5297] open("./bus", O_RDONLY [pid 5294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5297] <... open resumed>) = 5 [pid 5294] <... openat resumed>) = 3 [pid 5297] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5294] chdir("./file0" [pid 5002] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5297] <... open resumed>) = 6 [pid 5294] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5294] <... ioctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4999] fstat(3, [pid 5297] <... write resumed>) = 32 [pid 5294] close(4 [pid 5002] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5297] unlink("./bus" [pid 5294] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 4998] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5297] <... unlink resumed>) = 0 [pid 5294] creat("./bus", 000 [pid 5002] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] sendfile(4, 5, NULL, 145139829833722 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5297] <... sendfile resumed>) = 32 [pid 5002] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5297] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./24/binderfs", [pid 4998] fstat(3, [pid 5297] <... exit_group resumed>) = ? [pid 5002] lstat("./22/binderfs", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] unlink("./22/binderfs") = 0 [pid 5002] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./24/binderfs" [pid 4998] getdents64(3, [pid 5297] +++ exited with 0 +++ [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5297, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 4999] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./24/binderfs", [pid 5003] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./24/binderfs" [pid 5003] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] <... creat resumed>) = 4 [pid 5003] getdents64(3, [pid 5000] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] open("./bus", O_RDONLY [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5294] <... open resumed>) = 5 [pid 5003] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... open resumed>) = 6 [pid 5003] lstat("./24/binderfs", [pid 5294] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5294] <... write resumed>) = 32 [pid 5003] unlink("./24/binderfs" [pid 5294] unlink("./bus" [pid 5003] <... unlink resumed>) = 0 [pid 5294] <... unlink resumed>) = 0 [pid 5003] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5294] exit_group(0) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 5294] +++ exited with 0 +++ [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] close(4) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5003] rmdir("./24/file0") = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./24") = 0 [pid 5001] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] mkdir("./25", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... mkdir resumed>) = 0 [pid 5000] lstat("./23/file0", [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [ 56.509098][ T5304] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5003] <... ioctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(3, [pid 5003] close(3) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5305 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./25/binderfs", [pid 5000] <... openat resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./25/binderfs" [pid 5000] fstat(4, [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5305 attached [pid 5305] chdir("./25") = 0 [pid 5000] getdents64(4, [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5305] setpgid(0, 0) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5305] write(3, "1000", 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] getdents64(4, [pid 5305] <... write resumed>) = 4 [pid 5002] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5305] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5305] <... close resumed>) = 0 [pid 5002] lstat("./22/file0", [pid 5305] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5305] <... symlink resumed>) = 0 [pid 5002] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5305] memfd_create("syzkaller", 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5305] <... memfd_create resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... openat resumed>) = 4 [pid 5305] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] fstat(4, [pid 5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./22/file0") = 0 [pid 5000] close(4 [pid 5002] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./25/file0", [pid 5000] <... close resumed>) = 0 [pid 4999] lstat("./24/file0", [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] rmdir("./23/file0" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3) = 0 [pid 5001] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 4999] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./22" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] mkdir("./23", 0777 [pid 5001] <... openat resumed>) = 4 [pid 5000] close(3 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 5002] <... close resumed>) = 0 [pid 5000] rmdir("./23" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5306 [pid 5000] mkdir("./24", 0777 [pid 5001] fstat(4, [pid 4999] getdents64(4, [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] getdents64(4, [pid 5001] getdents64(4, [pid 5000] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] close(4 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] rmdir("./24/file0" [pid 5001] close(4 [pid 5000] <... close resumed>) = 0 [pid 4998] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 4998] lstat("./24/file0", [pid 5001] rmdir("./25/file0" [pid 4999] getdents64(3, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5306 attached [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5307 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5306] chdir("./23" [pid 5001] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4998] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... chdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./24" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] <... prctl resumed>) = 0 [pid 5001] close(3 [pid 4998] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] setpgid(0, 0 [pid 5001] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5306] <... setpgid resumed>) = 0 [pid 5001] rmdir("./25" [pid 4999] mkdir("./25", 0777 [pid 4998] fstat(4, ./strace-static-x86_64: Process 5307 attached [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5305] <... write resumed>) = 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5307] chdir("./24" [pid 5306] <... openat resumed>) = 3 [pid 5001] mkdir("./26", 0777 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] getdents64(4, [pid 5307] <... chdir resumed>) = 0 [pid 5306] write(3, "1000", 4 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5306] <... write resumed>) = 4 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 5307] <... prctl resumed>) = 0 [pid 5306] close(3 [pid 5001] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5307] setpgid(0, 0 [pid 5306] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(4 [pid 5307] <... setpgid resumed>) = 0 [pid 5306] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5306] <... symlink resumed>) = 0 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./24/file0" [pid 5307] <... openat resumed>) = 3 [pid 5306] memfd_create("syzkaller", 0 [pid 5001] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... rmdir resumed>) = 0 [pid 5307] write(3, "1000", 4 [pid 5306] <... memfd_create resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] getdents64(3, [pid 5307] <... write resumed>) = 4 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5307] close(3 [pid 5306] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5308 [pid 4998] close(3./strace-static-x86_64: Process 5308 attached [pid 5307] <... close resumed>) = 0 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5309 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./24") = 0 [pid 4998] mkdir("./25", 0777 [pid 5308] chdir("./25" [pid 5307] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... mkdir resumed>) = 0 [pid 5308] <... chdir resumed>) = 0 [pid 5307] <... symlink resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5307] memfd_create("syzkaller", 0 [pid 4998] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5309 attached [pid 5308] <... prctl resumed>) = 0 [pid 5307] <... memfd_create resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5309] chdir("./26" [pid 5308] setpgid(0, 0 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5309] <... chdir resumed>) = 0 [pid 5308] <... setpgid resumed>) = 0 [pid 5307] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] close(3 [pid 5309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... close resumed>) = 0 [pid 5309] <... prctl resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5309] setpgid(0, 0) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5310 [pid 5309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5308] <... openat resumed>) = 3 [pid 5309] <... openat resumed>) = 3 [pid 5308] write(3, "1000", 4 [pid 5309] write(3, "1000", 4 [pid 5308] <... write resumed>) = 4 [pid 5309] <... write resumed>) = 4 [pid 5308] close(3) = 0 [pid 5309] close(3 [pid 5308] symlink("/dev/binderfs", "./binderfs" [pid 5309] <... close resumed>) = 0 [pid 5308] <... symlink resumed>) = 0 [pid 5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5310 attached [pid 5309] symlink("/dev/binderfs", "./binderfs" [pid 5308] memfd_create("syzkaller", 0 [pid 5309] <... symlink resumed>) = 0 [pid 5308] <... memfd_create resumed>) = 3 [pid 5310] chdir("./25" [pid 5309] memfd_create("syzkaller", 0 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5305] munmap(0x7f5db7f12000, 2097152 [pid 5310] <... chdir resumed>) = 0 [pid 5309] <... memfd_create resumed>) = 3 [pid 5308] <... mmap resumed>) = 0x7f5db7f12000 [pid 5305] <... munmap resumed>) = 0 [pid 5310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5310] <... prctl resumed>) = 0 [pid 5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5305] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5310] setpgid(0, 0 [pid 5305] <... openat resumed>) = 4 [pid 5310] <... setpgid resumed>) = 0 [pid 5305] ioctl(4, LOOP_SET_FD, 3 [pid 5310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5310] write(3, "1000", 4) = 4 [pid 5310] close(3) = 0 [pid 5310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5310] memfd_create("syzkaller", 0) = 3 [pid 5310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5305] <... ioctl resumed>) = 0 [pid 5305] close(3) = 0 [pid 5306] <... write resumed>) = 2097152 [pid 5305] mkdir("./file0", 0777 [pid 5306] munmap(0x7f5db7f12000, 2097152 [pid 5305] <... mkdir resumed>) = 0 [pid 5306] <... munmap resumed>) = 0 [pid 5305] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5306] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 56.706083][ T5305] loop5: detected capacity change from 0 to 4096 [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5307] <... write resumed>) = 2097152 [pid 5306] <... ioctl resumed>) = 0 [pid 5310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5306] close(3 [pid 5309] <... write resumed>) = 2097152 [pid 5308] <... write resumed>) = 2097152 [pid 5307] munmap(0x7f5db7f12000, 2097152 [pid 5309] munmap(0x7f5db7f12000, 2097152 [pid 5308] munmap(0x7f5db7f12000, 2097152 [pid 5307] <... munmap resumed>) = 0 [pid 5309] <... munmap resumed>) = 0 [pid 5308] <... munmap resumed>) = 0 [pid 5307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5306] <... close resumed>) = 0 [pid 5309] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5307] <... openat resumed>) = 4 [pid 5309] <... openat resumed>) = 4 [pid 5308] <... openat resumed>) = 4 [ 56.746676][ T5306] loop4: detected capacity change from 0 to 4096 [ 56.767813][ T5305] NILFS (loop5): invalid segment: Checksum error in segment payload [ 56.781289][ T5305] NILFS (loop5): trying rollback from an earlier position [pid 5307] ioctl(4, LOOP_SET_FD, 3 [pid 5306] mkdir("./file0", 0777 [pid 5309] ioctl(4, LOOP_SET_FD, 3 [pid 5308] ioctl(4, LOOP_SET_FD, 3 [pid 5310] <... write resumed>) = 2097152 [pid 5307] <... ioctl resumed>) = 0 [pid 5306] <... mkdir resumed>) = 0 [pid 5305] <... mount resumed>) = 0 [pid 5310] munmap(0x7f5db7f12000, 2097152 [pid 5307] close(3 [pid 5306] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5310] <... munmap resumed>) = 0 [pid 5309] <... ioctl resumed>) = 0 [pid 5308] <... ioctl resumed>) = 0 [pid 5307] <... close resumed>) = 0 [pid 5309] close(3 [pid 5308] close(3 [pid 5305] <... openat resumed>) = 3 [pid 5309] <... close resumed>) = 0 [pid 5308] <... close resumed>) = 0 [pid 5309] mkdir("./file0", 0777 [pid 5308] mkdir("./file0", 0777 [pid 5309] <... mkdir resumed>) = 0 [pid 5308] <... mkdir resumed>) = 0 [pid 5309] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 56.791457][ T5307] loop2: detected capacity change from 0 to 4096 [ 56.797567][ T5305] NILFS (loop5): recovery complete [ 56.798440][ T5308] loop1: detected capacity change from 0 to 4096 [ 56.805101][ T5311] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.809977][ T5309] loop3: detected capacity change from 0 to 4096 [ 56.830227][ T5306] NILFS (loop4): invalid segment: Checksum error in segment payload [ 56.832244][ T5308] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5308] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5310] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5307] mkdir("./file0", 0777 [pid 5305] chdir("./file0" [pid 5310] <... openat resumed>) = 4 [pid 5307] <... mkdir resumed>) = 0 [pid 5305] <... chdir resumed>) = 0 [pid 5305] ioctl(4, LOOP_CLR_FD [pid 5310] ioctl(4, LOOP_SET_FD, 3 [pid 5305] <... ioctl resumed>) = 0 [pid 5310] <... ioctl resumed>) = 0 [pid 5307] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5305] close(4 [pid 5310] close(3 [pid 5305] <... close resumed>) = 0 [pid 5310] <... close resumed>) = 0 [ 56.838434][ T5306] NILFS (loop4): trying rollback from an earlier position [ 56.855788][ T5310] loop0: detected capacity change from 0 to 4096 [ 56.856710][ T5309] NILFS (loop3): invalid segment: Checksum error in segment payload [ 56.865634][ T5308] NILFS (loop1): trying rollback from an earlier position [ 56.871715][ T5309] NILFS (loop3): trying rollback from an earlier position [pid 5305] creat("./bus", 000 [pid 5310] mkdir("./file0", 0777) = 0 [pid 5310] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5305] <... creat resumed>) = 4 [pid 5305] open("./bus", O_RDONLY) = 5 [pid 5305] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5305] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5309] <... mount resumed>) = 0 [pid 5309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5309] chdir("./file0") = 0 [pid 5309] ioctl(4, LOOP_CLR_FD) = 0 [ 56.891943][ T5307] NILFS (loop2): invalid segment: Checksum error in segment payload [ 56.902574][ T5306] NILFS (loop4): recovery complete [ 56.904875][ T5309] NILFS (loop3): recovery complete [ 56.910980][ T5307] NILFS (loop2): trying rollback from an earlier position [ 56.923427][ T5310] NILFS (loop0): invalid segment: Checksum error in segment payload [ 56.928203][ T5308] NILFS (loop1): recovery complete [ 56.932217][ T5310] NILFS (loop0): trying rollback from an earlier position [pid 5309] close(4 [pid 5306] <... mount resumed>) = 0 [pid 5306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5306] chdir("./file0") = 0 [pid 5306] ioctl(4, LOOP_CLR_FD) = 0 [pid 5306] close(4) = 0 [pid 5306] creat("./bus", 000 [pid 5309] <... close resumed>) = 0 [pid 5305] <... write resumed>) = 32 [pid 5305] unlink("./bus" [pid 5309] creat("./bus", 000 [pid 5305] <... unlink resumed>) = 0 [pid 5305] sendfile(4, 5, NULL, 145139829833722 [pid 5306] <... creat resumed>) = 4 [pid 5306] open("./bus", O_RDONLY) = 5 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5306] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5305] <... sendfile resumed>) = 32 [ 56.945573][ T5313] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.965101][ T5307] NILFS (loop2): recovery complete [ 56.966441][ T5312] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.977011][ T5310] NILFS (loop0): recovery complete [pid 5306] <... write resumed>) = 32 [pid 5305] exit_group(0 [pid 5308] <... mount resumed>) = 0 [pid 5306] unlink("./bus" [pid 5308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5306] <... unlink resumed>) = 0 [pid 5308] <... openat resumed>) = 3 [pid 5306] sendfile(4, 5, NULL, 145139829833722 [pid 5309] <... creat resumed>) = 4 [pid 5308] chdir("./file0" [pid 5305] <... exit_group resumed>) = ? [pid 5309] open("./bus", O_RDONLY [pid 5308] <... chdir resumed>) = 0 [pid 5306] <... sendfile resumed>) = 32 [pid 5308] ioctl(4, LOOP_CLR_FD [pid 5306] exit_group(0 [pid 5308] <... ioctl resumed>) = 0 [pid 5306] <... exit_group resumed>) = ? [pid 5309] <... open resumed>) = 5 [pid 5308] close(4) = 0 [pid 5306] +++ exited with 0 +++ [pid 5308] creat("./bus", 000 [pid 5310] <... mount resumed>) = 0 [pid 5309] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5309] <... open resumed>) = 6 [pid 5002] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5309] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5305] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5307] <... mount resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5307] chdir("./file0") = 0 [pid 5307] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] close(4) = 0 [pid 5307] creat("./bus", 000 [pid 5309] <... write resumed>) = 32 [pid 5002] <... openat resumed>) = 3 [pid 5309] unlink("./bus" [pid 5310] <... openat resumed>) = 3 [pid 5309] <... unlink resumed>) = 0 [pid 5002] fstat(3, [pid 5309] sendfile(4, 5, NULL, 145139829833722 [pid 5310] chdir("./file0" [pid 5309] <... sendfile resumed>) = 32 [pid 5308] <... creat resumed>) = 4 [pid 5003] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5309] exit_group(0 [pid 5308] open("./bus", O_RDONLY [pid 5310] <... chdir resumed>) = 0 [pid 5309] <... exit_group resumed>) = ? [pid 5308] <... open resumed>) = 5 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5310] ioctl(4, LOOP_CLR_FD [pid 5309] +++ exited with 0 +++ [pid 5308] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(3, [pid 5310] <... ioctl resumed>) = 0 [pid 5308] <... open resumed>) = 6 [pid 5003] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5310] close(4 [pid 5308] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... openat resumed>) = 3 [pid 5002] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5309, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5001] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./26/binderfs") = 0 [pid 5310] <... close resumed>) = 0 [pid 5001] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5310] creat("./bus", 000 [pid 5003] fstat(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5308] <... write resumed>) = 32 [pid 5307] <... creat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./23/binderfs", [pid 5310] <... creat resumed>) = 4 [pid 5308] unlink("./bus" [pid 5307] open("./bus", O_RDONLY [pid 5003] getdents64(3, [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5310] open("./bus", O_RDONLY [pid 5308] <... unlink resumed>) = 0 [pid 5307] <... open resumed>) = 5 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] unlink("./23/binderfs" [pid 5310] <... open resumed>) = 5 [pid 5308] sendfile(4, 5, NULL, 145139829833722 [pid 5307] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... unlink resumed>) = 0 [pid 5310] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5310] <... open resumed>) = 6 [pid 5308] <... sendfile resumed>) = 32 [pid 5307] <... open resumed>) = 6 [pid 5003] lstat("./25/binderfs", [pid 5310] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5308] exit_group(0 [pid 5307] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5308] <... exit_group resumed>) = ? [pid 5003] unlink("./25/binderfs" [pid 5310] <... write resumed>) = 32 [pid 5307] <... write resumed>) = 32 [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5310] unlink("./bus" [pid 5307] unlink("./bus" [pid 5310] <... unlink resumed>) = 0 [pid 5308] +++ exited with 0 +++ [pid 5307] <... unlink resumed>) = 0 [ 56.989004][ T5314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.003399][ T5316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.017350][ T5315] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5310] sendfile(4, 5, NULL, 145139829833722 [pid 5307] sendfile(4, 5, NULL, 145139829833722 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5308, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5310] <... sendfile resumed>) = 32 [pid 5307] <... sendfile resumed>) = 32 [pid 5001] <... umount2 resumed>) = 0 [pid 5310] exit_group(0 [pid 5307] exit_group(0 [pid 5001] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5310] <... exit_group resumed>) = ? [pid 5307] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5310] +++ exited with 0 +++ [pid 5307] +++ exited with 0 +++ [pid 5001] lstat("./26/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4999] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5310, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5002] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(3, [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./23/file0", [pid 5001] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5003] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(4, [pid 5000] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./25/file0", [pid 4998] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 5003] <... openat resumed>) = 4 [pid 5000] fstat(3, [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./25/binderfs", [pid 4998] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(4, [pid 5002] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] unlink("./25/binderfs" [pid 4998] lstat("./25/binderfs", [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] fstat(4, [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] getdents64(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./25/binderfs" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 5000] lstat("./24/binderfs", [pid 4998] <... unlink resumed>) = 0 [pid 5003] close(4 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] rmdir("./26/file0" [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 5000] unlink("./24/binderfs" [pid 5003] rmdir("./25/file0" [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] <... unlink resumed>) = 0 [pid 5002] close(4 [pid 5003] getdents64(3, [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] close(3 [pid 5003] close(3) = 0 [pid 5002] rmdir("./23/file0" [pid 5001] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] rmdir("./25" [pid 4998] <... umount2 resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] rmdir("./26" [pid 5003] mkdir("./26", 0777 [pid 5002] getdents64(3, [pid 5003] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] mkdir("./27", 0777 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 5002] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] rmdir("./23" [pid 5001] <... openat resumed>) = 3 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5317 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] mkdir("./24", 0777 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... mkdir resumed>) = 0 [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./25/file0", [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5318 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 ./strace-static-x86_64: Process 5317 attached [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] lstat("./25/file0", [pid 4998] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] chdir("./26" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5317] <... chdir resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5319 [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5317] <... prctl resumed>) = 0 [pid 5317] setpgid(0, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 4 [pid 5317] <... setpgid resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] fstat(4, [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... openat resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5318 attached [pid 5317] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] fstat(4, [pid 4998] getdents64(4, ./strace-static-x86_64: Process 5319 attached [pid 5318] chdir("./27" [pid 5317] write(3, "1000", 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5317] <... write resumed>) = 4 [pid 5000] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 4998] getdents64(4, [pid 5319] chdir("./24" [pid 5318] <... chdir resumed>) = 0 [pid 5317] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5317] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] close(4 [pid 5319] <... chdir resumed>) = 0 [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5317] symlink("/dev/binderfs", "./binderfs" [pid 5000] lstat("./24/file0", [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5317] <... symlink resumed>) = 0 [pid 4999] close(4 [pid 4998] rmdir("./25/file0" [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5318] <... prctl resumed>) = 0 [pid 5317] memfd_create("syzkaller", 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5319] <... prctl resumed>) = 0 [pid 5318] setpgid(0, 0 [pid 5317] <... memfd_create resumed>) = 3 [pid 5000] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./25/file0" [pid 4998] getdents64(3, [pid 5319] setpgid(0, 0 [pid 5318] <... setpgid resumed>) = 0 [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5319] <... setpgid resumed>) = 0 [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 4998] close(3 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5318] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] close(3 [pid 4998] rmdir("./25" [pid 5319] <... openat resumed>) = 3 [pid 5318] write(3, "1000", 4 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5319] write(3, "1000", 4 [pid 5318] <... write resumed>) = 4 [pid 5000] fstat(4, [pid 4999] rmdir("./25" [pid 4998] mkdir("./26", 0777 [pid 5319] <... write resumed>) = 4 [pid 5318] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5319] close(3 [pid 5318] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] mkdir("./26", 0777 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5319] <... close resumed>) = 0 [pid 5318] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5319] symlink("/dev/binderfs", "./binderfs" [pid 5318] <... symlink resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5319] <... symlink resumed>) = 0 [pid 5318] memfd_create("syzkaller", 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5319] memfd_create("syzkaller", 0 [pid 5318] <... memfd_create resumed>) = 3 [pid 5000] close(4 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5319] <... memfd_create resumed>) = 3 [pid 5318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] close(3 [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5318] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] rmdir("./24/file0" [pid 5319] <... mmap resumed>) = 0x7f5db7f12000 [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... close resumed>) = 0 [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5317] <... write resumed>) = 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5320 [pid 5000] close(3) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5321 [pid 5000] rmdir("./24") = 0 [pid 5000] mkdir("./25", 0777./strace-static-x86_64: Process 5320 attached ./strace-static-x86_64: Process 5321 attached [pid 5318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... mkdir resumed>) = 0 [pid 5320] chdir("./26" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5320] <... chdir resumed>) = 0 [pid 5321] chdir("./26" [pid 5000] <... openat resumed>) = 3 [pid 5321] <... chdir resumed>) = 0 [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5320] <... prctl resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5320] setpgid(0, 0 [pid 5000] close(3 [pid 5321] <... prctl resumed>) = 0 [pid 5320] <... setpgid resumed>) = 0 [pid 5321] setpgid(0, 0 [pid 5000] <... close resumed>) = 0 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5321] <... setpgid resumed>) = 0 [pid 5320] <... openat resumed>) = 3 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5320] write(3, "1000", 4) = 4 [pid 5321] <... openat resumed>) = 3 [pid 5320] close(3 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5322 [pid 5321] write(3, "1000", 4 [pid 5320] <... close resumed>) = 0 [pid 5321] <... write resumed>) = 4 [pid 5320] symlink("/dev/binderfs", "./binderfs" [pid 5321] close(3 [pid 5320] <... symlink resumed>) = 0 [pid 5321] <... close resumed>) = 0 [pid 5320] memfd_create("syzkaller", 0 [pid 5321] symlink("/dev/binderfs", "./binderfs" [pid 5320] <... memfd_create resumed>) = 3 [pid 5321] <... symlink resumed>) = 0 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5321] memfd_create("syzkaller", 0 [pid 5320] <... mmap resumed>) = 0x7f5db7f12000 [pid 5321] <... memfd_create resumed>) = 3 [pid 5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5317] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5317] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5317] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5322 attached [pid 5322] chdir("./25" [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5322] <... chdir resumed>) = 0 [pid 5322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5322] setpgid(0, 0) = 0 [pid 5322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5322] write(3, "1000", 4) = 4 [pid 5322] close(3) = 0 [pid 5322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5322] memfd_create("syzkaller", 0 [pid 5317] <... ioctl resumed>) = 0 [pid 5322] <... memfd_create resumed>) = 3 [pid 5322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5317] close(3) = 0 [pid 5317] mkdir("./file0", 0777) = 0 [pid 5317] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5318] <... write resumed>) = 2097152 [pid 5318] munmap(0x7f5db7f12000, 2097152 [pid 5319] <... write resumed>) = 2097152 [pid 5319] munmap(0x7f5db7f12000, 2097152 [pid 5318] <... munmap resumed>) = 0 [pid 5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5319] <... munmap resumed>) = 0 [pid 5319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5318] <... openat resumed>) = 4 [pid 5318] ioctl(4, LOOP_SET_FD, 3 [pid 5319] <... openat resumed>) = 4 [ 57.256380][ T5317] loop5: detected capacity change from 0 to 4096 [ 57.289376][ T5318] loop3: detected capacity change from 0 to 4096 [ 57.296528][ T5319] loop4: detected capacity change from 0 to 4096 [pid 5319] ioctl(4, LOOP_SET_FD, 3 [pid 5318] <... ioctl resumed>) = 0 [pid 5318] close(3) = 0 [pid 5318] mkdir("./file0", 0777 [pid 5322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] <... mkdir resumed>) = 0 [pid 5318] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5320] <... write resumed>) = 2097152 [pid 5320] munmap(0x7f5db7f12000, 2097152 [pid 5321] <... write resumed>) = 2097152 [pid 5319] <... ioctl resumed>) = 0 [pid 5319] close(3 [pid 5321] munmap(0x7f5db7f12000, 2097152 [pid 5320] <... munmap resumed>) = 0 [pid 5319] <... close resumed>) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5321] <... munmap resumed>) = 0 [pid 5320] <... openat resumed>) = 4 [pid 5321] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5320] ioctl(4, LOOP_SET_FD, 3 [pid 5319] mkdir("./file0", 0777) = 0 [pid 5319] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5321] <... openat resumed>) = 4 [ 57.297870][ T5317] NILFS (loop5): invalid segment: Checksum error in segment payload [ 57.313100][ T5317] NILFS (loop5): trying rollback from an earlier position [ 57.326137][ T5318] NILFS (loop3): invalid segment: Checksum error in segment payload [ 57.336421][ T5317] NILFS (loop5): recovery complete [ 57.346907][ T5320] loop0: detected capacity change from 0 to 4096 [pid 5321] ioctl(4, LOOP_SET_FD, 3 [pid 5317] <... mount resumed>) = 0 [pid 5317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5317] chdir("./file0") = 0 [pid 5317] ioctl(4, LOOP_CLR_FD) = 0 [pid 5317] close(4 [pid 5322] <... write resumed>) = 2097152 [pid 5321] <... ioctl resumed>) = 0 [pid 5320] <... ioctl resumed>) = 0 [pid 5317] <... close resumed>) = 0 [pid 5322] munmap(0x7f5db7f12000, 2097152 [pid 5320] close(3 [pid 5317] creat("./bus", 000 [pid 5322] <... munmap resumed>) = 0 [pid 5320] <... close resumed>) = 0 [pid 5321] close(3) = 0 [pid 5320] mkdir("./file0", 0777 [pid 5322] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5321] mkdir("./file0", 0777 [pid 5320] <... mkdir resumed>) = 0 [pid 5321] <... mkdir resumed>) = 0 [pid 5320] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5322] <... openat resumed>) = 4 [pid 5321] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 57.354758][ T5321] loop1: detected capacity change from 0 to 4096 [ 57.360434][ T5319] NILFS (loop4): invalid segment: Checksum error in segment payload [ 57.362274][ T5318] NILFS (loop3): trying rollback from an earlier position [ 57.389497][ T5323] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.393356][ T5322] loop2: detected capacity change from 0 to 4096 [pid 5322] ioctl(4, LOOP_SET_FD, 3 [pid 5317] <... creat resumed>) = 4 [pid 5317] open("./bus", O_RDONLY) = 5 [pid 5317] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5317] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5317] unlink("./bus") = 0 [pid 5317] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5317] exit_group(0) = ? [pid 5322] <... ioctl resumed>) = 0 [pid 5317] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, [pid 5322] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5322] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5322] mkdir("./file0", 0777 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5322] <... mkdir resumed>) = 0 [ 57.400818][ T5319] NILFS (loop4): trying rollback from an earlier position [ 57.407700][ T5321] NILFS (loop1): invalid segment: Checksum error in segment payload [ 57.422068][ T5320] NILFS (loop0): invalid segment: Checksum error in segment payload [ 57.437336][ T5320] NILFS (loop0): trying rollback from an earlier position [ 57.444616][ T5321] NILFS (loop1): trying rollback from an earlier position [pid 5003] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./26/binderfs") = 0 [pid 5322] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5320] <... mount resumed>) = 0 [pid 5320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 57.457697][ T5320] NILFS (loop0): recovery complete [ 57.467642][ T5322] NILFS (loop2): invalid segment: Checksum error in segment payload [ 57.469743][ T5324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.475626][ T5322] NILFS (loop2): trying rollback from an earlier position [ 57.488124][ T5321] NILFS (loop1): recovery complete [ 57.495798][ T5319] NILFS (loop4): recovery complete [pid 5320] chdir("./file0") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [pid 5320] creat("./bus", 000 [pid 5319] <... mount resumed>) = 0 [pid 5319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5322] <... mount resumed>) = 0 [pid 5319] chdir("./file0" [pid 5318] <... mount resumed>) = 0 [ 57.499467][ T5318] NILFS (loop3): recovery complete [ 57.511692][ T5322] NILFS (loop2): recovery complete [ 57.518472][ T5325] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.532254][ T5326] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.540205][ T5327] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5319] <... chdir resumed>) = 0 [pid 5318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5322] <... openat resumed>) = 3 [pid 5321] <... mount resumed>) = 0 [pid 5320] <... creat resumed>) = 4 [pid 5319] ioctl(4, LOOP_CLR_FD [pid 5318] <... openat resumed>) = 3 [pid 5322] chdir("./file0" [pid 5321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5319] <... ioctl resumed>) = 0 [pid 5318] chdir("./file0" [pid 5322] <... chdir resumed>) = 0 [pid 5321] <... openat resumed>) = 3 [pid 5319] close(4 [pid 5320] open("./bus", O_RDONLY [pid 5318] <... chdir resumed>) = 0 [pid 5322] ioctl(4, LOOP_CLR_FD [pid 5321] chdir("./file0" [pid 5320] <... open resumed>) = 5 [pid 5319] <... close resumed>) = 0 [pid 5318] ioctl(4, LOOP_CLR_FD [pid 5320] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5318] <... ioctl resumed>) = 0 [pid 5320] <... open resumed>) = 6 [pid 5318] close(4 [pid 5320] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5318] <... close resumed>) = 0 [pid 5320] <... write resumed>) = 32 [pid 5318] creat("./bus", 000 [pid 5320] unlink("./bus" [pid 5322] <... ioctl resumed>) = 0 [pid 5321] <... chdir resumed>) = 0 [pid 5320] <... unlink resumed>) = 0 [pid 5319] creat("./bus", 000 [pid 5318] <... creat resumed>) = 4 [pid 5320] sendfile(4, 5, NULL, 145139829833722 [pid 5318] open("./bus", O_RDONLY [pid 5322] close(4 [pid 5321] ioctl(4, LOOP_CLR_FD [pid 5320] <... sendfile resumed>) = 32 [pid 5319] <... creat resumed>) = 4 [pid 5318] <... open resumed>) = 5 [pid 5322] <... close resumed>) = 0 [pid 5321] <... ioctl resumed>) = 0 [pid 5320] exit_group(0 [pid 5319] open("./bus", O_RDONLY [pid 5318] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5322] creat("./bus", 000 [pid 5321] close(4 [pid 5320] <... exit_group resumed>) = ? [pid 5319] <... open resumed>) = 5 [pid 5318] <... open resumed>) = 6 [pid 5322] <... creat resumed>) = 4 [pid 5321] <... close resumed>) = 0 [pid 5320] +++ exited with 0 +++ [pid 5319] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5318] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5322] open("./bus", O_RDONLY [pid 5321] creat("./bus", 000 [pid 5319] <... open resumed>) = 6 [pid 5322] <... open resumed>) = 5 [pid 5319] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5318] <... write resumed>) = 32 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5322] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5318] unlink("./bus" [pid 4998] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5322] <... write resumed>) = 32 [pid 5321] <... creat resumed>) = 4 [pid 5319] <... write resumed>) = 32 [pid 5318] <... unlink resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5322] unlink("./bus" [pid 5321] open("./bus", O_RDONLY [pid 5319] unlink("./bus" [pid 5318] sendfile(4, 5, NULL, 145139829833722 [pid 4998] fstat(3, [pid 5321] <... open resumed>) = 5 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5321] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5322] <... unlink resumed>) = 0 [pid 5319] <... unlink resumed>) = 0 [pid 5318] <... sendfile resumed>) = 32 [pid 5003] <... umount2 resumed>) = 0 [pid 4998] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] sendfile(4, 5, NULL, 145139829833722 [pid 5321] <... open resumed>) = 6 [pid 5319] sendfile(4, 5, NULL, 145139829833722 [pid 5318] exit_group(0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5318] <... exit_group resumed>) = ? [pid 4998] lstat("./26/binderfs", [pid 5322] <... sendfile resumed>) = 32 [pid 5321] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5322] exit_group(0 [pid 5319] <... sendfile resumed>) = 32 [pid 4998] unlink("./26/binderfs" [pid 5322] <... exit_group resumed>) = ? [pid 5319] exit_group(0 [pid 4998] <... unlink resumed>) = 0 [pid 5319] <... exit_group resumed>) = ? [pid 5318] +++ exited with 0 +++ [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] +++ exited with 0 +++ [pid 5321] <... write resumed>) = 32 [pid 5003] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5321] unlink("./bus" [pid 5319] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5318, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5322, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5321] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 57.543829][ T5328] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5321] sendfile(4, 5, NULL, 145139829833722 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5321] <... sendfile resumed>) = 32 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] fstat(3, [pid 5000] fstat(3, [pid 5321] exit_group(0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5321] <... exit_group resumed>) = ? [pid 5001] getdents64(3, [pid 5000] getdents64(3, [pid 5321] +++ exited with 0 +++ [pid 5003] getdents64(4, [pid 5002] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5321, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5001] lstat("./27/binderfs", [pid 5000] lstat("./25/binderfs", [pid 5002] fstat(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] unlink("./27/binderfs" [pid 5000] unlink("./25/binderfs" [pid 5002] getdents64(3, [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./24/binderfs", [pid 4999] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./24/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(4, [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./26/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./26/binderfs") = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] rmdir("./26" [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] close(4 [pid 5001] lstat("./27/file0", [pid 5003] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./27/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./27") = 0 [pid 5001] mkdir("./28", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] rmdir("./26/file0") = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./27", 0777 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] rmdir("./26" [pid 4999] lstat("./26/file0", [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] mkdir("./27", 0777 [pid 4999] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5329 attached [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5000] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5329] chdir("./27" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5329 [pid 5329] <... chdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] lstat("./25/file0", [pid 4999] fstat(4, [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] close(3 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5329] <... prctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 5329] setpgid(0, 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5329] <... setpgid resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5330 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5331 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5331 attached ./strace-static-x86_64: Process 5330 attached [pid 5329] <... openat resumed>) = 3 [pid 5002] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 4999] close(4 [pid 5331] chdir("./28" [pid 5330] chdir("./27" [pid 5329] write(3, "1000", 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5331] <... chdir resumed>) = 0 [pid 5330] <... chdir resumed>) = 0 [pid 5329] <... write resumed>) = 4 [pid 5002] lstat("./24/file0", [pid 5000] getdents64(4, [pid 4999] rmdir("./26/file0" [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5329] close(3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 5331] <... prctl resumed>) = 0 [pid 5330] <... prctl resumed>) = 0 [pid 5329] <... close resumed>) = 0 [pid 5002] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4999] getdents64(3, [pid 5329] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5329] <... symlink resumed>) = 0 [pid 5000] close(4 [pid 4999] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5331] setpgid(0, 0 [pid 5330] setpgid(0, 0 [pid 5329] memfd_create("syzkaller", 0 [pid 5331] <... setpgid resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5330] <... setpgid resumed>) = 0 [pid 5329] <... memfd_create resumed>) = 3 [pid 5002] <... openat resumed>) = 4 [pid 5000] rmdir("./25/file0" [pid 4999] rmdir("./26" [pid 5331] <... openat resumed>) = 3 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] fstat(4, [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5331] write(3, "1000", 4 [pid 5330] <... openat resumed>) = 3 [pid 5329] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] mkdir("./27", 0777 [pid 5331] <... write resumed>) = 4 [pid 5330] write(3, "1000", 4 [pid 5002] getdents64(4, [pid 5331] close(3 [pid 5330] <... write resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5331] <... close resumed>) = 0 [pid 5330] close(3 [pid 5002] getdents64(4, [pid 4999] <... mkdir resumed>) = 0 [pid 5331] symlink("/dev/binderfs", "./binderfs" [pid 5330] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5331] <... symlink resumed>) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs" [pid 5002] close(4 [pid 5000] <... close resumed>) = 0 [pid 5331] memfd_create("syzkaller", 0 [pid 5330] <... symlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] rmdir("./25" [pid 4999] <... openat resumed>) = 3 [pid 5331] <... memfd_create resumed>) = 3 [pid 5330] memfd_create("syzkaller", 0 [pid 5002] rmdir("./24/file0" [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5330] <... memfd_create resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5331] <... mmap resumed>) = 0x7f5db7f12000 [pid 5330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] getdents64(3, [pid 5000] mkdir("./26", 0777 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5330] <... mmap resumed>) = 0x7f5db7f12000 [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] close(3 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] close(3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] rmdir("./24" [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5332 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 5002] mkdir("./25", 0777 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5333 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5332 attached [pid 5332] chdir("./27"./strace-static-x86_64: Process 5333 attached ) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5334 [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5333] chdir("./26" [pid 5332] <... prctl resumed>) = 0 [pid 5333] <... chdir resumed>) = 0 [pid 5332] setpgid(0, 0./strace-static-x86_64: Process 5334 attached [pid 5333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5332] <... setpgid resumed>) = 0 [pid 5333] <... prctl resumed>) = 0 [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5334] chdir("./25" [pid 5333] setpgid(0, 0 [pid 5332] <... openat resumed>) = 3 [pid 5334] <... chdir resumed>) = 0 [pid 5333] <... setpgid resumed>) = 0 [pid 5332] write(3, "1000", 4 [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5332] <... write resumed>) = 4 [pid 5334] <... prctl resumed>) = 0 [pid 5333] <... openat resumed>) = 3 [pid 5332] close(3 [pid 5331] <... write resumed>) = 2097152 [pid 5330] <... write resumed>) = 2097152 [pid 5329] <... write resumed>) = 2097152 [pid 5334] setpgid(0, 0 [pid 5333] write(3, "1000", 4 [pid 5331] munmap(0x7f5db7f12000, 2097152 [pid 5330] munmap(0x7f5db7f12000, 2097152 [pid 5329] munmap(0x7f5db7f12000, 2097152 [pid 5334] <... setpgid resumed>) = 0 [pid 5333] <... write resumed>) = 4 [pid 5332] <... close resumed>) = 0 [pid 5331] <... munmap resumed>) = 0 [pid 5330] <... munmap resumed>) = 0 [pid 5329] <... munmap resumed>) = 0 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5333] close(3 [pid 5332] symlink("/dev/binderfs", "./binderfs" [pid 5331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5330] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5329] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5334] <... openat resumed>) = 3 [pid 5333] <... close resumed>) = 0 [pid 5332] <... symlink resumed>) = 0 [pid 5331] <... openat resumed>) = 4 [pid 5330] <... openat resumed>) = 4 [pid 5329] <... openat resumed>) = 4 [pid 5334] write(3, "1000", 4 [pid 5333] symlink("/dev/binderfs", "./binderfs" [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5330] ioctl(4, LOOP_SET_FD, 3 [pid 5329] ioctl(4, LOOP_SET_FD, 3 [pid 5334] <... write resumed>) = 4 [pid 5333] <... symlink resumed>) = 0 [pid 5332] memfd_create("syzkaller", 0) = 3 [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5334] close(3 [pid 5329] <... ioctl resumed>) = 0 [pid 5333] memfd_create("syzkaller", 0 [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5334] <... close resumed>) = 0 [pid 5333] <... memfd_create resumed>) = 3 [pid 5331] <... ioctl resumed>) = 0 [pid 5330] <... ioctl resumed>) = 0 [pid 5329] close(3 [pid 5334] symlink("/dev/binderfs", "./binderfs" [pid 5333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5331] close(3 [pid 5330] close(3 [pid 5329] <... close resumed>) = 0 [pid 5334] <... symlink resumed>) = 0 [pid 5333] <... mmap resumed>) = 0x7f5db7f12000 [pid 5331] <... close resumed>) = 0 [pid 5330] <... close resumed>) = 0 [pid 5329] mkdir("./file0", 0777 [pid 5334] memfd_create("syzkaller", 0 [pid 5331] mkdir("./file0", 0777 [pid 5334] <... memfd_create resumed>) = 3 [pid 5330] mkdir("./file0", 0777 [pid 5329] <... mkdir resumed>) = 0 [pid 5334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5331] <... mkdir resumed>) = 0 [pid 5333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5330] <... mkdir resumed>) = 0 [pid 5329] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5334] <... mmap resumed>) = 0x7f5db7f12000 [pid 5332] <... write resumed>) = 2097152 [pid 5331] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5330] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5333] <... write resumed>) = 2097152 [ 57.802350][ T5331] loop3: detected capacity change from 0 to 4096 [ 57.808937][ T5329] loop0: detected capacity change from 0 to 4096 [ 57.815709][ T5330] loop5: detected capacity change from 0 to 4096 [pid 5333] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5333] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5333] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5333] close(3) = 0 [pid 5333] mkdir("./file0", 0777) = 0 [pid 5333] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 57.856893][ T5331] NILFS (loop3): invalid segment: Checksum error in segment payload [ 57.861050][ T5333] loop2: detected capacity change from 0 to 4096 [ 57.865811][ T5330] NILFS (loop5): invalid segment: Checksum error in segment payload [ 57.879369][ T5329] NILFS (loop0): invalid segment: Checksum error in segment payload [ 57.886524][ T5333] NILFS (loop2): invalid segment: Checksum error in segment payload [ 57.889901][ T5331] NILFS (loop3): trying rollback from an earlier position [pid 5332] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5332] ioctl(4, LOOP_SET_FD, 3 [pid 5334] <... write resumed>) = 2097152 [pid 5332] <... ioctl resumed>) = 0 [pid 5334] munmap(0x7f5db7f12000, 2097152 [pid 5332] close(3 [pid 5334] <... munmap resumed>) = 0 [pid 5332] <... close resumed>) = 0 [pid 5334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5332] mkdir("./file0", 0777) = 0 [pid 5332] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5334] <... openat resumed>) = 4 [pid 5334] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5334] close(3) = 0 [pid 5334] mkdir("./file0", 0777) = 0 [ 57.903194][ T5333] NILFS (loop2): trying rollback from an earlier position [ 57.910528][ T5329] NILFS (loop0): trying rollback from an earlier position [ 57.918600][ T5332] loop1: detected capacity change from 0 to 4096 [ 57.924978][ T5330] NILFS (loop5): trying rollback from an earlier position [ 57.925770][ T5333] NILFS (loop2): recovery complete [ 57.944824][ T5334] loop4: detected capacity change from 0 to 4096 [pid 5334] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5333] <... mount resumed>) = 0 [ 57.951440][ T5332] NILFS (loop1): invalid segment: Checksum error in segment payload [ 57.957798][ T5330] NILFS (loop5): recovery complete [ 57.959668][ T5329] NILFS (loop0): recovery complete [ 57.964667][ T5335] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.970153][ T5332] NILFS (loop1): trying rollback from an earlier position [ 57.984913][ T5334] NILFS (loop4): invalid segment: Checksum error in segment payload [ 57.993292][ T5331] NILFS (loop3): recovery complete [ 57.995934][ T5334] NILFS (loop4): trying rollback from an earlier position [pid 5333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5329] <... mount resumed>) = 0 [pid 5333] chdir("./file0" [pid 5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5333] <... chdir resumed>) = 0 [pid 5329] <... openat resumed>) = 3 [pid 5333] ioctl(4, LOOP_CLR_FD [pid 5329] chdir("./file0" [pid 5333] <... ioctl resumed>) = 0 [pid 5330] <... mount resumed>) = 0 [pid 5329] <... chdir resumed>) = 0 [pid 5333] close(4 [pid 5329] ioctl(4, LOOP_CLR_FD [pid 5333] <... close resumed>) = 0 [pid 5330] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5329] <... ioctl resumed>) = 0 [pid 5333] creat("./bus", 000 [pid 5329] close(4) = 0 [pid 5329] creat("./bus", 000 [pid 5330] <... openat resumed>) = 3 [ 58.000785][ T5332] NILFS (loop1): recovery complete [ 58.008034][ T5337] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.013570][ T5336] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.039756][ T5338] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5330] chdir("./file0" [pid 5331] <... mount resumed>) = 0 [pid 5330] <... chdir resumed>) = 0 [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5330] ioctl(4, LOOP_CLR_FD) = 0 [pid 5331] <... openat resumed>) = 3 [pid 5330] close(4 [pid 5331] chdir("./file0" [pid 5330] <... close resumed>) = 0 [pid 5331] <... chdir resumed>) = 0 [pid 5330] creat("./bus", 000 [pid 5333] <... creat resumed>) = 4 [pid 5331] ioctl(4, LOOP_CLR_FD [pid 5333] open("./bus", O_RDONLY [pid 5331] <... ioctl resumed>) = 0 [pid 5333] <... open resumed>) = 5 [pid 5331] close(4 [pid 5333] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5331] <... close resumed>) = 0 [pid 5331] creat("./bus", 000 [pid 5333] <... open resumed>) = 6 [pid 5333] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5329] <... creat resumed>) = 4 [pid 5333] unlink("./bus" [pid 5332] <... mount resumed>) = 0 [pid 5330] <... creat resumed>) = 4 [pid 5329] open("./bus", O_RDONLY [pid 5331] <... creat resumed>) = 4 [pid 5332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5331] open("./bus", O_RDONLY [pid 5330] open("./bus", O_RDONLY [pid 5329] <... open resumed>) = 5 [pid 5333] <... unlink resumed>) = 0 [pid 5332] <... openat resumed>) = 3 [pid 5331] <... open resumed>) = 5 [pid 5330] <... open resumed>) = 5 [pid 5329] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5333] sendfile(4, 5, NULL, 145139829833722 [pid 5332] chdir("./file0" [pid 5331] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5330] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5329] <... open resumed>) = 6 [pid 5329] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5332] <... chdir resumed>) = 0 [pid 5331] <... open resumed>) = 6 [pid 5330] <... open resumed>) = 6 [pid 5333] <... sendfile resumed>) = 32 [pid 5332] ioctl(4, LOOP_CLR_FD [pid 5331] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5330] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5329] <... write resumed>) = 32 [pid 5333] exit_group(0 [pid 5332] <... ioctl resumed>) = 0 [pid 5329] unlink("./bus" [pid 5333] <... exit_group resumed>) = ? [pid 5332] close(4 [pid 5331] <... write resumed>) = 32 [pid 5330] <... write resumed>) = 32 [pid 5329] <... unlink resumed>) = 0 [pid 5333] +++ exited with 0 +++ [pid 5332] <... close resumed>) = 0 [pid 5331] unlink("./bus" [pid 5330] unlink("./bus" [pid 5329] sendfile(4, 5, NULL, 145139829833722 [pid 5332] creat("./bus", 000 [pid 5331] <... unlink resumed>) = 0 [pid 5330] <... unlink resumed>) = 0 [pid 5329] <... sendfile resumed>) = 32 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5333, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5331] sendfile(4, 5, NULL, 145139829833722 [pid 5330] sendfile(4, 5, NULL, 145139829833722 [pid 5329] exit_group(0 [pid 5332] <... creat resumed>) = 4 [pid 5329] <... exit_group resumed>) = ? [pid 5332] open("./bus", O_RDONLY [pid 5331] <... sendfile resumed>) = 32 [pid 5330] <... sendfile resumed>) = 32 [pid 5329] +++ exited with 0 +++ [pid 5332] <... open resumed>) = 5 [pid 5331] exit_group(0 [pid 5330] exit_group(0 [pid 5332] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5331] <... exit_group resumed>) = ? [pid 5330] <... exit_group resumed>) = ? [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5332] <... open resumed>) = 6 [pid 5000] fstat(3, [pid 4998] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4998] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./26/binderfs", [pid 4998] lstat("./27/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./26/binderfs" [pid 4998] unlink("./27/binderfs" [pid 5332] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5331] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5330, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 58.041081][ T5339] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.074783][ T5334] NILFS (loop4): recovery complete [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] <... write resumed>) = 32 [pid 5332] unlink("./bus" [pid 5334] <... mount resumed>) = 0 [pid 5003] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5334] <... openat resumed>) = 3 [pid 5003] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5334] chdir("./file0" [pid 5003] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5334] <... chdir resumed>) = 0 [pid 5003] fstat(3, [pid 5001] fstat(3, [pid 5334] ioctl(4, LOOP_CLR_FD [pid 5332] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5334] <... ioctl resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] getdents64(3, [pid 5334] close(4 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5334] <... close resumed>) = 0 [pid 5003] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] creat("./bus", 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5332] sendfile(4, 5, NULL, 145139829833722 [pid 5003] lstat("./27/binderfs", [pid 5001] lstat("./28/binderfs", [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./27/binderfs" [pid 5001] unlink("./28/binderfs" [pid 5332] <... sendfile resumed>) = 32 [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5332] exit_group(0 [pid 5003] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] <... exit_group resumed>) = ? [pid 5334] <... creat resumed>) = 4 [pid 5334] open("./bus", O_RDONLY) = 5 [pid 5334] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5334] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5334] unlink("./bus") = 0 [pid 5334] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5334] exit_group(0) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 5332] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5332, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./27/binderfs") = 0 [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5003] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5000] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5334] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./27/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./26/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5334, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5001] lstat("./28/file0", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./27/file0", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 58.114850][ T5340] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] fstat(3, [pid 5003] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, [pid 5001] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] <... openat resumed>) = 4 [pid 5003] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 5000] fstat(4, [pid 4999] lstat("./27/file0", [pid 4998] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] lstat("./25/binderfs", [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 4998] fstat(4, [pid 5003] close(4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] unlink("./25/binderfs" [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 4998] getdents64(4, [pid 5003] rmdir("./27/file0" [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 5000] close(4 [pid 4999] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5003] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./28/file0" [pid 5000] rmdir("./26/file0" [pid 4999] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(4 [pid 5003] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] getdents64(3, [pid 4999] fstat(4, [pid 4998] rmdir("./27/file0" [pid 5003] rmdir("./27" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 5000] close(3 [pid 4999] getdents64(4, [pid 4998] getdents64(3, [pid 5003] mkdir("./28", 0777 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] rmdir("./28" [pid 5000] rmdir("./26" [pid 4999] getdents64(4, [pid 4998] close(3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] mkdir("./29", 0777 [pid 5000] mkdir("./27", 0777 [pid 4999] close(4 [pid 4998] rmdir("./27" [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] rmdir("./27/file0" [pid 4998] mkdir("./28", 0777 [pid 5003] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5000] close(3 [pid 4999] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5341 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] rmdir("./27" [pid 4998] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5342 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5343 [pid 4999] mkdir("./28", 0777 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5344 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5345 ./strace-static-x86_64: Process 5344 attached [pid 5344] chdir("./28"./strace-static-x86_64: Process 5342 attached ) = 0 ./strace-static-x86_64: Process 5345 attached ./strace-static-x86_64: Process 5343 attached ./strace-static-x86_64: Process 5341 attached [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5342] chdir("./29" [pid 5002] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] chdir("./28" [pid 5344] <... prctl resumed>) = 0 [pid 5343] chdir("./27" [pid 5342] <... chdir resumed>) = 0 [pid 5341] chdir("./28" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... chdir resumed>) = 0 [pid 5344] setpgid(0, 0 [pid 5343] <... chdir resumed>) = 0 [pid 5342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5341] <... chdir resumed>) = 0 [pid 5002] lstat("./25/file0", [pid 5345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5344] <... setpgid resumed>) = 0 [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5342] <... prctl resumed>) = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5345] <... prctl resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5343] <... prctl resumed>) = 0 [pid 5342] setpgid(0, 0 [pid 5341] <... prctl resumed>) = 0 [pid 5002] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] <... openat resumed>) = 3 [pid 5342] <... setpgid resumed>) = 0 [pid 5344] write(3, "1000", 4 [pid 5342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5344] <... write resumed>) = 4 [pid 5342] <... openat resumed>) = 3 [pid 5344] close(3 [pid 5342] write(3, "1000", 4 [pid 5344] <... close resumed>) = 0 [pid 5342] <... write resumed>) = 4 [pid 5344] symlink("/dev/binderfs", "./binderfs" [pid 5342] close(3 [pid 5345] setpgid(0, 0 [pid 5344] <... symlink resumed>) = 0 [pid 5343] setpgid(0, 0 [pid 5342] <... close resumed>) = 0 [pid 5341] setpgid(0, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... setpgid resumed>) = 0 [pid 5344] memfd_create("syzkaller", 0 [pid 5343] <... setpgid resumed>) = 0 [pid 5342] symlink("/dev/binderfs", "./binderfs" [pid 5341] <... setpgid resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5344] <... memfd_create resumed>) = 3 [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5342] <... symlink resumed>) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... openat resumed>) = 4 [pid 5345] <... openat resumed>) = 3 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5343] <... openat resumed>) = 3 [pid 5342] memfd_create("syzkaller", 0 [pid 5341] <... openat resumed>) = 3 [pid 5002] fstat(4, [pid 5345] write(3, "1000", 4 [pid 5344] <... mmap resumed>) = 0x7f5db7f12000 [pid 5343] write(3, "1000", 4 [pid 5342] <... memfd_create resumed>) = 3 [pid 5341] write(3, "1000", 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5345] <... write resumed>) = 4 [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5345] close(3 [pid 5343] <... write resumed>) = 4 [pid 5341] <... write resumed>) = 4 [pid 5002] getdents64(4, [pid 5345] <... close resumed>) = 0 [pid 5343] close(3 [pid 5341] close(3 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5345] symlink("/dev/binderfs", "./binderfs" [pid 5343] <... close resumed>) = 0 [pid 5341] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5345] <... symlink resumed>) = 0 [pid 5343] symlink("/dev/binderfs", "./binderfs" [pid 5341] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5345] memfd_create("syzkaller", 0 [pid 5343] <... symlink resumed>) = 0 [pid 5341] <... symlink resumed>) = 0 [pid 5002] close(4 [pid 5345] <... memfd_create resumed>) = 3 [pid 5343] memfd_create("syzkaller", 0 [pid 5341] memfd_create("syzkaller", 0 [pid 5002] <... close resumed>) = 0 [pid 5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5343] <... memfd_create resumed>) = 3 [pid 5341] <... memfd_create resumed>) = 3 [pid 5002] rmdir("./25/file0" [pid 5345] <... mmap resumed>) = 0x7f5db7f12000 [pid 5343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5343] <... mmap resumed>) = 0x7f5db7f12000 [pid 5341] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... rmdir resumed>) = 0 [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./25") = 0 [pid 5342] <... write resumed>) = 2097152 [pid 5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] mkdir("./26", 0777 [pid 5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5344] <... write resumed>) = 2097152 [pid 5002] <... mkdir resumed>) = 0 [pid 5344] munmap(0x7f5db7f12000, 2097152 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5342] munmap(0x7f5db7f12000, 2097152 [pid 5002] close(3) = 0 [pid 5342] <... munmap resumed>) = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5346 [pid 5342] <... openat resumed>) = 4 [pid 5342] ioctl(4, LOOP_SET_FD, 3 [pid 5344] <... munmap resumed>) = 0 [pid 5343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5344] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5346 attached [pid 5346] chdir("./26") = 0 [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5346] memfd_create("syzkaller", 0) = 3 [pid 5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5345] <... write resumed>) = 2097152 [pid 5342] <... ioctl resumed>) = 0 [pid 5342] close(3) = 0 [pid 5344] <... ioctl resumed>) = 0 [pid 5344] close(3 [pid 5342] mkdir("./file0", 0777 [pid 5344] <... close resumed>) = 0 [pid 5344] mkdir("./file0", 0777) = 0 [pid 5342] <... mkdir resumed>) = 0 [pid 5342] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 58.330513][ T5342] loop3: detected capacity change from 0 to 4096 [ 58.340238][ T5344] loop0: detected capacity change from 0 to 4096 [pid 5344] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5345] munmap(0x7f5db7f12000, 2097152 [pid 5343] <... write resumed>) = 2097152 [pid 5341] <... write resumed>) = 2097152 [pid 5345] <... munmap resumed>) = 0 [pid 5343] munmap(0x7f5db7f12000, 2097152 [pid 5341] munmap(0x7f5db7f12000, 2097152 [pid 5345] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5343] <... munmap resumed>) = 0 [pid 5345] <... openat resumed>) = 4 [pid 5343] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5341] <... munmap resumed>) = 0 [pid 5345] ioctl(4, LOOP_SET_FD, 3 [pid 5343] <... openat resumed>) = 4 [pid 5341] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5343] ioctl(4, LOOP_SET_FD, 3 [pid 5341] <... openat resumed>) = 4 [pid 5341] ioctl(4, LOOP_SET_FD, 3 [pid 5346] <... write resumed>) = 2097152 [pid 5346] munmap(0x7f5db7f12000, 2097152) = 0 [ 58.381058][ T5344] NILFS (loop0): invalid segment: Checksum error in segment payload [ 58.385007][ T5342] NILFS (loop3): invalid segment: Checksum error in segment payload [ 58.391503][ T5344] NILFS (loop0): trying rollback from an earlier position [ 58.411025][ T5345] loop1: detected capacity change from 0 to 4096 [ 58.418475][ T5343] loop2: detected capacity change from 0 to 4096 [pid 5345] <... ioctl resumed>) = 0 [pid 5343] <... ioctl resumed>) = 0 [pid 5341] <... ioctl resumed>) = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5346] ioctl(4, LOOP_SET_FD, 3 [pid 5345] close(3 [pid 5343] close(3 [pid 5341] close(3 [pid 5345] <... close resumed>) = 0 [pid 5343] <... close resumed>) = 0 [pid 5341] <... close resumed>) = 0 [pid 5346] <... ioctl resumed>) = 0 [pid 5346] close(3) = 0 [pid 5346] mkdir("./file0", 0777) = 0 [pid 5346] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5345] mkdir("./file0", 0777 [pid 5343] mkdir("./file0", 0777 [pid 5341] mkdir("./file0", 0777 [pid 5345] <... mkdir resumed>) = 0 [pid 5344] <... mount resumed>) = 0 [pid 5343] <... mkdir resumed>) = 0 [pid 5341] <... mkdir resumed>) = 0 [pid 5345] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./file0") = 0 [pid 5344] ioctl(4, LOOP_CLR_FD) = 0 [pid 5344] close(4) = 0 [pid 5344] creat("./bus", 000 [pid 5343] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 58.425454][ T5341] loop5: detected capacity change from 0 to 4096 [ 58.429896][ T5342] NILFS (loop3): trying rollback from an earlier position [ 58.435401][ T5344] NILFS (loop0): recovery complete [ 58.442857][ T5346] loop4: detected capacity change from 0 to 4096 [ 58.452517][ T5342] NILFS (loop3): recovery complete [ 58.458328][ T5347] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.466052][ T5346] NILFS (loop4): invalid segment: Checksum error in segment payload [ 58.484940][ T5343] NILFS (loop2): invalid segment: Checksum error in segment payload [ 58.488669][ T5346] NILFS (loop4): trying rollback from an earlier position [ 58.496021][ T5345] NILFS (loop1): invalid segment: Checksum error in segment payload [ 58.506452][ T5341] NILFS (loop5): invalid segment: Checksum error in segment payload [ 58.509079][ T5348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.516532][ T5341] NILFS (loop5): trying rollback from an earlier position [pid 5341] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5342] <... mount resumed>) = 0 [pid 5342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5344] <... creat resumed>) = 4 [pid 5342] <... openat resumed>) = 3 [pid 5342] chdir("./file0" [pid 5344] open("./bus", O_RDONLY [pid 5342] <... chdir resumed>) = 0 [pid 5342] ioctl(4, LOOP_CLR_FD [pid 5344] <... open resumed>) = 5 [pid 5342] <... ioctl resumed>) = 0 [pid 5342] close(4 [pid 5344] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5342] <... close resumed>) = 0 [pid 5344] <... open resumed>) = 6 [pid 5344] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5342] creat("./bus", 000 [pid 5344] <... write resumed>) = 32 [pid 5344] unlink("./bus") = 0 [pid 5344] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5344] exit_group(0) = ? [pid 5342] <... creat resumed>) = 4 [pid 5342] open("./bus", O_RDONLY) = 5 [pid 5344] +++ exited with 0 +++ [pid 5342] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5342] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./28/binderfs", [pid 5342] <... write resumed>) = 32 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5342] unlink("./bus" [pid 4998] unlink("./28/binderfs" [pid 5342] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5342] sendfile(4, 5, NULL, 145139829833722 [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] <... sendfile resumed>) = 32 [ 58.527462][ T5343] NILFS (loop2): trying rollback from an earlier position [ 58.546774][ T5345] NILFS (loop1): trying rollback from an earlier position [pid 5342] exit_group(0) = ? [pid 4998] <... umount2 resumed>) = 0 [pid 5342] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5342, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5001] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./29/binderfs") = 0 [pid 5001] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 58.576416][ T5346] NILFS (loop4): recovery complete [ 58.595193][ T5341] NILFS (loop5): recovery complete [ 58.602635][ T5345] NILFS (loop1): recovery complete [ 58.609055][ T5350] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.617371][ T5343] NILFS (loop2): recovery complete [pid 4998] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5341] <... mount resumed>) = 0 [pid 5341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5341] chdir("./file0") = 0 [pid 5341] ioctl(4, LOOP_CLR_FD) = 0 [pid 5341] close(4) = 0 [pid 5346] <... mount resumed>) = 0 [pid 5341] creat("./bus", 000 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5345] <... mount resumed>) = 0 [pid 5341] <... creat resumed>) = 4 [pid 5346] <... openat resumed>) = 3 [pid 5345] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5341] open("./bus", O_RDONLY [pid 5346] chdir("./file0" [pid 5345] <... openat resumed>) = 3 [pid 5341] <... open resumed>) = 5 [pid 5001] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5345] chdir("./file0" [pid 5341] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5345] <... chdir resumed>) = 0 [pid 5341] <... open resumed>) = 6 [pid 5345] ioctl(4, LOOP_CLR_FD [pid 5341] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5345] <... ioctl resumed>) = 0 [pid 5345] close(4 [pid 5346] <... chdir resumed>) = 0 [pid 5345] <... close resumed>) = 0 [pid 5346] ioctl(4, LOOP_CLR_FD [pid 5343] <... mount resumed>) = 0 [pid 5341] <... write resumed>) = 32 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5346] <... ioctl resumed>) = 0 [pid 5345] creat("./bus", 000 [pid 5343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5341] unlink("./bus" [pid 5001] lstat("./29/file0", [pid 4998] getdents64(4, [pid 5346] close(4 [pid 5343] <... openat resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5346] <... close resumed>) = 0 [pid 5345] <... creat resumed>) = 4 [pid 5343] chdir("./file0" [pid 5341] <... unlink resumed>) = 0 [pid 5001] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5346] creat("./bus", 000 [pid 5345] open("./bus", O_RDONLY [pid 5343] <... chdir resumed>) = 0 [pid 5341] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5343] ioctl(4, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] rmdir("./28/file0" [pid 5346] <... creat resumed>) = 4 [pid 5345] <... open resumed>) = 5 [pid 5343] <... ioctl resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 5346] open("./bus", O_RDONLY [pid 5345] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5343] close(4 [pid 5001] fstat(4, [pid 4998] getdents64(3, [pid 5346] <... open resumed>) = 5 [pid 5345] <... open resumed>) = 6 [pid 5343] <... close resumed>) = 0 [pid 5341] <... sendfile resumed>) = 32 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5346] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5345] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5343] creat("./bus", 000 [pid 5341] exit_group(0 [pid 5001] getdents64(4, [pid 4998] close(3 [pid 5346] <... open resumed>) = 6 [pid 5345] <... write resumed>) = 32 [pid 5341] <... exit_group resumed>) = ? [pid 5343] <... creat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... close resumed>) = 0 [pid 5346] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5345] unlink("./bus" [pid 5001] getdents64(4, [pid 4998] rmdir("./28" [pid 5343] open("./bus", O_RDONLY [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] close(4 [pid 4998] mkdir("./29", 0777 [pid 5343] <... open resumed>) = 5 [pid 5345] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5346] <... write resumed>) = 32 [pid 5345] sendfile(4, 5, NULL, 145139829833722 [pid 5343] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5341] +++ exited with 0 +++ [pid 5001] rmdir("./29/file0" [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5346] unlink("./bus" [pid 5345] <... sendfile resumed>) = 32 [pid 5343] <... open resumed>) = 6 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] getdents64(3, [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5346] <... unlink resumed>) = 0 [pid 5345] exit_group(0 [pid 5343] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5346] sendfile(4, 5, NULL, 145139829833722 [pid 5345] <... exit_group resumed>) = ? [pid 5343] <... write resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 58.620997][ T5349] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.652698][ T5351] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.664235][ T5352] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] close(3 [pid 4998] close(3 [pid 5003] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5345] +++ exited with 0 +++ [pid 5346] <... sendfile resumed>) = 32 [pid 5343] unlink("./bus" [pid 5003] <... openat resumed>) = 3 [pid 5001] rmdir("./29" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5346] exit_group(0 [pid 5343] <... unlink resumed>) = 0 [pid 5003] fstat(3, [pid 5001] <... rmdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5345, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5346] <... exit_group resumed>) = ? [pid 5343] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] mkdir("./30", 0777 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5353 [pid 5003] getdents64(3, [pid 5001] <... mkdir resumed>) = 0 [pid 5346] +++ exited with 0 +++ [pid 5343] <... sendfile resumed>) = 32 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5343] exit_group(0 [pid 5003] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5343] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] lstat("./28/binderfs", [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 3 [pid 5343] +++ exited with 0 +++ [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(3 [pid 4999] fstat(3, [pid 5003] unlink("./28/binderfs" [pid 5002] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5343, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] getdents64(3, [pid 5003] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5353 attached [pid 5002] <... openat resumed>) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5354 [pid 5000] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] chdir("./29" [pid 5002] fstat(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5353] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./28/binderfs", [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... openat resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5353] <... prctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(3, [pid 4999] unlink("./28/binderfs" [pid 5353] setpgid(0, 0 [pid 5002] getdents64(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5353] <... setpgid resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] getdents64(3, [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... umount2 resumed>) = 0 [pid 5002] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5353] <... openat resumed>) = 3 [pid 5000] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5354 attached [pid 5353] write(3, "1000", 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5353] <... write resumed>) = 4 [pid 5002] lstat("./26/binderfs", [pid 5000] lstat("./27/binderfs", [pid 5354] chdir("./30" [pid 5353] close(3 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5354] <... chdir resumed>) = 0 [pid 5353] <... close resumed>) = 0 [pid 5002] unlink("./26/binderfs" [pid 5000] unlink("./27/binderfs" [pid 4999] <... umount2 resumed>) = 0 [pid 5354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5353] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5354] <... prctl resumed>) = 0 [pid 5353] <... symlink resumed>) = 0 [pid 5002] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] setpgid(0, 0 [pid 5353] memfd_create("syzkaller", 0 [pid 5003] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] <... setpgid resumed>) = 0 [pid 5353] <... memfd_create resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] lstat("./28/file0", [pid 5354] <... openat resumed>) = 3 [pid 5353] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] write(3, "1000", 4 [pid 5003] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] <... write resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5354] close(3 [pid 5003] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./28/file0", [pid 5354] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5354] symlink("/dev/binderfs", "./binderfs" [pid 5003] fstat(4, [pid 4999] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] <... symlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5354] memfd_create("syzkaller", 0 [pid 5003] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5354] <... memfd_create resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 5354] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 5003] close(4 [pid 5000] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] rmdir("./28/file0" [pid 5000] rmdir("./27/file0" [pid 4999] getdents64(4, [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(3, [pid 5002] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(3, [pid 4999] getdents64(4, [pid 5354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./27") = 0 [pid 5000] mkdir("./28", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5354] <... write resumed>) = 2097152 [pid 5353] <... write resumed>) = 2097152 [pid 5003] close(3 [pid 5002] lstat("./26/file0", [pid 4999] close(4 [pid 5354] munmap(0x7f5db7f12000, 2097152 [pid 5353] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5354] <... munmap resumed>) = 0 [pid 5353] <... munmap resumed>) = 0 [pid 5003] rmdir("./28" [pid 5002] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./28/file0" [pid 5354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5353] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5354] <... openat resumed>) = 4 [pid 5353] <... openat resumed>) = 4 [pid 5003] mkdir("./29", 0777 [pid 5002] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5354] ioctl(4, LOOP_SET_FD, 3 [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5355 ./strace-static-x86_64: Process 5355 attached [pid 5353] <... ioctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] fstat(4, [pid 4999] close(3 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] getdents64(4, [pid 4999] rmdir("./28" [pid 5355] chdir("./28" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 5355] <... chdir resumed>) = 0 [pid 5353] close(3 [pid 5003] close(3 [pid 5002] getdents64(4, [pid 4999] mkdir("./29", 0777 [pid 5355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5353] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5355] <... prctl resumed>) = 0 [pid 5353] mkdir("./file0", 0777 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] close(4 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5355] setpgid(0, 0 [pid 5353] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5355] <... setpgid resumed>) = 0 [pid 5353] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5356 [pid 5002] rmdir("./26/file0" [pid 4999] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5356 attached [pid 5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5354] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5356] chdir("./29" [pid 5354] close(3 [pid 5356] <... chdir resumed>) = 0 [pid 5356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5354] <... close resumed>) = 0 [pid 5356] <... prctl resumed>) = 0 [pid 5356] setpgid(0, 0 [pid 5354] mkdir("./file0", 0777 [pid 5356] <... setpgid resumed>) = 0 [pid 5356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5354] <... mkdir resumed>) = 0 [pid 5356] <... openat resumed>) = 3 [pid 5356] write(3, "1000", 4 [pid 5354] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5356] <... write resumed>) = 4 [pid 5356] close(3 [pid 5355] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5356] <... close resumed>) = 0 [pid 5355] write(3, "1000", 4 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5356] symlink("/dev/binderfs", "./binderfs" [pid 5355] <... write resumed>) = 4 [pid 4999] close(3 [pid 5002] close(3 [pid 5356] <... symlink resumed>) = 0 [pid 5356] memfd_create("syzkaller", 0) = 3 [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 58.845535][ T5353] loop0: detected capacity change from 0 to 4096 [ 58.850483][ T5354] loop3: detected capacity change from 0 to 4096 [ 58.863096][ T5353] NILFS (loop0): invalid segment: Checksum error in segment payload [ 58.871436][ T5353] NILFS (loop0): trying rollback from an earlier position [ 58.887527][ T5354] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5355] close(3 [pid 5002] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5355] <... close resumed>) = 0 [pid 5002] rmdir("./26" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... rmdir resumed>) = 0 [pid 5355] symlink("/dev/binderfs", "./binderfs" [pid 5002] mkdir("./27", 0777 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5357 [pid 5355] <... symlink resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5355] memfd_create("syzkaller", 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5355] <... memfd_create resumed>) = 3 [pid 5355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... openat resumed>) = 3 [pid 5355] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5356] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5357 attached [pid 5357] chdir("./29") = 0 [pid 5357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5357] <... prctl resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5357] setpgid(0, 0) = 0 [pid 5357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 58.896435][ T5354] NILFS (loop3): trying rollback from an earlier position [ 58.905008][ T5353] NILFS (loop0): recovery complete [pid 5357] write(3, "1000", 4) = 4 [pid 5357] close(3) = 0 [pid 5357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5357] memfd_create("syzkaller", 0) = 3 [pid 5357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5359 ./strace-static-x86_64: Process 5359 attached [pid 5357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5356] munmap(0x7f5db7f12000, 2097152 [pid 5355] <... write resumed>) = 2097152 [pid 5353] <... mount resumed>) = 0 [pid 5359] chdir("./27" [pid 5356] <... munmap resumed>) = 0 [pid 5355] munmap(0x7f5db7f12000, 2097152 [pid 5353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5359] <... chdir resumed>) = 0 [pid 5356] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5355] <... munmap resumed>) = 0 [pid 5353] <... openat resumed>) = 3 [pid 5359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5356] <... openat resumed>) = 4 [pid 5355] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5353] chdir("./file0" [pid 5359] <... prctl resumed>) = 0 [pid 5356] ioctl(4, LOOP_SET_FD, 3 [pid 5355] <... openat resumed>) = 4 [pid 5353] <... chdir resumed>) = 0 [pid 5359] setpgid(0, 0 [pid 5355] ioctl(4, LOOP_SET_FD, 3 [pid 5353] ioctl(4, LOOP_CLR_FD [pid 5359] <... setpgid resumed>) = 0 [pid 5357] <... write resumed>) = 2097152 [pid 5356] <... ioctl resumed>) = 0 [pid 5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5359] write(3, "1000", 4) = 4 [pid 5359] close(3) = 0 [pid 5359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5359] memfd_create("syzkaller", 0) = 3 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5357] munmap(0x7f5db7f12000, 2097152 [pid 5356] close(3 [pid 5355] <... ioctl resumed>) = 0 [pid 5353] <... ioctl resumed>) = 0 [pid 5353] close(4) = 0 [pid 5357] <... munmap resumed>) = 0 [pid 5353] creat("./bus", 000 [pid 5357] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5355] close(3 [pid 5357] <... openat resumed>) = 4 [pid 5355] <... close resumed>) = 0 [pid 5357] ioctl(4, LOOP_SET_FD, 3 [ 58.938203][ T5354] NILFS (loop3): recovery complete [ 58.944806][ T5358] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.959036][ T5356] loop5: detected capacity change from 0 to 4096 [ 58.966070][ T5355] loop2: detected capacity change from 0 to 4096 [ 58.976506][ T5360] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5355] mkdir("./file0", 0777) = 0 [pid 5354] <... mount resumed>) = 0 [pid 5355] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5354] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5356] <... close resumed>) = 0 [pid 5354] chdir("./file0" [pid 5353] <... creat resumed>) = 4 [pid 5354] <... chdir resumed>) = 0 [pid 5354] ioctl(4, LOOP_CLR_FD [pid 5353] open("./bus", O_RDONLY [pid 5354] <... ioctl resumed>) = 0 [pid 5356] mkdir("./file0", 0777 [pid 5354] close(4 [pid 5353] <... open resumed>) = 5 [pid 5354] <... close resumed>) = 0 [pid 5353] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5356] <... mkdir resumed>) = 0 [pid 5354] creat("./bus", 000 [pid 5353] <... open resumed>) = 6 [pid 5356] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5353] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5357] <... ioctl resumed>) = 0 [pid 5357] close(3) = 0 [pid 5357] mkdir("./file0", 0777 [pid 5353] <... write resumed>) = 32 [pid 5353] unlink("./bus" [pid 5357] <... mkdir resumed>) = 0 [pid 5357] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5353] <... unlink resumed>) = 0 [pid 5353] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5353] exit_group(0) = ? [pid 5353] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./29/binderfs") = 0 [ 58.978441][ T5357] loop1: detected capacity change from 0 to 4096 [ 58.999755][ T5355] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] <... creat resumed>) = 4 [pid 5354] open("./bus", O_RDONLY) = 5 [pid 5354] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5354] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5354] unlink("./bus") = 0 [pid 5354] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5354] exit_group(0) = ? [pid 5354] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5354, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 59.033941][ T5356] NILFS (loop5): invalid segment: Checksum error in segment payload [ 59.042769][ T5355] NILFS (loop2): trying rollback from an earlier position [ 59.051736][ T5357] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5359] <... write resumed>) = 2097152 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./30/binderfs") = 0 [pid 5001] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] munmap(0x7f5db7f12000, 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 5359] <... munmap resumed>) = 0 [pid 5359] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5359] ioctl(4, LOOP_SET_FD, 3 [pid 4998] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./29/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./29") = 0 [pid 4998] mkdir("./30", 0777) = 0 [pid 5359] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5359] close(3 [pid 4998] <... openat resumed>) = 3 [pid 5359] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./30/file0") = 0 [pid 5001] getdents64(3, [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [ 59.080451][ T5356] NILFS (loop5): trying rollback from an earlier position [ 59.087819][ T5357] NILFS (loop1): trying rollback from an earlier position [ 59.104926][ T5359] loop4: detected capacity change from 0 to 4096 [ 59.112655][ T5356] NILFS (loop5): recovery complete [ 59.114173][ T5355] NILFS (loop2): recovery complete [ 59.128908][ T5357] NILFS (loop1): recovery complete [pid 5001] close(3 [pid 5359] mkdir("./file0", 0777 [pid 5356] <... mount resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5359] <... mkdir resumed>) = 0 [pid 5356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] close(3 [pid 5359] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5356] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5356] chdir("./file0" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5356] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5363 attached [pid 5356] ioctl(4, LOOP_CLR_FD [pid 5001] rmdir("./30" [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5363 [pid 5363] chdir("./30" [pid 5001] <... rmdir resumed>) = 0 [pid 5363] <... chdir resumed>) = 0 [pid 5001] mkdir("./31", 0777 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... mkdir resumed>) = 0 [pid 5363] <... prctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5363] setpgid(0, 0 [pid 5001] <... openat resumed>) = 3 [pid 5363] <... setpgid resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5363] <... openat resumed>) = 3 [ 59.134781][ T5361] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.147368][ T5359] NILFS (loop4): invalid segment: Checksum error in segment payload [ 59.164904][ T5362] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] close(3 [pid 5363] write(3, "1000", 4 [pid 5356] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5363] <... write resumed>) = 4 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5363] close(3) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5365 [pid 5363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5363] memfd_create("syzkaller", 0) = 3 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5357] <... mount resumed>) = 0 [pid 5356] close(4 [pid 5355] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5365 attached [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5356] <... close resumed>) = 0 [pid 5355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5365] chdir("./31" [pid 5357] <... openat resumed>) = 3 [pid 5356] creat("./bus", 000 [pid 5355] <... openat resumed>) = 3 [pid 5365] <... chdir resumed>) = 0 [pid 5357] chdir("./file0" [pid 5365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5357] <... chdir resumed>) = 0 [pid 5355] chdir("./file0" [pid 5365] <... prctl resumed>) = 0 [pid 5357] ioctl(4, LOOP_CLR_FD [pid 5355] <... chdir resumed>) = 0 [pid 5365] setpgid(0, 0 [pid 5357] <... ioctl resumed>) = 0 [pid 5355] ioctl(4, LOOP_CLR_FD [pid 5365] <... setpgid resumed>) = 0 [pid 5357] close(4 [pid 5356] <... creat resumed>) = 4 [pid 5355] <... ioctl resumed>) = 0 [pid 5365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5357] <... close resumed>) = 0 [pid 5356] open("./bus", O_RDONLY [pid 5355] close(4 [pid 5365] <... openat resumed>) = 3 [pid 5357] creat("./bus", 000 [pid 5356] <... open resumed>) = 5 [pid 5355] <... close resumed>) = 0 [pid 5365] write(3, "1000", 4 [pid 5357] <... creat resumed>) = 4 [pid 5356] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5355] creat("./bus", 000 [pid 5365] <... write resumed>) = 4 [pid 5357] open("./bus", O_RDONLY [pid 5356] <... open resumed>) = 6 [pid 5365] close(3 [pid 5357] <... open resumed>) = 5 [pid 5356] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5365] <... close resumed>) = 0 [pid 5357] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5365] symlink("/dev/binderfs", "./binderfs" [pid 5357] <... open resumed>) = 6 [pid 5365] <... symlink resumed>) = 0 [pid 5357] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5365] memfd_create("syzkaller", 0 [pid 5357] <... write resumed>) = 32 [pid 5365] <... memfd_create resumed>) = 3 [pid 5357] unlink("./bus" [pid 5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5357] <... unlink resumed>) = 0 [ 59.165683][ T5364] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.187765][ T5359] NILFS (loop4): trying rollback from an earlier position [ 59.206464][ T5359] NILFS (loop4): recovery complete [ 59.218927][ T27] kauditd_printk_skb: 102 callbacks suppressed [pid 5365] <... mmap resumed>) = 0x7f5db7f12000 [pid 5357] sendfile(4, 5, NULL, 145139829833722 [pid 5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5357] <... sendfile resumed>) = 32 [pid 5357] exit_group(0) = ? [pid 5357] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5357, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5356] <... write resumed>) = 32 [pid 4999] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5356] unlink("./bus" [pid 4999] <... openat resumed>) = 3 [pid 5355] <... creat resumed>) = 4 [pid 5356] <... unlink resumed>) = 0 [pid 5355] open("./bus", O_RDONLY [pid 4999] fstat(3, [pid 5356] sendfile(4, 5, NULL, 145139829833722 [pid 5355] <... open resumed>) = 5 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5355] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5356] <... sendfile resumed>) = 32 [pid 5355] <... open resumed>) = 6 [pid 4999] getdents64(3, [pid 5356] exit_group(0 [pid 5355] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5356] <... exit_group resumed>) = ? [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5355] <... write resumed>) = 32 [pid 4999] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5355] unlink("./bus" [pid 5356] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5356, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] lstat("./29/binderfs", [pid 5355] <... unlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5355] sendfile(4, 5, NULL, 145139829833722 [pid 4999] unlink("./29/binderfs" [pid 5003] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5355] <... sendfile resumed>) = 32 [pid 5003] <... openat resumed>) = 3 [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5355] exit_group(0 [pid 5003] fstat(3, [pid 5355] <... exit_group resumed>) = ? [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5355] +++ exited with 0 +++ [pid 5003] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5355, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] unlink("./29/binderfs" [ 59.218997][ T27] audit: type=1804 audit(1684404978.989:350): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.XGE8lx/29/file0/bus" dev="loop5" ino=12 res=1 errno=0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... unlink resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5363] <... write resumed>) = 2097152 [pid 5359] <... mount resumed>) = 0 [pid 5003] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5359] chdir("./file0") = 0 [pid 5359] ioctl(4, LOOP_CLR_FD) = 0 [pid 5359] close(4) = 0 [pid 5359] creat("./bus", 000 [pid 5365] <... write resumed>) = 2097152 [pid 5365] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5365] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5365] ioctl(4, LOOP_SET_FD, 3 [pid 5363] munmap(0x7f5db7f12000, 2097152) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 59.277328][ T5366] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.287291][ T27] audit: type=1804 audit(1684404978.989:351): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.XGE8lx/29/file0/bus" dev="loop5" ino=12 res=1 errno=0 [ 59.305800][ T5365] loop3: detected capacity change from 0 to 4096 [pid 4999] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./29/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./29") = 0 [pid 4999] mkdir("./30", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = 0 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5367 [pid 5363] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] <... creat resumed>) = 4 [pid 5359] open("./bus", O_RDONLY [pid 5363] <... openat resumed>) = 4 [pid 5359] <... open resumed>) = 5 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5359] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5363] ioctl(4, LOOP_SET_FD, 3 [pid 5359] <... open resumed>) = 6 [pid 5000] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5359] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32./strace-static-x86_64: Process 5367 attached [pid 5367] chdir("./30") = 0 [pid 5367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5367] setpgid(0, 0) = 0 [pid 5367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5359] <... write resumed>) = 32 [pid 5359] unlink("./bus") = 0 [pid 5359] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5359] exit_group(0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5359] <... exit_group resumed>) = ? [pid 5359] +++ exited with 0 +++ [pid 5367] <... openat resumed>) = 3 [pid 5367] write(3, "1000", 4) = 4 [pid 5367] close(3) = 0 [pid 5367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5367] memfd_create("syzkaller", 0 [pid 5000] getdents64(3, [pid 5363] <... ioctl resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5359, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5363] close(3 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5367] <... memfd_create resumed>) = 3 [pid 5363] <... close resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5363] mkdir("./file0", 0777 [pid 5000] lstat("./28/binderfs", [pid 5367] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] unlink("./28/binderfs" [pid 5363] <... mkdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5363] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5002] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... unlink resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5365] <... ioctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./27/binderfs" [pid 5365] close(3 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5365] <... close resumed>) = 0 [ 59.320165][ T27] audit: type=1804 audit(1684404978.989:352): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EoL44c/29/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 59.347719][ T5363] loop0: detected capacity change from 0 to 4096 [pid 5365] mkdir("./file0", 0777) = 0 [pid 5365] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] close(4) = 0 [pid 5003] rmdir("./29/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./29") = 0 [pid 5003] mkdir("./30", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [ 59.391119][ T5363] NILFS (loop0): invalid segment: Checksum error in segment payload [ 59.406402][ T5363] NILFS (loop0): trying rollback from an earlier position [ 59.410985][ T5365] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5368 [pid 5002] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 59.455949][ T5363] NILFS (loop0): recovery complete [ 59.462854][ T27] audit: type=1804 audit(1684404978.999:353): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EoL44c/29/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 59.480663][ T5365] NILFS (loop3): trying rollback from an earlier position [pid 5000] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5368 attached [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5368] chdir("./30" [pid 5002] lstat("./27/file0", [pid 5000] lstat("./28/file0", [pid 5368] <... chdir resumed>) = 0 [pid 5367] <... write resumed>) = 2097152 [pid 5367] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5367] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5367] ioctl(4, LOOP_SET_FD, 3 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5368] <... prctl resumed>) = 0 [pid 5363] <... mount resumed>) = 0 [pid 5367] <... ioctl resumed>) = 0 [pid 5367] close(3) = 0 [pid 5367] mkdir("./file0", 0777) = 0 [ 59.486678][ T27] audit: type=1804 audit(1684404979.019:354): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/28/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 59.518377][ T5369] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.525329][ T5367] loop1: detected capacity change from 0 to 4096 [pid 5367] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5368] setpgid(0, 0 [pid 5363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./27/file0") = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./27") = 0 [pid 5002] mkdir("./28", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5368] <... setpgid resumed>) = 0 [pid 5363] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5370 [ 59.535439][ T27] audit: type=1804 audit(1684404979.029:355): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/28/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 59.549624][ T5367] NILFS (loop1): invalid segment: Checksum error in segment payload [ 59.559631][ T27] audit: type=1804 audit(1684404979.119:356): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.vorshp/27/file0/bus" dev="loop4" ino=12 res=1 errno=0 ./strace-static-x86_64: Process 5370 attached [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5363] chdir("./file0" [pid 5000] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5370] chdir("./28" [pid 5368] <... openat resumed>) = 3 [pid 5363] <... chdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5370] <... chdir resumed>) = 0 [pid 5368] write(3, "1000", 4 [pid 5363] ioctl(4, LOOP_CLR_FD [pid 5000] fstat(4, [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5368] <... write resumed>) = 4 [pid 5363] <... ioctl resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5370] <... prctl resumed>) = 0 [pid 5368] close(3 [pid 5363] close(4 [pid 5000] getdents64(4, [pid 5370] setpgid(0, 0 [pid 5368] <... close resumed>) = 0 [pid 5363] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5370] <... setpgid resumed>) = 0 [pid 5368] symlink("/dev/binderfs", "./binderfs" [pid 5363] creat("./bus", 000 [pid 5000] getdents64(4, [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5368] <... symlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5370] <... openat resumed>) = 3 [pid 5368] memfd_create("syzkaller", 0 [pid 5000] close(4 [pid 5370] write(3, "1000", 4 [pid 5368] <... memfd_create resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5370] <... write resumed>) = 4 [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] rmdir("./28/file0" [pid 5370] close(3 [pid 5368] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... rmdir resumed>) = 0 [pid 5370] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 5370] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5370] <... symlink resumed>) = 0 [pid 5000] close(3 [pid 5370] memfd_create("syzkaller", 0 [pid 5000] <... close resumed>) = 0 [pid 5370] <... memfd_create resumed>) = 3 [pid 5000] rmdir("./28" [pid 5370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5370] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] mkdir("./29", 0777) = 0 [pid 5363] <... creat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5363] open("./bus", O_RDONLY [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5363] <... open resumed>) = 5 [pid 5000] close(3 [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5363] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... close resumed>) = 0 [ 59.590633][ T27] audit: type=1804 audit(1684404979.119:357): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.vorshp/27/file0/bus" dev="loop4" ino=12 res=1 errno=0 [ 59.604677][ T5367] NILFS (loop1): trying rollback from an earlier position [ 59.629169][ T5365] NILFS (loop3): recovery complete [pid 5363] <... open resumed>) = 6 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5372 [pid 5363] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5365] <... mount resumed>) = 0 [pid 5370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5363] <... write resumed>) = 32 [ 59.644758][ T27] audit: type=1804 audit(1684404979.409:358): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.aQJbv6/30/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 59.665105][ T5367] NILFS (loop1): recovery complete [ 59.676111][ T5371] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5372 attached [pid 5365] <... openat resumed>) = 3 [pid 5363] unlink("./bus" [pid 5372] chdir("./29" [pid 5365] chdir("./file0" [pid 5372] <... chdir resumed>) = 0 [pid 5370] <... write resumed>) = 2097152 [pid 5367] <... mount resumed>) = 0 [pid 5365] <... chdir resumed>) = 0 [pid 5367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5367] chdir("./file0") = 0 [pid 5367] ioctl(4, LOOP_CLR_FD) = 0 [pid 5367] close(4) = 0 [pid 5372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5367] creat("./bus", 000 [pid 5365] ioctl(4, LOOP_CLR_FD [pid 5363] <... unlink resumed>) = 0 [pid 5365] <... ioctl resumed>) = 0 [pid 5372] <... prctl resumed>) = 0 [pid 5363] sendfile(4, 5, NULL, 145139829833722 [pid 5365] close(4 [pid 5372] setpgid(0, 0 [pid 5370] munmap(0x7f5db7f12000, 2097152 [pid 5368] <... write resumed>) = 2097152 [pid 5365] <... close resumed>) = 0 [pid 5363] <... sendfile resumed>) = 32 [pid 5363] exit_group(0) = ? [pid 5372] <... setpgid resumed>) = 0 [pid 5370] <... munmap resumed>) = 0 [pid 5368] munmap(0x7f5db7f12000, 2097152 [pid 5367] <... creat resumed>) = 4 [pid 5365] creat("./bus", 000 [pid 5372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5367] open("./bus", O_RDONLY [pid 5363] +++ exited with 0 +++ [pid 5368] <... munmap resumed>) = 0 [pid 5367] <... open resumed>) = 5 [pid 5367] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5372] <... openat resumed>) = 3 [pid 5367] <... open resumed>) = 6 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5367] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5372] write(3, "1000", 4 [pid 5370] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5368] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5372] <... write resumed>) = 4 [pid 5365] <... creat resumed>) = 4 [pid 5370] <... openat resumed>) = 4 [pid 5367] <... write resumed>) = 32 [pid 5367] unlink("./bus" [pid 5372] close(3 [pid 4998] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5372] <... close resumed>) = 0 [pid 5370] ioctl(4, LOOP_SET_FD, 3 [pid 5368] <... openat resumed>) = 4 [pid 5365] open("./bus", O_RDONLY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5372] symlink("/dev/binderfs", "./binderfs" [pid 5365] <... open resumed>) = 5 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./30/binderfs") = 0 [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 59.687903][ T27] audit: type=1804 audit(1684404979.409:359): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.aQJbv6/30/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 59.712038][ T5373] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.746969][ T5370] loop4: detected capacity change from 0 to 4096 [pid 5368] ioctl(4, LOOP_SET_FD, 3 [pid 5372] <... symlink resumed>) = 0 [pid 5370] <... ioctl resumed>) = 0 [pid 5365] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5372] memfd_create("syzkaller", 0 [pid 5370] close(3 [pid 5365] <... open resumed>) = 6 [pid 5372] <... memfd_create resumed>) = 3 [pid 5370] <... close resumed>) = 0 [pid 5365] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5370] mkdir("./file0", 0777 [pid 5367] <... unlink resumed>) = 0 [pid 5372] <... mmap resumed>) = 0x7f5db7f12000 [pid 5365] <... write resumed>) = 32 [pid 5372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5370] <... mkdir resumed>) = 0 [pid 5367] sendfile(4, 5, NULL, 145139829833722 [pid 5365] unlink("./bus" [pid 5370] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5367] <... sendfile resumed>) = 32 [pid 5365] <... unlink resumed>) = 0 [pid 5367] exit_group(0 [pid 5365] sendfile(4, 5, NULL, 145139829833722 [pid 5367] <... exit_group resumed>) = ? [pid 5365] <... sendfile resumed>) = 32 [pid 5365] exit_group(0) = ? [pid 5367] +++ exited with 0 +++ [pid 5365] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5365, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5367, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4999] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 4999] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] getdents64(3, [pid 5368] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = 0 [pid 5368] close(3 [pid 5001] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] mkdir("./file0", 0777 [pid 5001] lstat("./31/binderfs", [ 59.751268][ T5368] loop5: detected capacity change from 0 to 4096 [pid 4999] lstat("./30/binderfs", [pid 5372] <... write resumed>) = 2097152 [pid 5368] <... mkdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5368] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] unlink("./31/binderfs" [pid 4999] unlink("./30/binderfs" [pid 4998] lstat("./30/file0", [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./30/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./30") = 0 [pid 4998] mkdir("./31", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5374 ./strace-static-x86_64: Process 5374 attached [pid 5374] chdir("./31") = 0 [pid 5374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5374] setpgid(0, 0) = 0 [pid 5374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5374] write(3, "1000", 4) = 4 [pid 4999] <... umount2 resumed>) = 0 [pid 5374] close(3) = 0 [ 59.796952][ T5370] NILFS (loop4): invalid segment: Checksum error in segment payload [ 59.805203][ T5370] NILFS (loop4): trying rollback from an earlier position [pid 5374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5374] memfd_create("syzkaller", 0 [pid 5372] munmap(0x7f5db7f12000, 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5374] <... memfd_create resumed>) = 3 [pid 5372] <... munmap resumed>) = 0 [pid 5001] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./30/file0", [pid 5374] <... mmap resumed>) = 0x7f5db7f12000 [pid 5372] <... openat resumed>) = 4 [pid 5001] lstat("./31/file0", [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5372] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 4 [pid 4999] fstat(4, [pid 5001] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5001] close(4 [pid 4999] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./30/file0" [pid 5001] rmdir("./31/file0" [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5001] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./30" [pid 5001] rmdir("./31" [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] mkdir("./31", 0777 [pid 5001] mkdir("./32", 0777 [pid 4999] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5376 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5377 [pid 5372] <... ioctl resumed>) = 0 [pid 5372] close(3) = 0 [pid 5372] mkdir("./file0", 0777) = 0 [ 59.848697][ T5368] NILFS (loop5): invalid segment: Checksum error in segment payload [ 59.866117][ T5370] NILFS (loop4): recovery complete [ 59.866915][ T5372] loop2: detected capacity change from 0 to 4096 [ 59.871856][ T5368] NILFS (loop5): trying rollback from an earlier position [pid 5372] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5370] <... mount resumed>) = 0 [pid 5370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5370] chdir("./file0") = 0 [pid 5370] ioctl(4, LOOP_CLR_FD) = 0 [pid 5370] close(4./strace-static-x86_64: Process 5376 attached ) = 0 [pid 5370] creat("./bus", 000./strace-static-x86_64: Process 5377 attached [pid 5376] chdir("./31" [pid 5377] chdir("./32" [pid 5376] <... chdir resumed>) = 0 [pid 5377] <... chdir resumed>) = 0 [pid 5376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5376] <... prctl resumed>) = 0 [pid 5377] <... prctl resumed>) = 0 [pid 5376] setpgid(0, 0 [pid 5374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5377] setpgid(0, 0 [pid 5376] <... setpgid resumed>) = 0 [pid 5376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5376] write(3, "1000", 4) = 4 [pid 5376] close(3) = 0 [pid 5376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5377] <... setpgid resumed>) = 0 [pid 5376] memfd_create("syzkaller", 0 [pid 5377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5376] <... memfd_create resumed>) = 3 [pid 5376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 59.897128][ T5375] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.919409][ T5368] NILFS (loop5): recovery complete [ 59.929640][ T5372] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5377] <... openat resumed>) = 3 [pid 5377] write(3, "1000", 4) = 4 [pid 5377] close(3 [pid 5368] <... mount resumed>) = 0 [pid 5377] <... close resumed>) = 0 [pid 5377] symlink("/dev/binderfs", "./binderfs" [pid 5368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5377] <... symlink resumed>) = 0 [pid 5377] memfd_create("syzkaller", 0) = 3 [pid 5368] <... openat resumed>) = 3 [pid 5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5368] chdir("./file0" [pid 5377] <... mmap resumed>) = 0x7f5db7f12000 [pid 5368] <... chdir resumed>) = 0 [pid 5376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5374] <... write resumed>) = 2097152 [pid 5370] <... creat resumed>) = 4 [pid 5368] ioctl(4, LOOP_CLR_FD [pid 5370] open("./bus", O_RDONLY [pid 5368] <... ioctl resumed>) = 0 [pid 5370] <... open resumed>) = 5 [pid 5368] close(4) = 0 [pid 5368] creat("./bus", 000 [pid 5370] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5374] munmap(0x7f5db7f12000, 2097152 [pid 5370] <... open resumed>) = 6 [pid 5370] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5368] <... creat resumed>) = 4 [pid 5370] <... write resumed>) = 32 [pid 5368] open("./bus", O_RDONLY [pid 5370] unlink("./bus" [pid 5368] <... open resumed>) = 5 [pid 5374] <... munmap resumed>) = 0 [pid 5374] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5370] <... unlink resumed>) = 0 [pid 5368] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5370] sendfile(4, 5, NULL, 145139829833722 [pid 5368] <... open resumed>) = 6 [pid 5374] <... openat resumed>) = 4 [pid 5370] <... sendfile resumed>) = 32 [pid 5368] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5374] ioctl(4, LOOP_SET_FD, 3 [pid 5370] exit_group(0) = ? [pid 5370] +++ exited with 0 +++ [pid 5368] <... write resumed>) = 32 [pid 5368] unlink("./bus" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5368] <... unlink resumed>) = 0 [pid 5368] sendfile(4, 5, NULL, 145139829833722 [pid 5002] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5368] <... sendfile resumed>) = 32 [pid 5002] getdents64(3, [pid 5368] exit_group(0) = ? [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./28/binderfs" [pid 5368] +++ exited with 0 +++ [pid 5002] <... unlink resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5368, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5002] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... restart_syscall resumed>) = 0 [pid 5003] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5377] <... write resumed>) = 2097152 [pid 5376] <... write resumed>) = 2097152 [pid 5374] <... ioctl resumed>) = 0 [pid 5003] fstat(3, [pid 5002] <... umount2 resumed>) = 0 [pid 5377] munmap(0x7f5db7f12000, 2097152 [pid 5376] munmap(0x7f5db7f12000, 2097152 [pid 5374] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5377] <... munmap resumed>) = 0 [pid 5376] <... munmap resumed>) = 0 [pid 5374] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5377] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5376] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5374] mkdir("./file0", 0777 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5377] <... openat resumed>) = 4 [pid 5376] <... openat resumed>) = 4 [pid 5374] <... mkdir resumed>) = 0 [pid 5003] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 59.941510][ T5378] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.960846][ T5372] NILFS (loop2): trying rollback from an earlier position [ 59.985487][ T5374] loop0: detected capacity change from 0 to 4096 [pid 5377] ioctl(4, LOOP_SET_FD, 3 [pid 5376] ioctl(4, LOOP_SET_FD, 3 [pid 5374] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5377] <... ioctl resumed>) = 0 [pid 5002] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./28/file0") = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./28") = 0 [pid 5002] mkdir("./29", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5377] close(3 [pid 5376] <... ioctl resumed>) = 0 [pid 5003] lstat("./30/binderfs", [pid 5002] <... close resumed>) = 0 [pid 5377] <... close resumed>) = 0 [pid 5376] close(3 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5377] mkdir("./file0", 0777 [pid 5376] <... close resumed>) = 0 [pid 5003] unlink("./30/binderfs" [pid 5377] <... mkdir resumed>) = 0 [pid 5376] mkdir("./file0", 0777 [pid 5003] <... unlink resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5380 ./strace-static-x86_64: Process 5380 attached [pid 5377] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5372] <... mount resumed>) = 0 [pid 5380] chdir("./29" [pid 5372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5380] <... chdir resumed>) = 0 [pid 5372] <... openat resumed>) = 3 [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5372] chdir("./file0" [pid 5380] <... prctl resumed>) = 0 [pid 5372] <... chdir resumed>) = 0 [pid 5380] setpgid(0, 0 [pid 5372] ioctl(4, LOOP_CLR_FD [pid 5380] <... setpgid resumed>) = 0 [pid 5372] <... ioctl resumed>) = 0 [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5372] close(4 [pid 5380] <... openat resumed>) = 3 [pid 5372] <... close resumed>) = 0 [pid 5003] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] write(3, "1000", 4 [pid 5372] creat("./bus", 000 [pid 5380] <... write resumed>) = 4 [pid 5380] close(3) = 0 [pid 5380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5380] memfd_create("syzkaller", 0) = 3 [pid 5380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5376] <... mkdir resumed>) = 0 [ 60.028449][ T5377] loop3: detected capacity change from 0 to 4096 [ 60.034557][ T5372] NILFS (loop2): recovery complete [ 60.035854][ T5376] loop1: detected capacity change from 0 to 4096 [ 60.055600][ T5379] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.069638][ T5374] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5376] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... umount2 resumed>) = 0 [pid 5380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5372] <... creat resumed>) = 4 [pid 5003] lstat("./30/file0", [pid 5372] open("./bus", O_RDONLY [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5372] <... open resumed>) = 5 [pid 5003] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5372] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... openat resumed>) = 4 [pid 5372] <... open resumed>) = 6 [pid 5003] fstat(4, [pid 5372] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5372] <... write resumed>) = 32 [pid 5003] close(4 [pid 5372] unlink("./bus" [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./30/file0") = 0 [pid 5003] getdents64(3, [pid 5372] <... unlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5372] sendfile(4, 5, NULL, 145139829833722 [pid 5003] close(3) = 0 [pid 5372] <... sendfile resumed>) = 32 [pid 5003] rmdir("./30" [ 60.085711][ T5377] NILFS (loop3): invalid segment: Checksum error in segment payload [ 60.097646][ T5376] NILFS (loop1): invalid segment: Checksum error in segment payload [ 60.100175][ T5377] NILFS (loop3): trying rollback from an earlier position [ 60.105649][ T5376] NILFS (loop1): trying rollback from an earlier position [ 60.113295][ T5374] NILFS (loop0): trying rollback from an earlier position [pid 5372] exit_group(0) = ? [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./31", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5372] +++ exited with 0 +++ [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5372, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] close(3 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5380] <... write resumed>) = 2097152 [pid 5377] <... mount resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5377] chdir("./file0") = 0 [pid 5377] ioctl(4, LOOP_CLR_FD) = 0 [pid 5377] close(4) = 0 [pid 5377] creat("./bus", 000 [pid 5380] munmap(0x7f5db7f12000, 2097152 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5380] <... munmap resumed>) = 0 [pid 5000] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5382 [pid 5380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5380] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 3 [pid 5380] ioctl(4, LOOP_SET_FD, 3 [pid 5000] fstat(3, ./strace-static-x86_64: Process 5382 attached [pid 5380] <... ioctl resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5380] close(3 [pid 5000] getdents64(3, [pid 5380] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [ 60.141924][ T5377] NILFS (loop3): recovery complete [ 60.158407][ T5374] NILFS (loop0): recovery complete [ 60.159795][ T5381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.181392][ T5380] loop4: detected capacity change from 0 to 4096 [pid 5380] mkdir("./file0", 0777 [pid 5000] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] chdir("./31" [pid 5380] <... mkdir resumed>) = 0 [pid 5377] <... creat resumed>) = 4 [pid 5374] <... mount resumed>) = 0 [pid 5377] open("./bus", O_RDONLY) = 5 [pid 5374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5377] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5374] <... openat resumed>) = 3 [pid 5377] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5374] chdir("./file0") = 0 [pid 5374] ioctl(4, LOOP_CLR_FD) = 0 [pid 5374] close(4) = 0 [pid 5374] creat("./bus", 000 [pid 5382] <... chdir resumed>) = 0 [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5382] setpgid(0, 0) = 0 [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5382] write(3, "1000", 4) = 4 [pid 5382] close(3) = 0 [pid 5382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5382] memfd_create("syzkaller", 0) = 3 [pid 5382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5380] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5377] <... write resumed>) = 32 [pid 5374] <... creat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5377] unlink("./bus" [pid 5376] <... mount resumed>) = 0 [pid 5374] open("./bus", O_RDONLY [pid 5376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5374] <... open resumed>) = 5 [pid 5000] lstat("./29/binderfs", [pid 5376] <... openat resumed>) = 3 [pid 5377] <... unlink resumed>) = 0 [pid 5374] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5377] sendfile(4, 5, NULL, 145139829833722 [pid 5376] chdir("./file0" [pid 5374] <... open resumed>) = 6 [pid 5376] <... chdir resumed>) = 0 [pid 5374] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5376] ioctl(4, LOOP_CLR_FD) = 0 [pid 5376] close(4) = 0 [pid 5376] creat("./bus", 000 [pid 5000] unlink("./29/binderfs") = 0 [pid 5000] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5377] <... sendfile resumed>) = 32 [ 60.187257][ T5376] NILFS (loop1): recovery complete [ 60.193795][ T5383] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.203415][ T5384] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.224061][ T5380] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5377] exit_group(0 [pid 5374] <... write resumed>) = 32 [pid 5382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5377] <... exit_group resumed>) = ? [pid 5374] unlink("./bus") = 0 [pid 5374] sendfile(4, 5, NULL, 145139829833722 [pid 5377] +++ exited with 0 +++ [pid 5374] <... sendfile resumed>) = 32 [pid 5374] exit_group(0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5377, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5374] <... exit_group resumed>) = ? [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5374] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5374, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] getdents64(3, [pid 5000] <... umount2 resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... restart_syscall resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./32/binderfs") = 0 [pid 5001] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5000] lstat("./29/file0", [pid 4998] fstat(3, [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4998] unlink("./31/binderfs" [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./29/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./29") = 0 [pid 5000] mkdir("./30", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5385 ./strace-static-x86_64: Process 5385 attached [pid 5382] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [ 60.248535][ T5380] NILFS (loop4): trying rollback from an earlier position [pid 5382] munmap(0x7f5db7f12000, 2097152 [pid 5376] <... creat resumed>) = 4 [pid 5376] open("./bus", O_RDONLY) = 5 [pid 5376] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5376] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5376] unlink("./bus" [pid 5385] chdir("./30" [pid 5376] <... unlink resumed>) = 0 [pid 5376] sendfile(4, 5, NULL, 145139829833722 [pid 5385] <... chdir resumed>) = 0 [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5385] setpgid(0, 0) = 0 [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5385] write(3, "1000", 4) = 4 [pid 5376] <... sendfile resumed>) = 32 [pid 5385] close(3 [pid 5376] exit_group(0 [pid 5385] <... close resumed>) = 0 [pid 5376] <... exit_group resumed>) = ? [pid 5385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5385] memfd_create("syzkaller", 0) = 3 [pid 5385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5382] <... munmap resumed>) = 0 [pid 5376] +++ exited with 0 +++ [pid 5382] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5376, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] <... umount2 resumed>) = 0 [pid 5382] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 60.307464][ T5380] NILFS (loop4): recovery complete [pid 5382] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./32/file0", [pid 4999] <... restart_syscall resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5382] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./31/file0", [pid 5382] close(3 [pid 5380] <... mount resumed>) = 0 [pid 5001] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5382] <... close resumed>) = 0 [pid 5380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] mkdir("./file0", 0777 [pid 5380] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5382] <... mkdir resumed>) = 0 [pid 5380] chdir("./file0" [pid 5001] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5382] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5380] <... chdir resumed>) = 0 [pid 5001] fstat(4, [pid 4999] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 4 [pid 5380] ioctl(4, LOOP_CLR_FD [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 4998] fstat(4, [pid 5380] <... ioctl resumed>) = 0 [pid 5001] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5385] <... write resumed>) = 2097152 [pid 5380] close(4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, [pid 4998] getdents64(4, [pid 5385] munmap(0x7f5db7f12000, 2097152 [pid 5380] <... close resumed>) = 0 [pid 5385] <... munmap resumed>) = 0 [pid 5385] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5385] ioctl(4, LOOP_SET_FD, 3 [pid 5380] creat("./bus", 000 [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5385] <... ioctl resumed>) = 0 [pid 5385] close(3) = 0 [pid 5385] mkdir("./file0", 0777 [pid 4999] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 4999] lstat("./31/binderfs", [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(4 [pid 4999] unlink("./31/binderfs" [pid 4998] rmdir("./31/file0" [pid 5001] <... close resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] rmdir("./32/file0" [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5385] <... mkdir resumed>) = 0 [ 60.332586][ T5382] loop5: detected capacity change from 0 to 4096 [ 60.340682][ T5386] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.362111][ T5385] loop2: detected capacity change from 0 to 4096 [ 60.369574][ T5382] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 4998] <... close resumed>) = 0 [pid 5380] <... creat resumed>) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] rmdir("./31" [pid 5380] open("./bus", O_RDONLY [pid 5001] getdents64(3, [pid 4998] <... rmdir resumed>) = 0 [pid 5385] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5380] <... open resumed>) = 5 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] mkdir("./32", 0777 [pid 5380] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5380] <... open resumed>) = 6 [pid 5001] <... close resumed>) = 0 [pid 5380] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] rmdir("./32" [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] mkdir("./33", 0777 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5380] <... write resumed>) = 32 [pid 5380] unlink("./bus" [pid 5001] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 5380] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5380] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... openat resumed>) = 3 [ 60.382474][ T5382] NILFS (loop5): trying rollback from an earlier position [ 60.414641][ T5385] NILFS (loop2): invalid segment: Checksum error in segment payload [ 60.422797][ T5385] NILFS (loop2): trying rollback from an earlier position [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5387 attached [pid 5380] <... sendfile resumed>) = 32 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = 0 [pid 5387] chdir("./32" [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5387 [pid 5387] <... chdir resumed>) = 0 [pid 5380] exit_group(0 [pid 5001] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5380] <... exit_group resumed>) = ? [pid 5380] +++ exited with 0 +++ [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5387] <... prctl resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5380, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] lstat("./31/file0", [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5387] setpgid(0, 0 [pid 5382] <... mount resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5387] <... setpgid resumed>) = 0 [pid 5382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5382] chdir("./file0" [pid 5002] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5382] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5387] <... openat resumed>) = 3 [pid 5382] <... ioctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5389 [pid 4999] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] close(4 [pid 5002] fstat(3, [pid 5382] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5382] creat("./bus", 000 [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./29/binderfs") = 0 [pid 5002] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5389 attached [pid 5387] write(3, "1000", 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5387] <... write resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5389] chdir("./33" [pid 5387] close(3 [pid 4999] <... openat resumed>) = 4 [pid 5385] <... mount resumed>) = 0 [pid 5385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5385] chdir("./file0") = 0 [pid 5385] ioctl(4, LOOP_CLR_FD) = 0 [pid 5385] close(4) = 0 [pid 5385] creat("./bus", 000 [pid 5389] <... chdir resumed>) = 0 [pid 5387] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] fstat(4, [pid 5389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5387] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5387] <... symlink resumed>) = 0 [pid 5389] <... prctl resumed>) = 0 [pid 4999] getdents64(4, [pid 5389] setpgid(0, 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5389] <... setpgid resumed>) = 0 [pid 5387] memfd_create("syzkaller", 0 [pid 4999] getdents64(4, [pid 5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5387] <... memfd_create resumed>) = 3 [pid 5389] <... openat resumed>) = 3 [pid 4999] close(4 [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5389] write(3, "1000", 4 [pid 4999] <... close resumed>) = 0 [pid 5389] <... write resumed>) = 4 [pid 5387] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] rmdir("./31/file0" [pid 5389] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5389] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5389] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5385] <... creat resumed>) = 4 [pid 5385] open("./bus", O_RDONLY [pid 5389] <... symlink resumed>) = 0 [pid 5385] <... open resumed>) = 5 [pid 4999] close(3 [pid 5385] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... close resumed>) = 0 [pid 5389] memfd_create("syzkaller", 0 [pid 5385] <... open resumed>) = 6 [pid 4999] rmdir("./31" [pid 5389] <... memfd_create resumed>) = 3 [pid 5385] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5389] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] mkdir("./32", 0777 [pid 5385] <... write resumed>) = 32 [pid 5385] unlink("./bus") = 0 [pid 5385] sendfile(4, 5, NULL, 145139829833722 [pid 4999] <... mkdir resumed>) = 0 [pid 5385] <... sendfile resumed>) = 32 [pid 5385] exit_group(0) = ? [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5382] <... creat resumed>) = 4 [pid 5382] open("./bus", O_RDONLY [pid 4999] <... close resumed>) = 0 [pid 5382] <... open resumed>) = 5 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5382] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5382] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5391 [pid 5385] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- ./strace-static-x86_64: Process 5391 attached [pid 5000] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5391] chdir("./32" [pid 5000] fstat(3, [pid 5391] <... chdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] getdents64(3, [pid 5391] <... prctl resumed>) = 0 [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5382] <... write resumed>) = 32 [pid 5000] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] unlink("./bus" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5391] setpgid(0, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./30/binderfs", [pid 5391] <... setpgid resumed>) = 0 [ 60.423928][ T5382] NILFS (loop5): recovery complete [ 60.445055][ T5385] NILFS (loop2): recovery complete [ 60.447762][ T5388] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.466314][ T5390] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5391] <... openat resumed>) = 3 [pid 5000] unlink("./30/binderfs" [pid 5391] write(3, "1000", 4) = 4 [pid 5391] close(3) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5391] memfd_create("syzkaller", 0) = 3 [pid 5391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5002] lstat("./29/file0", [pid 5382] <... unlink resumed>) = 0 [pid 5382] sendfile(4, 5, NULL, 145139829833722 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5382] <... sendfile resumed>) = 32 [pid 5002] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] exit_group(0) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5382] +++ exited with 0 +++ [pid 5002] <... openat resumed>) = 4 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5382, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] fstat(4, [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5387] <... write resumed>) = 2097152 [pid 5002] getdents64(4, [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./30/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./30") = 0 [pid 5000] mkdir("./31", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5392 ./strace-static-x86_64: Process 5392 attached [pid 5392] chdir("./31") = 0 [pid 5392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5392] setpgid(0, 0) = 0 [pid 5392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5392] write(3, "1000", 4) = 4 [pid 5392] close(3) = 0 [pid 5392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5392] memfd_create("syzkaller", 0) = 3 [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5003] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 5003] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5387] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... openat resumed>) = 3 [pid 5002] close(4) = 0 [pid 5003] fstat(3, [pid 5002] rmdir("./29/file0" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./31/binderfs", [pid 5002] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] rmdir("./29" [pid 5003] unlink("./31/binderfs" [pid 5002] <... rmdir resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] mkdir("./30", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5393 [pid 5387] <... munmap resumed>) = 0 [pid 5387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5387] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5393 attached [pid 5393] chdir("./30") = 0 [pid 5393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5393] setpgid(0, 0) = 0 [pid 5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5393] write(3, "1000", 4) = 4 [pid 5393] close(3) = 0 [pid 5393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5393] memfd_create("syzkaller", 0) = 3 [pid 5389] <... write resumed>) = 2097152 [pid 5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5389] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... umount2 resumed>) = 0 [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5389] <... munmap resumed>) = 0 [pid 5389] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5003] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5389] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5392] <... write resumed>) = 2097152 [pid 5389] <... ioctl resumed>) = 0 [pid 5387] <... ioctl resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./31/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./31" [pid 5387] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./32", 0777 [pid 5387] <... close resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5387] mkdir("./file0", 0777 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5387] <... mkdir resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5394 [ 60.566157][ T5387] loop0: detected capacity change from 0 to 4096 [ 60.597576][ T5389] loop3: detected capacity change from 0 to 4096 [pid 5387] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, ""./strace-static-x86_64: Process 5394 attached [pid 5394] chdir("./32") = 0 [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5394] setpgid(0, 0) = 0 [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5394] write(3, "1000", 4) = 4 [pid 5394] close(3) = 0 [pid 5394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5394] memfd_create("syzkaller", 0 [pid 5393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5394] <... memfd_create resumed>) = 3 [pid 5394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5391] <... write resumed>) = 2097152 [pid 5389] close(3 [pid 5392] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5392] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5392] ioctl(4, LOOP_SET_FD, 3 [pid 5391] munmap(0x7f5db7f12000, 2097152 [pid 5389] <... close resumed>) = 0 [pid 5391] <... munmap resumed>) = 0 [pid 5389] mkdir("./file0", 0777) = 0 [pid 5389] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5391] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 60.625453][ T5387] NILFS (loop0): invalid segment: Checksum error in segment payload [ 60.646184][ T5387] NILFS (loop0): trying rollback from an earlier position [ 60.652991][ T5392] loop2: detected capacity change from 0 to 4096 [ 60.668277][ T5389] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5391] ioctl(4, LOOP_SET_FD, 3 [pid 5394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5393] <... write resumed>) = 2097152 [pid 5393] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5393] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5392] <... ioctl resumed>) = 0 [pid 5392] close(3) = 0 [pid 5392] mkdir("./file0", 0777 [pid 5393] ioctl(4, LOOP_SET_FD, 3 [pid 5392] <... mkdir resumed>) = 0 [pid 5391] <... ioctl resumed>) = 0 [pid 5392] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5391] close(3) = 0 [pid 5391] mkdir("./file0", 0777) = 0 [pid 5391] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5394] <... write resumed>) = 2097152 [pid 5394] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5393] <... ioctl resumed>) = 0 [ 60.677524][ T5391] loop1: detected capacity change from 0 to 4096 [ 60.686140][ T5387] NILFS (loop0): recovery complete [ 60.690172][ T5393] loop4: detected capacity change from 0 to 4096 [ 60.692634][ T5389] NILFS (loop3): trying rollback from an earlier position [ 60.712782][ T5392] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5393] close(3) = 0 [pid 5393] mkdir("./file0", 0777 [pid 5387] <... mount resumed>) = 0 [pid 5393] <... mkdir resumed>) = 0 [pid 5394] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5394] ioctl(4, LOOP_SET_FD, 3 [pid 5387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5393] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5389] <... mount resumed>) = 0 [pid 5387] <... openat resumed>) = 3 [pid 5394] <... ioctl resumed>) = 0 [pid 5394] close(3) = 0 [pid 5394] mkdir("./file0", 0777) = 0 [pid 5394] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 60.712845][ T5391] NILFS (loop1): invalid segment: Checksum error in segment payload [ 60.729616][ T5395] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.737842][ T5389] NILFS (loop3): recovery complete [ 60.743617][ T5394] loop5: detected capacity change from 0 to 4096 [ 60.746027][ T5391] NILFS (loop1): trying rollback from an earlier position [ 60.753235][ T5392] NILFS (loop2): trying rollback from an earlier position [ 60.760724][ T5396] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5387] chdir("./file0" [pid 5389] <... openat resumed>) = 3 [pid 5387] <... chdir resumed>) = 0 [pid 5389] chdir("./file0" [pid 5387] ioctl(4, LOOP_CLR_FD [pid 5389] <... chdir resumed>) = 0 [pid 5387] <... ioctl resumed>) = 0 [pid 5389] ioctl(4, LOOP_CLR_FD [pid 5387] close(4 [pid 5389] <... ioctl resumed>) = 0 [pid 5387] <... close resumed>) = 0 [pid 5389] close(4 [pid 5387] creat("./bus", 000 [pid 5389] <... close resumed>) = 0 [pid 5389] creat("./bus", 000 [pid 5387] <... creat resumed>) = 4 [pid 5387] open("./bus", O_RDONLY) = 5 [pid 5387] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5387] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5389] <... creat resumed>) = 4 [pid 5387] <... write resumed>) = 32 [pid 5389] open("./bus", O_RDONLY [pid 5387] unlink("./bus" [pid 5389] <... open resumed>) = 5 [pid 5389] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5389] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [ 60.780865][ T5393] NILFS (loop4): invalid segment: Checksum error in segment payload [ 60.782304][ T5391] NILFS (loop1): recovery complete [ 60.790270][ T5393] NILFS (loop4): trying rollback from an earlier position [ 60.805899][ T5392] NILFS (loop2): recovery complete [ 60.815299][ T5394] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5389] unlink("./bus" [pid 5387] <... unlink resumed>) = 0 [pid 5389] <... unlink resumed>) = 0 [pid 5387] sendfile(4, 5, NULL, 145139829833722 [pid 5389] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5389] exit_group(0) = ? [pid 5389] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5389, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5391] <... mount resumed>) = 0 [pid 5387] <... sendfile resumed>) = 32 [pid 5391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5387] exit_group(0 [pid 5001] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5391] <... openat resumed>) = 3 [pid 5387] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5391] chdir("./file0" [pid 5001] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5391] <... chdir resumed>) = 0 [pid 5387] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 5391] ioctl(4, LOOP_CLR_FD [pid 5001] fstat(3, [pid 5391] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5387, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5391] close(4 [pid 5001] getdents64(3, [pid 4998] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5391] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] <... mount resumed>) = 0 [pid 5391] creat("./bus", 000 [pid 5001] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 3 [pid 5392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] lstat("./33/binderfs", [pid 4998] fstat(3, [pid 5392] <... openat resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] unlink("./33/binderfs" [pid 4998] getdents64(3, [pid 5392] chdir("./file0" [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5392] <... chdir resumed>) = 0 [pid 5001] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5392] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] <... ioctl resumed>) = 0 [pid 4998] lstat("./32/binderfs", [pid 5392] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5392] <... close resumed>) = 0 [pid 4998] unlink("./32/binderfs" [pid 5392] creat("./bus", 000 [pid 5391] <... creat resumed>) = 4 [pid 4998] <... unlink resumed>) = 0 [pid 5391] open("./bus", O_RDONLY [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5391] <... open resumed>) = 5 [pid 5391] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [ 60.825636][ T5394] NILFS (loop5): trying rollback from an earlier position [ 60.834304][ T5397] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.851864][ T5398] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.857556][ T5393] NILFS (loop4): recovery complete [pid 4998] <... umount2 resumed>) = 0 [pid 5391] <... open resumed>) = 6 [pid 5392] <... creat resumed>) = 4 [pid 5391] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5392] open("./bus", O_RDONLY) = 5 [pid 5392] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5392] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5392] unlink("./bus") = 0 [pid 5392] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5392] exit_group(0) = ? [pid 5001] <... umount2 resumed>) = 0 [pid 5392] +++ exited with 0 +++ [pid 5001] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5392, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5394] <... mount resumed>) = 0 [pid 5391] <... write resumed>) = 32 [pid 5000] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5394] chdir("./file0") = 0 [pid 5394] ioctl(4, LOOP_CLR_FD) = 0 [pid 5394] close(4) = 0 [pid 5394] creat("./bus", 000 [pid 5001] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./32/file0", [pid 5001] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4998] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 4998] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] fstat(4, [pid 5001] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./33/file0" [pid 4998] getdents64(4, [pid 5391] unlink("./bus" [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5393] <... mount resumed>) = 0 [pid 5391] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5391] sendfile(4, 5, NULL, 145139829833722 [pid 5001] close(3 [pid 5000] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 5393] <... openat resumed>) = 3 [pid 5391] <... sendfile resumed>) = 32 [pid 5001] <... close resumed>) = 0 [pid 5000] fstat(3, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5393] chdir("./file0" [pid 5391] exit_group(0 [pid 5001] rmdir("./33" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 5393] <... chdir resumed>) = 0 [pid 5391] <... exit_group resumed>) = ? [pid 5001] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5393] ioctl(4, LOOP_CLR_FD [pid 5001] mkdir("./34", 0777 [pid 4998] rmdir("./32/file0" [pid 5393] <... ioctl resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] getdents64(3, [pid 5001] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... close resumed>) = 0 [pid 5001] close(3 [pid 4998] rmdir("./32" [pid 5393] close(4 [pid 5001] <... close resumed>) = 0 [pid 5000] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 5393] <... close resumed>) = 0 [pid 5391] +++ exited with 0 +++ [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] mkdir("./33", 0777 [pid 5393] creat("./bus", 000 [pid 5000] lstat("./31/binderfs", [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5401 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5391, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] unlink("./31/binderfs" [pid 4999] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 3 [pid 4998] close(3 [pid 4999] fstat(3, [pid 4998] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5402 [pid 4999] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./32/binderfs"./strace-static-x86_64: Process 5401 attached ) = 0 [pid 5401] chdir("./34" [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... chdir resumed>) = 0 [pid 5394] <... creat resumed>) = 4 [pid 5000] <... umount2 resumed>) = 0 [pid 5401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5394] open("./bus", O_RDONLY [pid 5401] <... prctl resumed>) = 0 [pid 5394] <... open resumed>) = 5 [pid 5393] <... creat resumed>) = 4 [pid 5000] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] setpgid(0, 0 [ 60.891598][ T5394] NILFS (loop5): recovery complete [ 60.907647][ T5400] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.920227][ T5399] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5394] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5393] open("./bus", O_RDONLY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = 0 [pid 5401] <... setpgid resumed>) = 0 [pid 5394] <... open resumed>) = 6 ./strace-static-x86_64: Process 5402 attached [pid 5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5394] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5393] <... open resumed>) = 5 [pid 5000] lstat("./31/file0", [pid 5402] chdir("./33" [pid 5401] <... openat resumed>) = 3 [pid 5402] <... chdir resumed>) = 0 [pid 5401] write(3, "1000", 4 [pid 5402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5401] <... write resumed>) = 4 [pid 5402] <... prctl resumed>) = 0 [pid 5401] close(3 [pid 5394] <... write resumed>) = 32 [pid 5393] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5402] setpgid(0, 0 [pid 5401] <... close resumed>) = 0 [pid 5394] unlink("./bus" [pid 5393] <... open resumed>) = 6 [pid 5000] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] <... setpgid resumed>) = 0 [pid 5401] symlink("/dev/binderfs", "./binderfs" [pid 5402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5401] <... symlink resumed>) = 0 [pid 5394] <... unlink resumed>) = 0 [pid 5393] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] <... openat resumed>) = 3 [pid 5401] memfd_create("syzkaller", 0 [pid 5394] sendfile(4, 5, NULL, 145139829833722 [pid 5000] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5402] write(3, "1000", 4 [pid 5401] <... memfd_create resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 4999] lstat("./32/file0", [pid 5402] <... write resumed>) = 4 [pid 5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5394] <... sendfile resumed>) = 32 [pid 5393] <... write resumed>) = 32 [pid 5000] fstat(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5402] close(3 [pid 5401] <... mmap resumed>) = 0x7f5db7f12000 [pid 5394] exit_group(0 [pid 5393] unlink("./bus" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5402] <... close resumed>) = 0 [pid 5394] <... exit_group resumed>) = ? [pid 4999] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] symlink("/dev/binderfs", "./binderfs" [pid 5393] <... unlink resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5402] <... symlink resumed>) = 0 [pid 5394] +++ exited with 0 +++ [pid 5393] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5402] memfd_create("syzkaller", 0 [pid 4999] <... openat resumed>) = 4 [pid 5402] <... memfd_create resumed>) = 3 [pid 4999] fstat(4, [pid 5000] getdents64(4, [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5394, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5393] <... sendfile resumed>) = 32 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5402] <... mmap resumed>) = 0x7f5db7f12000 [pid 5393] exit_group(0 [pid 5003] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(4 [pid 4999] getdents64(4, [pid 5393] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./32/file0") = 0 [pid 5000] rmdir("./31/file0" [pid 5003] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5393] +++ exited with 0 +++ [pid 5003] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] fstat(3, [pid 5000] getdents64(3, [pid 4999] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5393, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 4999] rmdir("./32") = 0 [pid 4999] mkdir("./33", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] close(3 [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5403 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./31" [pid 5003] lstat("./32/binderfs", [pid 5002] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] unlink("./32/binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] mkdir("./32", 0777 [pid 5003] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... mkdir resumed>) = 0 [pid 5003] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5403 attached [pid 5002] fstat(3, [pid 5403] chdir("./33" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5403] <... chdir resumed>) = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5403] setpgid(0, 0) = 0 [pid 5002] getdents64(3, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5403] <... openat resumed>) = 3 [pid 5002] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5403] write(3, "1000", 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 5403] <... write resumed>) = 4 [pid 5002] lstat("./30/binderfs", [pid 5000] <... close resumed>) = 0 [pid 5403] close(3 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5403] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5403] symlink("/dev/binderfs", "./binderfs" [pid 5002] unlink("./30/binderfs" [pid 5403] <... symlink resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5403] memfd_create("syzkaller", 0 [pid 5002] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5404 [pid 5403] <... memfd_create resumed>) = 3 [pid 5403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5404 attached [pid 5003] <... umount2 resumed>) = 0 [pid 5404] chdir("./32" [pid 5003] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5404] <... chdir resumed>) = 0 [pid 5003] lstat("./32/file0", [pid 5404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5404] <... prctl resumed>) = 0 [pid 5003] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] setpgid(0, 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] <... setpgid resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... openat resumed>) = 4 [pid 5404] <... openat resumed>) = 3 [pid 5003] fstat(4, [pid 5404] write(3, "1000", 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5404] <... write resumed>) = 4 [pid 5003] getdents64(4, [pid 5404] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... umount2 resumed>) = 0 [pid 5404] <... close resumed>) = 0 [pid 5003] getdents64(4, [pid 5404] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5404] <... symlink resumed>) = 0 [pid 5003] close(4 [pid 5404] memfd_create("syzkaller", 0 [pid 5003] <... close resumed>) = 0 [pid 5404] <... memfd_create resumed>) = 3 [pid 5003] rmdir("./32/file0" [pid 5002] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5401] <... write resumed>) = 2097152 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] getdents64(3, [pid 5002] lstat("./30/file0", [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./32" [pid 5401] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./33", 0777 [pid 5402] <... write resumed>) = 2097152 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5401] <... munmap resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5401] <... openat resumed>) = 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] ioctl(4, LOOP_SET_FD, 3 [pid 5003] close(3 [pid 5002] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5402] munmap(0x7f5db7f12000, 2097152 [pid 5003] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] fstat(4, [pid 5401] <... ioctl resumed>) = 0 [pid 5401] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5405 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./30/file0" [pid 5401] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5402] <... munmap resumed>) = 0 [pid 5403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] rmdir("./30" [pid 5402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5402] ioctl(4, LOOP_SET_FD, 3 [pid 5002] mkdir("./31", 0777 [pid 5401] mkdir("./file0", 0777 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5401] <... mkdir resumed>) = 0 [pid 5401] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, ""./strace-static-x86_64: Process 5405 attached [pid 5405] chdir("./33" [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5405] <... chdir resumed>) = 0 [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5405] setpgid(0, 0) = 0 [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] <... close resumed>) = 0 [pid 5405] write(3, "1000", 4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5405] <... write resumed>) = 4 [pid 5405] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5406 [pid 5405] <... close resumed>) = 0 [pid 5405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5405] memfd_create("syzkaller", 0) = 3 [pid 5405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5404] <... write resumed>) = 2097152 [ 61.096912][ T5401] loop3: detected capacity change from 0 to 4096 [ 61.111530][ T5402] loop0: detected capacity change from 0 to 4096 [ 61.136116][ T5401] NILFS (loop3): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5406 attached [pid 5405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5404] munmap(0x7f5db7f12000, 2097152 [pid 5403] <... write resumed>) = 2097152 [pid 5402] <... ioctl resumed>) = 0 [pid 5406] chdir("./31" [pid 5404] <... munmap resumed>) = 0 [pid 5403] munmap(0x7f5db7f12000, 2097152 [pid 5402] close(3) = 0 [pid 5403] <... munmap resumed>) = 0 [pid 5402] mkdir("./file0", 0777 [pid 5406] <... chdir resumed>) = 0 [pid 5402] <... mkdir resumed>) = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5402] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5406] <... prctl resumed>) = 0 [pid 5404] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5403] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5406] setpgid(0, 0 [pid 5404] <... openat resumed>) = 4 [pid 5406] <... setpgid resumed>) = 0 [pid 5403] <... openat resumed>) = 4 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5404] ioctl(4, LOOP_SET_FD, 3 [pid 5403] ioctl(4, LOOP_SET_FD, 3 [pid 5406] <... openat resumed>) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3 [pid 5403] <... ioctl resumed>) = 0 [pid 5405] <... write resumed>) = 2097152 [pid 5406] <... close resumed>) = 0 [pid 5403] close(3 [pid 5406] symlink("/dev/binderfs", "./binderfs" [pid 5403] <... close resumed>) = 0 [pid 5406] <... symlink resumed>) = 0 [pid 5403] mkdir("./file0", 0777) = 0 [pid 5406] memfd_create("syzkaller", 0 [pid 5403] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5406] <... memfd_create resumed>) = 3 [pid 5404] <... ioctl resumed>) = 0 [pid 5406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5404] close(3) = 0 [pid 5404] mkdir("./file0", 0777 [pid 5405] munmap(0x7f5db7f12000, 2097152 [pid 5406] <... mmap resumed>) = 0x7f5db7f12000 [ 61.151578][ T5401] NILFS (loop3): trying rollback from an earlier position [ 61.165521][ T5403] loop1: detected capacity change from 0 to 4096 [ 61.166479][ T5404] loop2: detected capacity change from 0 to 4096 [ 61.175612][ T5402] NILFS (loop0): invalid segment: Checksum error in segment payload [ 61.188321][ T5402] NILFS (loop0): trying rollback from an earlier position [pid 5405] <... munmap resumed>) = 0 [pid 5404] <... mkdir resumed>) = 0 [pid 5404] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5405] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5405] close(3) = 0 [pid 5405] mkdir("./file0", 0777) = 0 [pid 5405] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5401] <... mount resumed>) = 0 [pid 5401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 61.202403][ T5401] NILFS (loop3): recovery complete [ 61.206439][ T5403] NILFS (loop1): invalid segment: Checksum error in segment payload [ 61.215833][ T5405] loop5: detected capacity change from 0 to 4096 [ 61.233010][ T5407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.236887][ T5404] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5401] <... openat resumed>) = 3 [pid 5401] chdir("./file0") = 0 [pid 5401] ioctl(4, LOOP_CLR_FD) = 0 [pid 5401] close(4) = 0 [pid 5401] creat("./bus", 000 [pid 5406] <... write resumed>) = 2097152 [pid 5406] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5406] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 61.244119][ T5403] NILFS (loop1): trying rollback from an earlier position [ 61.265662][ T5402] NILFS (loop0): recovery complete [ 61.272668][ T5405] NILFS (loop5): invalid segment: Checksum error in segment payload [ 61.280629][ T5404] NILFS (loop2): trying rollback from an earlier position [ 61.283226][ T5405] NILFS (loop5): trying rollback from an earlier position [ 61.294203][ T5406] loop4: detected capacity change from 0 to 4096 [pid 5406] ioctl(4, LOOP_SET_FD, 3 [pid 5401] <... creat resumed>) = 4 [pid 5406] <... ioctl resumed>) = 0 [pid 5402] <... mount resumed>) = 0 [pid 5401] open("./bus", O_RDONLY [pid 5402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5401] <... open resumed>) = 5 [pid 5402] <... openat resumed>) = 3 [pid 5401] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5402] chdir("./file0" [pid 5401] <... open resumed>) = 6 [pid 5402] <... chdir resumed>) = 0 [pid 5401] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5402] ioctl(4, LOOP_CLR_FD) = 0 [pid 5402] close(4) = 0 [pid 5402] creat("./bus", 000 [pid 5401] <... write resumed>) = 32 [pid 5401] unlink("./bus" [pid 5406] close(3 [pid 5401] <... unlink resumed>) = 0 [pid 5406] <... close resumed>) = 0 [pid 5401] sendfile(4, 5, NULL, 145139829833722 [pid 5406] mkdir("./file0", 0777 [pid 5403] <... mount resumed>) = 0 [pid 5401] <... sendfile resumed>) = 32 [pid 5406] <... mkdir resumed>) = 0 [pid 5403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 61.303842][ T5405] NILFS (loop5): recovery complete [ 61.305103][ T5408] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.320515][ T5403] NILFS (loop1): recovery complete [ 61.327121][ T5404] NILFS (loop2): recovery complete [ 61.336143][ T5411] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5401] exit_group(0) = ? [pid 5403] <... openat resumed>) = 3 [pid 5406] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5403] chdir("./file0" [pid 5405] <... mount resumed>) = 0 [pid 5404] <... mount resumed>) = 0 [pid 5403] <... chdir resumed>) = 0 [pid 5402] <... creat resumed>) = 4 [pid 5401] +++ exited with 0 +++ [pid 5405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5402] open("./bus", O_RDONLY [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5405] <... openat resumed>) = 3 [pid 5402] <... open resumed>) = 5 [pid 5405] chdir("./file0" [pid 5402] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5405] <... chdir resumed>) = 0 [pid 5402] <... open resumed>) = 6 [pid 5405] ioctl(4, LOOP_CLR_FD [pid 5402] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5405] <... ioctl resumed>) = 0 [pid 5405] close(4) = 0 [pid 5404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5403] ioctl(4, LOOP_CLR_FD [pid 5405] creat("./bus", 000 [pid 5001] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] <... openat resumed>) = 3 [pid 5403] <... ioctl resumed>) = 0 [pid 5402] <... write resumed>) = 32 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5402] unlink("./bus" [pid 5001] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] chdir("./file0" [pid 5403] close(4 [pid 5001] <... openat resumed>) = 3 [pid 5405] <... creat resumed>) = 4 [pid 5404] <... chdir resumed>) = 0 [pid 5403] <... close resumed>) = 0 [pid 5402] <... unlink resumed>) = 0 [pid 5001] fstat(3, [pid 5405] open("./bus", O_RDONLY [pid 5404] ioctl(4, LOOP_CLR_FD [pid 5403] creat("./bus", 000 [pid 5402] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5405] <... open resumed>) = 5 [pid 5404] <... ioctl resumed>) = 0 [pid 5001] getdents64(3, [pid 5405] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5404] close(4 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5402] <... sendfile resumed>) = 32 [pid 5405] <... open resumed>) = 6 [pid 5403] <... creat resumed>) = 4 [pid 5402] exit_group(0 [pid 5001] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5404] <... close resumed>) = 0 [pid 5403] open("./bus", O_RDONLY [pid 5402] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5405] <... write resumed>) = 32 [pid 5404] creat("./bus", 000 [pid 5403] <... open resumed>) = 5 [pid 5405] unlink("./bus" [pid 5403] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] lstat("./34/binderfs", [pid 5405] <... unlink resumed>) = 0 [pid 5404] <... creat resumed>) = 4 [pid 5403] <... open resumed>) = 6 [pid 5402] +++ exited with 0 +++ [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5402, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 61.349775][ T5410] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.361329][ T5409] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.364719][ T5406] NILFS (loop4): invalid segment: Checksum error in segment payload [ 61.380943][ T5406] NILFS (loop4): trying rollback from an earlier position [pid 5405] sendfile(4, 5, NULL, 145139829833722 [pid 5404] open("./bus", O_RDONLY [pid 5403] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] unlink("./34/binderfs" [pid 5404] <... open resumed>) = 5 [pid 5403] <... write resumed>) = 32 [pid 5405] <... sendfile resumed>) = 32 [pid 5404] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5403] unlink("./bus" [pid 5001] <... unlink resumed>) = 0 [pid 5405] exit_group(0 [pid 5404] <... open resumed>) = 6 [pid 5403] <... unlink resumed>) = 0 [pid 5001] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... exit_group resumed>) = ? [pid 5404] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5403] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] <... write resumed>) = 32 [pid 5403] <... sendfile resumed>) = 32 [pid 4998] <... openat resumed>) = 3 [pid 5405] +++ exited with 0 +++ [pid 5404] unlink("./bus" [pid 5403] exit_group(0 [pid 4998] fstat(3, [pid 5404] <... unlink resumed>) = 0 [pid 5403] <... exit_group resumed>) = ? [pid 5404] sendfile(4, 5, NULL, 145139829833722 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5403] +++ exited with 0 +++ [pid 5003] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5404] <... sendfile resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 5404] exit_group(0 [pid 5003] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] <... exit_group resumed>) = ? [pid 5003] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] +++ exited with 0 +++ [pid 5003] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5404, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 61.410379][ T5406] NILFS (loop4): recovery complete [pid 5003] unlink("./33/binderfs" [pid 5406] <... mount resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4998] lstat("./33/binderfs", [pid 5406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5406] chdir("./file0" [pid 5001] lstat("./34/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./33/binderfs" [pid 5406] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5406] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5406] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] close(4 [pid 5001] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5406] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5406] creat("./bus", 000 [pid 5001] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5000] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./33/binderfs", [pid 5406] <... creat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./32/binderfs", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5406] open("./bus", O_RDONLY [pid 5001] getdents64(4, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./33/binderfs" [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] unlink("./32/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] <... unlink resumed>) = 0 [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] <... open resumed>) = 5 [pid 5001] close(4 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./34/file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... rmdir resumed>) = 0 [pid 4999] lstat("./33/file0", [pid 5001] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] rmdir("./34" [pid 4999] <... openat resumed>) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] fstat(4, [pid 5001] mkdir("./35", 0777 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(4 [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./33/file0" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5413 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./33") = 0 [pid 4999] mkdir("./34", 0777 [pid 5406] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5406] <... open resumed>) = 6 [pid 4999] <... openat resumed>) = 3 [pid 5406] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] ioctl(3, LOOP_CLR_FD) = 0 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5414 [pid 5406] <... write resumed>) = 32 [pid 5406] unlink("./bus"./strace-static-x86_64: Process 5413 attached [pid 5413] chdir("./35") = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5413] setpgid(0, 0) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5406] <... unlink resumed>) = 0 [pid 5413] <... openat resumed>) = 3 [pid 5413] write(3, "1000", 4) = 4 [pid 5413] close(3) = 0 [pid 5413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5406] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5406] exit_group(0 [pid 5413] memfd_create("syzkaller", 0 [pid 5406] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5414 attached [pid 5000] <... umount2 resumed>) = 0 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] chdir("./34" [pid 5000] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5414] <... chdir resumed>) = 0 [pid 5406] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5406, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] lstat("./32/file0", [pid 4998] lstat("./33/file0", [pid 5414] <... prctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 61.440613][ T5412] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5414] setpgid(0, 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5414] <... setpgid resumed>) = 0 [pid 4998] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5414] <... openat resumed>) = 3 [pid 5414] write(3, "1000", 4 [pid 4998] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5414] <... write resumed>) = 4 [pid 4998] <... openat resumed>) = 4 [pid 5414] close(3 [pid 4998] fstat(4, [pid 5414] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5414] symlink("/dev/binderfs", "./binderfs" [pid 4998] getdents64(4, [pid 5414] <... symlink resumed>) = 0 [pid 5413] <... memfd_create resumed>) = 3 [pid 5003] <... umount2 resumed>) = 0 [pid 5000] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 5413] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5414] memfd_create("syzkaller", 0 [pid 5002] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5414] <... memfd_create resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(4, [pid 5002] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] getdents64(4, [pid 4998] close(4 [pid 5414] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] fstat(3, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] close(4 [pid 5002] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./32/file0" [pid 5002] lstat("./31/binderfs", [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] getdents64(3, [pid 5002] unlink("./31/binderfs" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5000] close(3 [pid 5003] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4998] rmdir("./33/file0" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./32" [pid 5003] lstat("./33/file0", [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] mkdir("./33", 0777 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] close(3 [pid 5003] fstat(4, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 5003] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] rmdir("./33" [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5415 [pid 5413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] close(4 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./33/file0") = 0 [pid 4998] mkdir("./34", 0777 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] rmdir("./33" [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./34", 0777 [pid 4998] <... openat resumed>) = 3 [pid 5003] <... mkdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4998] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5415 attached [pid 5003] close(3 [pid 4998] <... close resumed>) = 0 [pid 5415] chdir("./33" [pid 5003] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5415] <... chdir resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5417 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5416 [pid 5415] setpgid(0, 0) = 0 [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5415] write(3, "1000", 4) = 4 [pid 5415] close(3) = 0 [pid 5415] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5415] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5416 attached ) = 3 [pid 5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5416] chdir("./34" [pid 5415] <... mmap resumed>) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5417 attached [pid 5002] <... umount2 resumed>) = 0 [pid 5417] chdir("./34" [pid 5002] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... chdir resumed>) = 0 [pid 5417] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] lstat("./31/file0", [pid 5417] <... prctl resumed>) = 0 [pid 5416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5417] setpgid(0, 0 [pid 5002] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... setpgid resumed>) = 0 [pid 5416] <... prctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5416] setpgid(0, 0 [pid 5414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5417] <... openat resumed>) = 3 [pid 5416] <... setpgid resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5417] write(3, "1000", 4 [pid 5002] fstat(4, [pid 5417] <... write resumed>) = 4 [pid 5416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5417] close(3 [pid 5416] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5417] <... close resumed>) = 0 [pid 5416] write(3, "1000", 4 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5417] symlink("/dev/binderfs", "./binderfs" [pid 5416] <... write resumed>) = 4 [pid 5002] getdents64(4, [pid 5417] <... symlink resumed>) = 0 [pid 5416] close(3 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5417] memfd_create("syzkaller", 0 [pid 5416] <... close resumed>) = 0 [pid 5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] close(4 [pid 5417] <... memfd_create resumed>) = 3 [pid 5416] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... close resumed>) = 0 [pid 5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] rmdir("./31/file0" [pid 5416] <... symlink resumed>) = 0 [pid 5417] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... rmdir resumed>) = 0 [pid 5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5416] memfd_create("syzkaller", 0 [pid 5002] getdents64(3, [pid 5416] <... memfd_create resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] close(3) = 0 [pid 5416] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] rmdir("./31") = 0 [pid 5002] mkdir("./32", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5418 [pid 5413] <... write resumed>) = 2097152 [pid 5413] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5413] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5413] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5418 attached [pid 5416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5418] chdir("./32") = 0 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5418] setpgid(0, 0) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5418] write(3, "1000", 4) = 4 [pid 5418] close(3) = 0 [pid 5415] <... write resumed>) = 2097152 [pid 5418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5418] memfd_create("syzkaller", 0) = 3 [pid 5418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5414] <... write resumed>) = 2097152 [pid 5413] <... ioctl resumed>) = 0 [pid 5413] close(3) = 0 [pid 5413] mkdir("./file0", 0777 [pid 5414] munmap(0x7f5db7f12000, 2097152 [pid 5413] <... mkdir resumed>) = 0 [pid 5413] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5414] <... munmap resumed>) = 0 [pid 5414] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5414] ioctl(4, LOOP_SET_FD, 3 [ 61.597897][ T5413] loop3: detected capacity change from 0 to 4096 [pid 5415] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5415] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5415] ioctl(4, LOOP_SET_FD, 3 [pid 5416] <... write resumed>) = 2097152 [pid 5417] <... write resumed>) = 2097152 [pid 5416] munmap(0x7f5db7f12000, 2097152 [pid 5414] <... ioctl resumed>) = 0 [pid 5417] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5416] <... munmap resumed>) = 0 [pid 5414] close(3 [pid 5416] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5414] <... close resumed>) = 0 [pid 5417] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 61.642641][ T5414] loop1: detected capacity change from 0 to 4096 [ 61.651297][ T5415] loop2: detected capacity change from 0 to 4096 [ 61.658701][ T5413] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5417] ioctl(4, LOOP_SET_FD, 3 [pid 5416] <... openat resumed>) = 4 [pid 5414] mkdir("./file0", 0777 [pid 5416] ioctl(4, LOOP_SET_FD, 3 [pid 5414] <... mkdir resumed>) = 0 [pid 5415] <... ioctl resumed>) = 0 [pid 5415] close(3) = 0 [pid 5415] mkdir("./file0", 0777) = 0 [pid 5415] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5414] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5417] <... ioctl resumed>) = 0 [pid 5417] close(3) = 0 [pid 5417] mkdir("./file0", 0777) = 0 [pid 5418] <... write resumed>) = 2097152 [pid 5417] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5418] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5418] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 61.687980][ T5417] loop5: detected capacity change from 0 to 4096 [ 61.697278][ T5416] loop0: detected capacity change from 0 to 4096 [ 61.709162][ T5415] NILFS (loop2): invalid segment: Checksum error in segment payload [ 61.719208][ T5413] NILFS (loop3): trying rollback from an earlier position [ 61.724057][ T5414] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5418] ioctl(4, LOOP_SET_FD, 3 [pid 5416] <... ioctl resumed>) = 0 [pid 5416] close(3) = 0 [pid 5416] mkdir("./file0", 0777) = 0 [pid 5416] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5418] <... ioctl resumed>) = 0 [pid 5418] close(3) = 0 [pid 5418] mkdir("./file0", 0777) = 0 [ 61.733322][ T5418] loop4: detected capacity change from 0 to 4096 [ 61.751450][ T5417] NILFS (loop5): invalid segment: Checksum error in segment payload [ 61.762964][ T5416] NILFS (loop0): invalid segment: Checksum error in segment payload [ 61.765220][ T5415] NILFS (loop2): trying rollback from an earlier position [ 61.772354][ T5414] NILFS (loop1): trying rollback from an earlier position [ 61.780944][ T5417] NILFS (loop5): trying rollback from an earlier position [ 61.793050][ T5416] NILFS (loop0): trying rollback from an earlier position [ 61.794963][ T5413] NILFS (loop3): recovery complete [ 61.808384][ T5418] NILFS (loop4): invalid segment: Checksum error in segment payload [ 61.814912][ T5414] NILFS (loop1): recovery complete [ 61.818385][ T5418] NILFS (loop4): trying rollback from an earlier position [pid 5418] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5414] <... mount resumed>) = 0 [pid 5414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5414] chdir("./file0") = 0 [pid 5414] ioctl(4, LOOP_CLR_FD) = 0 [pid 5414] close(4) = 0 [pid 5413] <... mount resumed>) = 0 [pid 5414] creat("./bus", 000 [pid 5413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5413] chdir("./file0") = 0 [pid 5414] <... creat resumed>) = 4 [pid 5413] ioctl(4, LOOP_CLR_FD [pid 5414] open("./bus", O_RDONLY [pid 5413] <... ioctl resumed>) = 0 [pid 5414] <... open resumed>) = 5 [pid 5413] close(4 [pid 5414] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5413] <... close resumed>) = 0 [pid 5414] <... open resumed>) = 6 [pid 5413] creat("./bus", 000 [pid 5414] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5414] unlink("./bus" [pid 5413] <... creat resumed>) = 4 [pid 5413] open("./bus", O_RDONLY [pid 5414] <... unlink resumed>) = 0 [pid 5413] <... open resumed>) = 5 [ 61.831170][ T5419] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.846309][ T5420] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.847609][ T5415] NILFS (loop2): recovery complete [ 61.862971][ T5417] NILFS (loop5): recovery complete [ 61.872374][ T5418] NILFS (loop4): recovery complete [ 61.882921][ T5416] NILFS (loop0): recovery complete [pid 5414] sendfile(4, 5, NULL, 145139829833722 [pid 5413] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5415] <... mount resumed>) = 0 [pid 5415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5415] chdir("./file0") = 0 [pid 5415] ioctl(4, LOOP_CLR_FD) = 0 [pid 5415] close(4) = 0 [pid 5415] creat("./bus", 000 [pid 5413] <... open resumed>) = 6 [pid 5413] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5417] <... mount resumed>) = 0 [pid 5414] <... sendfile resumed>) = 32 [pid 5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5417] chdir("./file0") = 0 [pid 5417] ioctl(4, LOOP_CLR_FD) = 0 [pid 5417] close(4) = 0 [pid 5417] creat("./bus", 000 [pid 5414] exit_group(0 [pid 5413] <... write resumed>) = 32 [pid 5414] <... exit_group resumed>) = ? [pid 5413] unlink("./bus" [pid 5418] <... mount resumed>) = 0 [pid 5418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5418] chdir("./file0") = 0 [pid 5418] ioctl(4, LOOP_CLR_FD) = 0 [pid 5418] close(4) = 0 [pid 5418] creat("./bus", 000 [pid 5417] <... creat resumed>) = 4 [pid 5417] open("./bus", O_RDONLY) = 5 [pid 5417] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 61.888188][ T5421] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.905693][ T5422] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.919092][ T5423] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5417] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5415] <... creat resumed>) = 4 [pid 5414] +++ exited with 0 +++ [pid 5413] <... unlink resumed>) = 0 [pid 5415] open("./bus", O_RDONLY [pid 5413] sendfile(4, 5, NULL, 145139829833722 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5414, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5415] <... open resumed>) = 5 [pid 5415] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5416] <... mount resumed>) = 0 [pid 5415] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5416] chdir("./file0" [pid 4999] <... openat resumed>) = 3 [pid 5416] <... chdir resumed>) = 0 [pid 5416] ioctl(4, LOOP_CLR_FD [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5416] <... ioctl resumed>) = 0 [pid 4999] getdents64(3, [pid 5416] close(4 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5416] <... close resumed>) = 0 [pid 5416] creat("./bus", 000 [pid 5413] <... sendfile resumed>) = 32 [pid 5418] <... creat resumed>) = 4 [pid 5413] exit_group(0 [pid 5418] open("./bus", O_RDONLY) = 5 [pid 5415] <... write resumed>) = 32 [pid 5413] <... exit_group resumed>) = ? [pid 4999] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5418] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5415] unlink("./bus" [pid 5418] <... open resumed>) = 6 [pid 5418] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5417] <... write resumed>) = 32 [pid 5417] unlink("./bus" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./34/binderfs") = 0 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... unlink resumed>) = 0 [pid 5417] sendfile(4, 5, NULL, 145139829833722 [pid 5415] <... unlink resumed>) = 0 [pid 5415] sendfile(4, 5, NULL, 145139829833722 [pid 5417] <... sendfile resumed>) = 32 [pid 5418] <... write resumed>) = 32 [pid 5417] exit_group(0 [pid 5418] unlink("./bus" [pid 5417] <... exit_group resumed>) = ? [pid 5418] <... unlink resumed>) = 0 [pid 5415] <... sendfile resumed>) = 32 [pid 5413] +++ exited with 0 +++ [pid 5418] sendfile(4, 5, NULL, 145139829833722 [pid 5415] exit_group(0) = ? [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5418] <... sendfile resumed>) = 32 [pid 5415] +++ exited with 0 +++ [pid 5418] exit_group(0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5418] <... exit_group resumed>) = ? [pid 5417] +++ exited with 0 +++ [pid 5000] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5417, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5001] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5001] fstat(3, [pid 5003] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(3, [pid 5001] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5416] <... creat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5416] open("./bus", O_RDONLY [pid 5003] fstat(3, [pid 5001] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... open resumed>) = 5 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5416] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] lstat("./35/binderfs", [pid 5000] lstat("./33/binderfs", [pid 5003] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5416] <... open resumed>) = 6 [pid 5000] unlink("./33/binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 61.929844][ T5424] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] unlink("./35/binderfs" [pid 5418] +++ exited with 0 +++ [pid 5416] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] lstat("./34/binderfs", [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] unlink("./34/binderfs" [pid 5001] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... unlink resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5003] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5416] <... write resumed>) = 32 [pid 5416] unlink("./bus" [pid 5002] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5002] unlink("./32/binderfs") = 0 [pid 5416] <... unlink resumed>) = 0 [pid 5002] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... sendfile resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5416] exit_group(0 [pid 5003] lstat("./34/file0", [pid 5001] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... exit_group resumed>) = ? [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./35/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./34/file0", [pid 5416] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./33/file0", [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5416, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] fstat(4, [pid 5001] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] getdents64(4, [pid 5001] fstat(4, [pid 5000] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] fstat(4, [pid 5003] getdents64(4, [pid 5001] getdents64(4, [pid 5000] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] close(4 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 4998] <... openat resumed>) = 3 [pid 5003] rmdir("./34/file0" [pid 5001] close(4 [pid 5000] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] fstat(3, [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5001] rmdir("./35/file0" [pid 5000] close(4 [pid 4999] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] rmdir("./34/file0" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] rmdir("./33/file0" [pid 5003] close(3 [pid 5001] getdents64(3, [pid 4999] getdents64(3, [pid 4998] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] rmdir("./34" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./34/binderfs", [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./32/file0", [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 5000] getdents64(3, [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] close(3 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] mkdir("./35", 0777 [pid 5001] rmdir("./35" [pid 4999] <... close resumed>) = 0 [pid 4998] unlink("./34/binderfs" [pid 5000] close(3 [pid 5002] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./33" [pid 4999] rmdir("./34" [pid 5003] <... mkdir resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] rmdir("./32/file0" [pid 5001] mkdir("./36", 0777 [pid 5000] mkdir("./34", 0777 [pid 4999] mkdir("./35", 0777 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5003] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5000] close(3 [pid 4999] close(3./strace-static-x86_64: Process 5426 attached [pid 5002] close(3 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5426 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5426] chdir("./35" [pid 5002] <... close resumed>) = 0 [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5426] <... chdir resumed>) = 0 [pid 5002] rmdir("./32" [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5427 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5428 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5429 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... rmdir resumed>) = 0 [pid 4998] lstat("./34/file0", [pid 5426] <... prctl resumed>) = 0 [pid 5002] mkdir("./33", 0777./strace-static-x86_64: Process 5429 attached [pid 5426] setpgid(0, 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5426] <... setpgid resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5429] chdir("./35" [pid 5426] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5428 attached [pid 5429] <... chdir resumed>) = 0 [pid 5426] write(3, "1000", 4 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5428] chdir("./34" [pid 5426] <... write resumed>) = 4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5427 attached [pid 5429] <... prctl resumed>) = 0 [pid 5428] <... chdir resumed>) = 0 [pid 5426] close(3 [pid 5002] close(3 [pid 4998] <... openat resumed>) = 4 [pid 5429] setpgid(0, 0 [pid 5428] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5427] chdir("./36" [pid 5426] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4998] fstat(4, [pid 5429] <... setpgid resumed>) = 0 [pid 5428] <... prctl resumed>) = 0 [pid 5427] <... chdir resumed>) = 0 [pid 5426] symlink("/dev/binderfs", "./binderfs" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5428] setpgid(0, 0 [pid 5427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5426] <... symlink resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5428] <... setpgid resumed>) = 0 [pid 5427] <... prctl resumed>) = 0 [pid 5429] <... openat resumed>) = 3 [pid 5428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5427] setpgid(0, 0 [pid 5426] memfd_create("syzkaller", 0 [pid 4998] getdents64(4, [pid 5429] write(3, "1000", 4 [pid 5428] <... openat resumed>) = 3 [pid 5427] <... setpgid resumed>) = 0 [pid 5426] <... memfd_create resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5430 ./strace-static-x86_64: Process 5430 attached [pid 5429] <... write resumed>) = 4 [pid 5428] write(3, "1000", 4 [pid 5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5430] chdir("./33" [pid 5429] close(3 [pid 5428] <... write resumed>) = 4 [pid 5427] <... openat resumed>) = 3 [pid 5426] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] getdents64(4, [pid 5430] <... chdir resumed>) = 0 [pid 5429] <... close resumed>) = 0 [pid 5428] close(3 [pid 5427] write(3, "1000", 4 [pid 5428] <... close resumed>) = 0 [pid 5427] <... write resumed>) = 4 [pid 5428] symlink("/dev/binderfs", "./binderfs" [pid 5427] close(3 [pid 5429] symlink("/dev/binderfs", "./binderfs" [pid 5428] <... symlink resumed>) = 0 [pid 5427] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5429] <... symlink resumed>) = 0 [pid 5428] memfd_create("syzkaller", 0 [pid 5427] symlink("/dev/binderfs", "./binderfs" [pid 4998] close(4 [pid 5429] memfd_create("syzkaller", 0 [pid 5428] <... memfd_create resumed>) = 3 [pid 5427] <... symlink resumed>) = 0 [pid 5429] <... memfd_create resumed>) = 3 [pid 5430] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5427] memfd_create("syzkaller", 0 [pid 4998] <... close resumed>) = 0 [pid 5430] <... prctl resumed>) = 0 [pid 5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5428] <... mmap resumed>) = 0x7f5db7f12000 [pid 5427] <... memfd_create resumed>) = 3 [pid 4998] rmdir("./34/file0" [pid 5430] setpgid(0, 0 [pid 5429] <... mmap resumed>) = 0x7f5db7f12000 [pid 5428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5427] <... mmap resumed>) = 0x7f5db7f12000 [pid 5430] <... setpgid resumed>) = 0 [pid 5427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 5430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] getdents64(3, [pid 5430] write(3, "1000", 4 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5430] <... write resumed>) = 4 [pid 4998] close(3 [pid 5430] close(3) = 0 [pid 4998] <... close resumed>) = 0 [pid 5430] symlink("/dev/binderfs", "./binderfs" [pid 4998] rmdir("./34" [pid 5430] <... symlink resumed>) = 0 [pid 5430] memfd_create("syzkaller", 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5430] <... memfd_create resumed>) = 3 [pid 4998] mkdir("./35", 0777 [pid 5430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5430] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5431 [pid 5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5431 attached [pid 5431] chdir("./35") = 0 [pid 5431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5428] <... write resumed>) = 2097152 [pid 5426] <... write resumed>) = 2097152 [pid 5431] <... prctl resumed>) = 0 [pid 5431] setpgid(0, 0) = 0 [pid 5431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5426] munmap(0x7f5db7f12000, 2097152 [pid 5431] write(3, "1000", 4) = 4 [pid 5431] close(3 [pid 5426] <... munmap resumed>) = 0 [pid 5431] <... close resumed>) = 0 [pid 5426] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5431] symlink("/dev/binderfs", "./binderfs" [pid 5426] <... openat resumed>) = 4 [pid 5431] <... symlink resumed>) = 0 [pid 5426] ioctl(4, LOOP_SET_FD, 3 [pid 5431] memfd_create("syzkaller", 0) = 3 [pid 5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5427] <... write resumed>) = 2097152 [pid 5428] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5428] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5427] munmap(0x7f5db7f12000, 2097152 [pid 5429] <... write resumed>) = 2097152 [pid 5428] ioctl(4, LOOP_SET_FD, 3 [pid 5427] <... munmap resumed>) = 0 [pid 5430] <... write resumed>) = 2097152 [pid 5429] munmap(0x7f5db7f12000, 2097152 [pid 5428] <... ioctl resumed>) = 0 [pid 5426] <... ioctl resumed>) = 0 [pid 5430] munmap(0x7f5db7f12000, 2097152 [pid 5427] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5429] <... munmap resumed>) = 0 [pid 5427] <... openat resumed>) = 4 [pid 5426] close(3 [pid 5430] <... munmap resumed>) = 0 [pid 5429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5427] ioctl(4, LOOP_SET_FD, 3 [pid 5426] <... close resumed>) = 0 [pid 5431] <... write resumed>) = 2097152 [pid 5430] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5429] <... openat resumed>) = 4 [pid 5428] close(3 [pid 5426] mkdir("./file0", 0777 [pid 5431] munmap(0x7f5db7f12000, 2097152 [pid 5430] <... openat resumed>) = 4 [pid 5429] ioctl(4, LOOP_SET_FD, 3 [pid 5428] <... close resumed>) = 0 [pid 5426] <... mkdir resumed>) = 0 [pid 5431] <... munmap resumed>) = 0 [pid 5430] ioctl(4, LOOP_SET_FD, 3 [pid 5427] <... ioctl resumed>) = 0 [pid 5427] close(3) = 0 [pid 5427] mkdir("./file0", 0777) = 0 [pid 5427] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 62.194623][ T5426] loop5: detected capacity change from 0 to 4096 [ 62.218875][ T5428] loop2: detected capacity change from 0 to 4096 [ 62.231107][ T5427] loop3: detected capacity change from 0 to 4096 [ 62.234571][ T5429] loop1: detected capacity change from 0 to 4096 [pid 5426] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5429] <... ioctl resumed>) = 0 [pid 5429] close(3) = 0 [pid 5429] mkdir("./file0", 0777) = 0 [pid 5429] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5431] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5430] <... ioctl resumed>) = 0 [pid 5428] mkdir("./file0", 0777 [pid 5431] <... openat resumed>) = 4 [pid 5430] close(3 [pid 5428] <... mkdir resumed>) = 0 [pid 5431] ioctl(4, LOOP_SET_FD, 3 [pid 5430] <... close resumed>) = 0 [ 62.244823][ T5430] loop4: detected capacity change from 0 to 4096 [ 62.253637][ T5427] NILFS (loop3): invalid segment: Checksum error in segment payload [ 62.262439][ T5427] NILFS (loop3): trying rollback from an earlier position [ 62.267172][ T5426] NILFS (loop5): invalid segment: Checksum error in segment payload [ 62.272674][ T5429] NILFS (loop1): invalid segment: Checksum error in segment payload [ 62.286438][ T5429] NILFS (loop1): trying rollback from an earlier position [pid 5428] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5430] mkdir("./file0", 0777 [pid 5431] <... ioctl resumed>) = 0 [pid 5430] <... mkdir resumed>) = 0 [pid 5431] close(3) = 0 [pid 5430] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5431] mkdir("./file0", 0777) = 0 [ 62.293832][ T5431] loop0: detected capacity change from 0 to 4096 [ 62.304588][ T5427] NILFS (loop3): recovery complete [ 62.304606][ T5428] NILFS (loop2): invalid segment: Checksum error in segment payload [ 62.310969][ T5429] NILFS (loop1): recovery complete [ 62.329178][ T5426] NILFS (loop5): trying rollback from an earlier position [ 62.334504][ T5430] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5431] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5427] <... mount resumed>) = 0 [ 62.337803][ T5428] NILFS (loop2): trying rollback from an earlier position [ 62.345233][ T5431] NILFS (loop0): invalid segment: Checksum error in segment payload [ 62.360339][ T5430] NILFS (loop4): trying rollback from an earlier position [ 62.364199][ T5426] NILFS (loop5): recovery complete [ 62.370129][ T5431] NILFS (loop0): trying rollback from an earlier position [ 62.380275][ T5432] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5426] <... mount resumed>) = 0 [pid 5426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5426] chdir("./file0") = 0 [pid 5426] ioctl(4, LOOP_CLR_FD) = 0 [pid 5426] close(4) = 0 [pid 5426] creat("./bus", 000 [pid 5427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5429] <... mount resumed>) = 0 [pid 5427] <... openat resumed>) = 3 [pid 5429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5427] chdir("./file0" [pid 5429] <... openat resumed>) = 3 [pid 5427] <... chdir resumed>) = 0 [pid 5429] chdir("./file0" [pid 5427] ioctl(4, LOOP_CLR_FD [pid 5429] <... chdir resumed>) = 0 [pid 5427] <... ioctl resumed>) = 0 [pid 5429] ioctl(4, LOOP_CLR_FD [pid 5427] close(4 [pid 5429] <... ioctl resumed>) = 0 [pid 5427] <... close resumed>) = 0 [pid 5426] <... creat resumed>) = 4 [pid 5429] close(4 [pid 5426] open("./bus", O_RDONLY [pid 5429] <... close resumed>) = 0 [pid 5427] creat("./bus", 000 [pid 5426] <... open resumed>) = 5 [pid 5429] creat("./bus", 000 [pid 5426] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5427] <... creat resumed>) = 4 [pid 5427] open("./bus", O_RDONLY [pid 5426] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5427] <... open resumed>) = 5 [ 62.387337][ T5430] NILFS (loop4): recovery complete [ 62.393412][ T5431] NILFS (loop0): recovery complete [ 62.396931][ T5433] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.409129][ T5428] NILFS (loop2): recovery complete [ 62.418080][ T5434] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5430] <... mount resumed>) = 0 [pid 5427] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5427] <... open resumed>) = 6 [pid 5426] <... write resumed>) = 32 [pid 5430] chdir("./file0" [pid 5427] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5431] <... mount resumed>) = 0 [pid 5430] <... chdir resumed>) = 0 [pid 5426] unlink("./bus" [pid 5430] ioctl(4, LOOP_CLR_FD [pid 5428] <... mount resumed>) = 0 [pid 5430] <... ioctl resumed>) = 0 [pid 5430] close(4 [pid 5428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5430] <... close resumed>) = 0 [pid 5431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5430] creat("./bus", 000 [pid 5428] <... openat resumed>) = 3 [pid 5431] <... openat resumed>) = 3 [pid 5429] <... creat resumed>) = 4 [pid 5427] <... write resumed>) = 32 [pid 5427] unlink("./bus" [pid 5431] chdir("./file0" [pid 5429] open("./bus", O_RDONLY [pid 5428] chdir("./file0" [pid 5427] <... unlink resumed>) = 0 [pid 5426] <... unlink resumed>) = 0 [pid 5431] <... chdir resumed>) = 0 [pid 5429] <... open resumed>) = 5 [pid 5428] <... chdir resumed>) = 0 [pid 5427] sendfile(4, 5, NULL, 145139829833722 [pid 5426] sendfile(4, 5, NULL, 145139829833722 [pid 5431] ioctl(4, LOOP_CLR_FD [pid 5429] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5428] ioctl(4, LOOP_CLR_FD [pid 5427] <... sendfile resumed>) = 32 [pid 5426] <... sendfile resumed>) = 32 [pid 5431] <... ioctl resumed>) = 0 [pid 5429] <... open resumed>) = 6 [pid 5428] <... ioctl resumed>) = 0 [pid 5427] exit_group(0 [pid 5426] exit_group(0 [pid 5431] close(4 [pid 5429] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5428] close(4 [pid 5427] <... exit_group resumed>) = ? [pid 5426] <... exit_group resumed>) = ? [pid 5431] <... close resumed>) = 0 [pid 5429] <... write resumed>) = 32 [pid 5428] <... close resumed>) = 0 [pid 5431] creat("./bus", 000 [pid 5429] unlink("./bus" [pid 5428] creat("./bus", 000 [pid 5427] +++ exited with 0 +++ [pid 5426] +++ exited with 0 +++ [pid 5431] <... creat resumed>) = 4 [pid 5429] <... unlink resumed>) = 0 [pid 5431] open("./bus", O_RDONLY [pid 5429] sendfile(4, 5, NULL, 145139829833722 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5426, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5427, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5431] <... open resumed>) = 5 [pid 5429] <... sendfile resumed>) = 32 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5001] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5431] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5429] exit_group(0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5431] <... open resumed>) = 6 [pid 5429] <... exit_group resumed>) = ? [pid 5001] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 62.437077][ T5435] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.448873][ T5436] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.459613][ T5437] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5431] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5429] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 5003] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 5431] <... write resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5431] unlink("./bus" [pid 5003] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5429, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5431] <... unlink resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5431] sendfile(4, 5, NULL, 145139829833722 [pid 5003] fstat(3, [pid 5001] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5431] <... sendfile resumed>) = 32 [pid 5003] getdents64(3, [pid 5001] lstat("./36/binderfs", [pid 4999] <... openat resumed>) = 3 [pid 5431] exit_group(0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] fstat(3, [pid 5431] <... exit_group resumed>) = ? [pid 5003] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./36/binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5431] +++ exited with 0 +++ [pid 5003] lstat("./35/binderfs", [pid 5001] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] unlink("./35/binderfs" [pid 4999] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5431, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./35/binderfs" [pid 5430] <... creat resumed>) = 4 [pid 5428] <... creat resumed>) = 4 [pid 5003] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./35/binderfs", [pid 4998] <... unlink resumed>) = 0 [pid 5430] open("./bus", O_RDONLY [pid 5428] open("./bus", O_RDONLY [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5430] <... open resumed>) = 5 [pid 5428] <... open resumed>) = 5 [pid 4999] unlink("./35/binderfs" [pid 5430] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5428] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5428] <... open resumed>) = 6 [pid 5430] <... open resumed>) = 6 [pid 5428] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5430] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5428] <... write resumed>) = 32 [pid 5430] unlink("./bus" [pid 5428] unlink("./bus" [pid 5430] <... unlink resumed>) = 0 [pid 5428] <... unlink resumed>) = 0 [pid 5430] sendfile(4, 5, NULL, 145139829833722 [pid 5428] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5428] exit_group(0 [pid 5430] <... sendfile resumed>) = 32 [pid 5430] exit_group(0 [pid 5428] <... exit_group resumed>) = ? [pid 5430] <... exit_group resumed>) = ? [pid 5428] +++ exited with 0 +++ [pid 5430] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5430, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5428, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5002] unlink("./33/binderfs") = 0 [pid 5001] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(3, [pid 5002] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(4, [pid 5000] getdents64(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] getdents64(4, [pid 5000] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 5000] lstat("./34/binderfs", [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(4 [pid 5000] unlink("./34/binderfs" [pid 5001] <... close resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] rmdir("./36/file0" [pid 5000] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] lstat("./35/file0", [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] lstat("./35/file0", [pid 4998] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 4 [pid 5003] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 4999] lstat("./35/file0", [pid 4998] fstat(4, [pid 5003] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] fstat(4, [pid 4999] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 4999] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(4, [pid 4999] fstat(4, [pid 4998] close(4 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] close(4 [pid 4999] getdents64(4, [pid 4998] rmdir("./35/file0" [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] rmdir("./35/file0" [pid 4999] getdents64(4, [pid 4998] getdents64(3, [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(3, [pid 4999] close(4 [pid 4998] close(3 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] close(3 [pid 4999] rmdir("./35/file0" [pid 4998] rmdir("./35" [pid 5003] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] rmdir("./35" [pid 4999] getdents64(3, [pid 4998] mkdir("./36", 0777 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] mkdir("./36", 0777 [pid 4999] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] rmdir("./35" [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] mkdir("./36", 0777 [pid 4998] close(3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... close resumed>) = 0 [pid 5001] rmdir("./36" [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5438 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5439 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5440 ./strace-static-x86_64: Process 5439 attached [pid 5439] chdir("./36") = 0 [pid 5439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5439] setpgid(0, 0) = 0 [pid 5439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5438 attached [pid 5439] write(3, "1000", 4) = 4 [pid 5439] close(3) = 0 [pid 5001] mkdir("./37", 0777 [pid 5439] symlink("/dev/binderfs", "./binderfs" [pid 5438] chdir("./36") = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5439] <... symlink resumed>) = 0 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5439] memfd_create("syzkaller", 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5438] setpgid(0, 0) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5439] <... memfd_create resumed>) = 3 [pid 5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5438] <... openat resumed>) = 3 [pid 5439] <... mmap resumed>) = 0x7f5db7f12000 [pid 5438] write(3, "1000", 4 [pid 5002] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5440 attached [pid 5438] <... write resumed>) = 4 [pid 5001] close(3 [pid 5438] close(3) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... close resumed>) = 0 [pid 5438] memfd_create("syzkaller", 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5438] <... memfd_create resumed>) = 3 [pid 5438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5440] chdir("./36" [pid 5438] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5441 attached [pid 5440] <... chdir resumed>) = 0 [pid 5438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5441] chdir("./37" [pid 5440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5441 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5441] <... chdir resumed>) = 0 [pid 5440] <... prctl resumed>) = 0 [pid 5002] lstat("./33/file0", [pid 5000] lstat("./34/file0", [pid 5441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5440] setpgid(0, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5441] <... prctl resumed>) = 0 [pid 5440] <... setpgid resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5441] setpgid(0, 0 [pid 5002] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5441] <... setpgid resumed>) = 0 [pid 5440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5440] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5441] write(3, "1000", 4 [pid 5440] write(3, "1000", 4 [pid 5441] <... write resumed>) = 4 [pid 5440] <... write resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5441] close(3 [pid 5440] close(3 [pid 5002] fstat(4, [pid 5000] <... openat resumed>) = 4 [pid 5441] <... close resumed>) = 0 [pid 5440] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 5441] symlink("/dev/binderfs", "./binderfs" [pid 5440] symlink("/dev/binderfs", "./binderfs" [pid 5002] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5441] <... symlink resumed>) = 0 [pid 5000] getdents64(4, [pid 5440] <... symlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5441] memfd_create("syzkaller", 0 [pid 5002] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5441] <... memfd_create resumed>) = 3 [pid 5440] memfd_create("syzkaller", 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 5441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5440] <... memfd_create resumed>) = 3 [pid 5002] close(4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(4 [pid 5441] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... close resumed>) = 0 [pid 5440] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] rmdir("./33/file0" [pid 5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] rmdir("./34/file0" [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5000] getdents64(3, [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5000] close(3 [pid 5002] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] rmdir("./33" [pid 5000] rmdir("./34" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./34", 0777 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] mkdir("./35", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5439] <... write resumed>) = 2097152 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5442 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5443 ./strace-static-x86_64: Process 5442 attached [pid 5442] chdir("./34") = 0 [pid 5442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5442] setpgid(0, 0) = 0 [pid 5442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5443 attached ) = 3 [pid 5443] chdir("./35" [pid 5442] write(3, "1000", 4 [pid 5443] <... chdir resumed>) = 0 [pid 5442] <... write resumed>) = 4 [pid 5443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5442] close(3 [pid 5443] <... prctl resumed>) = 0 [pid 5442] <... close resumed>) = 0 [pid 5443] setpgid(0, 0 [pid 5442] symlink("/dev/binderfs", "./binderfs" [pid 5439] munmap(0x7f5db7f12000, 2097152 [pid 5443] <... setpgid resumed>) = 0 [pid 5442] <... symlink resumed>) = 0 [pid 5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5442] memfd_create("syzkaller", 0 [pid 5443] <... openat resumed>) = 3 [pid 5442] <... memfd_create resumed>) = 3 [pid 5439] <... munmap resumed>) = 0 [pid 5443] write(3, "1000", 4 [pid 5442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5439] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5443] <... write resumed>) = 4 [pid 5442] <... mmap resumed>) = 0x7f5db7f12000 [pid 5439] <... openat resumed>) = 4 [pid 5443] close(3 [pid 5439] ioctl(4, LOOP_SET_FD, 3 [pid 5443] <... close resumed>) = 0 [pid 5441] <... write resumed>) = 2097152 [pid 5440] <... write resumed>) = 2097152 [pid 5439] <... ioctl resumed>) = 0 [pid 5438] <... write resumed>) = 2097152 [pid 5443] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5441] munmap(0x7f5db7f12000, 2097152 [pid 5440] munmap(0x7f5db7f12000, 2097152 [pid 5438] munmap(0x7f5db7f12000, 2097152 [pid 5443] memfd_create("syzkaller", 0) = 3 [pid 5443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5441] <... munmap resumed>) = 0 [pid 5440] <... munmap resumed>) = 0 [pid 5438] <... munmap resumed>) = 0 [pid 5441] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5440] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5441] <... openat resumed>) = 4 [pid 5440] <... openat resumed>) = 4 [pid 5441] ioctl(4, LOOP_SET_FD, 3 [pid 5440] ioctl(4, LOOP_SET_FD, 3 [pid 5438] <... openat resumed>) = 4 [pid 5439] close(3) = 0 [pid 5439] mkdir("./file0", 0777) = 0 [pid 5439] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 62.717115][ T5439] loop5: detected capacity change from 0 to 4096 [ 62.738059][ T5441] loop3: detected capacity change from 0 to 4096 [ 62.744971][ T5440] loop1: detected capacity change from 0 to 4096 [ 62.752624][ T5438] loop0: detected capacity change from 0 to 4096 [pid 5438] ioctl(4, LOOP_SET_FD, 3 [pid 5440] <... ioctl resumed>) = 0 [pid 5438] <... ioctl resumed>) = 0 [pid 5440] close(3 [pid 5438] close(3 [pid 5440] <... close resumed>) = 0 [pid 5438] <... close resumed>) = 0 [pid 5441] <... ioctl resumed>) = 0 [pid 5441] close(3 [pid 5440] mkdir("./file0", 0777 [pid 5442] <... write resumed>) = 2097152 [pid 5441] <... close resumed>) = 0 [pid 5438] mkdir("./file0", 0777 [pid 5441] mkdir("./file0", 0777) = 0 [pid 5441] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5438] <... mkdir resumed>) = 0 [pid 5440] <... mkdir resumed>) = 0 [pid 5438] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 62.755694][ T5439] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5440] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5442] munmap(0x7f5db7f12000, 2097152 [pid 5443] <... write resumed>) = 2097152 [pid 5443] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5443] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5443] ioctl(4, LOOP_SET_FD, 3 [pid 5442] <... munmap resumed>) = 0 [ 62.799401][ T5438] NILFS (loop0): invalid segment: Checksum error in segment payload [ 62.801727][ T5441] NILFS (loop3): invalid segment: Checksum error in segment payload [ 62.817317][ T5440] NILFS (loop1): invalid segment: Checksum error in segment payload [ 62.827249][ T5443] loop2: detected capacity change from 0 to 4096 [ 62.828216][ T5440] NILFS (loop1): trying rollback from an earlier position [ 62.834484][ T5441] NILFS (loop3): trying rollback from an earlier position [pid 5442] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5442] ioctl(4, LOOP_SET_FD, 3 [pid 5443] <... ioctl resumed>) = 0 [pid 5443] close(3) = 0 [pid 5443] mkdir("./file0", 0777) = 0 [pid 5443] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5442] <... ioctl resumed>) = 0 [pid 5442] close(3) = 0 [pid 5442] mkdir("./file0", 0777) = 0 [ 62.841539][ T5438] NILFS (loop0): trying rollback from an earlier position [ 62.849580][ T5439] NILFS (loop5): trying rollback from an earlier position [ 62.863296][ T5442] loop4: detected capacity change from 0 to 4096 [ 62.874868][ T5438] NILFS (loop0): recovery complete [ 62.875237][ T5443] NILFS (loop2): invalid segment: Checksum error in segment payload [ 62.889266][ T5443] NILFS (loop2): trying rollback from an earlier position [ 62.889441][ T5442] NILFS (loop4): invalid segment: Checksum error in segment payload [ 62.903320][ T5443] NILFS (loop2): recovery complete [ 62.906601][ T5440] NILFS (loop1): recovery complete [ 62.911615][ T5442] NILFS (loop4): trying rollback from an earlier position [ 62.925523][ T5439] NILFS (loop5): recovery complete [ 62.931432][ T5441] NILFS (loop3): recovery complete [ 62.932293][ T5442] NILFS (loop4): recovery complete [pid 5442] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5438] <... mount resumed>) = 0 [pid 5443] <... mount resumed>) = 0 [pid 5439] <... mount resumed>) = 0 [pid 5438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5438] <... openat resumed>) = 3 [pid 5443] <... openat resumed>) = 3 [pid 5439] <... openat resumed>) = 3 [pid 5438] chdir("./file0" [pid 5443] chdir("./file0" [pid 5439] chdir("./file0" [pid 5438] <... chdir resumed>) = 0 [pid 5443] <... chdir resumed>) = 0 [pid 5439] <... chdir resumed>) = 0 [pid 5438] ioctl(4, LOOP_CLR_FD [pid 5443] ioctl(4, LOOP_CLR_FD [pid 5439] ioctl(4, LOOP_CLR_FD [pid 5438] <... ioctl resumed>) = 0 [pid 5443] <... ioctl resumed>) = 0 [pid 5439] <... ioctl resumed>) = 0 [pid 5438] close(4 [pid 5443] close(4 [pid 5439] close(4 [pid 5438] <... close resumed>) = 0 [ 62.937808][ T5444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.943479][ T5446] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.953920][ T5449] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.965067][ T5445] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.976143][ T5448] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5443] <... close resumed>) = 0 [pid 5441] <... mount resumed>) = 0 [pid 5440] <... mount resumed>) = 0 [pid 5439] <... close resumed>) = 0 [pid 5438] creat("./bus", 000 [pid 5443] creat("./bus", 000 [pid 5439] creat("./bus", 000 [pid 5443] <... creat resumed>) = 4 [pid 5442] <... mount resumed>) = 0 [pid 5441] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5439] <... creat resumed>) = 4 [pid 5438] <... creat resumed>) = 4 [pid 5443] open("./bus", O_RDONLY [pid 5442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5439] open("./bus", O_RDONLY [pid 5438] open("./bus", O_RDONLY [pid 5443] <... open resumed>) = 5 [pid 5442] <... openat resumed>) = 3 [pid 5441] <... openat resumed>) = 3 [pid 5440] <... openat resumed>) = 3 [pid 5439] <... open resumed>) = 5 [pid 5438] <... open resumed>) = 5 [pid 5443] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5442] chdir("./file0" [pid 5441] chdir("./file0" [pid 5440] chdir("./file0" [pid 5442] <... chdir resumed>) = 0 [pid 5441] <... chdir resumed>) = 0 [pid 5440] <... chdir resumed>) = 0 [pid 5439] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5438] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5443] <... open resumed>) = 6 [pid 5442] ioctl(4, LOOP_CLR_FD [pid 5441] ioctl(4, LOOP_CLR_FD [pid 5440] ioctl(4, LOOP_CLR_FD [pid 5441] <... ioctl resumed>) = 0 [pid 5440] <... ioctl resumed>) = 0 [pid 5439] <... open resumed>) = 6 [pid 5442] <... ioctl resumed>) = 0 [pid 5441] close(4 [pid 5440] close(4 [pid 5443] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5442] close(4 [pid 5441] <... close resumed>) = 0 [pid 5440] <... close resumed>) = 0 [pid 5439] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5438] <... open resumed>) = 6 [pid 5441] creat("./bus", 000 [pid 5440] creat("./bus", 000 [pid 5442] <... close resumed>) = 0 [pid 5438] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5441] <... creat resumed>) = 4 [pid 5440] <... creat resumed>) = 4 [pid 5439] <... write resumed>) = 32 [pid 5443] <... write resumed>) = 32 [pid 5442] creat("./bus", 000 [pid 5441] open("./bus", O_RDONLY [pid 5440] open("./bus", O_RDONLY [pid 5439] unlink("./bus" [pid 5443] unlink("./bus" [pid 5442] <... creat resumed>) = 4 [pid 5441] <... open resumed>) = 5 [pid 5440] <... open resumed>) = 5 [pid 5438] <... write resumed>) = 32 [pid 5442] open("./bus", O_RDONLY [pid 5441] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5440] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5439] <... unlink resumed>) = 0 [pid 5438] unlink("./bus" [pid 5443] <... unlink resumed>) = 0 [pid 5442] <... open resumed>) = 5 [pid 5441] <... open resumed>) = 6 [pid 5440] <... open resumed>) = 6 [pid 5443] sendfile(4, 5, NULL, 145139829833722 [pid 5439] sendfile(4, 5, NULL, 145139829833722 [pid 5442] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5441] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5440] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5438] <... unlink resumed>) = 0 [pid 5443] <... sendfile resumed>) = 32 [pid 5442] <... open resumed>) = 6 [pid 5441] <... write resumed>) = 32 [pid 5439] <... sendfile resumed>) = 32 [pid 5438] sendfile(4, 5, NULL, 145139829833722 [pid 5440] <... write resumed>) = 32 [pid 5443] exit_group(0 [pid 5442] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5441] unlink("./bus" [pid 5440] unlink("./bus" [pid 5439] exit_group(0 [pid 5438] <... sendfile resumed>) = 32 [pid 5443] <... exit_group resumed>) = ? [pid 5442] <... write resumed>) = 32 [pid 5441] <... unlink resumed>) = 0 [pid 5440] <... unlink resumed>) = 0 [pid 5439] <... exit_group resumed>) = ? [pid 5438] exit_group(0 [pid 5443] +++ exited with 0 +++ [pid 5442] unlink("./bus" [pid 5441] sendfile(4, 5, NULL, 145139829833722 [pid 5440] sendfile(4, 5, NULL, 145139829833722 [pid 5438] <... exit_group resumed>) = ? [pid 5439] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5439, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5443, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5442] <... unlink resumed>) = 0 [pid 5441] <... sendfile resumed>) = 32 [pid 5440] <... sendfile resumed>) = 32 [pid 5438] +++ exited with 0 +++ [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5442] sendfile(4, 5, NULL, 145139829833722 [pid 5441] exit_group(0 [pid 5440] exit_group(0 [pid 5000] <... restart_syscall resumed>) = 0 [ 62.998353][ T5447] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5442] <... sendfile resumed>) = 32 [pid 5441] <... exit_group resumed>) = ? [pid 5440] <... exit_group resumed>) = ? [pid 5003] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5442] exit_group(0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5442] <... exit_group resumed>) = ? [pid 5003] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(3, [pid 5000] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5442] +++ exited with 0 +++ [pid 5441] +++ exited with 0 +++ [pid 5440] +++ exited with 0 +++ [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5442, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5000] fstat(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5440, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] fstat(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5441, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] getdents64(3, [pid 4998] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] lstat("./36/binderfs", [pid 5000] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./36/binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./35/binderfs", [pid 4999] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./36/binderfs", [pid 5003] <... unlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5000] unlink("./35/binderfs" [pid 4999] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] unlink("./36/binderfs" [pid 5002] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... unlink resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 5001] <... openat resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] fstat(3, [pid 4999] getdents64(3, [pid 5002] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4999] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./34/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./37/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./37/binderfs" [pid 4999] lstat("./36/binderfs", [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./34/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 4999] unlink("./36/binderfs") = 0 [pid 5002] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5001] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./37/file0", [pid 5003] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./36/file0", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./36/file0", [pid 5003] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(4, [pid 4998] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 4998] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 4 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 4998] fstat(4, [pid 5003] getdents64(4, [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] close(4 [pid 4998] getdents64(4, [pid 5003] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./37/file0" [pid 4998] getdents64(4, [pid 5003] close(4 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 4998] close(4 [pid 5003] rmdir("./36/file0" [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] close(3 [pid 4998] rmdir("./36/file0" [pid 5003] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] rmdir("./37" [pid 4998] getdents64(3, [pid 5003] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] mkdir("./38", 0777 [pid 4998] close(3 [pid 5003] rmdir("./36" [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] lstat("./34/file0", [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] rmdir("./36" [pid 5003] mkdir("./37", 0777 [pid 5001] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] mkdir("./37", 0777 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... mkdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] close(3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... close resumed>) = 0 [pid 5002] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5450 [pid 4998] close(3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5451 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5452 ./strace-static-x86_64: Process 5451 attached [pid 5451] chdir("./37") = 0 [pid 5451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5451] setpgid(0, 0) = 0 [pid 5451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5451] write(3, "1000", 4) = 4 [pid 5451] close(3) = 0 [pid 5451] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5450 attached [pid 5450] chdir("./38" [pid 5451] <... symlink resumed>) = 0 [pid 5451] memfd_create("syzkaller", 0 [pid 5450] <... chdir resumed>) = 0 [pid 5450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5450] setpgid(0, 0 [pid 5451] <... memfd_create resumed>) = 3 [pid 5450] <... setpgid resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] close(4 [pid 5451] <... mmap resumed>) = 0x7f5db7f12000 [pid 5450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... close resumed>) = 0 [pid 5450] <... openat resumed>) = 3 [pid 5002] rmdir("./34/file0" [pid 5450] write(3, "1000", 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5450] <... write resumed>) = 4 [pid 5002] getdents64(3, [pid 5450] close(3 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5450] <... close resumed>) = 0 [pid 5002] close(3 [pid 5450] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... close resumed>) = 0 [pid 5450] <... symlink resumed>) = 0 [pid 5002] rmdir("./34" [pid 5450] memfd_create("syzkaller", 0) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] mkdir("./35", 0777 [pid 5450] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... mkdir resumed>) = 0 [pid 5450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] close(3 [pid 5000] <... openat resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5453 [pid 5000] rmdir("./35/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./35") = 0 ./strace-static-x86_64: Process 5452 attached [pid 5000] mkdir("./36", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5453 attached [pid 5452] chdir("./37" [pid 5000] <... openat resumed>) = 3 [pid 5453] chdir("./35") = 0 [pid 5452] <... chdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5452] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5453] <... prctl resumed>) = 0 [pid 5452] <... prctl resumed>) = 0 [pid 5000] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5453] setpgid(0, 0 [pid 5452] setpgid(0, 0 [pid 5000] <... close resumed>) = 0 [pid 5453] <... setpgid resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5452] <... setpgid resumed>) = 0 [pid 4999] lstat("./36/file0", [pid 5453] <... openat resumed>) = 3 [pid 5452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5454 [pid 5453] write(3, "1000", 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5453] <... write resumed>) = 4 [pid 5452] <... openat resumed>) = 3 [pid 5453] close(3 [pid 4999] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5453] <... close resumed>) = 0 [pid 5452] write(3, "1000", 4 [pid 5453] symlink("/dev/binderfs", "./binderfs" [pid 5452] <... write resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5453] <... symlink resumed>) = 0 [pid 5452] close(3 [pid 5453] memfd_create("syzkaller", 0 [pid 5451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5453] <... memfd_create resumed>) = 3 [pid 5452] <... close resumed>) = 0 ./strace-static-x86_64: Process 5454 attached [pid 5453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5452] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 4 [pid 5454] chdir("./36" [pid 5453] <... mmap resumed>) = 0x7f5db7f12000 [pid 5454] <... chdir resumed>) = 0 [pid 5452] <... symlink resumed>) = 0 [pid 4999] fstat(4, [pid 5454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5452] memfd_create("syzkaller", 0 [pid 5450] <... write resumed>) = 2097152 [pid 5454] <... prctl resumed>) = 0 [pid 5454] setpgid(0, 0 [pid 5452] <... memfd_create resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5454] <... setpgid resumed>) = 0 [pid 5452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] getdents64(4, [pid 5454] <... openat resumed>) = 3 [pid 5452] <... mmap resumed>) = 0x7f5db7f12000 [pid 5454] write(3, "1000", 4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5454] <... write resumed>) = 4 [pid 5454] close(3) = 0 [pid 5454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5454] memfd_create("syzkaller", 0) = 3 [pid 5454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./36/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./36") = 0 [pid 4999] mkdir("./37", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5453] <... write resumed>) = 2097152 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5455 [pid 5451] <... write resumed>) = 2097152 [pid 5450] munmap(0x7f5db7f12000, 2097152 [pid 5451] munmap(0x7f5db7f12000, 2097152 [pid 5452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5450] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5455 attached [pid 5455] chdir("./37" [pid 5454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5455] <... chdir resumed>) = 0 [pid 5451] <... munmap resumed>) = 0 [pid 5450] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5451] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5450] <... openat resumed>) = 4 [pid 5455] <... prctl resumed>) = 0 [pid 5451] <... openat resumed>) = 4 [pid 5450] ioctl(4, LOOP_SET_FD, 3 [pid 5455] setpgid(0, 0 [pid 5451] ioctl(4, LOOP_SET_FD, 3 [pid 5455] <... setpgid resumed>) = 0 [pid 5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5455] write(3, "1000", 4) = 4 [pid 5455] close(3) = 0 [pid 5455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5455] memfd_create("syzkaller", 0) = 3 [pid 5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5453] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5451] <... ioctl resumed>) = 0 [pid 5451] close(3 [pid 5450] <... ioctl resumed>) = 0 [pid 5451] <... close resumed>) = 0 [pid 5451] mkdir("./file0", 0777 [pid 5450] close(3) = 0 [pid 5450] mkdir("./file0", 0777 [pid 5453] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5453] ioctl(4, LOOP_SET_FD, 3 [pid 5451] <... mkdir resumed>) = 0 [pid 5454] <... write resumed>) = 2097152 [pid 5452] <... write resumed>) = 2097152 [pid 5450] <... mkdir resumed>) = 0 [pid 5454] munmap(0x7f5db7f12000, 2097152 [pid 5452] munmap(0x7f5db7f12000, 2097152 [pid 5451] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5450] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5454] <... munmap resumed>) = 0 [pid 5452] <... munmap resumed>) = 0 [pid 5454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5452] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5454] <... openat resumed>) = 4 [pid 5452] <... openat resumed>) = 4 [pid 5454] ioctl(4, LOOP_SET_FD, 3 [ 63.255908][ T5450] loop3: detected capacity change from 0 to 4096 [ 63.263293][ T5451] loop5: detected capacity change from 0 to 4096 [ 63.293040][ T5453] loop4: detected capacity change from 0 to 4096 [pid 5452] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5455] <... write resumed>) = 2097152 [pid 5454] <... ioctl resumed>) = 0 [pid 5453] <... ioctl resumed>) = 0 [pid 5452] close(3 [pid 5455] munmap(0x7f5db7f12000, 2097152 [pid 5454] close(3 [pid 5453] close(3 [pid 5452] <... close resumed>) = 0 [pid 5455] <... munmap resumed>) = 0 [pid 5454] <... close resumed>) = 0 [pid 5453] <... close resumed>) = 0 [pid 5452] mkdir("./file0", 0777 [pid 5455] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5454] mkdir("./file0", 0777 [pid 5453] mkdir("./file0", 0777 [pid 5452] <... mkdir resumed>) = 0 [pid 5453] <... mkdir resumed>) = 0 [pid 5454] <... mkdir resumed>) = 0 [pid 5455] <... openat resumed>) = 4 [ 63.308349][ T5452] loop0: detected capacity change from 0 to 4096 [ 63.314917][ T5454] loop2: detected capacity change from 0 to 4096 [ 63.318560][ T5451] NILFS (loop5): invalid segment: Checksum error in segment payload [ 63.326661][ T5450] NILFS (loop3): invalid segment: Checksum error in segment payload [ 63.330459][ T5451] NILFS (loop5): trying rollback from an earlier position [ 63.337650][ T5450] NILFS (loop3): trying rollback from an earlier position [pid 5455] ioctl(4, LOOP_SET_FD, 3 [pid 5454] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5453] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5455] <... ioctl resumed>) = 0 [pid 5452] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5455] close(3) = 0 [pid 5455] mkdir("./file0", 0777) = 0 [ 63.356550][ T5455] loop1: detected capacity change from 0 to 4096 [ 63.369271][ T5454] NILFS (loop2): invalid segment: Checksum error in segment payload [ 63.371641][ T5451] NILFS (loop5): recovery complete [ 63.378244][ T5454] NILFS (loop2): trying rollback from an earlier position [ 63.390234][ T5453] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5455] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5450] <... mount resumed>) = 0 [pid 5450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5450] chdir("./file0") = 0 [pid 5450] ioctl(4, LOOP_CLR_FD) = 0 [pid 5450] close(4) = 0 [ 63.407324][ T5450] NILFS (loop3): recovery complete [ 63.407351][ T5455] NILFS (loop1): invalid segment: Checksum error in segment payload [ 63.414768][ T5453] NILFS (loop4): trying rollback from an earlier position [ 63.421046][ T5452] NILFS (loop0): invalid segment: Checksum error in segment payload [ 63.438252][ T5457] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.445514][ T5453] NILFS (loop4): recovery complete [pid 5450] creat("./bus", 000 [pid 5451] <... mount resumed>) = 0 [pid 5451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5451] chdir("./file0") = 0 [pid 5451] ioctl(4, LOOP_CLR_FD) = 0 [pid 5451] close(4) = 0 [pid 5451] creat("./bus", 000 [pid 5453] <... mount resumed>) = 0 [pid 5451] <... creat resumed>) = 4 [pid 5450] <... creat resumed>) = 4 [ 63.455126][ T5455] NILFS (loop1): trying rollback from an earlier position [ 63.457878][ T5452] NILFS (loop0): trying rollback from an earlier position [ 63.469589][ T5456] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.486999][ T5458] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.497785][ T5454] NILFS (loop2): recovery complete [ 63.502422][ T5452] NILFS (loop0): recovery complete [pid 5453] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5453] chdir("./file0") = 0 [pid 5453] ioctl(4, LOOP_CLR_FD) = 0 [pid 5453] close(4) = 0 [pid 5451] open("./bus", O_RDONLY [pid 5450] open("./bus", O_RDONLY [pid 5453] creat("./bus", 000 [pid 5451] <... open resumed>) = 5 [pid 5454] <... mount resumed>) = 0 [pid 5450] <... open resumed>) = 5 [pid 5453] <... creat resumed>) = 4 [pid 5453] open("./bus", O_RDONLY [pid 5451] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5450] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5453] <... open resumed>) = 5 [pid 5451] <... open resumed>) = 6 [pid 5450] <... open resumed>) = 6 [pid 5454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5451] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5450] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5454] <... openat resumed>) = 3 [pid 5453] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5454] chdir("./file0" [pid 5451] <... write resumed>) = 32 [pid 5450] <... write resumed>) = 32 [pid 5453] <... open resumed>) = 6 [pid 5454] <... chdir resumed>) = 0 [pid 5453] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5451] unlink("./bus" [pid 5450] unlink("./bus" [pid 5454] ioctl(4, LOOP_CLR_FD [pid 5452] <... mount resumed>) = 0 [pid 5455] <... mount resumed>) = 0 [pid 5454] <... ioctl resumed>) = 0 [pid 5452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5454] close(4 [pid 5452] <... openat resumed>) = 3 [pid 5455] <... openat resumed>) = 3 [pid 5454] <... close resumed>) = 0 [pid 5452] chdir("./file0" [pid 5455] chdir("./file0" [pid 5454] creat("./bus", 000 [pid 5452] <... chdir resumed>) = 0 [pid 5455] <... chdir resumed>) = 0 [pid 5454] <... creat resumed>) = 4 [pid 5452] ioctl(4, LOOP_CLR_FD [pid 5455] ioctl(4, LOOP_CLR_FD [pid 5454] open("./bus", O_RDONLY [pid 5452] <... ioctl resumed>) = 0 [pid 5455] <... ioctl resumed>) = 0 [pid 5454] <... open resumed>) = 5 [pid 5452] close(4 [pid 5455] close(4 [pid 5454] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5452] <... close resumed>) = 0 [pid 5455] <... close resumed>) = 0 [pid 5454] <... open resumed>) = 6 [pid 5452] creat("./bus", 000 [pid 5455] creat("./bus", 000 [pid 5454] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5454] unlink("./bus" [pid 5455] <... creat resumed>) = 4 [pid 5454] <... unlink resumed>) = 0 [pid 5453] <... write resumed>) = 32 [pid 5455] open("./bus", O_RDONLY [pid 5454] sendfile(4, 5, NULL, 145139829833722 [pid 5453] unlink("./bus" [pid 5455] <... open resumed>) = 5 [pid 5454] <... sendfile resumed>) = 32 [pid 5455] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5454] exit_group(0 [pid 5451] <... unlink resumed>) = 0 [pid 5450] <... unlink resumed>) = 0 [pid 5455] <... open resumed>) = 6 [pid 5454] <... exit_group resumed>) = ? [pid 5453] <... unlink resumed>) = 0 [pid 5451] sendfile(4, 5, NULL, 145139829833722 [pid 5450] sendfile(4, 5, NULL, 145139829833722 [pid 5455] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5454] +++ exited with 0 +++ [pid 5453] sendfile(4, 5, NULL, 145139829833722 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5454, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5451] <... sendfile resumed>) = 32 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5451] exit_group(0 [pid 5450] <... sendfile resumed>) = 32 [pid 5453] <... sendfile resumed>) = 32 [pid 5451] <... exit_group resumed>) = ? [pid 5450] exit_group(0 [pid 5453] exit_group(0 [pid 5450] <... exit_group resumed>) = ? [pid 5000] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5455] <... write resumed>) = 32 [pid 5453] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5455] unlink("./bus" [pid 5000] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./36/binderfs" [pid 5455] <... unlink resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5455] sendfile(4, 5, NULL, 145139829833722 [pid 5000] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5451] +++ exited with 0 +++ [pid 5450] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5451, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5450, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5455] <... sendfile resumed>) = 32 [pid 5455] exit_group(0 [pid 5453] +++ exited with 0 +++ [pid 5455] <... exit_group resumed>) = ? [pid 5003] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5453, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 5001] fstat(3, [pid 5455] +++ exited with 0 +++ [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5002] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./37/binderfs", [pid 5002] fstat(3, [pid 5001] lstat("./38/binderfs", [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./37/binderfs" [pid 5002] getdents64(3, [pid 5001] unlink("./38/binderfs" [pid 5003] <... unlink resumed>) = 0 [ 63.504777][ T5455] NILFS (loop1): recovery complete [ 63.517292][ T5459] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.533618][ T5461] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.535743][ T5460] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... unlink resumed>) = 0 [pid 5452] <... creat resumed>) = 4 [pid 5003] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 4999] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] open("./bus", O_RDONLY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5452] <... open resumed>) = 5 [pid 5002] lstat("./35/binderfs", [pid 4999] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5452] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5452] <... open resumed>) = 6 [pid 5002] unlink("./35/binderfs" [pid 4999] fstat(3, [pid 5452] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./37/binderfs" [pid 5452] <... write resumed>) = 32 [pid 4999] <... unlink resumed>) = 0 [pid 5452] unlink("./bus" [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./36/file0", [pid 5452] <... unlink resumed>) = 0 [pid 5452] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5452] <... sendfile resumed>) = 32 [pid 5000] <... openat resumed>) = 4 [pid 5452] exit_group(0 [pid 5000] fstat(4, [pid 5452] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] lstat("./37/file0", [pid 5000] getdents64(4, [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] rmdir("./36/file0" [pid 5003] <... openat resumed>) = 4 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] fstat(4, [pid 5000] getdents64(3, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(4, [pid 5000] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... close resumed>) = 0 [pid 5452] +++ exited with 0 +++ [pid 5003] getdents64(4, [pid 5000] rmdir("./36" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5452, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] close(4 [pid 5000] mkdir("./37", 0777 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... close resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] rmdir("./37/file0" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5003] getdents64(3, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] close(3 [pid 5000] close(3 [pid 4998] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] rmdir("./37" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = 0 [pid 4998] fstat(3, [pid 5003] <... rmdir resumed>) = 0 [pid 5001] lstat("./38/file0", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] mkdir("./38", 0777 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5462 [pid 4998] getdents64(3, [pid 5003] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4998] lstat("./37/binderfs", [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] close(3 [pid 4998] unlink("./37/binderfs" [pid 5003] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... unlink resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 4 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(4, [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5463 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./37/file0", [pid 5001] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 4999] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5462 attached ) = 4 [pid 5462] chdir("./37" [pid 4999] fstat(4, [pid 5462] <... chdir resumed>) = 0 [pid 5462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5462] <... prctl resumed>) = 0 [pid 5462] setpgid(0, 0 [pid 4999] getdents64(4, [pid 5462] <... setpgid resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] getdents64(4, [pid 5462] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5462] write(3, "1000", 4) = 4 [pid 4999] close(4 [pid 5462] close(3) = 0 [pid 4999] <... close resumed>) = 0 [pid 5462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] rmdir("./37/file0" [pid 5462] memfd_create("syzkaller", 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5462] <... memfd_create resumed>) = 3 [pid 5462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] getdents64(3, [pid 5462] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./37") = 0 [pid 4999] mkdir("./38", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5001] rmdir("./38/file0" [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5464 [pid 5002] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./35/file0", [pid 5001] close(3./strace-static-x86_64: Process 5464 attached [pid 5464] chdir("./38" [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./38") = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] mkdir("./39", 0777 [pid 5002] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5464] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... mkdir resumed>) = 0 [pid 5464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5463 attached [pid 5464] setpgid(0, 0 [pid 5002] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5464] <... setpgid resumed>) = 0 [pid 5463] chdir("./38" [pid 5002] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5463] <... chdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5464] <... openat resumed>) = 3 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] fstat(4, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5464] write(3, "1000", 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 5464] <... write resumed>) = 4 [pid 5463] <... prctl resumed>) = 0 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 5464] close(3) = 0 [pid 5464] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5463] setpgid(0, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5464] <... symlink resumed>) = 0 [pid 5464] memfd_create("syzkaller", 0 [pid 5002] getdents64(4, [pid 5464] <... memfd_create resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5465 [pid 5463] <... setpgid resumed>) = 0 [pid 4998] lstat("./37/file0", [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5464] <... mmap resumed>) = 0x7f5db7f12000 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] close(4 [pid 4998] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 5002] <... close resumed>) = 0 [pid 4998] rmdir("./37/file0" [pid 5463] <... openat resumed>) = 3 [pid 5002] rmdir("./35/file0" [pid 4998] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5465 attached [pid 5463] write(3, "1000", 4 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5465] chdir("./39" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5463] <... write resumed>) = 4 [pid 5002] getdents64(3, [pid 4998] close(3) = 0 [pid 5465] <... chdir resumed>) = 0 [pid 5463] close(3 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./37" [pid 5465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5463] <... close resumed>) = 0 [pid 5002] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./38", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5466 ./strace-static-x86_64: Process 5466 attached [pid 5466] chdir("./38" [pid 5465] <... prctl resumed>) = 0 [pid 5463] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... close resumed>) = 0 [pid 5466] <... chdir resumed>) = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5466] setpgid(0, 0 [pid 5465] setpgid(0, 0 [pid 5463] <... symlink resumed>) = 0 [pid 5002] rmdir("./35" [pid 5465] <... setpgid resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5466] <... setpgid resumed>) = 0 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5463] memfd_create("syzkaller", 0 [pid 5465] <... openat resumed>) = 3 [pid 5002] mkdir("./36", 0777 [pid 5465] write(3, "1000", 4 [pid 5463] <... memfd_create resumed>) = 3 [pid 5466] <... openat resumed>) = 3 [pid 5466] write(3, "1000", 4 [pid 5465] <... write resumed>) = 4 [pid 5463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5466] <... write resumed>) = 4 [pid 5466] close(3) = 0 [pid 5466] symlink("/dev/binderfs", "./binderfs" [pid 5465] close(3 [pid 5466] <... symlink resumed>) = 0 [pid 5465] <... close resumed>) = 0 [pid 5463] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5466] memfd_create("syzkaller", 0 [pid 5465] symlink("/dev/binderfs", "./binderfs" [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5466] <... memfd_create resumed>) = 3 [pid 5465] <... symlink resumed>) = 0 [pid 5462] <... write resumed>) = 2097152 [pid 5466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5465] memfd_create("syzkaller", 0 [pid 5002] <... openat resumed>) = 3 [pid 5466] <... mmap resumed>) = 0x7f5db7f12000 [pid 5465] <... memfd_create resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5465] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] close(3 [pid 5462] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5462] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5462] ioctl(4, LOOP_SET_FD, 3 [pid 5465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5467 [pid 5466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5464] <... write resumed>) = 2097152 [pid 5464] munmap(0x7f5db7f12000, 2097152) = 0 ./strace-static-x86_64: Process 5467 attached [pid 5467] chdir("./36") = 0 [pid 5467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5467] setpgid(0, 0 [pid 5464] <... openat resumed>) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3 [pid 5462] <... ioctl resumed>) = 0 [pid 5467] <... setpgid resumed>) = 0 [pid 5462] close(3) = 0 [pid 5462] mkdir("./file0", 0777 [pid 5467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5462] <... mkdir resumed>) = 0 [pid 5462] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5467] <... openat resumed>) = 3 [pid 5467] write(3, "1000", 4) = 4 [pid 5467] close(3) = 0 [ 63.764134][ T5462] loop2: detected capacity change from 0 to 4096 [ 63.792757][ T5464] loop1: detected capacity change from 0 to 4096 [pid 5467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5465] <... write resumed>) = 2097152 [pid 5464] <... ioctl resumed>) = 0 [pid 5463] <... write resumed>) = 2097152 [pid 5467] memfd_create("syzkaller", 0) = 3 [pid 5466] <... write resumed>) = 2097152 [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5466] munmap(0x7f5db7f12000, 2097152 [pid 5467] <... mmap resumed>) = 0x7f5db7f12000 [pid 5466] <... munmap resumed>) = 0 [pid 5466] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5465] munmap(0x7f5db7f12000, 2097152 [pid 5466] <... openat resumed>) = 4 [pid 5466] ioctl(4, LOOP_SET_FD, 3 [pid 5463] munmap(0x7f5db7f12000, 2097152 [pid 5464] close(3) = 0 [pid 5464] mkdir("./file0", 0777) = 0 [pid 5464] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5463] <... munmap resumed>) = 0 [pid 5463] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 63.816222][ T5462] NILFS (loop2): invalid segment: Checksum error in segment payload [ 63.824315][ T5462] NILFS (loop2): trying rollback from an earlier position [ 63.840449][ T5462] NILFS (loop2): recovery complete [ 63.846642][ T5466] loop0: detected capacity change from 0 to 4096 [ 63.852782][ T5463] loop5: detected capacity change from 0 to 4096 [pid 5463] ioctl(4, LOOP_SET_FD, 3 [pid 5466] <... ioctl resumed>) = 0 [pid 5465] <... munmap resumed>) = 0 [pid 5462] <... mount resumed>) = 0 [pid 5466] close(3 [pid 5465] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5466] <... close resumed>) = 0 [pid 5465] <... openat resumed>) = 4 [pid 5462] <... openat resumed>) = 3 [pid 5466] mkdir("./file0", 0777 [pid 5465] ioctl(4, LOOP_SET_FD, 3 [pid 5462] chdir("./file0" [pid 5466] <... mkdir resumed>) = 0 [pid 5462] <... chdir resumed>) = 0 [pid 5466] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5462] ioctl(4, LOOP_CLR_FD) = 0 [pid 5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5465] <... ioctl resumed>) = 0 [pid 5462] close(4 [pid 5463] <... ioctl resumed>) = 0 [pid 5463] close(3) = 0 [pid 5463] mkdir("./file0", 0777) = 0 [pid 5463] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5467] <... write resumed>) = 2097152 [pid 5465] close(3 [pid 5462] <... close resumed>) = 0 [pid 5467] munmap(0x7f5db7f12000, 2097152 [pid 5465] <... close resumed>) = 0 [pid 5462] creat("./bus", 000 [pid 5465] mkdir("./file0", 0777 [pid 5467] <... munmap resumed>) = 0 [pid 5465] <... mkdir resumed>) = 0 [ 63.854955][ T5468] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.873484][ T5465] loop3: detected capacity change from 0 to 4096 [ 63.884857][ T5466] NILFS (loop0): invalid segment: Checksum error in segment payload [ 63.886122][ T5464] NILFS (loop1): invalid segment: Checksum error in segment payload [ 63.893164][ T5466] NILFS (loop0): trying rollback from an earlier position [pid 5465] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5462] <... creat resumed>) = 4 [pid 5467] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5462] open("./bus", O_RDONLY [pid 5467] <... openat resumed>) = 4 [pid 5462] <... open resumed>) = 5 [pid 5467] ioctl(4, LOOP_SET_FD, 3 [pid 5466] <... mount resumed>) = 0 [ 63.932589][ T5465] NILFS (loop3): invalid segment: Checksum error in segment payload [ 63.937179][ T5466] NILFS (loop0): recovery complete [ 63.946878][ T5465] NILFS (loop3): trying rollback from an earlier position [ 63.953733][ T5464] NILFS (loop1): trying rollback from an earlier position [ 63.955352][ T5469] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.961625][ T5463] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5462] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5462] <... open resumed>) = 6 [pid 5466] chdir("./file0" [pid 5462] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5466] <... chdir resumed>) = 0 [pid 5466] ioctl(4, LOOP_CLR_FD) = 0 [pid 5462] <... write resumed>) = 32 [pid 5466] close(4 [pid 5467] <... ioctl resumed>) = 0 [pid 5466] <... close resumed>) = 0 [pid 5462] unlink("./bus" [pid 5467] close(3 [pid 5466] creat("./bus", 000 [pid 5467] <... close resumed>) = 0 [pid 5467] mkdir("./file0", 0777) = 0 [pid 5467] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5462] <... unlink resumed>) = 0 [pid 5462] sendfile(4, 5, NULL, 145139829833722 [pid 5466] <... creat resumed>) = 4 [pid 5466] open("./bus", O_RDONLY) = 5 [pid 5466] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5462] <... sendfile resumed>) = 32 [pid 5466] <... open resumed>) = 6 [pid 5462] exit_group(0 [pid 5466] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5462] <... exit_group resumed>) = ? [pid 5466] <... write resumed>) = 32 [pid 5462] +++ exited with 0 +++ [ 63.972149][ T5467] loop4: detected capacity change from 0 to 4096 [ 63.991408][ T5463] NILFS (loop5): trying rollback from an earlier position [ 64.004088][ T5465] NILFS (loop3): recovery complete [ 64.012726][ T5467] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5466] unlink("./bus" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5462, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5464] <... mount resumed>) = 0 [pid 5464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5464] chdir("./file0") = 0 [pid 5464] ioctl(4, LOOP_CLR_FD) = 0 [pid 5464] close(4) = 0 [pid 5464] creat("./bus", 000 [pid 5466] <... unlink resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5466] sendfile(4, 5, NULL, 145139829833722 [pid 5465] <... mount resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5466] <... sendfile resumed>) = 32 [pid 5465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5466] exit_group(0 [pid 5465] <... openat resumed>) = 3 [pid 5000] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] <... exit_group resumed>) = ? [pid 5465] chdir("./file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./37/binderfs") = 0 [ 64.029377][ T5467] NILFS (loop4): trying rollback from an earlier position [ 64.031600][ T5464] NILFS (loop1): recovery complete [ 64.039766][ T5470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.052320][ T5463] NILFS (loop5): recovery complete [ 64.061307][ T5471] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.074070][ T5467] NILFS (loop4): recovery complete [pid 5000] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5465] <... chdir resumed>) = 0 [pid 5466] +++ exited with 0 +++ [pid 5465] ioctl(4, LOOP_CLR_FD [pid 5464] <... creat resumed>) = 4 [pid 5463] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5465] <... ioctl resumed>) = 0 [pid 5465] close(4 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5465] <... close resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5465] creat("./bus", 000 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./38/binderfs" [pid 5467] <... mount resumed>) = 0 [pid 5465] <... creat resumed>) = 4 [pid 5464] open("./bus", O_RDONLY [pid 5463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 5467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5465] open("./bus", O_RDONLY [pid 4998] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] <... openat resumed>) = 3 [pid 5465] <... open resumed>) = 5 [pid 5464] <... open resumed>) = 5 [pid 5463] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5464] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5463] chdir("./file0" [pid 5000] lstat("./37/file0", [pid 5467] chdir("./file0" [pid 5465] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5464] <... open resumed>) = 6 [pid 5463] <... chdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5467] <... chdir resumed>) = 0 [pid 5465] <... open resumed>) = 6 [pid 5464] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5463] ioctl(4, LOOP_CLR_FD [pid 5467] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] <... ioctl resumed>) = 0 [pid 5465] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5464] <... write resumed>) = 32 [pid 5463] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] close(4 [pid 5464] unlink("./bus" [pid 5463] close(4 [pid 5000] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5467] <... close resumed>) = 0 [pid 5465] <... write resumed>) = 32 [pid 5464] <... unlink resumed>) = 0 [pid 5463] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5467] creat("./bus", 000 [pid 5465] unlink("./bus" [pid 5464] sendfile(4, 5, NULL, 145139829833722 [pid 5463] creat("./bus", 000 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5465] <... unlink resumed>) = 0 [pid 5000] getdents64(4, [pid 5467] <... creat resumed>) = 4 [pid 5465] sendfile(4, 5, NULL, 145139829833722 [pid 5464] <... sendfile resumed>) = 32 [pid 5463] <... creat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5467] open("./bus", O_RDONLY [pid 5464] exit_group(0 [pid 5463] open("./bus", O_RDONLY [pid 5000] getdents64(4, [pid 5467] <... open resumed>) = 5 [pid 5465] <... sendfile resumed>) = 32 [pid 5464] <... exit_group resumed>) = ? [pid 5463] <... open resumed>) = 5 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5467] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5465] exit_group(0 [pid 5463] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] close(4 [pid 5467] <... open resumed>) = 6 [pid 5465] <... exit_group resumed>) = ? [pid 5464] +++ exited with 0 +++ [pid 5463] <... open resumed>) = 6 [pid 5000] <... close resumed>) = 0 [pid 5467] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5463] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] rmdir("./37/file0" [pid 5467] <... write resumed>) = 32 [pid 5465] +++ exited with 0 +++ [pid 5463] <... write resumed>) = 32 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5464, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5467] unlink("./bus" [pid 5463] unlink("./bus" [pid 5000] getdents64(3, [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5467] <... unlink resumed>) = 0 [pid 5463] <... unlink resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5467] sendfile(4, 5, NULL, 145139829833722 [pid 5463] sendfile(4, 5, NULL, 145139829833722 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] close(3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5467] <... sendfile resumed>) = 32 [pid 5463] <... sendfile resumed>) = 32 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5467] exit_group(0 [ 64.083980][ T5472] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.095031][ T5473] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5463] exit_group(0 [pid 5000] rmdir("./37" [pid 5467] <... exit_group resumed>) = ? [pid 5463] <... exit_group resumed>) = ? [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5463] +++ exited with 0 +++ [pid 5467] +++ exited with 0 +++ [pid 5001] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./38", 0777 [pid 4999] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5463, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5467, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5003] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] fstat(3, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 5001] getdents64(3, [pid 5000] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./38/file0", [pid 5003] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5003] fstat(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(3, [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] lstat("./39/binderfs", [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5474 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./39/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./36/binderfs", [pid 5001] <... unlink resumed>) = 0 [pid 4999] lstat("./38/binderfs", [pid 4998] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] lstat("./38/binderfs", [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5474 attached [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./36/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5474] chdir("./38" [pid 5003] unlink("./38/binderfs" [pid 5002] <... unlink resumed>) = 0 [pid 4999] unlink("./38/binderfs" [pid 4998] fstat(4, [pid 5474] <... chdir resumed>) = 0 [pid 5003] <... unlink resumed>) = 0 [pid 5002] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5474] <... prctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5474] setpgid(0, 0 [pid 4998] getdents64(4, [pid 5474] <... setpgid resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] close(4 [pid 5474] <... openat resumed>) = 3 [pid 5002] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5474] write(3, "1000", 4 [pid 4998] rmdir("./38/file0" [pid 5474] <... write resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 5474] close(3 [pid 4998] getdents64(3, [pid 5474] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5474] symlink("/dev/binderfs", "./binderfs" [pid 5002] lstat("./36/file0", [pid 5001] lstat("./39/file0", [pid 4999] <... umount2 resumed>) = 0 [pid 4998] close(3 [pid 5474] <... symlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5474] memfd_create("syzkaller", 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] rmdir("./38" [pid 5474] <... memfd_create resumed>) = 3 [pid 5002] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 5474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] mkdir("./39", 0777 [pid 5474] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 4 [pid 4998] <... mkdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] lstat("./38/file0", [pid 5002] fstat(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./38/file0", [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5003] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(4, [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3 [pid 5003] <... openat resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 4999] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5002] close(4 [pid 5001] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 4998] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] rmdir("./39/file0" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] getdents64(4, [pid 5002] rmdir("./36/file0" [pid 5001] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 5002] getdents64(3, [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5475 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5002] close(3 [pid 5001] <... close resumed>) = 0 [pid 4999] close(4./strace-static-x86_64: Process 5475 attached [pid 5474] <... write resumed>) = 2097152 [pid 5003] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] rmdir("./39" [pid 4999] <... close resumed>) = 0 [pid 5475] chdir("./39" [pid 5474] munmap(0x7f5db7f12000, 2097152 [pid 5003] rmdir("./38/file0" [pid 5002] rmdir("./36" [pid 5001] <... rmdir resumed>) = 0 [pid 5474] <... munmap resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] mkdir("./40", 0777 [pid 4999] rmdir("./38/file0" [pid 5475] <... chdir resumed>) = 0 [pid 5474] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] getdents64(3, [pid 5002] mkdir("./37", 0777 [pid 5475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5474] <... openat resumed>) = 4 [pid 5001] <... mkdir resumed>) = 0 [pid 5475] <... prctl resumed>) = 0 [pid 5474] ioctl(4, LOOP_SET_FD, 3 [pid 5475] setpgid(0, 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 5003] close(3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 5003] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./38" [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4999] <... close resumed>) = 0 [pid 5003] mkdir("./39", 0777 [pid 5002] close(3 [pid 5001] <... close resumed>) = 0 [pid 4999] rmdir("./38" [pid 5003] <... mkdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] mkdir("./39", 0777 [pid 5003] <... openat resumed>) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5476 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5477 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... openat resumed>) = 3 [pid 5003] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5475] <... setpgid resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] close(3 [pid 5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... close resumed>) = 0 [pid 5475] <... openat resumed>) = 3 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5478 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5475] write(3, "1000", 4./strace-static-x86_64: Process 5477 attached ) = 4 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5479 [pid 5477] chdir("./37" [pid 5475] close(3 [pid 5477] <... chdir resumed>) = 0 [pid 5475] <... close resumed>) = 0 ./strace-static-x86_64: Process 5476 attached [pid 5477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5475] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5479 attached [pid 5477] <... prctl resumed>) = 0 [pid 5476] chdir("./40" [pid 5475] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5478 attached [pid 5479] chdir("./39" [pid 5477] setpgid(0, 0 [pid 5476] <... chdir resumed>) = 0 [pid 5475] memfd_create("syzkaller", 0 [pid 5479] <... chdir resumed>) = 0 [pid 5478] chdir("./39" [pid 5477] <... setpgid resumed>) = 0 [pid 5476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5475] <... memfd_create resumed>) = 3 [pid 5479] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5478] <... chdir resumed>) = 0 [pid 5477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5476] <... prctl resumed>) = 0 [pid 5475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5479] <... prctl resumed>) = 0 [pid 5478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5477] <... openat resumed>) = 3 [pid 5476] setpgid(0, 0 [pid 5475] <... mmap resumed>) = 0x7f5db7f12000 [pid 5474] <... ioctl resumed>) = 0 [pid 5479] setpgid(0, 0 [pid 5478] <... prctl resumed>) = 0 [pid 5477] write(3, "1000", 4 [pid 5476] <... setpgid resumed>) = 0 [pid 5478] setpgid(0, 0 [pid 5476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5478] <... setpgid resumed>) = 0 [pid 5476] <... openat resumed>) = 3 [pid 5478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5476] write(3, "1000", 4 [pid 5478] <... openat resumed>) = 3 [pid 5476] <... write resumed>) = 4 [pid 5478] write(3, "1000", 4 [pid 5476] close(3 [pid 5478] <... write resumed>) = 4 [pid 5476] <... close resumed>) = 0 [pid 5478] close(3 [pid 5476] symlink("/dev/binderfs", "./binderfs" [pid 5478] <... close resumed>) = 0 [pid 5476] <... symlink resumed>) = 0 [pid 5478] symlink("/dev/binderfs", "./binderfs" [pid 5476] memfd_create("syzkaller", 0 [pid 5478] <... symlink resumed>) = 0 [pid 5476] <... memfd_create resumed>) = 3 [pid 5478] memfd_create("syzkaller", 0 [pid 5476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5478] <... memfd_create resumed>) = 3 [pid 5476] <... mmap resumed>) = 0x7f5db7f12000 [pid 5479] <... setpgid resumed>) = 0 [pid 5478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5477] <... write resumed>) = 4 [pid 5474] close(3 [pid 5479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5478] <... mmap resumed>) = 0x7f5db7f12000 [pid 5477] close(3 [pid 5474] <... close resumed>) = 0 [pid 5479] <... openat resumed>) = 3 [pid 5478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5477] <... close resumed>) = 0 [pid 5475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5474] mkdir("./file0", 0777 [pid 5479] write(3, "1000", 4 [pid 5477] symlink("/dev/binderfs", "./binderfs" [pid 5479] <... write resumed>) = 4 [pid 5474] <... mkdir resumed>) = 0 [pid 5479] close(3 [pid 5477] <... symlink resumed>) = 0 [pid 5479] <... close resumed>) = 0 [pid 5474] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5479] symlink("/dev/binderfs", "./binderfs" [pid 5477] memfd_create("syzkaller", 0 [pid 5476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5479] <... symlink resumed>) = 0 [ 64.254602][ T5474] loop2: detected capacity change from 0 to 4096 [pid 5477] <... memfd_create resumed>) = 3 [pid 5479] memfd_create("syzkaller", 0 [pid 5477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5479] <... memfd_create resumed>) = 3 [pid 5479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5477] <... mmap resumed>) = 0x7f5db7f12000 [pid 5479] <... mmap resumed>) = 0x7f5db7f12000 [pid 5475] <... write resumed>) = 2097152 [pid 5477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5475] munmap(0x7f5db7f12000, 2097152 [pid 5478] <... write resumed>) = 2097152 [ 64.313473][ T5474] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5475] <... munmap resumed>) = 0 [pid 5476] <... write resumed>) = 2097152 [pid 5476] munmap(0x7f5db7f12000, 2097152 [pid 5478] munmap(0x7f5db7f12000, 2097152 [pid 5476] <... munmap resumed>) = 0 [pid 5478] <... munmap resumed>) = 0 [pid 5476] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5476] ioctl(4, LOOP_SET_FD, 3 [pid 5475] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5478] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5475] <... openat resumed>) = 4 [pid 5478] <... openat resumed>) = 4 [pid 5475] ioctl(4, LOOP_SET_FD, 3 [pid 5478] ioctl(4, LOOP_SET_FD, 3 [pid 5479] <... write resumed>) = 2097152 [pid 5477] <... write resumed>) = 2097152 [pid 5476] <... ioctl resumed>) = 0 [pid 5475] <... ioctl resumed>) = 0 [pid 5479] munmap(0x7f5db7f12000, 2097152 [pid 5477] munmap(0x7f5db7f12000, 2097152 [pid 5476] close(3 [pid 5475] close(3 [pid 5479] <... munmap resumed>) = 0 [pid 5478] <... ioctl resumed>) = 0 [pid 5479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5478] close(3 [pid 5477] <... munmap resumed>) = 0 [pid 5476] <... close resumed>) = 0 [pid 5475] <... close resumed>) = 0 [pid 5479] <... openat resumed>) = 4 [pid 5478] <... close resumed>) = 0 [pid 5478] mkdir("./file0", 0777) = 0 [pid 5478] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5479] ioctl(4, LOOP_SET_FD, 3 [pid 5477] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5476] mkdir("./file0", 0777 [ 64.364131][ T5474] NILFS (loop2): trying rollback from an earlier position [ 64.370566][ T5476] loop3: detected capacity change from 0 to 4096 [ 64.381190][ T5475] loop0: detected capacity change from 0 to 4096 [ 64.381722][ T5478] loop5: detected capacity change from 0 to 4096 [ 64.397984][ T5474] NILFS (loop2): recovery complete [ 64.404078][ T5479] loop1: detected capacity change from 0 to 4096 [pid 5475] mkdir("./file0", 0777 [pid 5479] <... ioctl resumed>) = 0 [pid 5477] <... openat resumed>) = 4 [pid 5476] <... mkdir resumed>) = 0 [pid 5475] <... mkdir resumed>) = 0 [pid 5479] close(3 [pid 5477] ioctl(4, LOOP_SET_FD, 3 [pid 5476] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5475] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5479] <... close resumed>) = 0 [pid 5479] mkdir("./file0", 0777) = 0 [pid 5479] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5477] <... ioctl resumed>) = 0 [pid 5477] close(3) = 0 [pid 5477] mkdir("./file0", 0777) = 0 [ 64.410392][ T5478] NILFS (loop5): invalid segment: Checksum error in segment payload [ 64.410414][ T5478] NILFS (loop5): trying rollback from an earlier position [ 64.427399][ T5480] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.428327][ T5477] loop4: detected capacity change from 0 to 4096 [ 64.438886][ T5478] NILFS (loop5): recovery complete [ 64.452066][ T5475] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5477] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5478] <... mount resumed>) = 0 [pid 5474] <... mount resumed>) = 0 [pid 5474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5474] chdir("./file0") = 0 [pid 5474] ioctl(4, LOOP_CLR_FD) = 0 [pid 5474] close(4) = 0 [pid 5474] creat("./bus", 000 [pid 5478] <... openat resumed>) = 3 [pid 5478] chdir("./file0") = 0 [pid 5478] ioctl(4, LOOP_CLR_FD) = 0 [pid 5478] close(4) = 0 [pid 5478] creat("./bus", 000) = 4 [pid 5474] <... creat resumed>) = 4 [ 64.452681][ T5481] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.466119][ T5476] NILFS (loop3): invalid segment: Checksum error in segment payload [ 64.471464][ T5475] NILFS (loop0): trying rollback from an earlier position [ 64.486635][ T5479] NILFS (loop1): invalid segment: Checksum error in segment payload [ 64.504770][ T5476] NILFS (loop3): trying rollback from an earlier position [pid 5474] open("./bus", O_RDONLY [pid 5478] open("./bus", O_RDONLY [pid 5474] <... open resumed>) = 5 [pid 5474] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5474] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5474] unlink("./bus") = 0 [ 64.510994][ T27] kauditd_printk_skb: 106 callbacks suppressed [ 64.511004][ T27] audit: type=1804 audit(1684404984.269:466): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/38/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 64.515187][ T5479] NILFS (loop1): trying rollback from an earlier position [pid 5474] sendfile(4, 5, NULL, 145139829833722 [pid 5478] <... open resumed>) = 5 [pid 5474] <... sendfile resumed>) = 32 [pid 5474] exit_group(0) = ? [ 64.535146][ T27] audit: type=1804 audit(1684404984.289:467): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/38/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 64.549686][ T5477] NILFS (loop4): invalid segment: Checksum error in segment payload [ 64.580677][ T5475] NILFS (loop0): recovery complete [ 64.586016][ T27] audit: type=1804 audit(1684404984.309:468): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.XGE8lx/39/file0/bus" dev="loop5" ino=12 res=1 errno=0 [pid 5478] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5478] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5474] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5474, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5478] <... write resumed>) = 32 [pid 5478] unlink("./bus" [pid 5000] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5479] <... mount resumed>) = 0 [pid 5475] <... mount resumed>) = 0 [pid 5478] <... unlink resumed>) = 0 [pid 5478] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 64.587717][ T5477] NILFS (loop4): trying rollback from an earlier position [ 64.617773][ T27] audit: type=1804 audit(1684404984.359:469): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.XGE8lx/39/file0/bus" dev="loop5" ino=12 res=1 errno=0 [ 64.619636][ T5476] NILFS (loop3): recovery complete [ 64.645952][ T5479] NILFS (loop1): recovery complete [ 64.651293][ T5482] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./38/binderfs") = 0 [pid 5000] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5478] <... sendfile resumed>) = 32 [pid 5478] exit_group(0) = ? [pid 5479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5479] <... openat resumed>) = 3 [pid 5475] <... openat resumed>) = 3 [pid 5479] chdir("./file0" [pid 5475] chdir("./file0" [pid 5479] <... chdir resumed>) = 0 [pid 5475] <... chdir resumed>) = 0 [pid 5479] ioctl(4, LOOP_CLR_FD [pid 5475] ioctl(4, LOOP_CLR_FD [pid 5479] <... ioctl resumed>) = 0 [pid 5475] <... ioctl resumed>) = 0 [pid 5478] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5478, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./39/binderfs") = 0 [pid 5003] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5479] close(4) = 0 [pid 5479] creat("./bus", 000 [pid 5475] close(4) = 0 [pid 5475] creat("./bus", 000) = 4 [pid 5475] open("./bus", O_RDONLY [pid 5000] <... umount2 resumed>) = 0 [ 64.653832][ T5483] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.676013][ T5477] NILFS (loop4): recovery complete [ 64.676144][ T5484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5479] <... creat resumed>) = 4 [pid 5476] <... mount resumed>) = 0 [pid 5475] <... open resumed>) = 5 [pid 5003] <... umount2 resumed>) = 0 [pid 5479] open("./bus", O_RDONLY [pid 5476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5475] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5479] <... open resumed>) = 5 [pid 5476] <... openat resumed>) = 3 [pid 5475] <... open resumed>) = 6 [pid 5003] lstat("./39/file0", [pid 5479] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5476] chdir("./file0" [pid 5475] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5479] <... open resumed>) = 6 [pid 5476] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5479] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5476] ioctl(4, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5476] <... ioctl resumed>) = 0 [pid 5479] <... write resumed>) = 32 [pid 5476] close(4 [pid 5475] <... write resumed>) = 32 [pid 5003] <... openat resumed>) = 4 [pid 5479] unlink("./bus" [pid 5476] <... close resumed>) = 0 [pid 5475] unlink("./bus" [pid 5003] fstat(4, [pid 5476] creat("./bus", 000 [pid 5479] <... unlink resumed>) = 0 [pid 5479] sendfile(4, 5, NULL, 145139829833722 [pid 5475] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5479] <... sendfile resumed>) = 32 [pid 5475] sendfile(4, 5, NULL, 145139829833722 [pid 5003] getdents64(4, [pid 5479] exit_group(0) = ? [pid 5475] <... sendfile resumed>) = 32 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5479] +++ exited with 0 +++ [pid 5475] exit_group(0 [pid 5003] getdents64(4, [pid 5475] <... exit_group resumed>) = ? [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5479, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5475] +++ exited with 0 +++ [pid 5003] close(4) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] rmdir("./39/file0" [pid 4999] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] <... rmdir resumed>) = 0 [pid 5477] <... mount resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5477] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5477] chdir("./file0" [pid 5476] <... creat resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5477] <... chdir resumed>) = 0 [pid 5476] open("./bus", O_RDONLY [pid 4999] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5477] ioctl(4, LOOP_CLR_FD [pid 5476] <... open resumed>) = 5 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5477] <... ioctl resumed>) = 0 [pid 5476] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 5477] close(4 [pid 5476] <... open resumed>) = 6 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(3, [pid 5477] <... close resumed>) = 0 [pid 5476] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] lstat("./39/binderfs", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5477] creat("./bus", 000 [pid 5476] <... write resumed>) = 32 [pid 5003] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] getdents64(3, [pid 5476] unlink("./bus" [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./39/binderfs" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5476] <... unlink resumed>) = 0 [pid 5003] close(3 [pid 4999] <... unlink resumed>) = 0 [pid 4998] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5476] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5476] <... sendfile resumed>) = 32 [pid 5003] rmdir("./39" [pid 5000] lstat("./38/file0", [pid 4998] lstat("./39/binderfs", [pid 5476] exit_group(0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5476] <... exit_group resumed>) = ? [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] unlink("./39/binderfs" [pid 5476] +++ exited with 0 +++ [pid 5003] mkdir("./40", 0777 [pid 5000] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5476, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(4, [pid 5003] close(3 [pid 5001] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] fstat(3, [pid 5000] getdents64(4, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5486 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./40/binderfs", [ 64.707318][ T27] audit: type=1804 audit(1684404984.479:470): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.aQJbv6/39/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 64.752211][ T5485] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] close(4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5486 attached [pid 5001] unlink("./40/binderfs" [pid 5000] <... close resumed>) = 0 [pid 5486] chdir("./40" [pid 5477] <... creat resumed>) = 4 [pid 5001] <... unlink resumed>) = 0 [pid 5000] rmdir("./38/file0" [pid 4999] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5486] <... chdir resumed>) = 0 [pid 5477] open("./bus", O_RDONLY [pid 5001] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5477] <... open resumed>) = 5 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5486] <... prctl resumed>) = 0 [pid 5477] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] getdents64(3, [pid 4999] lstat("./39/file0", [pid 5486] setpgid(0, 0 [pid 5477] <... open resumed>) = 6 [pid 5477] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./39/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./39") = 0 [pid 4999] mkdir("./40", 0777 [pid 5486] <... setpgid resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5000] close(3 [pid 5486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5486] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4998] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5486] write(3, "1000", 4 [pid 5477] <... write resumed>) = 32 [pid 5000] rmdir("./38" [pid 4999] <... openat resumed>) = 3 [pid 5486] <... write resumed>) = 4 [pid 5477] unlink("./bus" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5486] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] lstat("./39/file0", [pid 5486] <... close resumed>) = 0 [pid 5477] <... unlink resumed>) = 0 [pid 5000] mkdir("./39", 0777 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5486] symlink("/dev/binderfs", "./binderfs" [pid 5477] sendfile(4, 5, NULL, 145139829833722 [pid 4999] close(3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5486] <... symlink resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5486] memfd_create("syzkaller", 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5487 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5486] <... memfd_create resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5477] <... sendfile resumed>) = 32 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 4 [pid 5486] <... mmap resumed>) = 0x7f5db7f12000 [pid 5477] exit_group(0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] fstat(4, [pid 5477] <... exit_group resumed>) = ? [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./39/file0") = 0 [pid 4998] getdents64(3, ./strace-static-x86_64: Process 5487 attached 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5487] chdir("./40" [pid 4998] close(3 [pid 5487] <... chdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] rmdir("./39" [pid 5487] <... prctl resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5487] setpgid(0, 0 [pid 5000] close(3 [pid 4998] mkdir("./40", 0777 [pid 5487] <... setpgid resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5477] +++ exited with 0 +++ [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5487] <... openat resumed>) = 3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5477, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] <... openat resumed>) = 3 [pid 5487] write(3, "1000", 4 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 4998] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5488 attached [pid 5487] <... write resumed>) = 4 [pid 5486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5488 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5488] chdir("./39" [pid 5487] close(3 [pid 5001] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [pid 5488] <... chdir resumed>) = 0 [pid 5487] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5487] symlink("/dev/binderfs", "./binderfs" [pid 5002] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./40/file0", [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5488] <... prctl resumed>) = 0 [pid 5487] <... symlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5488] setpgid(0, 0 [pid 5487] memfd_create("syzkaller", 0 [pid 5002] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5489 [pid 5488] <... setpgid resumed>) = 0 [pid 5487] <... memfd_create resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] fstat(3, [pid 5001] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5488] <... openat resumed>) = 3 [pid 5487] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5488] write(3, "1000", 4 [pid 5487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5486] <... write resumed>) = 2097152 [pid 5002] getdents64(3, [pid 5001] fstat(4, [pid 5488] <... write resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5488] close(3 [pid 5002] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5489 attached [pid 5488] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 5489] chdir("./40" [pid 5488] symlink("/dev/binderfs", "./binderfs" [pid 5002] lstat("./37/binderfs", [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5489] <... chdir resumed>) = 0 [pid 5488] <... symlink resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] getdents64(4, [pid 5489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5488] memfd_create("syzkaller", 0 [pid 5002] unlink("./37/binderfs" [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5489] <... prctl resumed>) = 0 [pid 5488] <... memfd_create resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5001] close(4 [pid 5489] setpgid(0, 0 [pid 5488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 5489] <... setpgid resumed>) = 0 [pid 5488] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] rmdir("./40/file0" [pid 5489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5489] write(3, "1000", 4) = 4 [pid 5489] close(3) = 0 [pid 5489] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5489] memfd_create("syzkaller", 0) = 3 [ 64.840627][ T27] audit: type=1804 audit(1684404984.499:471): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EoL44c/39/file0/bus" dev="loop1" ino=12 res=1 errno=0 [pid 5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./40") = 0 [pid 5001] mkdir("./41", 0777 [pid 5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5490 [pid 5486] munmap(0x7f5db7f12000, 2097152) = 0 ./strace-static-x86_64: Process 5490 attached [pid 5490] chdir("./41" [pid 5486] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5490] <... chdir resumed>) = 0 [pid 5487] <... write resumed>) = 2097152 [pid 5486] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = 0 [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5490] setpgid(0, 0) = 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5490] write(3, "1000", 4) = 4 [pid 5490] close(3) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5486] <... ioctl resumed>) = 0 [pid 5490] memfd_create("syzkaller", 0 [pid 5486] close(3 [pid 5490] <... memfd_create resumed>) = 3 [pid 5490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5486] <... close resumed>) = 0 [pid 5002] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5490] <... mmap resumed>) = 0x7f5db7f12000 [pid 5486] mkdir("./file0", 0777 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./37/file0", [pid 5486] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5487] munmap(0x7f5db7f12000, 2097152 [pid 5486] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5487] <... munmap resumed>) = 0 [pid 5002] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5487] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5487] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5487] ioctl(4, LOOP_SET_FD, 3 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [ 64.938483][ T5486] loop5: detected capacity change from 0 to 4096 [ 64.968106][ T5486] NILFS (loop5): invalid segment: Checksum error in segment payload [ 64.968529][ T5487] loop1: detected capacity change from 0 to 4096 [pid 5002] getdents64(4, [pid 5490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5488] <... write resumed>) = 2097152 [pid 5488] munmap(0x7f5db7f12000, 2097152 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5488] <... munmap resumed>) = 0 [pid 5002] close(4 [pid 5488] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 5488] <... openat resumed>) = 4 [pid 5489] <... write resumed>) = 2097152 [pid 5002] rmdir("./37/file0" [pid 5489] munmap(0x7f5db7f12000, 2097152 [pid 5488] ioctl(4, LOOP_SET_FD, 3 [pid 5487] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5489] <... munmap resumed>) = 0 [pid 5490] <... write resumed>) = 2097152 [pid 5490] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5490] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5490] ioctl(4, LOOP_SET_FD, 3 [pid 5489] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] getdents64(3, [pid 5489] <... openat resumed>) = 4 [pid 5487] close(3 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5488] <... ioctl resumed>) = 0 [ 64.984612][ T5486] NILFS (loop5): trying rollback from an earlier position [ 64.990405][ T27] audit: type=1804 audit(1684404984.499:472): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.aQJbv6/39/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 64.999520][ T5486] NILFS (loop5): recovery complete [ 65.023201][ T5488] loop2: detected capacity change from 0 to 4096 [pid 5489] ioctl(4, LOOP_SET_FD, 3 [pid 5488] close(3 [pid 5487] <... close resumed>) = 0 [pid 5002] close(3 [pid 5490] <... ioctl resumed>) = 0 [pid 5490] close(3) = 0 [pid 5490] mkdir("./file0", 0777) = 0 [ 65.030386][ T27] audit: type=1804 audit(1684404984.499:473): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EoL44c/39/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 65.030980][ T5490] loop3: detected capacity change from 0 to 4096 [ 65.053513][ T27] audit: type=1804 audit(1684404984.519:474): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EF5sxk/40/file0/bus" dev="loop3" ino=12 res=1 errno=0 [ 65.082852][ T5489] loop0: detected capacity change from 0 to 4096 [pid 5490] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5489] <... ioctl resumed>) = 0 [pid 5488] <... close resumed>) = 0 [pid 5487] mkdir("./file0", 0777 [pid 5002] <... close resumed>) = 0 [pid 5489] close(3 [pid 5488] mkdir("./file0", 0777 [pid 5487] <... mkdir resumed>) = 0 [pid 5486] <... mount resumed>) = 0 [pid 5002] rmdir("./37" [pid 5489] <... close resumed>) = 0 [pid 5488] <... mkdir resumed>) = 0 [pid 5489] mkdir("./file0", 0777 [pid 5488] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5489] <... mkdir resumed>) = 0 [pid 5489] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5487] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... rmdir resumed>) = 0 [pid 5486] <... openat resumed>) = 3 [ 65.084764][ T5490] NILFS (loop3): invalid segment: Checksum error in segment payload [ 65.089531][ T27] audit: type=1804 audit(1684404984.519:475): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EF5sxk/40/file0/bus" dev="loop3" ino=12 res=1 errno=0 [ 65.097648][ T5491] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.130565][ T5490] NILFS (loop3): trying rollback from an earlier position [pid 5002] mkdir("./38", 0777 [pid 5486] chdir("./file0" [pid 5002] <... mkdir resumed>) = 0 [pid 5486] <... chdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5486] ioctl(4, LOOP_CLR_FD [pid 5002] <... openat resumed>) = 3 [ 65.142124][ T5488] NILFS (loop2): invalid segment: Checksum error in segment payload [ 65.143679][ T5489] NILFS (loop0): invalid segment: Checksum error in segment payload [ 65.153058][ T5489] NILFS (loop0): trying rollback from an earlier position [ 65.159911][ T5487] NILFS (loop1): invalid segment: Checksum error in segment payload [ 65.175633][ T5488] NILFS (loop2): trying rollback from an earlier position [ 65.176808][ T5489] NILFS (loop0): recovery complete [pid 5486] <... ioctl resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5486] close(4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5488] <... mount resumed>) = 0 [pid 5488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5488] chdir("./file0") = 0 [pid 5488] ioctl(4, LOOP_CLR_FD) = 0 [pid 5488] close(4) = 0 [pid 5488] creat("./bus", 000 [pid 5489] <... mount resumed>) = 0 [pid 5486] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5489] chdir("./file0") = 0 [pid 5489] ioctl(4, LOOP_CLR_FD) = 0 [pid 5489] close(4) = 0 [pid 5489] creat("./bus", 000 [pid 5486] creat("./bus", 000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5490] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5495 attached [pid 5490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5489] <... creat resumed>) = 4 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5495 [ 65.183166][ T5487] NILFS (loop1): trying rollback from an earlier position [ 65.195189][ T5490] NILFS (loop3): recovery complete [ 65.198784][ T5488] NILFS (loop2): recovery complete [ 65.212391][ T5494] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.214244][ T5492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.227395][ T5493] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5489] open("./bus", O_RDONLY) = 5 [pid 5489] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5489] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5488] <... creat resumed>) = 4 [pid 5488] open("./bus", O_RDONLY) = 5 [pid 5488] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5488] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5495] chdir("./38" [pid 5490] <... openat resumed>) = 3 [pid 5490] chdir("./file0" [pid 5495] <... chdir resumed>) = 0 [pid 5490] <... chdir resumed>) = 0 [pid 5495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5490] ioctl(4, LOOP_CLR_FD [pid 5486] <... creat resumed>) = 4 [pid 5489] <... write resumed>) = 32 [pid 5488] <... write resumed>) = 32 [pid 5495] <... prctl resumed>) = 0 [pid 5490] <... ioctl resumed>) = 0 [pid 5489] unlink("./bus" [pid 5486] open("./bus", O_RDONLY [pid 5490] close(4 [pid 5488] unlink("./bus" [pid 5486] <... open resumed>) = 5 [pid 5495] setpgid(0, 0) = 0 [pid 5490] <... close resumed>) = 0 [pid 5486] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5490] creat("./bus", 000 [pid 5486] <... open resumed>) = 6 [pid 5495] <... openat resumed>) = 3 [pid 5495] write(3, "1000", 4 [pid 5486] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5495] <... write resumed>) = 4 [pid 5488] <... unlink resumed>) = 0 [pid 5488] sendfile(4, 5, NULL, 145139829833722 [pid 5495] close(3 [pid 5489] <... unlink resumed>) = 0 [pid 5489] sendfile(4, 5, NULL, 145139829833722 [pid 5495] <... close resumed>) = 0 [pid 5488] <... sendfile resumed>) = 32 [pid 5486] <... write resumed>) = 32 [pid 5495] symlink("/dev/binderfs", "./binderfs" [pid 5489] <... sendfile resumed>) = 32 [pid 5488] exit_group(0 [pid 5486] unlink("./bus" [pid 5495] <... symlink resumed>) = 0 [pid 5489] exit_group(0 [pid 5488] <... exit_group resumed>) = ? [pid 5495] memfd_create("syzkaller", 0 [pid 5489] <... exit_group resumed>) = ? [pid 5486] <... unlink resumed>) = 0 [pid 5495] <... memfd_create resumed>) = 3 [pid 5489] +++ exited with 0 +++ [pid 5488] +++ exited with 0 +++ [pid 5486] sendfile(4, 5, NULL, 145139829833722 [pid 5495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5488, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5495] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5489, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5486] <... sendfile resumed>) = 32 [ 65.249214][ T5487] NILFS (loop1): recovery complete [pid 5495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5486] exit_group(0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5490] <... creat resumed>) = 4 [pid 5487] <... mount resumed>) = 0 [pid 5486] <... exit_group resumed>) = ? [pid 4998] <... restart_syscall resumed>) = 0 [pid 5490] open("./bus", O_RDONLY) = 5 [pid 5000] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5490] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5486] +++ exited with 0 +++ [pid 5000] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5490] <... open resumed>) = 6 [pid 5000] <... openat resumed>) = 3 [pid 5490] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5486, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] fstat(3, [pid 4998] <... openat resumed>) = 3 [pid 5487] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, [pid 5487] chdir("./file0" [pid 5000] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] getdents64(3, [pid 5000] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5487] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5487] ioctl(4, LOOP_CLR_FD [pid 5000] lstat("./39/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5487] <... ioctl resumed>) = 0 [pid 5003] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] lstat("./40/binderfs", [pid 5487] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./39/binderfs" [pid 5490] <... write resumed>) = 32 [pid 5487] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5490] unlink("./bus" [pid 5487] creat("./bus", 000 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... unlink resumed>) = 0 [pid 4998] unlink("./40/binderfs" [pid 5003] fstat(3, [pid 5490] <... unlink resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 5490] sendfile(4, 5, NULL, 145139829833722 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5490] <... sendfile resumed>) = 32 [pid 5003] lstat("./40/binderfs", [pid 5490] exit_group(0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5490] <... exit_group resumed>) = ? [pid 5003] unlink("./40/binderfs") = 0 [pid 5003] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5487] <... creat resumed>) = 4 [pid 5000] <... umount2 resumed>) = 0 [pid 5487] open("./bus", O_RDONLY [pid 5003] <... umount2 resumed>) = 0 [pid 5000] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5487] <... open resumed>) = 5 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5487] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] lstat("./39/file0", [pid 5487] <... open resumed>) = 6 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5487] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5490] +++ exited with 0 +++ [pid 5000] <... openat resumed>) = 4 [pid 5487] <... write resumed>) = 32 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] fstat(4, [pid 5487] unlink("./bus" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5001] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5487] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5487] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(4, [pid 5001] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5487] <... sendfile resumed>) = 32 [pid 5001] <... openat resumed>) = 3 [pid 5000] close(4 [pid 5487] exit_group(0 [pid 5001] fstat(3, [pid 5000] <... close resumed>) = 0 [pid 5487] <... exit_group resumed>) = ? [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] rmdir("./39/file0" [pid 4998] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 5001] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] close(3 [pid 5001] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4998] lstat("./40/file0", [pid 5487] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 65.275165][ T5496] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] rmdir("./39" [pid 5001] lstat("./41/binderfs", [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5487, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] mkdir("./40", 0777 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./41/binderfs" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] lstat("./40/file0", [pid 5001] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 4998] <... openat resumed>) = 4 [pid 5003] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 4 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5497 [pid 5003] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 4999] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] fstat(4, [pid 4999] <... openat resumed>) = 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 5003] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 4999] getdents64(3, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] rmdir("./40/file0" [pid 4999] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 4999] lstat("./40/binderfs", [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] close(4 [pid 5003] <... close resumed>) = 0 [pid 4999] unlink("./40/binderfs" [pid 5003] rmdir("./40" [pid 4998] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4998] rmdir("./40/file0" [pid 5495] <... write resumed>) = 2097152 [pid 5003] mkdir("./41", 0777 [pid 4999] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... mkdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5495] munmap(0x7f5db7f12000, 2097152 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5498 [pid 4998] getdents64(3, [pid 5495] <... munmap resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5495] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4998] close(3 [pid 5495] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./40"./strace-static-x86_64: Process 5498 attached ) = 0 [pid 4998] mkdir("./41", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5497 attached [pid 5497] chdir("./40" [pid 4998] <... openat resumed>) = 3 [pid 5497] <... chdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5497] <... prctl resumed>) = 0 [pid 4998] close(3 [pid 5497] setpgid(0, 0 [pid 4998] <... close resumed>) = 0 [pid 5498] chdir("./41" [pid 5497] <... setpgid resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5498] <... chdir resumed>) = 0 [pid 5498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5498] setpgid(0, 0 [pid 5497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5499 [pid 5498] <... setpgid resumed>) = 0 [pid 5498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5497] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5499 attached [pid 5498] <... openat resumed>) = 3 [pid 5497] write(3, "1000", 4 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5498] write(3, "1000", 4) = 4 [pid 5499] chdir("./41" [pid 5498] close(3 [pid 5497] <... write resumed>) = 4 [pid 5001] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5498] <... close resumed>) = 0 [pid 5498] symlink("/dev/binderfs", "./binderfs" [pid 5497] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5499] <... chdir resumed>) = 0 [pid 5498] <... symlink resumed>) = 0 [pid 5497] <... close resumed>) = 0 [pid 5001] lstat("./41/file0", [pid 4999] lstat("./40/file0", [pid 5499] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5498] memfd_create("syzkaller", 0 [pid 5497] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5499] <... prctl resumed>) = 0 [pid 5498] <... memfd_create resumed>) = 3 [pid 5497] <... symlink resumed>) = 0 [pid 5001] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5499] setpgid(0, 0 [pid 5498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5497] memfd_create("syzkaller", 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5499] <... setpgid resumed>) = 0 [pid 5498] <... mmap resumed>) = 0x7f5db7f12000 [pid 5497] <... memfd_create resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 4 [pid 5499] <... openat resumed>) = 3 [pid 5497] <... mmap resumed>) = 0x7f5db7f12000 [pid 5495] <... ioctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5495] close(3) = 0 [pid 5001] fstat(4, [pid 4999] <... openat resumed>) = 4 [pid 5495] mkdir("./file0", 0777) = 0 [pid 5495] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] fstat(4, [pid 5499] write(3, "1000", 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5499] <... write resumed>) = 4 [pid 5001] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5499] close(3 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5499] <... close resumed>) = 0 [pid 5001] getdents64(4, [pid 5499] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5499] <... symlink resumed>) = 0 [pid 5001] close(4 [pid 4999] getdents64(4, [pid 5499] memfd_create("syzkaller", 0 [ 65.361140][ T5495] loop4: detected capacity change from 0 to 4096 [pid 5001] <... close resumed>) = 0 [pid 5499] <... memfd_create resumed>) = 3 [pid 5001] rmdir("./41/file0" [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] close(4 [pid 5499] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./40/file0" [pid 5001] close(3) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] rmdir("./41" [pid 4999] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] mkdir("./42", 0777 [pid 4999] close(3 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] rmdir("./40" [pid 5001] <... openat resumed>) = 3 [pid 5497] <... write resumed>) = 2097152 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] mkdir("./41", 0777 [pid 5001] close(3) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5500 [ 65.417907][ T5495] NILFS (loop4): invalid segment: Checksum error in segment payload [ 65.425957][ T5495] NILFS (loop4): trying rollback from an earlier position [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5497] munmap(0x7f5db7f12000, 2097152./strace-static-x86_64: Process 5500 attached [pid 4999] <... close resumed>) = 0 [pid 5500] chdir("./42" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5500] <... chdir resumed>) = 0 [pid 5500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5497] <... munmap resumed>) = 0 [pid 5500] <... prctl resumed>) = 0 [pid 5497] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5501 [pid 5500] setpgid(0, 0 [pid 5497] <... openat resumed>) = 4 [pid 5500] <... setpgid resumed>) = 0 [pid 5497] ioctl(4, LOOP_SET_FD, 3 [pid 5500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5501 attached [pid 5501] chdir("./41") = 0 [pid 5501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5501] setpgid(0, 0) = 0 [pid 5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5501] write(3, "1000", 4) = 4 [pid 5501] close(3) = 0 [pid 5501] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5501] memfd_create("syzkaller", 0 [pid 5500] <... openat resumed>) = 3 [pid 5497] <... ioctl resumed>) = 0 [pid 5501] <... memfd_create resumed>) = 3 [pid 5500] write(3, "1000", 4 [pid 5497] close(3 [pid 5501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5500] <... write resumed>) = 4 [pid 5497] <... close resumed>) = 0 [pid 5501] <... mmap resumed>) = 0x7f5db7f12000 [pid 5500] close(3 [pid 5497] mkdir("./file0", 0777 [pid 5500] <... close resumed>) = 0 [pid 5499] <... write resumed>) = 2097152 [pid 5498] <... write resumed>) = 2097152 [pid 5497] <... mkdir resumed>) = 0 [pid 5500] symlink("/dev/binderfs", "./binderfs" [pid 5497] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5500] <... symlink resumed>) = 0 [pid 5499] munmap(0x7f5db7f12000, 2097152 [pid 5498] munmap(0x7f5db7f12000, 2097152 [pid 5500] memfd_create("syzkaller", 0) = 3 [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5498] <... munmap resumed>) = 0 [pid 5500] <... mmap resumed>) = 0x7f5db7f12000 [pid 5498] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5498] ioctl(4, LOOP_SET_FD, 3 [pid 5499] <... munmap resumed>) = 0 [pid 5501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5499] ioctl(4, LOOP_SET_FD, 3 [pid 5498] <... ioctl resumed>) = 0 [pid 5498] close(3) = 0 [pid 5498] mkdir("./file0", 0777) = 0 [pid 5498] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 65.488832][ T5497] loop2: detected capacity change from 0 to 4096 [ 65.515123][ T5498] loop5: detected capacity change from 0 to 4096 [ 65.517875][ T5497] NILFS (loop2): invalid segment: Checksum error in segment payload [ 65.531104][ T5499] loop0: detected capacity change from 0 to 4096 [pid 5499] <... ioctl resumed>) = 0 [pid 5499] close(3) = 0 [pid 5499] mkdir("./file0", 0777) = 0 [pid 5500] <... write resumed>) = 2097152 [pid 5500] munmap(0x7f5db7f12000, 2097152 [pid 5499] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5501] <... write resumed>) = 2097152 [pid 5500] <... munmap resumed>) = 0 [ 65.550790][ T5497] NILFS (loop2): trying rollback from an earlier position [ 65.555087][ T5495] NILFS (loop4): recovery complete [ 65.573584][ T5499] NILFS (loop0): invalid segment: Checksum error in segment payload [ 65.573785][ T5502] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.589025][ T5497] NILFS (loop2): recovery complete [pid 5501] munmap(0x7f5db7f12000, 2097152 [pid 5500] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5501] <... munmap resumed>) = 0 [pid 5501] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5501] ioctl(4, LOOP_SET_FD, 3 [pid 5500] ioctl(4, LOOP_SET_FD, 3 [pid 5495] <... mount resumed>) = 0 [pid 5495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5495] chdir("./file0") = 0 [pid 5495] ioctl(4, LOOP_CLR_FD) = 0 [pid 5495] close(4) = 0 [pid 5495] creat("./bus", 000 [pid 5500] <... ioctl resumed>) = 0 [pid 5500] close(3) = 0 [pid 5500] mkdir("./file0", 0777) = 0 [pid 5500] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5501] <... ioctl resumed>) = 0 [pid 5501] close(3) = 0 [pid 5501] mkdir("./file0", 0777) = 0 [pid 5501] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5497] <... mount resumed>) = 0 [pid 5497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5497] chdir("./file0") = 0 [ 65.593503][ T5498] NILFS (loop5): invalid segment: Checksum error in segment payload [ 65.606164][ T5499] NILFS (loop0): trying rollback from an earlier position [ 65.608924][ T5501] loop1: detected capacity change from 0 to 4096 [ 65.620430][ T5500] loop3: detected capacity change from 0 to 4096 [ 65.623077][ T5498] NILFS (loop5): trying rollback from an earlier position [ 65.639317][ T5499] NILFS (loop0): recovery complete [pid 5497] ioctl(4, LOOP_CLR_FD) = 0 [pid 5497] close(4) = 0 [pid 5497] creat("./bus", 000) = 4 [pid 5497] open("./bus", O_RDONLY) = 5 [pid 5497] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5497] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5497] unlink("./bus") = 0 [pid 5497] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5497] exit_group(0) = ? [ 65.651791][ T5503] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.663364][ T5501] NILFS (loop1): invalid segment: Checksum error in segment payload [ 65.671412][ T5500] NILFS (loop3): invalid segment: Checksum error in segment payload [ 65.671433][ T5500] NILFS (loop3): trying rollback from an earlier position [ 65.678444][ T5500] NILFS (loop3): recovery complete [ 65.680956][ T5501] NILFS (loop1): trying rollback from an earlier position [pid 5495] <... creat resumed>) = 4 [pid 5497] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5497, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./40/binderfs", [pid 5495] open("./bus", O_RDONLY [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./40/binderfs") = 0 [pid 5000] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] <... mount resumed>) = 0 [pid 5499] <... mount resumed>) = 0 [pid 5495] <... open resumed>) = 5 [pid 5500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5495] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5500] chdir("./file0" [pid 5499] <... openat resumed>) = 3 [pid 5500] <... chdir resumed>) = 0 [pid 5499] chdir("./file0" [pid 5495] <... open resumed>) = 6 [pid 5500] ioctl(4, LOOP_CLR_FD) = 0 [pid 5500] close(4) = 0 [pid 5499] <... chdir resumed>) = 0 [pid 5498] <... mount resumed>) = 0 [pid 5495] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5500] creat("./bus", 000 [pid 5499] ioctl(4, LOOP_CLR_FD) = 0 [pid 5498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5499] close(4 [pid 5498] <... openat resumed>) = 3 [pid 5499] <... close resumed>) = 0 [pid 5495] <... write resumed>) = 32 [pid 5498] chdir("./file0" [ 65.699683][ T5504] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.701608][ T5498] NILFS (loop5): recovery complete [ 65.717761][ T5505] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.734673][ T5506] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5499] creat("./bus", 000 [pid 5498] <... chdir resumed>) = 0 [pid 5495] unlink("./bus" [pid 5498] ioctl(4, LOOP_CLR_FD) = 0 [pid 5498] close(4 [pid 5500] <... creat resumed>) = 4 [pid 5498] <... close resumed>) = 0 [pid 5495] <... unlink resumed>) = 0 [pid 5501] <... mount resumed>) = 0 [pid 5500] open("./bus", O_RDONLY) = 5 [pid 5500] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5500] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5500] <... write resumed>) = 32 [pid 5498] creat("./bus", 000 [pid 5495] sendfile(4, 5, NULL, 145139829833722 [pid 5501] <... openat resumed>) = 3 [pid 5500] unlink("./bus" [pid 5499] <... creat resumed>) = 4 [pid 5501] chdir("./file0" [pid 5500] <... unlink resumed>) = 0 [pid 5499] open("./bus", O_RDONLY [pid 5498] <... creat resumed>) = 4 [pid 5495] <... sendfile resumed>) = 32 [pid 5501] <... chdir resumed>) = 0 [pid 5500] sendfile(4, 5, NULL, 145139829833722 [pid 5499] <... open resumed>) = 5 [pid 5498] open("./bus", O_RDONLY [pid 5000] <... umount2 resumed>) = 0 [pid 5501] ioctl(4, LOOP_CLR_FD [pid 5499] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5498] <... open resumed>) = 5 [pid 5495] exit_group(0 [pid 5501] <... ioctl resumed>) = 0 [pid 5500] <... sendfile resumed>) = 32 [pid 5499] <... open resumed>) = 6 [pid 5498] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5495] <... exit_group resumed>) = ? [pid 5000] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] close(4 [pid 5500] exit_group(0 [pid 5499] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5498] <... open resumed>) = 6 [pid 5501] <... close resumed>) = 0 [pid 5498] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] creat("./bus", 000 [pid 5500] <... exit_group resumed>) = ? [pid 5498] <... write resumed>) = 32 [pid 5495] +++ exited with 0 +++ [pid 5499] <... write resumed>) = 32 [pid 5000] lstat("./40/file0", [pid 5499] unlink("./bus" [pid 5498] unlink("./bus" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5495, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5498] <... unlink resumed>) = 0 [pid 5501] <... creat resumed>) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5501] open("./bus", O_RDONLY [pid 5500] +++ exited with 0 +++ [pid 5498] sendfile(4, 5, NULL, 145139829833722 [pid 5000] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] <... open resumed>) = 5 [pid 5499] <... unlink resumed>) = 0 [pid 5498] <... sendfile resumed>) = 32 [pid 5002] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5500, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5499] sendfile(4, 5, NULL, 145139829833722 [pid 5498] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5501] <... open resumed>) = 6 [pid 5498] <... exit_group resumed>) = ? [pid 5002] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 5501] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5498] +++ exited with 0 +++ [pid 5002] <... openat resumed>) = 3 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5501] <... write resumed>) = 32 [pid 5499] <... sendfile resumed>) = 32 [pid 5002] fstat(3, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5501] unlink("./bus" [pid 5499] exit_group(0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5498, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5501] <... unlink resumed>) = 0 [pid 5499] <... exit_group resumed>) = ? [pid 5003] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 5001] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5501] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(4 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5002] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] <... sendfile resumed>) = 32 [pid 5499] +++ exited with 0 +++ [pid 5003] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] rmdir("./40/file0" [pid 5501] exit_group(0 [pid 5003] fstat(3, [pid 5002] lstat("./38/binderfs", [pid 5001] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5499, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5501] <... exit_group resumed>) = ? [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] fstat(3, [pid 5000] getdents64(3, [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./40") = 0 [pid 5000] mkdir("./41", 0777 [pid 5003] getdents64(3, [pid 5002] unlink("./38/binderfs" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... unlink resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] <... openat resumed>) = 3 [pid 5501] +++ exited with 0 +++ [pid 5003] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] close(3 [pid 5003] lstat("./41/binderfs", [pid 5002] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5501, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 65.757886][ T5501] NILFS (loop1): recovery complete [ 65.767345][ T5507] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./41/binderfs" [pid 5001] lstat("./42/binderfs", [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5508 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./42/binderfs" [pid 4998] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5508 attached [pid 5001] <... unlink resumed>) = 0 [pid 4999] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5003] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] chdir("./41" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] fstat(3, [pid 5508] <... chdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5508] setpgid(0, 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] lstat("./41/binderfs", [pid 5508] <... setpgid resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./41/binderfs" [pid 5508] <... openat resumed>) = 3 [pid 5508] write(3, "1000", 4) = 4 [pid 5508] close(3) = 0 [pid 5508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5508] memfd_create("syzkaller", 0) = 3 [pid 5508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4998] <... unlink resumed>) = 0 [pid 4999] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./41/binderfs") = 0 [pid 4998] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5508] <... write resumed>) = 2097152 [pid 5508] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5508] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5508] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 [pid 5508] <... ioctl resumed>) = 0 [pid 5508] close(3) = 0 [pid 5508] mkdir("./file0", 0777 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5508] <... mkdir resumed>) = 0 [pid 4998] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5508] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./41/file0") = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./41") = 0 [pid 4998] mkdir("./42", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = 0 [pid 5003] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./42/file0", [pid 4999] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] getdents64(4, [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] fstat(4, [pid 5001] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 4999] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5003] rmdir("./41/file0" [pid 4999] getdents64(4, [pid 5002] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5001] rmdir("./42/file0" [pid 4999] <... close resumed>) = 0 [pid 5002] lstat("./38/file0", [pid 4999] rmdir("./41/file0" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 4999] getdents64(3, [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 4999] close(3 [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4999] <... close resumed>) = 0 [pid 5003] rmdir("./41" [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./38/file0" [pid 4999] rmdir("./41" [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 5002] close(3) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5002] rmdir("./38" [pid 5003] mkdir("./42", 0777 [pid 5002] <... rmdir resumed>) = 0 [ 65.850991][ T5508] loop2: detected capacity change from 0 to 4096 [ 65.868959][ T5508] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5001] rmdir("./42" [pid 4999] mkdir("./42", 0777 [pid 5003] <... mkdir resumed>) = 0 [pid 5002] mkdir("./39", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5509 [pid 5001] mkdir("./43", 0777 [pid 4999] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 5509 attached [pid 5509] chdir("./39" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... mkdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5003] close(3 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5510 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5509] <... chdir resumed>) = 0 [pid 5509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5509] setpgid(0, 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5511 [pid 5509] <... setpgid resumed>) = 0 [pid 5509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5511 attached ./strace-static-x86_64: Process 5510 attached [pid 5509] write(3, "1000", 4 [pid 5511] chdir("./42" [pid 5510] chdir("./42" [pid 5509] <... write resumed>) = 4 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5512 [pid 5511] <... chdir resumed>) = 0 [pid 5510] <... chdir resumed>) = 0 [pid 5509] close(3) = 0 [pid 5509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5509] memfd_create("syzkaller", 0) = 3 [pid 5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5512 attached [pid 5511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5510] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5511] <... prctl resumed>) = 0 [pid 5510] <... prctl resumed>) = 0 [pid 5512] chdir("./43" [pid 4998] <... ioctl resumed>) = 0 [pid 5512] <... chdir resumed>) = 0 [pid 5512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5512] setpgid(0, 0) = 0 [pid 4998] close(3 [pid 5512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... close resumed>) = 0 [pid 5512] <... openat resumed>) = 3 [pid 5512] write(3, "1000", 4 [pid 5511] setpgid(0, 0 [pid 5510] setpgid(0, 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5512] <... write resumed>) = 4 [pid 5511] <... setpgid resumed>) = 0 [pid 5510] <... setpgid resumed>) = 0 [pid 5512] close(3 [pid 5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5512] <... close resumed>) = 0 [pid 5512] symlink("/dev/binderfs", "./binderfs" [pid 5511] <... openat resumed>) = 3 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5513 [pid 5512] <... symlink resumed>) = 0 [pid 5511] write(3, "1000", 4 [pid 5510] <... openat resumed>) = 3 [pid 5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5512] memfd_create("syzkaller", 0 [pid 5511] <... write resumed>) = 4 [pid 5510] write(3, "1000", 4 [pid 5512] <... memfd_create resumed>) = 3 [pid 5511] close(3 [pid 5510] <... write resumed>) = 4 [pid 5511] <... close resumed>) = 0 [pid 5510] close(3 [pid 5511] symlink("/dev/binderfs", "./binderfs" [pid 5510] <... close resumed>) = 0 [pid 5512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5511] <... symlink resumed>) = 0 [pid 5510] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5513 attached [pid 5512] <... mmap resumed>) = 0x7f5db7f12000 [pid 5511] memfd_create("syzkaller", 0 [pid 5513] chdir("./42" [pid 5511] <... memfd_create resumed>) = 3 [pid 5510] <... symlink resumed>) = 0 [pid 5513] <... chdir resumed>) = 0 [pid 5511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5510] memfd_create("syzkaller", 0 [pid 5513] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5511] <... mmap resumed>) = 0x7f5db7f12000 [pid 5510] <... memfd_create resumed>) = 3 [pid 5513] <... prctl resumed>) = 0 [pid 5513] setpgid(0, 0) = 0 [pid 5513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5513] write(3, "1000", 4) = 4 [pid 5513] close(3) = 0 [pid 5513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5513] memfd_create("syzkaller", 0) = 3 [pid 5513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 65.908475][ T5508] NILFS (loop2): trying rollback from an earlier position [ 65.940921][ T5508] NILFS (loop2): recovery complete [pid 5512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5509] <... write resumed>) = 2097152 [pid 5508] <... mount resumed>) = 0 [pid 5508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5508] chdir("./file0") = 0 [pid 5508] ioctl(4, LOOP_CLR_FD) = 0 [pid 5508] close(4) = 0 [pid 5512] <... write resumed>) = 2097152 [pid 5508] creat("./bus", 000) = 4 [pid 5509] munmap(0x7f5db7f12000, 2097152 [pid 5508] open("./bus", O_RDONLY) = 5 [pid 5513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5508] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5509] <... munmap resumed>) = 0 [pid 5508] <... open resumed>) = 6 [pid 5508] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5509] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5509] ioctl(4, LOOP_SET_FD, 3 [pid 5508] <... write resumed>) = 32 [pid 5508] unlink("./bus") = 0 [pid 5508] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5508] exit_group(0) = ? [pid 5508] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./41/binderfs" [pid 5512] munmap(0x7f5db7f12000, 2097152 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5511] <... write resumed>) = 2097152 [pid 5511] munmap(0x7f5db7f12000, 2097152 [pid 5510] <... write resumed>) = 2097152 [pid 5511] <... munmap resumed>) = 0 [pid 5510] munmap(0x7f5db7f12000, 2097152 [pid 5511] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5510] <... munmap resumed>) = 0 [pid 5509] <... ioctl resumed>) = 0 [pid 5511] <... openat resumed>) = 4 [pid 5510] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5509] close(3 [pid 5513] <... write resumed>) = 2097152 [pid 5512] <... munmap resumed>) = 0 [ 65.995590][ T5514] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.034573][ T5509] loop4: detected capacity change from 0 to 4096 [pid 5511] ioctl(4, LOOP_SET_FD, 3 [pid 5510] <... openat resumed>) = 4 [pid 5509] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5510] ioctl(4, LOOP_SET_FD, 3 [pid 5513] munmap(0x7f5db7f12000, 2097152 [pid 5512] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5511] <... ioctl resumed>) = 0 [pid 5509] mkdir("./file0", 0777 [pid 5000] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5513] <... munmap resumed>) = 0 [pid 5512] <... openat resumed>) = 4 [pid 5511] close(3 [pid 5509] <... mkdir resumed>) = 0 [pid 5513] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5512] ioctl(4, LOOP_SET_FD, 3 [pid 5511] <... close resumed>) = 0 [pid 5509] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5513] <... openat resumed>) = 4 [pid 5510] <... ioctl resumed>) = 0 [pid 5510] close(3) = 0 [pid 5510] mkdir("./file0", 0777) = 0 [pid 5510] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5512] <... ioctl resumed>) = 0 [pid 5511] mkdir("./file0", 0777 [pid 5000] lstat("./41/file0", [pid 5513] close(3 [pid 5511] <... mkdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5513] <... close resumed>) = 0 [pid 5511] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5513] mkdir("./file0", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5513] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5513] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./41/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [ 66.070161][ T5511] loop1: detected capacity change from 0 to 4096 [ 66.077280][ T5510] loop5: detected capacity change from 0 to 4096 [ 66.079850][ T5512] loop3: detected capacity change from 0 to 4096 [ 66.093283][ T5513] loop0: detected capacity change from 0 to 4096 [ 66.097517][ T5510] NILFS (loop5): invalid segment: Checksum error in segment payload [ 66.108205][ T5509] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5512] close(3 [pid 5000] rmdir("./41") = 0 [pid 5000] mkdir("./42", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5515 ./strace-static-x86_64: Process 5515 attached [pid 5512] <... close resumed>) = 0 [ 66.108686][ T5510] NILFS (loop5): trying rollback from an earlier position [ 66.121629][ T5509] NILFS (loop4): trying rollback from an earlier position [ 66.134815][ T5513] NILFS (loop0): invalid segment: Checksum error in segment payload [ 66.141848][ T5510] NILFS (loop5): recovery complete [ 66.143090][ T5511] NILFS (loop1): invalid segment: Checksum error in segment payload [ 66.154864][ T5509] NILFS (loop4): recovery complete [ 66.157305][ T5511] NILFS (loop1): trying rollback from an earlier position [pid 5515] chdir("./42" [pid 5512] mkdir("./file0", 0777 [pid 5510] <... mount resumed>) = 0 [pid 5515] <... chdir resumed>) = 0 [pid 5512] <... mkdir resumed>) = 0 [pid 5510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5510] <... openat resumed>) = 3 [pid 5512] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5515] <... prctl resumed>) = 0 [pid 5510] chdir("./file0" [pid 5515] setpgid(0, 0 [pid 5510] <... chdir resumed>) = 0 [pid 5515] <... setpgid resumed>) = 0 [pid 5515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5510] ioctl(4, LOOP_CLR_FD) = 0 [pid 5515] <... openat resumed>) = 3 [pid 5510] close(4) = 0 [pid 5510] creat("./bus", 000 [pid 5515] write(3, "1000", 4) = 4 [pid 5515] close(3) = 0 [ 66.162607][ T5516] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.169464][ T5513] NILFS (loop0): trying rollback from an earlier position [ 66.197574][ T5512] NILFS (loop3): invalid segment: Checksum error in segment payload [ 66.206478][ T5512] NILFS (loop3): trying rollback from an earlier position [ 66.212416][ T5511] NILFS (loop1): recovery complete [pid 5515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5511] <... mount resumed>) = 0 [pid 5511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5511] chdir("./file0") = 0 [pid 5511] ioctl(4, LOOP_CLR_FD) = 0 [pid 5511] close(4) = 0 [pid 5511] creat("./bus", 000 [pid 5515] memfd_create("syzkaller", 0 [pid 5513] <... mount resumed>) = 0 [pid 5513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5513] chdir("./file0") = 0 [pid 5513] ioctl(4, LOOP_CLR_FD) = 0 [pid 5513] close(4 [pid 5515] <... memfd_create resumed>) = 3 [pid 5513] <... close resumed>) = 0 [pid 5513] creat("./bus", 000 [pid 5509] <... mount resumed>) = 0 [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 66.225795][ T5513] NILFS (loop0): recovery complete [ 66.227308][ T5517] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.237088][ T5518] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.251105][ T5512] NILFS (loop3): recovery complete [pid 5509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5510] <... creat resumed>) = 4 [pid 5510] open("./bus", O_RDONLY [pid 5509] chdir("./file0" [pid 5510] <... open resumed>) = 5 [pid 5509] <... chdir resumed>) = 0 [pid 5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5510] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5509] ioctl(4, LOOP_CLR_FD [pid 5510] <... open resumed>) = 6 [pid 5509] <... ioctl resumed>) = 0 [pid 5509] close(4 [pid 5510] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5509] <... close resumed>) = 0 [pid 5509] creat("./bus", 000 [pid 5510] <... write resumed>) = 32 [pid 5510] unlink("./bus") = 0 [pid 5510] sendfile(4, 5, NULL, 145139829833722 [pid 5512] <... mount resumed>) = 0 [pid 5512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5512] chdir("./file0") = 0 [pid 5512] ioctl(4, LOOP_CLR_FD) = 0 [pid 5512] close(4) = 0 [pid 5512] creat("./bus", 000 [pid 5510] <... sendfile resumed>) = 32 [pid 5510] exit_group(0) = ? [pid 5510] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5510, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5509] <... creat resumed>) = 4 [pid 5509] open("./bus", O_RDONLY) = 5 [pid 5003] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5509] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5509] <... open resumed>) = 6 [pid 5003] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5509] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5509] <... write resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5509] unlink("./bus" [pid 5003] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./42/binderfs") = 0 [pid 5003] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5509] <... unlink resumed>) = 0 [pid 5509] sendfile(4, 5, NULL, 145139829833722 [pid 5511] <... creat resumed>) = 4 [pid 5511] open("./bus", O_RDONLY) = 5 [pid 5511] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5511] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5509] <... sendfile resumed>) = 32 [pid 5509] exit_group(0) = ? [pid 5511] <... write resumed>) = 32 [pid 5511] unlink("./bus") = 0 [pid 5511] sendfile(4, 5, NULL, 145139829833722 [pid 5509] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5509, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5511] <... sendfile resumed>) = 32 [pid 5002] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5511] exit_group(0) = ? [pid 5002] <... openat resumed>) = 3 [pid 5513] <... creat resumed>) = 4 [pid 5002] fstat(3, [pid 5513] open("./bus", O_RDONLY) = 5 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5513] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5002] getdents64(3, [pid 5513] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./39/binderfs") = 0 [pid 5002] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5511] +++ exited with 0 +++ [pid 5513] <... write resumed>) = 32 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5513] unlink("./bus" [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5513] <... unlink resumed>) = 0 [pid 5002] lstat("./39/file0", [pid 4999] <... openat resumed>) = 3 [pid 5513] sendfile(4, 5, NULL, 145139829833722 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 5002] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5002] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [ 66.270576][ T5519] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.291862][ T5520] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] <... write resumed>) = 2097152 [pid 5513] <... sendfile resumed>) = 32 [pid 5512] <... creat resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5513] exit_group(0 [pid 5512] open("./bus", O_RDONLY [pid 5002] fstat(4, [pid 4999] lstat("./42/binderfs", [pid 5513] <... exit_group resumed>) = ? [pid 5512] <... open resumed>) = 5 [pid 5512] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5512] <... open resumed>) = 6 [pid 5512] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5515] munmap(0x7f5db7f12000, 2097152 [pid 5512] <... write resumed>) = 32 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./42/binderfs" [pid 5513] +++ exited with 0 +++ [pid 5512] unlink("./bus" [pid 5002] getdents64(4, [pid 5003] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 5512] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5513, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5512] sendfile(4, 5, NULL, 145139829833722 [pid 5002] getdents64(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./39/file0" [pid 5512] <... sendfile resumed>) = 32 [pid 5002] <... rmdir resumed>) = 0 [pid 4998] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5512] exit_group(0) = ? [pid 5515] <... munmap resumed>) = 0 [pid 5512] +++ exited with 0 +++ [pid 5003] lstat("./42/file0", [pid 5002] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5512, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5002] close(3 [pid 4998] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5515] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./39" [pid 4998] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5002] mkdir("./40", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5001] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5515] <... openat resumed>) = 4 [pid 5003] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] fstat(3, [pid 4999] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3 [pid 4998] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 4998] unlink("./42/binderfs" [pid 5003] <... openat resumed>) = 4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... unlink resumed>) = 0 [pid 5001] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(4, [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5521 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] unlink("./43/binderfs" [pid 5003] getdents64(4, [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5521 attached [pid 4998] <... umount2 resumed>) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5521] chdir("./40") = 0 [pid 5521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5521] setpgid(0, 0) = 0 [pid 5521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5521] write(3, "1000", 4) = 4 [pid 5521] close(3) = 0 [pid 5521] symlink("/dev/binderfs", "./binderfs" [pid 5003] close(4) = 0 [pid 5521] <... symlink resumed>) = 0 [pid 5521] memfd_create("syzkaller", 0) = 3 [pid 5003] rmdir("./42/file0" [pid 5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./42") = 0 [pid 5003] mkdir("./43", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 4999] lstat("./42/file0", [pid 5003] <... close resumed>) = 0 [pid 5515] <... ioctl resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] close(3 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5522 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5522 attached [pid 5515] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5522] chdir("./43") = 0 [pid 5522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5522] setpgid(0, 0) = 0 [pid 5522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5522] write(3, "1000", 4) = 4 [pid 5522] close(3) = 0 [pid 5522] symlink("/dev/binderfs", "./binderfs" [pid 5515] mkdir("./file0", 0777 [pid 4998] lstat("./42/file0", [pid 4999] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5522] <... symlink resumed>) = 0 [pid 5515] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(4, [pid 5515] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./43/file0", [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 66.385805][ T5515] loop2: detected capacity change from 0 to 4096 [pid 5522] memfd_create("syzkaller", 0 [pid 4998] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 5522] <... memfd_create resumed>) = 3 [pid 5522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4998] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] fstat(4, [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(4) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./42/file0" [pid 4998] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4998] close(4 [pid 4999] getdents64(3, [pid 5001] fstat(4, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] rmdir("./42/file0" [pid 4999] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] rmdir("./42" [pid 4998] getdents64(3, [pid 4999] <... rmdir resumed>) = 0 [pid 5001] getdents64(4, [pid 4999] mkdir("./43", 0777 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 4998] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] rmdir("./43/file0" [pid 4998] rmdir("./42" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] mkdir("./43", 0777 [pid 5522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] close(3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 4999] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] rmdir("./43") = 0 [pid 4998] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5001] mkdir("./44", 0777 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5523 [pid 4998] close(3) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5524 [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5525 ./strace-static-x86_64: Process 5525 attached ./strace-static-x86_64: Process 5524 attached [pid 5525] chdir("./44" [pid 5524] chdir("./43" [pid 5525] <... chdir resumed>) = 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5524] <... chdir resumed>) = 0 [pid 5525] <... prctl resumed>) = 0 [pid 5524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5525] setpgid(0, 0 [pid 5524] <... prctl resumed>) = 0 [pid 5524] setpgid(0, 0 [pid 5525] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5523 attached [pid 5524] <... setpgid resumed>) = 0 [pid 5523] chdir("./43") = 0 [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5523] setpgid(0, 0) = 0 [pid 5523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5525] <... openat resumed>) = 3 [pid 5524] <... openat resumed>) = 3 [pid 5525] write(3, "1000", 4 [pid 5523] <... openat resumed>) = 3 [pid 5524] write(3, "1000", 4 [pid 5525] <... write resumed>) = 4 [pid 5523] write(3, "1000", 4 [pid 5525] close(3 [pid 5524] <... write resumed>) = 4 [pid 5523] <... write resumed>) = 4 [pid 5525] <... close resumed>) = 0 [pid 5524] close(3 [ 66.453254][ T5515] NILFS (loop2): invalid segment: Checksum error in segment payload [ 66.465703][ T5515] NILFS (loop2): trying rollback from an earlier position [pid 5523] close(3 [pid 5525] symlink("/dev/binderfs", "./binderfs" [pid 5524] <... close resumed>) = 0 [pid 5523] <... close resumed>) = 0 [pid 5522] <... write resumed>) = 2097152 [pid 5521] <... write resumed>) = 2097152 [pid 5525] <... symlink resumed>) = 0 [pid 5524] symlink("/dev/binderfs", "./binderfs" [pid 5522] munmap(0x7f5db7f12000, 2097152 [pid 5521] munmap(0x7f5db7f12000, 2097152 [pid 5525] memfd_create("syzkaller", 0 [pid 5524] <... symlink resumed>) = 0 [pid 5523] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5523] memfd_create("syzkaller", 0) = 3 [pid 5523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5521] <... munmap resumed>) = 0 [pid 5525] <... memfd_create resumed>) = 3 [pid 5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5524] memfd_create("syzkaller", 0 [pid 5522] <... munmap resumed>) = 0 [pid 5521] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5525] <... mmap resumed>) = 0x7f5db7f12000 [pid 5524] <... memfd_create resumed>) = 3 [pid 5522] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5521] <... openat resumed>) = 4 [ 66.505435][ T5515] NILFS (loop2): recovery complete [pid 5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5522] <... openat resumed>) = 4 [pid 5521] ioctl(4, LOOP_SET_FD, 3 [pid 5524] <... mmap resumed>) = 0x7f5db7f12000 [pid 5523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5522] ioctl(4, LOOP_SET_FD, 3 [pid 5515] <... mount resumed>) = 0 [pid 5525] <... write resumed>) = 2097152 [pid 5524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5523] <... write resumed>) = 2097152 [pid 5521] <... ioctl resumed>) = 0 [pid 5515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5525] munmap(0x7f5db7f12000, 2097152 [pid 5523] munmap(0x7f5db7f12000, 2097152 [pid 5521] close(3 [pid 5515] <... openat resumed>) = 3 [pid 5525] <... munmap resumed>) = 0 [pid 5523] <... munmap resumed>) = 0 [pid 5521] <... close resumed>) = 0 [pid 5515] chdir("./file0" [pid 5525] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5523] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5521] mkdir("./file0", 0777 [pid 5515] <... chdir resumed>) = 0 [pid 5525] <... openat resumed>) = 4 [pid 5523] <... openat resumed>) = 4 [pid 5522] <... ioctl resumed>) = 0 [pid 5521] <... mkdir resumed>) = 0 [pid 5515] ioctl(4, LOOP_CLR_FD [pid 5525] ioctl(4, LOOP_SET_FD, 3 [pid 5523] ioctl(4, LOOP_SET_FD, 3 [pid 5522] close(3 [pid 5521] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5515] <... ioctl resumed>) = 0 [pid 5525] <... ioctl resumed>) = 0 [pid 5522] <... close resumed>) = 0 [pid 5522] mkdir("./file0", 0777) = 0 [ 66.527653][ T5526] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.527968][ T5521] loop4: detected capacity change from 0 to 4096 [ 66.557457][ T5522] loop5: detected capacity change from 0 to 4096 [ 66.565987][ T5525] loop3: detected capacity change from 0 to 4096 [pid 5522] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5515] close(4 [pid 5525] close(3 [pid 5515] <... close resumed>) = 0 [pid 5515] creat("./bus", 000 [pid 5525] <... close resumed>) = 0 [pid 5523] <... ioctl resumed>) = 0 [pid 5515] <... creat resumed>) = 4 [pid 5524] <... write resumed>) = 2097152 [pid 5524] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5525] mkdir("./file0", 0777 [pid 5523] close(3 [pid 5515] open("./bus", O_RDONLY [pid 5525] <... mkdir resumed>) = 0 [pid 5523] <... close resumed>) = 0 [pid 5525] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5524] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5523] mkdir("./file0", 0777 [pid 5515] <... open resumed>) = 5 [pid 5524] <... openat resumed>) = 4 [pid 5524] ioctl(4, LOOP_SET_FD, 3 [ 66.573001][ T5523] loop1: detected capacity change from 0 to 4096 [ 66.587129][ T5522] NILFS (loop5): invalid segment: Checksum error in segment payload [ 66.588661][ T5521] NILFS (loop4): invalid segment: Checksum error in segment payload [ 66.595126][ T5522] NILFS (loop5): trying rollback from an earlier position [ 66.603194][ T5521] NILFS (loop4): trying rollback from an earlier position [pid 5523] <... mkdir resumed>) = 0 [pid 5515] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5524] <... ioctl resumed>) = 0 [pid 5524] close(3) = 0 [pid 5524] mkdir("./file0", 0777) = 0 [pid 5524] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5523] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5515] <... open resumed>) = 6 [pid 5515] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5515] unlink("./bus") = 0 [ 66.625214][ T5524] loop0: detected capacity change from 0 to 4096 [ 66.627737][ T5525] NILFS (loop3): invalid segment: Checksum error in segment payload [ 66.645401][ T5523] NILFS (loop1): invalid segment: Checksum error in segment payload [ 66.649292][ T5522] NILFS (loop5): recovery complete [ 66.661411][ T5524] NILFS (loop0): invalid segment: Checksum error in segment payload [ 66.664904][ T5523] NILFS (loop1): trying rollback from an earlier position [pid 5515] sendfile(4, 5, NULL, 145139829833722 [pid 5521] <... mount resumed>) = 0 [pid 5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5521] chdir("./file0") = 0 [pid 5521] ioctl(4, LOOP_CLR_FD) = 0 [pid 5521] close(4) = 0 [pid 5521] creat("./bus", 000) = 4 [pid 5521] open("./bus", O_RDONLY) = 5 [pid 5521] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5521] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5515] <... sendfile resumed>) = 32 [pid 5522] <... mount resumed>) = 0 [pid 5515] exit_group(0) = ? [pid 5522] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5521] <... write resumed>) = 32 [pid 5522] <... openat resumed>) = 3 [ 66.670743][ T5524] NILFS (loop0): trying rollback from an earlier position [ 66.679914][ T5521] NILFS (loop4): recovery complete [ 66.690026][ T5525] NILFS (loop3): trying rollback from an earlier position [ 66.696668][ T5527] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.704206][ T5528] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.719346][ T5524] NILFS (loop0): recovery complete [pid 5521] unlink("./bus" [pid 5524] <... mount resumed>) = 0 [pid 5522] chdir("./file0" [pid 5515] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5515, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5522] <... chdir resumed>) = 0 [pid 5521] <... unlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5524] <... openat resumed>) = 3 [pid 5522] ioctl(4, LOOP_CLR_FD [pid 5521] sendfile(4, 5, NULL, 145139829833722 [pid 5524] chdir("./file0" [pid 5522] <... ioctl resumed>) = 0 [pid 5524] <... chdir resumed>) = 0 [pid 5522] close(4 [pid 5524] ioctl(4, LOOP_CLR_FD [pid 5522] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5524] <... ioctl resumed>) = 0 [pid 5522] creat("./bus", 000 [pid 5000] fstat(3, [pid 5524] close(4 [pid 5521] <... sendfile resumed>) = 32 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5524] <... close resumed>) = 0 [pid 5521] exit_group(0 [pid 5000] getdents64(3, [pid 5524] creat("./bus", 000 [pid 5523] <... mount resumed>) = 0 [pid 5521] <... exit_group resumed>) = ? [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5522] <... creat resumed>) = 4 [pid 5000] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5521] +++ exited with 0 +++ [pid 5523] chdir("./file0" [pid 5522] open("./bus", O_RDONLY [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5521, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5522] <... open resumed>) = 5 [pid 5522] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5523] <... chdir resumed>) = 0 [pid 5522] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5524] <... creat resumed>) = 4 [pid 5523] ioctl(4, LOOP_CLR_FD [pid 5000] lstat("./42/binderfs", [pid 5524] open("./bus", O_RDONLY) = 5 [pid 5523] <... ioctl resumed>) = 0 [pid 5002] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5524] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5522] <... write resumed>) = 32 [pid 5524] <... open resumed>) = 6 [pid 5523] close(4 [pid 5522] unlink("./bus" [pid 5000] unlink("./42/binderfs" [pid 5524] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5523] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5523] creat("./bus", 000 [pid 5002] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... unlink resumed>) = 0 [pid 5524] <... write resumed>) = 32 [pid 5522] <... unlink resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] unlink("./bus" [pid 5522] sendfile(4, 5, NULL, 145139829833722 [pid 5002] fstat(3, [pid 5525] <... mount resumed>) = 0 [pid 5524] <... unlink resumed>) = 0 [ 66.730070][ T5523] NILFS (loop1): recovery complete [ 66.733409][ T5529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.737706][ T5525] NILFS (loop3): recovery complete [ 66.751614][ T5530] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5523] <... creat resumed>) = 4 [pid 5524] sendfile(4, 5, NULL, 145139829833722 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5523] open("./bus", O_RDONLY) = 5 [pid 5525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5524] <... sendfile resumed>) = 32 [pid 5523] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5522] <... sendfile resumed>) = 32 [pid 5002] getdents64(3, [pid 5525] <... openat resumed>) = 3 [pid 5525] chdir("./file0" [pid 5524] exit_group(0 [pid 5523] <... open resumed>) = 6 [pid 5522] exit_group(0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5525] <... chdir resumed>) = 0 [pid 5523] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5525] ioctl(4, LOOP_CLR_FD [pid 5524] <... exit_group resumed>) = ? [pid 5523] <... write resumed>) = 32 [pid 5522] <... exit_group resumed>) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5525] <... ioctl resumed>) = 0 [pid 5523] unlink("./bus" [pid 5002] lstat("./40/binderfs", [pid 5525] close(4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5525] <... close resumed>) = 0 [pid 5002] unlink("./40/binderfs" [pid 5525] creat("./bus", 000 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5523] <... unlink resumed>) = 0 [pid 5523] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5524] +++ exited with 0 +++ [pid 5523] exit_group(0 [pid 5522] +++ exited with 0 +++ [pid 5523] <... exit_group resumed>) = ? [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5522, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5524, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5525] <... creat resumed>) = 4 [pid 5523] +++ exited with 0 +++ [pid 5003] <... restart_syscall resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5523, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 4998] fstat(3, [pid 5525] open("./bus", O_RDONLY [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 5525] <... open resumed>) = 5 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5525] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5525] <... open resumed>) = 6 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5525] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] lstat("./43/binderfs", [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./43/binderfs", [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5525] <... write resumed>) = 32 [pid 5003] unlink("./43/binderfs" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] unlink("./43/binderfs" [pid 5525] unlink("./bus" [pid 5003] <... unlink resumed>) = 0 [pid 4999] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 5525] <... unlink resumed>) = 0 [pid 5003] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5525] sendfile(4, 5, NULL, 145139829833722 [ 66.779479][ T5531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5525] <... sendfile resumed>) = 32 [pid 4999] unlink("./43/binderfs" [pid 5525] exit_group(0 [pid 4999] <... unlink resumed>) = 0 [pid 5525] <... exit_group resumed>) = ? [pid 4999] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./40/file0") = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./40") = 0 [pid 5002] mkdir("./41", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5525] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5532 [pid 5001] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] close(4 [pid 5001] unlink("./44/binderfs") = 0 [pid 5001] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./42/file0"./strace-static-x86_64: Process 5532 attached [pid 5532] chdir("./41") = 0 [pid 5532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5532] setpgid(0, 0) = 0 [pid 5532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5532] write(3, "1000", 4) = 4 [pid 5532] close(3) = 0 [pid 5532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5532] memfd_create("syzkaller", 0) = 3 [pid 5532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5000] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4998] lstat("./43/file0", [pid 5000] rmdir("./42" [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5003] lstat("./43/file0", [pid 4998] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./43", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] lstat("./43/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 5003] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 5532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... openat resumed>) = 4 [pid 5001] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(4, [pid 5003] fstat(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 4999] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./44/file0", [pid 5000] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] fstat(4, [pid 4998] getdents64(4, [pid 5003] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5533 [pid 4999] getdents64(4, [pid 4998] getdents64(4, [pid 5003] close(4 [pid 5001] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] close(4 [pid 5003] rmdir("./43/file0" [pid 5001] fstat(4, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4998] rmdir("./43/file0" [pid 5003] getdents64(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(4 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] close(3) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] rmdir("./43/file0" [pid 4998] getdents64(3, [pid 5003] rmdir("./43" [pid 5001] getdents64(4, ./strace-static-x86_64: Process 5533 attached 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5533] chdir("./43" [pid 5003] <... rmdir resumed>) = 0 [pid 5001] close(4 [pid 4999] getdents64(3, [pid 4998] close(3 [pid 5533] <... chdir resumed>) = 0 [pid 5003] mkdir("./44", 0777 [pid 5533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5533] <... prctl resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] rmdir("./44/file0" [pid 4999] close(3 [pid 4998] rmdir("./43" [pid 5533] setpgid(0, 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... rmdir resumed>) = 0 [pid 5533] <... setpgid resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... openat resumed>) = 3 [pid 5001] getdents64(3, [pid 4999] rmdir("./43" [pid 4998] <... rmdir resumed>) = 0 [pid 5533] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5533] write(3, "1000", 4 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] mkdir("./44", 0777 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4999] mkdir("./44", 0777 [pid 5533] <... write resumed>) = 4 [pid 4998] <... mkdir resumed>) = 0 [pid 5533] close(3 [pid 5003] close(3 [pid 5001] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5533] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] rmdir("./44" [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5533] symlink("/dev/binderfs", "./binderfs" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5533] <... symlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5533] memfd_create("syzkaller", 0) = 3 [pid 5001] mkdir("./45", 0777 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5534 [pid 5533] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5532] <... write resumed>) = 2097152 [pid 5532] munmap(0x7f5db7f12000, 2097152 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] close(3 [pid 4998] close(3 [pid 5001] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5534 attached [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5534] chdir("./44") = 0 [pid 5534] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5535 [pid 5001] <... close resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5536 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5534] setpgid(0, 0) = 0 [pid 5534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5534] write(3, "1000", 4 [pid 5532] <... munmap resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5537 [pid 5534] <... write resumed>) = 4 [pid 5532] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5534] close(3 [pid 5532] <... openat resumed>) = 4 [pid 5534] <... close resumed>) = 0 [pid 5532] ioctl(4, LOOP_SET_FD, 3 [pid 5534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5534] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5537 attached ) = 3 [pid 5537] chdir("./45" [pid 5534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 ./strace-static-x86_64: Process 5536 attached ./strace-static-x86_64: Process 5535 attached [pid 5537] <... chdir resumed>) = 0 [pid 5537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5536] chdir("./44" [pid 5535] chdir("./44" [pid 5537] <... prctl resumed>) = 0 [pid 5536] <... chdir resumed>) = 0 [pid 5535] <... chdir resumed>) = 0 [pid 5532] <... ioctl resumed>) = 0 [pid 5537] setpgid(0, 0 [pid 5536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5535] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5532] close(3 [pid 5536] <... prctl resumed>) = 0 [pid 5535] <... prctl resumed>) = 0 [pid 5532] <... close resumed>) = 0 [pid 5536] setpgid(0, 0 [pid 5535] setpgid(0, 0 [pid 5536] <... setpgid resumed>) = 0 [pid 5535] <... setpgid resumed>) = 0 [pid 5537] <... setpgid resumed>) = 0 [pid 5533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5532] mkdir("./file0", 0777 [pid 5537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5537] <... openat resumed>) = 3 [pid 5536] <... openat resumed>) = 3 [pid 5535] <... openat resumed>) = 3 [pid 5532] <... mkdir resumed>) = 0 [pid 5537] write(3, "1000", 4 [pid 5536] write(3, "1000", 4 [pid 5535] write(3, "1000", 4 [pid 5532] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5537] <... write resumed>) = 4 [pid 5536] <... write resumed>) = 4 [pid 5535] <... write resumed>) = 4 [pid 5537] close(3) = 0 [pid 5536] close(3 [pid 5535] close(3 [pid 5537] symlink("/dev/binderfs", "./binderfs" [pid 5536] <... close resumed>) = 0 [pid 5535] <... close resumed>) = 0 [pid 5537] <... symlink resumed>) = 0 [pid 5536] symlink("/dev/binderfs", "./binderfs" [pid 5535] symlink("/dev/binderfs", "./binderfs" [pid 5537] memfd_create("syzkaller", 0 [pid 5534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5537] <... memfd_create resumed>) = 3 [pid 5537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5536] <... symlink resumed>) = 0 [pid 5535] <... symlink resumed>) = 0 [pid 5536] memfd_create("syzkaller", 0 [pid 5535] memfd_create("syzkaller", 0 [pid 5536] <... memfd_create resumed>) = 3 [pid 5535] <... memfd_create resumed>) = 3 [pid 5536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5536] <... mmap resumed>) = 0x7f5db7f12000 [pid 5535] <... mmap resumed>) = 0x7f5db7f12000 [ 66.944260][ T5532] loop4: detected capacity change from 0 to 4096 [ 66.974403][ T5532] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5533] <... write resumed>) = 2097152 [pid 5533] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5533] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5533] ioctl(4, LOOP_SET_FD, 3 [pid 5536] <... write resumed>) = 2097152 [pid 5534] <... write resumed>) = 2097152 [pid 5534] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5534] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5534] ioctl(4, LOOP_SET_FD, 3 [pid 5537] <... write resumed>) = 2097152 [pid 5536] munmap(0x7f5db7f12000, 2097152 [pid 5535] <... write resumed>) = 2097152 [pid 5533] <... ioctl resumed>) = 0 [pid 5536] <... munmap resumed>) = 0 [pid 5535] munmap(0x7f5db7f12000, 2097152) = 0 [ 67.026937][ T5532] NILFS (loop4): trying rollback from an earlier position [ 67.050131][ T5533] loop2: detected capacity change from 0 to 4096 [ 67.061035][ T5532] NILFS (loop4): recovery complete [ 67.067092][ T5534] loop5: detected capacity change from 0 to 4096 [pid 5536] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5537] munmap(0x7f5db7f12000, 2097152 [pid 5535] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5534] <... ioctl resumed>) = 0 [pid 5533] close(3 [pid 5536] <... openat resumed>) = 4 [pid 5536] ioctl(4, LOOP_SET_FD, 3 [pid 5537] <... munmap resumed>) = 0 [pid 5535] <... openat resumed>) = 4 [pid 5534] close(3 [pid 5533] <... close resumed>) = 0 [pid 5537] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5535] ioctl(4, LOOP_SET_FD, 3 [pid 5534] <... close resumed>) = 0 [pid 5533] mkdir("./file0", 0777 [pid 5537] <... openat resumed>) = 4 [pid 5536] <... ioctl resumed>) = 0 [pid 5535] <... ioctl resumed>) = 0 [pid 5534] mkdir("./file0", 0777 [pid 5533] <... mkdir resumed>) = 0 [pid 5532] <... mount resumed>) = 0 [pid 5537] ioctl(4, LOOP_SET_FD, 3 [pid 5532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5536] close(3 [pid 5535] close(3 [pid 5534] <... mkdir resumed>) = 0 [pid 5533] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5532] <... openat resumed>) = 3 [pid 5534] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5536] <... close resumed>) = 0 [pid 5536] mkdir("./file0", 0777) = 0 [pid 5536] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5532] chdir("./file0" [pid 5537] <... ioctl resumed>) = 0 [pid 5535] <... close resumed>) = 0 [ 67.074180][ T5538] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.075387][ T5536] loop0: detected capacity change from 0 to 4096 [ 67.092793][ T5535] loop1: detected capacity change from 0 to 4096 [ 67.100658][ T5537] loop3: detected capacity change from 0 to 4096 [ 67.111295][ T5534] NILFS (loop5): invalid segment: Checksum error in segment payload [ 67.113963][ T5536] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5537] close(3 [pid 5535] mkdir("./file0", 0777 [pid 5532] <... chdir resumed>) = 0 [pid 5537] <... close resumed>) = 0 [pid 5535] <... mkdir resumed>) = 0 [pid 5532] ioctl(4, LOOP_CLR_FD [pid 5537] mkdir("./file0", 0777 [pid 5535] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5532] <... ioctl resumed>) = 0 [pid 5537] <... mkdir resumed>) = 0 [pid 5532] close(4 [pid 5537] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5532] <... close resumed>) = 0 [ 67.121026][ T5534] NILFS (loop5): trying rollback from an earlier position [ 67.127835][ T5536] NILFS (loop0): trying rollback from an earlier position [ 67.143797][ T5533] NILFS (loop2): invalid segment: Checksum error in segment payload [ 67.145441][ T5534] NILFS (loop5): recovery complete [ 67.157543][ T5533] NILFS (loop2): trying rollback from an earlier position [ 67.161511][ T5535] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5532] creat("./bus", 000) = 4 [pid 5532] open("./bus", O_RDONLY) = 5 [pid 5532] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5536] <... mount resumed>) = 0 [pid 5536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5534] <... mount resumed>) = 0 [pid 5532] <... open resumed>) = 6 [pid 5534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 67.176981][ T5536] NILFS (loop0): recovery complete [ 67.180345][ T5535] NILFS (loop1): trying rollback from an earlier position [ 67.189780][ T5537] NILFS (loop3): invalid segment: Checksum error in segment payload [ 67.198561][ T5539] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.198998][ T5533] NILFS (loop2): recovery complete [ 67.209971][ T5540] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5534] chdir("./file0") = 0 [pid 5534] ioctl(4, LOOP_CLR_FD) = 0 [pid 5534] close(4) = 0 [pid 5534] creat("./bus", 000 [pid 5536] <... openat resumed>) = 3 [pid 5532] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5536] chdir("./file0") = 0 [pid 5536] ioctl(4, LOOP_CLR_FD) = 0 [pid 5536] close(4) = 0 [pid 5535] <... mount resumed>) = 0 [pid 5536] creat("./bus", 000 [pid 5535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5532] <... write resumed>) = 32 [pid 5532] unlink("./bus" [pid 5535] <... openat resumed>) = 3 [pid 5535] chdir("./file0" [pid 5532] <... unlink resumed>) = 0 [pid 5532] sendfile(4, 5, NULL, 145139829833722 [pid 5535] <... chdir resumed>) = 0 [pid 5535] ioctl(4, LOOP_CLR_FD [pid 5532] <... sendfile resumed>) = 32 [pid 5535] <... ioctl resumed>) = 0 [pid 5535] close(4 [pid 5532] exit_group(0 [pid 5535] <... close resumed>) = 0 [pid 5532] <... exit_group resumed>) = ? [pid 5535] creat("./bus", 000 [pid 5532] +++ exited with 0 +++ [pid 5534] <... creat resumed>) = 4 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5532, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5534] open("./bus", O_RDONLY) = 5 [pid 5534] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5534] <... open resumed>) = 6 [ 67.226688][ T5535] NILFS (loop1): recovery complete [ 67.230327][ T5537] NILFS (loop3): trying rollback from an earlier position [ 67.245599][ T5541] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... creat resumed>) = 4 [pid 5535] <... creat resumed>) = 4 [pid 5534] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5533] <... mount resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5536] open("./bus", O_RDONLY [pid 5535] open("./bus", O_RDONLY [pid 5534] <... write resumed>) = 32 [pid 5533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 5536] <... open resumed>) = 5 [pid 5535] <... open resumed>) = 5 [pid 5534] unlink("./bus" [pid 5533] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5536] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5535] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5534] <... unlink resumed>) = 0 [pid 5533] chdir("./file0" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5536] <... open resumed>) = 6 [pid 5535] <... open resumed>) = 6 [pid 5534] sendfile(4, 5, NULL, 145139829833722 [pid 5533] <... chdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5536] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5535] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5534] <... sendfile resumed>) = 32 [pid 5533] ioctl(4, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5534] exit_group(0 [pid 5002] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5534] <... exit_group resumed>) = ? [pid 5533] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... write resumed>) = 32 [pid 5535] <... write resumed>) = 32 [pid 5533] close(4 [pid 5534] +++ exited with 0 +++ [pid 5002] lstat("./41/binderfs", [pid 5536] unlink("./bus" [pid 5535] unlink("./bus" [pid 5533] <... close resumed>) = 0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5534, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./41/binderfs") = 0 [pid 5003] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5533] creat("./bus", 000 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... unlink resumed>) = 0 [pid 5535] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5536] sendfile(4, 5, NULL, 145139829833722 [pid 5535] sendfile(4, 5, NULL, 145139829833722 [pid 5003] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5536] <... sendfile resumed>) = 32 [pid 5535] <... sendfile resumed>) = 32 [pid 5003] unlink("./44/binderfs" [pid 5536] exit_group(0 [pid 5535] exit_group(0 [pid 5003] <... unlink resumed>) = 0 [pid 5536] <... exit_group resumed>) = ? [pid 5535] <... exit_group resumed>) = ? [pid 5003] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5535] +++ exited with 0 +++ [pid 5536] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5535, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5536, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 67.280205][ T5542] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./44/binderfs", [pid 4998] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4999] unlink("./44/binderfs" [pid 4998] fstat(3, [pid 5002] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5533] <... creat resumed>) = 4 [pid 5002] lstat("./41/file0", [pid 4998] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5533] open("./bus", O_RDONLY [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5533] <... open resumed>) = 5 [pid 5002] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./44/binderfs", [pid 5533] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./44/binderfs" [pid 5533] <... open resumed>) = 6 [pid 5002] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... unlink resumed>) = 0 [pid 5533] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 4 [pid 4998] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(4, [pid 5003] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5533] <... write resumed>) = 32 [pid 5003] close(4) = 0 [pid 5003] rmdir("./44/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./44") = 0 [pid 5003] mkdir("./45", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 67.330435][ T5537] NILFS (loop3): recovery complete [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5544 ./strace-static-x86_64: Process 5544 attached [pid 5544] chdir("./45") = 0 [pid 5544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5544] setpgid(0, 0) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5533] unlink("./bus" [pid 5544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5544] write(3, "1000", 4) = 4 [pid 5544] close(3) = 0 [pid 5544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5544] memfd_create("syzkaller", 0) = 3 [pid 5544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5533] <... unlink resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5533] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5002] getdents64(4, [pid 5537] <... mount resumed>) = 0 [pid 5533] exit_group(0 [pid 5537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5537] chdir("./file0") = 0 [pid 5537] ioctl(4, LOOP_CLR_FD) = 0 [pid 5537] close(4) = 0 [pid 5537] creat("./bus", 000 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5533] <... exit_group resumed>) = ? [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5533] +++ exited with 0 +++ [pid 5002] close(4) = 0 [pid 5002] rmdir("./41/file0" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5533, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 5000] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5000] fstat(3, [pid 5002] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./41" [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] mkdir("./42", 0777 [pid 5000] lstat("./43/binderfs", [pid 4998] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] unlink("./43/binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5000] <... unlink resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./44/file0", [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] lstat("./44/file0", [pid 4998] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5545 [pid 4999] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(4, [pid 4999] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 4999] fstat(4, [pid 4998] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] rmdir("./44/file0" [pid 4999] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(3, ./strace-static-x86_64: Process 5545 attached [pid 5000] <... umount2 resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5545] chdir("./42" [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5545] <... chdir resumed>) = 0 [pid 5000] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(4 [pid 4998] <... close resumed>) = 0 [pid 5545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./44" [pid 5545] <... prctl resumed>) = 0 [pid 5000] lstat("./43/file0", [pid 4999] rmdir("./44/file0" [pid 4998] <... rmdir resumed>) = 0 [pid 5545] setpgid(0, 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] mkdir("./45", 0777 [pid 5545] <... setpgid resumed>) = 0 [pid 5000] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5545] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 4999] close(3 [ 67.393064][ T5543] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5545] write(3, "1000", 4 [pid 5537] <... creat resumed>) = 4 [pid 5000] fstat(4, [pid 4999] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5545] <... write resumed>) = 4 [pid 5537] open("./bus", O_RDONLY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./44" [pid 4998] close(3 [pid 5545] close(3 [pid 5537] <... open resumed>) = 5 [pid 5000] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 5545] <... close resumed>) = 0 [pid 5537] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5545] symlink("/dev/binderfs", "./binderfs" [pid 5537] <... open resumed>) = 6 [pid 5000] getdents64(4, [pid 4999] mkdir("./45", 0777 [pid 5545] <... symlink resumed>) = 0 [pid 5537] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5546 [pid 5545] memfd_create("syzkaller", 0 [pid 5000] close(4 [pid 4999] <... mkdir resumed>) = 0 [pid 5545] <... memfd_create resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5537] <... write resumed>) = 32 [pid 5000] rmdir("./43/file0" [pid 4999] <... openat resumed>) = 3 [pid 5545] <... mmap resumed>) = 0x7f5db7f12000 [pid 5537] unlink("./bus" [pid 5000] <... rmdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 4999] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 5546 attached [pid 5000] rmdir("./43" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5546] chdir("./45" [pid 5000] <... rmdir resumed>) = 0 [pid 5546] <... chdir resumed>) = 0 [pid 5000] mkdir("./44", 0777 [pid 5546] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5547 [pid 5546] <... prctl resumed>) = 0 [pid 5537] <... unlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5546] setpgid(0, 0 [pid 5537] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... openat resumed>) = 3 [pid 5546] <... setpgid resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5537] <... sendfile resumed>) = 32 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5546] <... openat resumed>) = 3 [pid 5537] exit_group(0 [pid 5000] close(3./strace-static-x86_64: Process 5547 attached [pid 5546] write(3, "1000", 4 [pid 5544] <... write resumed>) = 2097152 [pid 5537] <... exit_group resumed>) = ? [pid 5000] <... close resumed>) = 0 [pid 5546] <... write resumed>) = 4 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5546] close(3) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5548 [pid 5546] symlink("/dev/binderfs", "./binderfs" [pid 5537] +++ exited with 0 +++ [pid 5547] chdir("./45" [pid 5546] <... symlink resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5537, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5547] <... chdir resumed>) = 0 [pid 5546] memfd_create("syzkaller", 0 [pid 5547] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5546] <... memfd_create resumed>) = 3 [pid 5547] <... prctl resumed>) = 0 [pid 5546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5547] setpgid(0, 0 [pid 5546] <... mmap resumed>) = 0x7f5db7f12000 [pid 5547] <... setpgid resumed>) = 0 [pid 5545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5548 attached [pid 5547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5544] munmap(0x7f5db7f12000, 2097152 [pid 5548] chdir("./44" [pid 5547] <... openat resumed>) = 3 [pid 5544] <... munmap resumed>) = 0 [pid 5001] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] <... chdir resumed>) = 0 [pid 5547] write(3, "1000", 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5547] <... write resumed>) = 4 [pid 5544] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5548] <... prctl resumed>) = 0 [pid 5547] close(3 [pid 5544] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5548] setpgid(0, 0 [pid 5547] <... close resumed>) = 0 [pid 5544] ioctl(4, LOOP_SET_FD, 3 [pid 5001] fstat(3, [pid 5548] <... setpgid resumed>) = 0 [pid 5547] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5547] <... symlink resumed>) = 0 [pid 5001] getdents64(3, [pid 5548] <... openat resumed>) = 3 [pid 5547] memfd_create("syzkaller", 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5548] write(3, "1000", 4 [pid 5547] <... memfd_create resumed>) = 3 [pid 5001] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] <... write resumed>) = 4 [pid 5547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5548] close(3 [pid 5547] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] lstat("./45/binderfs", [pid 5548] <... close resumed>) = 0 [pid 5546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5548] symlink("/dev/binderfs", "./binderfs" [pid 5001] unlink("./45/binderfs" [pid 5548] <... symlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5548] memfd_create("syzkaller", 0 [pid 5001] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] <... memfd_create resumed>) = 3 [pid 5548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5544] <... ioctl resumed>) = 0 [pid 5544] close(3) = 0 [pid 5544] mkdir("./file0", 0777 [pid 5545] <... write resumed>) = 2097152 [pid 5545] munmap(0x7f5db7f12000, 2097152 [pid 5544] <... mkdir resumed>) = 0 [pid 5544] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5545] <... munmap resumed>) = 0 [ 67.502878][ T5544] loop5: detected capacity change from 0 to 4096 [pid 5001] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5545] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5545] <... openat resumed>) = 4 [pid 5001] lstat("./45/file0", [pid 5545] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5546] <... write resumed>) = 2097152 [pid 5546] munmap(0x7f5db7f12000, 2097152 [pid 5001] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5545] <... ioctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5545] close(3) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5545] mkdir("./file0", 0777 [pid 5001] fstat(4, [pid 5546] <... munmap resumed>) = 0 [pid 5545] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5548] <... write resumed>) = 2097152 [pid 5547] <... write resumed>) = 2097152 [pid 5546] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5546] ioctl(4, LOOP_SET_FD, 3 [pid 5547] munmap(0x7f5db7f12000, 2097152 [pid 5545] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] getdents64(4, [pid 5547] <... munmap resumed>) = 0 [pid 5548] munmap(0x7f5db7f12000, 2097152 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5548] <... munmap resumed>) = 0 [pid 5548] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5547] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] getdents64(4, [pid 5548] <... openat resumed>) = 4 [ 67.558679][ T5544] NILFS (loop5): invalid segment: Checksum error in segment payload [ 67.570163][ T5545] loop4: detected capacity change from 0 to 4096 [ 67.583406][ T5544] NILFS (loop5): trying rollback from an earlier position [ 67.588995][ T5546] loop0: detected capacity change from 0 to 4096 [pid 5548] ioctl(4, LOOP_SET_FD, 3 [pid 5547] <... openat resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5546] <... ioctl resumed>) = 0 [pid 5546] close(3) = 0 [pid 5546] mkdir("./file0", 0777) = 0 [pid 5546] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5547] ioctl(4, LOOP_SET_FD, 3 [pid 5001] close(4) = 0 [pid 5001] rmdir("./45/file0") = 0 [pid 5548] <... ioctl resumed>) = 0 [pid 5548] close(3) = 0 [pid 5548] mkdir("./file0", 0777) = 0 [pid 5548] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] getdents64(3, [pid 5547] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5547] close(3 [pid 5001] close(3 [pid 5547] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5547] mkdir("./file0", 0777 [pid 5001] rmdir("./45") = 0 [pid 5001] mkdir("./46", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5547] <... mkdir resumed>) = 0 [pid 5547] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5550 ./strace-static-x86_64: Process 5550 attached [pid 5550] chdir("./46") = 0 [ 67.603021][ T5545] NILFS (loop4): invalid segment: Checksum error in segment payload [ 67.604553][ T5548] loop2: detected capacity change from 0 to 4096 [ 67.612070][ T5544] NILFS (loop5): recovery complete [ 67.622909][ T5545] NILFS (loop4): trying rollback from an earlier position [ 67.630859][ T5546] NILFS (loop0): invalid segment: Checksum error in segment payload [ 67.631110][ T5547] loop1: detected capacity change from 0 to 4096 [ 67.651014][ T5546] NILFS (loop0): trying rollback from an earlier position [pid 5550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5544] <... mount resumed>) = 0 [pid 5544] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5544] chdir("./file0") = 0 [pid 5544] ioctl(4, LOOP_CLR_FD) = 0 [pid 5544] close(4) = 0 [pid 5544] creat("./bus", 000 [pid 5550] setpgid(0, 0) = 0 [pid 5544] <... creat resumed>) = 4 [pid 5544] open("./bus", O_RDONLY) = 5 [pid 5544] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5544] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 67.668225][ T5547] NILFS (loop1): invalid segment: Checksum error in segment payload [ 67.670380][ T5548] NILFS (loop2): invalid segment: Checksum error in segment payload [ 67.676877][ T5547] NILFS (loop1): trying rollback from an earlier position [ 67.691785][ T5549] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.695033][ T5548] NILFS (loop2): trying rollback from an earlier position [ 67.712686][ T5545] NILFS (loop4): recovery complete [pid 5550] write(3, "1000", 4) = 4 [pid 5550] close(3) = 0 [pid 5550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5550] memfd_create("syzkaller", 0) = 3 [pid 5550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5545] <... mount resumed>) = 0 [pid 5544] <... write resumed>) = 32 [pid 5544] unlink("./bus") = 0 [pid 5544] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5544] exit_group(0) = ? [pid 5544] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5544, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5545] <... openat resumed>) = 3 [pid 5003] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5545] chdir("./file0" [pid 5003] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5545] <... chdir resumed>) = 0 [pid 5003] unlink("./45/binderfs" [pid 5545] ioctl(4, LOOP_CLR_FD [pid 5003] <... unlink resumed>) = 0 [pid 5546] <... mount resumed>) = 0 [ 67.719993][ T5546] NILFS (loop0): recovery complete [ 67.725980][ T5547] NILFS (loop1): recovery complete [ 67.733972][ T5551] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.754766][ T5553] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5545] <... ioctl resumed>) = 0 [pid 5003] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5547] <... mount resumed>) = 0 [pid 5545] close(4 [pid 5550] <... write resumed>) = 2097152 [pid 5547] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5545] <... close resumed>) = 0 [pid 5547] <... openat resumed>) = 3 [pid 5546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5545] creat("./bus", 000 [pid 5547] chdir("./file0" [pid 5550] munmap(0x7f5db7f12000, 2097152 [pid 5547] <... chdir resumed>) = 0 [pid 5545] <... creat resumed>) = 4 [pid 5547] ioctl(4, LOOP_CLR_FD [pid 5545] open("./bus", O_RDONLY [pid 5547] <... ioctl resumed>) = 0 [pid 5546] <... openat resumed>) = 3 [pid 5545] <... open resumed>) = 5 [pid 5547] close(4 [pid 5546] chdir("./file0" [pid 5545] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5547] <... close resumed>) = 0 [pid 5546] <... chdir resumed>) = 0 [pid 5545] <... open resumed>) = 6 [pid 5547] creat("./bus", 000 [pid 5546] ioctl(4, LOOP_CLR_FD [pid 5545] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5546] <... ioctl resumed>) = 0 [pid 5546] close(4 [pid 5545] <... write resumed>) = 32 [pid 5546] <... close resumed>) = 0 [pid 5545] unlink("./bus" [pid 5546] creat("./bus", 000 [pid 5545] <... unlink resumed>) = 0 [pid 5545] sendfile(4, 5, NULL, 145139829833722 [pid 5546] <... creat resumed>) = 4 [pid 5550] <... munmap resumed>) = 0 [pid 5546] open("./bus", O_RDONLY [pid 5545] <... sendfile resumed>) = 32 [pid 5550] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5546] <... open resumed>) = 5 [ 67.756492][ T5552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.778829][ T5548] NILFS (loop2): recovery complete [pid 5545] exit_group(0 [pid 5550] <... openat resumed>) = 4 [pid 5546] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5545] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = 0 [pid 5550] ioctl(4, LOOP_SET_FD, 3 [pid 5546] <... open resumed>) = 6 [pid 5003] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] <... mount resumed>) = 0 [pid 5547] <... creat resumed>) = 4 [pid 5546] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5545] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5545, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./42/binderfs") = 0 [pid 5002] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5547] open("./bus", O_RDONLY [pid 5550] <... ioctl resumed>) = 0 [pid 5548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5547] <... open resumed>) = 5 [pid 5003] lstat("./45/file0", [pid 5550] close(3 [pid 5548] <... openat resumed>) = 3 [pid 5547] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5546] <... write resumed>) = 32 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5550] <... close resumed>) = 0 [pid 5548] chdir("./file0" [pid 5547] <... open resumed>) = 6 [pid 5546] unlink("./bus" [pid 5003] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] mkdir("./file0", 0777 [pid 5548] <... chdir resumed>) = 0 [pid 5547] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5546] <... unlink resumed>) = 0 [pid 5550] <... mkdir resumed>) = 0 [pid 5548] ioctl(4, LOOP_CLR_FD [pid 5546] sendfile(4, 5, NULL, 145139829833722 [pid 5550] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5548] <... ioctl resumed>) = 0 [pid 5547] <... write resumed>) = 32 [pid 5546] <... sendfile resumed>) = 32 [pid 5003] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5548] close(4 [ 67.813656][ T5550] loop3: detected capacity change from 0 to 4096 [ 67.823326][ T5554] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5547] unlink("./bus" [pid 5546] exit_group(0 [pid 5003] <... openat resumed>) = 4 [pid 5548] <... close resumed>) = 0 [pid 5547] <... unlink resumed>) = 0 [pid 5546] <... exit_group resumed>) = ? [pid 5003] fstat(4, [pid 5002] <... umount2 resumed>) = 0 [pid 5548] creat("./bus", 000 [pid 5547] sendfile(4, 5, NULL, 145139829833722 [pid 5546] +++ exited with 0 +++ [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(4, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] lstat("./42/file0", [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5546, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] getdents64(4, [pid 5548] <... creat resumed>) = 4 [pid 5547] <... sendfile resumed>) = 32 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5547] exit_group(0 [pid 5548] open("./bus", O_RDONLY [pid 5547] <... exit_group resumed>) = ? [pid 5003] close(4 [pid 5002] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] <... open resumed>) = 5 [pid 5003] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5548] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5547] +++ exited with 0 +++ [pid 5003] rmdir("./45/file0" [pid 5002] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5548] <... open resumed>) = 6 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5547, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5548] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 4999] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, [pid 5002] fstat(4, [pid 4999] getdents64(3, [pid 4998] fstat(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] close(3 [pid 4999] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... close resumed>) = 0 [pid 4999] lstat("./45/binderfs", [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(3, [pid 5003] rmdir("./45" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./45/binderfs") = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] <... rmdir resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] <... write resumed>) = 32 [pid 5003] mkdir("./46", 0777 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(4 [pid 5548] unlink("./bus" [pid 5003] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5548] <... unlink resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5002] <... close resumed>) = 0 [pid 4998] lstat("./45/binderfs", [pid 5548] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... openat resumed>) = 3 [pid 5002] rmdir("./42/file0" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 4998] unlink("./45/binderfs" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] getdents64(3, [pid 4998] <... unlink resumed>) = 0 [pid 5003] close(3 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [ 67.854511][ T5550] NILFS (loop3): invalid segment: Checksum error in segment payload [ 67.866065][ T5550] NILFS (loop3): trying rollback from an earlier position [pid 5002] close(3 [pid 5548] <... sendfile resumed>) = 32 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... close resumed>) = 0 [pid 5548] exit_group(0 [pid 5002] rmdir("./42" [pid 5548] <... exit_group resumed>) = ? [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5555 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./43", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5548] +++ exited with 0 +++ [pid 5002] <... openat resumed>) = 3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5548, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5000] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5556 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./44/binderfs"./strace-static-x86_64: Process 5555 attached ) = 0 [pid 5555] chdir("./46" [pid 5000] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... chdir resumed>) = 0 [pid 5555] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5556 attached ) = 0 [pid 5556] chdir("./43" [pid 5555] setpgid(0, 0 [pid 5556] <... chdir resumed>) = 0 [pid 5555] <... setpgid resumed>) = 0 [pid 5556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5556] <... prctl resumed>) = 0 [pid 5555] <... openat resumed>) = 3 [pid 5556] setpgid(0, 0 [pid 5555] write(3, "1000", 4 [pid 5556] <... setpgid resumed>) = 0 [pid 5555] <... write resumed>) = 4 [ 67.905264][ T5550] NILFS (loop3): recovery complete [pid 5556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5555] close(3 [pid 5556] <... openat resumed>) = 3 [pid 5555] <... close resumed>) = 0 [pid 5550] <... mount resumed>) = 0 [pid 5556] write(3, "1000", 4 [pid 5555] symlink("/dev/binderfs", "./binderfs" [pid 5550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5556] <... write resumed>) = 4 [pid 5555] <... symlink resumed>) = 0 [pid 5550] <... openat resumed>) = 3 [pid 5556] close(3 [pid 5555] memfd_create("syzkaller", 0 [pid 5550] chdir("./file0" [pid 5556] <... close resumed>) = 0 [pid 5555] <... memfd_create resumed>) = 3 [pid 5550] <... chdir resumed>) = 0 [pid 5556] symlink("/dev/binderfs", "./binderfs" [pid 5555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5550] ioctl(4, LOOP_CLR_FD [pid 5556] <... symlink resumed>) = 0 [pid 5555] <... mmap resumed>) = 0x7f5db7f12000 [pid 5550] <... ioctl resumed>) = 0 [pid 5556] memfd_create("syzkaller", 0 [pid 5550] close(4 [pid 5556] <... memfd_create resumed>) = 3 [pid 5550] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5550] creat("./bus", 000 [pid 4999] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5556] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 4999] lstat("./45/file0", [pid 4998] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./45/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] fstat(4, [pid 4998] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 5556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5550] <... creat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] fstat(4, [pid 5550] open("./bus", O_RDONLY [pid 4999] getdents64(4, [pid 5550] <... open resumed>) = 5 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5550] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5550] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 4998] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./45/file0" [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5550] <... write resumed>) = 32 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5550] unlink("./bus" [pid 4999] getdents64(3, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5550] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 5550] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... close resumed>) = 0 [pid 5000] lstat("./44/file0", [pid 4999] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./45" [pid 4998] rmdir("./45/file0" [pid 5555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 5550] <... sendfile resumed>) = 32 [pid 5000] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5550] exit_group(0 [pid 4999] mkdir("./46", 0777 [pid 5550] <... exit_group resumed>) = ? [ 67.933473][ T5557] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5550] +++ exited with 0 +++ [pid 5000] fstat(4, [pid 4999] <... openat resumed>) = 3 [pid 4998] rmdir("./45" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5550, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./46", 0777 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./44/file0" [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] close(3 [pid 4998] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5001] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./44" [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5558 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] mkdir("./45", 0777 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 5001] fstat(3, [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5558 attached [pid 5001] getdents64(3, [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] close(3 [pid 5001] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5558] chdir("./46" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5559 [pid 5558] <... chdir resumed>) = 0 [pid 5001] lstat("./46/binderfs", [pid 5558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5560 [pid 5558] <... prctl resumed>) = 0 [pid 5001] unlink("./46/binderfs" [pid 5558] setpgid(0, 0./strace-static-x86_64: Process 5559 attached ) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5559] chdir("./46" [pid 5558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5559] <... chdir resumed>) = 0 [pid 5558] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5560 attached [pid 5559] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5558] write(3, "1000", 4 [pid 5560] chdir("./45" [pid 5559] <... prctl resumed>) = 0 [pid 5558] <... write resumed>) = 4 [pid 5560] <... chdir resumed>) = 0 [pid 5559] setpgid(0, 0 [pid 5558] close(3 [pid 5556] <... write resumed>) = 2097152 [pid 5560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5559] <... setpgid resumed>) = 0 [pid 5558] <... close resumed>) = 0 [pid 5560] <... prctl resumed>) = 0 [pid 5559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5558] symlink("/dev/binderfs", "./binderfs" [pid 5560] setpgid(0, 0 [pid 5559] <... openat resumed>) = 3 [pid 5558] <... symlink resumed>) = 0 [pid 5560] <... setpgid resumed>) = 0 [pid 5559] write(3, "1000", 4 [pid 5558] memfd_create("syzkaller", 0 [pid 5560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5559] <... write resumed>) = 4 [pid 5558] <... memfd_create resumed>) = 3 [pid 5560] <... openat resumed>) = 3 [pid 5559] close(3 [pid 5558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5555] <... write resumed>) = 2097152 [pid 5560] write(3, "1000", 4 [pid 5559] <... close resumed>) = 0 [pid 5558] <... mmap resumed>) = 0x7f5db7f12000 [pid 5555] munmap(0x7f5db7f12000, 2097152 [pid 5560] <... write resumed>) = 4 [pid 5559] symlink("/dev/binderfs", "./binderfs" [pid 5560] close(3 [pid 5559] <... symlink resumed>) = 0 [pid 5555] <... munmap resumed>) = 0 [pid 5560] <... close resumed>) = 0 [pid 5559] memfd_create("syzkaller", 0 [pid 5555] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5560] symlink("/dev/binderfs", "./binderfs" [pid 5559] <... memfd_create resumed>) = 3 [pid 5556] munmap(0x7f5db7f12000, 2097152 [pid 5555] <... openat resumed>) = 4 [pid 5560] <... symlink resumed>) = 0 [pid 5559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5556] <... munmap resumed>) = 0 [pid 5555] ioctl(4, LOOP_SET_FD, 3 [pid 5560] memfd_create("syzkaller", 0 [pid 5559] <... mmap resumed>) = 0x7f5db7f12000 [pid 5560] <... memfd_create resumed>) = 3 [pid 5559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5556] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5556] <... openat resumed>) = 4 [pid 5560] <... mmap resumed>) = 0x7f5db7f12000 [pid 5556] ioctl(4, LOOP_SET_FD, 3 [pid 5560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5555] <... ioctl resumed>) = 0 [pid 5555] close(3) = 0 [pid 5555] mkdir("./file0", 0777) = 0 [pid 5555] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5556] <... ioctl resumed>) = 0 [pid 5556] close(3) = 0 [pid 5556] mkdir("./file0", 0777 [pid 5001] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5560] <... write resumed>) = 2097152 [pid 5559] <... write resumed>) = 2097152 [pid 5556] <... mkdir resumed>) = 0 [pid 5001] fstat(4, [pid 5556] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5560] munmap(0x7f5db7f12000, 2097152 [pid 5559] munmap(0x7f5db7f12000, 2097152 [pid 5558] <... write resumed>) = 2097152 [pid 5001] getdents64(4, [pid 5560] <... munmap resumed>) = 0 [pid 5559] <... munmap resumed>) = 0 [pid 5558] munmap(0x7f5db7f12000, 2097152 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5559] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5558] <... munmap resumed>) = 0 [pid 5001] getdents64(4, [pid 5560] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5559] <... openat resumed>) = 4 [pid 5558] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5560] <... openat resumed>) = 4 [pid 5559] ioctl(4, LOOP_SET_FD, 3 [pid 5558] <... openat resumed>) = 4 [ 68.046189][ T5555] loop5: detected capacity change from 0 to 4096 [ 68.074066][ T5556] loop4: detected capacity change from 0 to 4096 [pid 5001] close(4) = 0 [pid 5560] ioctl(4, LOOP_SET_FD, 3 [pid 5559] <... ioctl resumed>) = 0 [pid 5558] ioctl(4, LOOP_SET_FD, 3 [pid 5001] rmdir("./46/file0" [pid 5559] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 5559] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5559] mkdir("./file0", 0777 [pid 5560] <... ioctl resumed>) = 0 [pid 5558] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5559] <... mkdir resumed>) = 0 [pid 5558] close(3 [pid 5001] close(3 [pid 5560] close(3 [pid 5559] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5558] <... close resumed>) = 0 [pid 5560] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5560] mkdir("./file0", 0777 [pid 5558] mkdir("./file0", 0777 [pid 5001] rmdir("./46" [pid 5560] <... mkdir resumed>) = 0 [pid 5558] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5560] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5558] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] mkdir("./47", 0777) = 0 [ 68.116040][ T5559] loop0: detected capacity change from 0 to 4096 [ 68.122284][ T5555] NILFS (loop5): invalid segment: Checksum error in segment payload [ 68.130967][ T5555] NILFS (loop5): trying rollback from an earlier position [ 68.133260][ T5556] NILFS (loop4): invalid segment: Checksum error in segment payload [ 68.138369][ T5560] loop2: detected capacity change from 0 to 4096 [ 68.147657][ T5556] NILFS (loop4): trying rollback from an earlier position [ 68.152662][ T5558] loop1: detected capacity change from 0 to 4096 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 68.178142][ T5560] NILFS (loop2): invalid segment: Checksum error in segment payload [ 68.178886][ T5559] NILFS (loop0): invalid segment: Checksum error in segment payload [ 68.186137][ T5560] NILFS (loop2): trying rollback from an earlier position [ 68.193402][ T5558] NILFS (loop1): invalid segment: Checksum error in segment payload [ 68.195964][ T5559] NILFS (loop0): trying rollback from an earlier position [ 68.202457][ T5558] NILFS (loop1): trying rollback from an earlier position [ 68.216502][ T5559] NILFS (loop0): recovery complete [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5559] <... mount resumed>) = 0 [pid 5001] close(3 [pid 5559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 5559] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5559] chdir("./file0"./strace-static-x86_64: Process 5563 attached ) = 0 [pid 5555] <... mount resumed>) = 0 [pid 5555] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5555] chdir("./file0") = 0 [pid 5555] ioctl(4, LOOP_CLR_FD) = 0 [pid 5555] close(4 [pid 5563] chdir("./47" [pid 5559] ioctl(4, LOOP_CLR_FD [pid 5555] <... close resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5563 [pid 5563] <... chdir resumed>) = 0 [pid 5559] <... ioctl resumed>) = 0 [pid 5563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5559] close(4) = 0 [pid 5563] <... prctl resumed>) = 0 [pid 5559] creat("./bus", 000 [pid 5563] setpgid(0, 0) = 0 [pid 5555] creat("./bus", 000 [pid 5563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5559] <... creat resumed>) = 4 [pid 5563] write(3, "1000", 4 [pid 5559] open("./bus", O_RDONLY [pid 5563] <... write resumed>) = 4 [pid 5559] <... open resumed>) = 5 [pid 5563] close(3 [pid 5559] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5563] <... close resumed>) = 0 [pid 5563] symlink("/dev/binderfs", "./binderfs" [pid 5559] <... open resumed>) = 6 [pid 5563] <... symlink resumed>) = 0 [pid 5559] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5563] memfd_create("syzkaller", 0 [pid 5555] <... creat resumed>) = 4 [ 68.223783][ T5555] NILFS (loop5): recovery complete [ 68.230026][ T5561] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.241454][ T5556] NILFS (loop4): recovery complete [ 68.250809][ T5560] NILFS (loop2): recovery complete [ 68.256061][ T5562] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.270466][ T5558] NILFS (loop1): recovery complete [pid 5555] open("./bus", O_RDONLY [pid 5563] <... memfd_create resumed>) = 3 [pid 5555] <... open resumed>) = 5 [pid 5559] <... write resumed>) = 32 [pid 5558] <... mount resumed>) = 0 [pid 5555] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5555] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5559] unlink("./bus" [pid 5558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5563] <... mmap resumed>) = 0x7f5db7f12000 [pid 5558] <... openat resumed>) = 3 [pid 5555] <... write resumed>) = 32 [pid 5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5558] chdir("./file0" [pid 5555] unlink("./bus" [pid 5558] <... chdir resumed>) = 0 [pid 5558] ioctl(4, LOOP_CLR_FD) = 0 [pid 5558] close(4) = 0 [pid 5558] creat("./bus", 000 [pid 5560] <... mount resumed>) = 0 [pid 5559] <... unlink resumed>) = 0 [pid 5556] <... mount resumed>) = 0 [pid 5555] <... unlink resumed>) = 0 [pid 5559] sendfile(4, 5, NULL, 145139829833722 [pid 5560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5555] sendfile(4, 5, NULL, 145139829833722 [pid 5560] <... openat resumed>) = 3 [pid 5559] <... sendfile resumed>) = 32 [pid 5556] <... openat resumed>) = 3 [pid 5560] chdir("./file0" [pid 5559] exit_group(0 [pid 5556] chdir("./file0" [pid 5555] <... sendfile resumed>) = 32 [pid 5560] <... chdir resumed>) = 0 [pid 5559] <... exit_group resumed>) = ? [pid 5556] <... chdir resumed>) = 0 [pid 5560] ioctl(4, LOOP_CLR_FD [pid 5559] +++ exited with 0 +++ [pid 5558] <... creat resumed>) = 4 [pid 5556] ioctl(4, LOOP_CLR_FD [pid 5555] exit_group(0 [pid 5560] <... ioctl resumed>) = 0 [pid 5558] open("./bus", O_RDONLY [pid 5556] <... ioctl resumed>) = 0 [pid 5555] <... exit_group resumed>) = ? [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5559, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5560] close(4 [pid 5558] <... open resumed>) = 5 [pid 5556] close(4 [pid 5558] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5556] <... close resumed>) = 0 [pid 5560] <... close resumed>) = 0 [pid 5558] <... open resumed>) = 6 [pid 5556] creat("./bus", 000 [pid 5555] +++ exited with 0 +++ [pid 4998] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] creat("./bus", 000 [pid 5558] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5555, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] <... write resumed>) = 32 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 4998] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5558] unlink("./bus" [pid 5003] <... restart_syscall resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5558] <... unlink resumed>) = 0 [pid 4998] fstat(3, [pid 5558] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5558] <... sendfile resumed>) = 32 [pid 5003] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5558] exit_group(0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5558] <... exit_group resumed>) = ? [pid 5003] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] +++ exited with 0 +++ [pid 5556] <... creat resumed>) = 4 [pid 5003] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5556] open("./bus", O_RDONLY [pid 5003] fstat(3, [pid 4998] lstat("./46/binderfs", [pid 5556] <... open resumed>) = 5 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5558, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5556] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] getdents64(3, [pid 4998] unlink("./46/binderfs" [pid 5556] <... open resumed>) = 6 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... unlink resumed>) = 0 [pid 5556] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] unlink("./46/binderfs") = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5560] <... creat resumed>) = 4 [pid 4999] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] open("./bus", O_RDONLY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5560] <... open resumed>) = 5 [pid 4999] lstat("./46/binderfs", [pid 5560] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5560] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] unlink("./46/binderfs") = 0 [ 68.282770][ T5564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.296770][ T5565] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.307670][ T5566] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] <... write resumed>) = 32 [pid 5560] unlink("./bus") = 0 [pid 5560] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5560] exit_group(0) = ? [pid 5556] <... write resumed>) = 32 [pid 5556] unlink("./bus") = 0 [pid 5556] sendfile(4, 5, NULL, 145139829833722 [pid 5560] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5560, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./45/binderfs") = 0 [pid 5000] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5556] <... sendfile resumed>) = 32 [pid 5563] <... write resumed>) = 2097152 [pid 5556] exit_group(0 [pid 5003] <... umount2 resumed>) = 0 [pid 5563] munmap(0x7f5db7f12000, 2097152 [pid 5556] <... exit_group resumed>) = ? [pid 5003] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5563] <... munmap resumed>) = 0 [pid 5563] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5556] +++ exited with 0 +++ [pid 5563] <... openat resumed>) = 4 [pid 5003] lstat("./46/file0", [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5556, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5563] ioctl(4, LOOP_SET_FD, 3 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 5002] fstat(3, [pid 4998] fstat(4, [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5002] getdents64(3, [pid 4998] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 5002] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5563] <... ioctl resumed>) = 0 [pid 5563] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5563] <... close resumed>) = 0 [pid 5003] close(4 [pid 5002] lstat("./43/binderfs", [pid 5000] <... umount2 resumed>) = 0 [pid 4998] close(4 [pid 5003] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5003] rmdir("./46/file0" [pid 4998] rmdir("./46/file0" [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] unlink("./43/binderfs" [pid 4998] <... rmdir resumed>) = 0 [pid 5000] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... unlink resumed>) = 0 [pid 4998] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [pid 5563] mkdir("./file0", 0777 [pid 5003] rmdir("./46" [pid 4999] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] lstat("./46/file0", [pid 4998] rmdir("./46" [pid 5000] fstat(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] mkdir("./47", 0777 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5563] <... mkdir resumed>) = 0 [pid 4998] mkdir("./47", 0777 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... mkdir resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(4, [pid 4998] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5563] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4999] getdents64(4, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] rmdir("./45/file0" [pid 4998] <... openat resumed>) = 3 [pid 5003] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(3, [pid 4999] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] close(4 [pid 5003] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] rmdir("./45" [pid 4999] rmdir("./46/file0" [pid 4998] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5567 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] mkdir("./46", 0777 [pid 4999] getdents64(3, [pid 4998] <... close resumed>) = 0 ./strace-static-x86_64: Process 5567 attached [pid 5002] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] rmdir("./46" [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... rmdir resumed>) = 0 [pid 5002] lstat("./43/file0", [pid 5000] close(3 [pid 4999] mkdir("./47", 0777 [pid 5567] chdir("./47" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5568 [ 68.414007][ T5563] loop3: detected capacity change from 0 to 4096 [ 68.453349][ T5563] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5567] <... chdir resumed>) = 0 [pid 5002] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5569 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5568 attached , child_tidptr=0x555555ac45d0) = 5570 [pid 5568] chdir("./47") = 0 [pid 5568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5568] setpgid(0, 0) = 0 [pid 5568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5568] write(3, "1000", 4) = 4 [pid 5568] close(3) = 0 [pid 5568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5568] memfd_create("syzkaller", 0) = 3 [pid 5568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5569 attached ) = 0x7f5db7f12000 [pid 5569] chdir("./46"./strace-static-x86_64: Process 5570 attached ) = 0 [pid 5567] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5570] chdir("./47" [pid 5569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5567] <... prctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5569] <... prctl resumed>) = 0 [pid 5569] setpgid(0, 0) = 0 [pid 5569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5569] write(3, "1000", 4) = 4 [pid 5569] close(3) = 0 [pid 5570] <... chdir resumed>) = 0 [pid 5569] symlink("/dev/binderfs", "./binderfs" [pid 5567] setpgid(0, 0 [pid 5002] <... openat resumed>) = 4 [pid 5570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5569] <... symlink resumed>) = 0 [pid 5567] <... setpgid resumed>) = 0 [pid 5002] fstat(4, [pid 5570] <... prctl resumed>) = 0 [pid 5569] memfd_create("syzkaller", 0 [pid 5567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5570] setpgid(0, 0 [pid 5569] <... memfd_create resumed>) = 3 [pid 5002] getdents64(4, [pid 5570] <... setpgid resumed>) = 0 [pid 5567] <... openat resumed>) = 3 [pid 5569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5569] <... mmap resumed>) = 0x7f5db7f12000 [pid 5567] write(3, "1000", 4 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5570] <... openat resumed>) = 3 [pid 5567] <... write resumed>) = 4 [pid 5563] <... mount resumed>) = 0 [pid 5002] getdents64(4, [pid 5570] write(3, "1000", 4 [pid 5567] close(3 [pid 5563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5570] <... write resumed>) = 4 [pid 5567] <... close resumed>) = 0 [pid 5563] <... openat resumed>) = 3 [pid 5002] close(4 [pid 5570] close(3 [pid 5002] <... close resumed>) = 0 [pid 5567] symlink("/dev/binderfs", "./binderfs" [pid 5563] chdir("./file0" [pid 5570] <... close resumed>) = 0 [pid 5568] <... write resumed>) = 2097152 [pid 5567] <... symlink resumed>) = 0 [pid 5563] <... chdir resumed>) = 0 [pid 5002] rmdir("./43/file0" [pid 5570] symlink("/dev/binderfs", "./binderfs" [pid 5567] memfd_create("syzkaller", 0 [pid 5563] ioctl(4, LOOP_CLR_FD [pid 5002] <... rmdir resumed>) = 0 [pid 5563] <... ioctl resumed>) = 0 [pid 5570] <... symlink resumed>) = 0 [pid 5563] close(4 [pid 5567] <... memfd_create resumed>) = 3 [pid 5563] <... close resumed>) = 0 [pid 5570] memfd_create("syzkaller", 0 [pid 5567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5563] creat("./bus", 000 [pid 5002] getdents64(3, [pid 5570] <... memfd_create resumed>) = 3 [pid 5567] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] close(3 [pid 5563] <... creat resumed>) = 4 [pid 5570] <... mmap resumed>) = 0x7f5db7f12000 [pid 5002] <... close resumed>) = 0 [pid 5568] munmap(0x7f5db7f12000, 2097152 [pid 5563] open("./bus", O_RDONLY [ 68.471865][ T5563] NILFS (loop3): trying rollback from an earlier position [ 68.492141][ T5563] NILFS (loop3): recovery complete [ 68.502638][ T5571] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5568] <... munmap resumed>) = 0 [pid 5563] <... open resumed>) = 5 [pid 5002] rmdir("./43" [pid 5563] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... rmdir resumed>) = 0 [pid 5563] <... open resumed>) = 6 [pid 5002] mkdir("./44", 0777 [pid 5568] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5563] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5563] <... write resumed>) = 32 [pid 5568] <... openat resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 5568] ioctl(4, LOOP_SET_FD, 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5563] unlink("./bus" [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5563] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5563] sendfile(4, 5, NULL, 145139829833722 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5563] <... sendfile resumed>) = 32 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5572 [pid 5567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5563] exit_group(0 [pid 5570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5568] <... ioctl resumed>) = 0 [pid 5563] <... exit_group resumed>) = ? [pid 5563] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5563, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5568] close(3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5568] <... close resumed>) = 0 [pid 5001] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5568] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./47/binderfs", [pid 5568] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5572 attached [pid 5570] <... write resumed>) = 2097152 [pid 5569] <... write resumed>) = 2097152 [pid 5568] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5567] <... write resumed>) = 2097152 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5572] chdir("./44" [pid 5570] munmap(0x7f5db7f12000, 2097152 [ 68.561268][ T5568] loop0: detected capacity change from 0 to 4096 [pid 5569] munmap(0x7f5db7f12000, 2097152 [pid 5567] munmap(0x7f5db7f12000, 2097152 [pid 5001] unlink("./47/binderfs" [pid 5572] <... chdir resumed>) = 0 [pid 5570] <... munmap resumed>) = 0 [pid 5569] <... munmap resumed>) = 0 [pid 5569] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5569] ioctl(4, LOOP_SET_FD, 3 [pid 5572] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5570] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5567] <... munmap resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5569] <... ioctl resumed>) = 0 [pid 5569] close(3) = 0 [pid 5569] mkdir("./file0", 0777) = 0 [pid 5569] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5572] <... prctl resumed>) = 0 [pid 5570] <... openat resumed>) = 4 [pid 5567] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5572] setpgid(0, 0 [pid 5001] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] ioctl(4, LOOP_SET_FD, 3 [pid 5567] <... openat resumed>) = 4 [pid 5567] ioctl(4, LOOP_SET_FD, 3 [pid 5572] <... setpgid resumed>) = 0 [pid 5572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5570] <... ioctl resumed>) = 0 [pid 5567] <... ioctl resumed>) = 0 [pid 5572] <... openat resumed>) = 3 [pid 5570] close(3 [pid 5567] close(3 [pid 5572] write(3, "1000", 4 [pid 5570] <... close resumed>) = 0 [pid 5567] <... close resumed>) = 0 [pid 5572] <... write resumed>) = 4 [pid 5570] mkdir("./file0", 0777 [pid 5567] mkdir("./file0", 0777 [pid 5572] close(3) = 0 [pid 5570] <... mkdir resumed>) = 0 [pid 5567] <... mkdir resumed>) = 0 [ 68.603246][ T5568] NILFS (loop0): invalid segment: Checksum error in segment payload [ 68.609052][ T5569] loop2: detected capacity change from 0 to 4096 [ 68.612744][ T5568] NILFS (loop0): trying rollback from an earlier position [ 68.625652][ T5570] loop1: detected capacity change from 0 to 4096 [ 68.632914][ T5567] loop5: detected capacity change from 0 to 4096 [ 68.647869][ T5568] NILFS (loop0): recovery complete [pid 5572] symlink("/dev/binderfs", "./binderfs" [pid 5570] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5567] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5572] <... symlink resumed>) = 0 [pid 5572] memfd_create("syzkaller", 0) = 3 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5001] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./47/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./47") = 0 [ 68.649824][ T5569] NILFS (loop2): invalid segment: Checksum error in segment payload [ 68.665562][ T5570] NILFS (loop1): invalid segment: Checksum error in segment payload [ 68.669100][ T5567] NILFS (loop5): invalid segment: Checksum error in segment payload [ 68.691688][ T5573] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] mkdir("./48", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5574 [pid 5568] <... mount resumed>) = 0 [pid 5568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5568] chdir("./file0") = 0 ./strace-static-x86_64: Process 5574 attached [pid 5568] ioctl(4, LOOP_CLR_FD) = 0 [pid 5574] chdir("./48" [pid 5568] close(4 [pid 5574] <... chdir resumed>) = 0 [pid 5568] <... close resumed>) = 0 [pid 5574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5568] creat("./bus", 000 [pid 5572] <... write resumed>) = 2097152 [pid 5574] <... prctl resumed>) = 0 [pid 5574] setpgid(0, 0) = 0 [pid 5574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5574] write(3, "1000", 4) = 4 [pid 5574] close(3) = 0 [pid 5574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5574] memfd_create("syzkaller", 0) = 3 [pid 5574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5572] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5572] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5572] ioctl(4, LOOP_SET_FD, 3 [pid 5568] <... creat resumed>) = 4 [pid 5568] open("./bus", O_RDONLY) = 5 [pid 5568] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5568] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5568] unlink("./bus") = 0 [pid 5568] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5568] exit_group(0) = ? [pid 5574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5568] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5568, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 68.699887][ T5570] NILFS (loop1): trying rollback from an earlier position [ 68.732017][ T5567] NILFS (loop5): trying rollback from an earlier position [ 68.740026][ T5569] NILFS (loop2): trying rollback from an earlier position [ 68.740757][ T5572] loop4: detected capacity change from 0 to 4096 [pid 4998] unlink("./47/binderfs") = 0 [pid 4998] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... ioctl resumed>) = 0 [pid 5572] close(3) = 0 [pid 5572] mkdir("./file0", 0777) = 0 [pid 5572] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5569] <... mount resumed>) = 0 [pid 5567] <... mount resumed>) = 0 [pid 5574] <... write resumed>) = 2097152 [pid 5574] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5574] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 68.779660][ T5570] NILFS (loop1): recovery complete [ 68.782869][ T5569] NILFS (loop2): recovery complete [ 68.791108][ T5567] NILFS (loop5): recovery complete [ 68.797803][ T5575] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.811232][ T5572] NILFS (loop4): invalid segment: Checksum error in segment payload [ 68.811497][ T5576] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5574] ioctl(4, LOOP_SET_FD, 3 [pid 5569] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5569] <... openat resumed>) = 3 [pid 5567] <... openat resumed>) = 3 [pid 5569] chdir("./file0" [pid 5574] <... ioctl resumed>) = 0 [pid 5574] close(3) = 0 [pid 5574] mkdir("./file0", 0777 [pid 5569] <... chdir resumed>) = 0 [pid 5567] chdir("./file0" [pid 5569] ioctl(4, LOOP_CLR_FD [pid 5567] <... chdir resumed>) = 0 [pid 5567] ioctl(4, LOOP_CLR_FD [pid 5569] <... ioctl resumed>) = 0 [pid 5569] close(4 [pid 5567] <... ioctl resumed>) = 0 [pid 5569] <... close resumed>) = 0 [pid 5567] close(4 [pid 5574] <... mkdir resumed>) = 0 [pid 5569] creat("./bus", 000 [pid 5567] <... close resumed>) = 0 [pid 5567] creat("./bus", 000 [pid 5570] <... mount resumed>) = 0 [pid 5570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5570] chdir("./file0") = 0 [pid 5570] ioctl(4, LOOP_CLR_FD) = 0 [pid 5570] close(4) = 0 [pid 5570] creat("./bus", 000 [pid 5567] <... creat resumed>) = 4 [pid 5567] open("./bus", O_RDONLY) = 5 [pid 5567] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5574] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5567] <... open resumed>) = 6 [pid 5567] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5567] unlink("./bus") = 0 [pid 5569] <... creat resumed>) = 4 [pid 5567] sendfile(4, 5, NULL, 145139829833722 [pid 5569] open("./bus", O_RDONLY) = 5 [pid 5569] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5569] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5567] <... sendfile resumed>) = 32 [pid 5569] <... write resumed>) = 32 [pid 5567] exit_group(0 [pid 5569] unlink("./bus" [pid 5567] <... exit_group resumed>) = ? [pid 5567] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5567, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5569] <... unlink resumed>) = 0 [pid 5569] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./47/binderfs") = 0 [pid 5003] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] <... sendfile resumed>) = 32 [pid 5569] exit_group(0) = ? [pid 5569] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5569, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [ 68.826764][ T5574] loop3: detected capacity change from 0 to 4096 [ 68.840692][ T5577] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.855929][ T5572] NILFS (loop4): trying rollback from an earlier position [ 68.871432][ T5574] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4998] lstat("./47/file0", [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./46/binderfs", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./46/binderfs") = 0 [pid 4998] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5570] <... creat resumed>) = 4 [pid 4998] getdents64(4, [pid 5570] open("./bus", O_RDONLY) = 5 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5570] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] getdents64(4, [pid 5570] <... open resumed>) = 6 [pid 5570] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5570] <... write resumed>) = 32 [pid 4998] <... close resumed>) = 0 [pid 5570] unlink("./bus" [pid 4998] rmdir("./47/file0") = 0 [pid 5570] <... unlink resumed>) = 0 [pid 4998] getdents64(3, [pid 5570] sendfile(4, 5, NULL, 145139829833722 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 5570] <... sendfile resumed>) = 32 [pid 4998] rmdir("./47" [pid 5570] exit_group(0) = ? [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./48", 0777 [pid 5570] +++ exited with 0 +++ [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5570, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4998] <... openat resumed>) = 3 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... restart_syscall resumed>) = 0 [pid 4998] close(3) = 0 [pid 4999] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./47/binderfs", [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5579 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./47/binderfs") = 0 [ 68.892008][ T5574] NILFS (loop3): trying rollback from an earlier position [ 68.916970][ T5572] NILFS (loop4): recovery complete [pid 4999] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... mount resumed>) = 0 [pid 5572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5572] chdir("./file0") = 0 [pid 5572] ioctl(4, LOOP_CLR_FD) = 0 [pid 5572] close(4) = 0 [pid 5572] creat("./bus", 000 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5579 attached [pid 4999] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5579] chdir("./48" [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./47/file0" [pid 5579] <... chdir resumed>) = 0 [pid 5003] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5579] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] close(3 [pid 5579] <... prctl resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5579] setpgid(0, 0 [pid 5003] lstat("./47/file0", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./47" [pid 5579] <... setpgid resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./46/file0", [pid 4999] <... rmdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] mkdir("./48", 0777 [pid 5579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5579] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(4, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5579] write(3, "1000", 4 [pid 5003] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5000] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5579] <... write resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 5000] getdents64(4, [pid 5579] close(3 [pid 5003] fstat(4, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5580 [pid 5000] close(4) = 0 [pid 5000] rmdir("./46/file0" [pid 5579] <... close resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5579] symlink("/dev/binderfs", "./binderfs" [pid 5003] getdents64(4, [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./46"./strace-static-x86_64: Process 5580 attached [pid 5579] <... symlink resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... rmdir resumed>) = 0 [pid 5580] chdir("./48" [pid 5579] memfd_create("syzkaller", 0 [pid 5003] getdents64(4, [pid 5000] mkdir("./47", 0777 [pid 5580] <... chdir resumed>) = 0 [pid 5579] <... memfd_create resumed>) = 3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] close(4 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5580] <... prctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5580] setpgid(0, 0 [pid 5579] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] <... close resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5580] <... setpgid resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] close(3 [pid 5580] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5580] write(3, "1000", 4 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5580] <... write resumed>) = 4 [pid 5580] close(3 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5582 [pid 5580] <... close resumed>) = 0 [pid 5580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5580] memfd_create("syzkaller", 0) = 3 [pid 5580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 68.942634][ T5578] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.967429][ T5574] NILFS (loop3): recovery complete [pid 5580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] rmdir("./47/file0"./strace-static-x86_64: Process 5582 attached [pid 5579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5574] <... mount resumed>) = 0 [pid 5572] <... creat resumed>) = 4 [pid 5582] chdir("./47" [pid 5574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5572] open("./bus", O_RDONLY [pid 5582] <... chdir resumed>) = 0 [pid 5574] <... openat resumed>) = 3 [pid 5572] <... open resumed>) = 5 [pid 5003] <... rmdir resumed>) = 0 [pid 5582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5574] chdir("./file0" [pid 5572] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] getdents64(3, [pid 5582] <... prctl resumed>) = 0 [pid 5574] <... chdir resumed>) = 0 [pid 5572] <... open resumed>) = 6 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5582] setpgid(0, 0 [pid 5574] ioctl(4, LOOP_CLR_FD [pid 5572] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] close(3 [pid 5582] <... setpgid resumed>) = 0 [pid 5574] <... ioctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5574] close(4 [pid 5582] <... openat resumed>) = 3 [pid 5574] <... close resumed>) = 0 [pid 5003] rmdir("./47" [pid 5582] write(3, "1000", 4 [pid 5574] creat("./bus", 000 [pid 5572] <... write resumed>) = 32 [pid 5582] <... write resumed>) = 4 [pid 5572] unlink("./bus" [pid 5003] <... rmdir resumed>) = 0 [pid 5582] close(3) = 0 [pid 5582] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5572] <... unlink resumed>) = 0 [pid 5003] mkdir("./48", 0777 [pid 5582] memfd_create("syzkaller", 0 [pid 5572] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... mkdir resumed>) = 0 [pid 5582] <... memfd_create resumed>) = 3 [pid 5582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5579] <... write resumed>) = 2097152 [pid 5572] <... sendfile resumed>) = 32 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5572] exit_group(0 [pid 5003] <... openat resumed>) = 3 [pid 5572] <... exit_group resumed>) = ? [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5572] +++ exited with 0 +++ [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5572, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5003] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5583 [pid 5002] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5583 attached [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5583] chdir("./48" [pid 5580] <... write resumed>) = 2097152 [pid 5002] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./44/binderfs") = 0 [pid 5002] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... chdir resumed>) = 0 [pid 5583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5579] munmap(0x7f5db7f12000, 2097152 [ 69.005215][ T5581] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5583] <... prctl resumed>) = 0 [pid 5579] <... munmap resumed>) = 0 [pid 5583] setpgid(0, 0) = 0 [pid 5579] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5579] <... openat resumed>) = 4 [pid 5583] write(3, "1000", 4 [pid 5579] ioctl(4, LOOP_SET_FD, 3 [pid 5583] <... write resumed>) = 4 [pid 5580] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5580] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] <... close resumed>) = 0 [pid 5580] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5580] ioctl(4, LOOP_SET_FD, 3 [pid 5583] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... openat resumed>) = 4 [pid 5583] <... symlink resumed>) = 0 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./44/file0") = 0 [pid 5002] getdents64(3, [pid 5583] memfd_create("syzkaller", 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5583] <... memfd_create resumed>) = 3 [pid 5002] close(3 [pid 5583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... close resumed>) = 0 [pid 5583] <... mmap resumed>) = 0x7f5db7f12000 [pid 5582] <... write resumed>) = 2097152 [pid 5574] <... creat resumed>) = 4 [pid 5002] rmdir("./44" [pid 5574] open("./bus", O_RDONLY [pid 5002] <... rmdir resumed>) = 0 [pid 5574] <... open resumed>) = 5 [pid 5574] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] mkdir("./45", 0777 [pid 5574] <... open resumed>) = 6 [pid 5002] <... mkdir resumed>) = 0 [pid 5574] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5584 ./strace-static-x86_64: Process 5584 attached [pid 5584] chdir("./45") = 0 [pid 5584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5584] setpgid(0, 0) = 0 [pid 5584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5584] write(3, "1000", 4 [pid 5580] <... ioctl resumed>) = 0 [pid 5584] <... write resumed>) = 4 [pid 5584] close(3 [pid 5580] close(3 [pid 5584] <... close resumed>) = 0 [pid 5580] <... close resumed>) = 0 [pid 5580] mkdir("./file0", 0777 [pid 5584] symlink("/dev/binderfs", "./binderfs" [pid 5583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5580] <... mkdir resumed>) = 0 [pid 5574] <... write resumed>) = 32 [pid 5574] unlink("./bus" [pid 5582] munmap(0x7f5db7f12000, 2097152 [pid 5574] <... unlink resumed>) = 0 [pid 5574] sendfile(4, 5, NULL, 145139829833722 [pid 5584] <... symlink resumed>) = 0 [pid 5582] <... munmap resumed>) = 0 [pid 5574] <... sendfile resumed>) = 32 [pid 5584] memfd_create("syzkaller", 0 [pid 5580] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5574] exit_group(0 [pid 5584] <... memfd_create resumed>) = 3 [pid 5574] <... exit_group resumed>) = ? [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5582] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5584] <... mmap resumed>) = 0x7f5db7f12000 [pid 5582] <... openat resumed>) = 4 [pid 5579] <... ioctl resumed>) = 0 [pid 5574] +++ exited with 0 +++ [ 69.070683][ T5579] loop0: detected capacity change from 0 to 4096 [ 69.078857][ T5580] loop1: detected capacity change from 0 to 4096 [pid 5582] ioctl(4, LOOP_SET_FD, 3 [pid 5579] close(3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5574, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5579] <... close resumed>) = 0 [pid 5579] mkdir("./file0", 0777) = 0 [pid 5001] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./48/binderfs") = 0 [pid 5001] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... ioctl resumed>) = 0 [pid 5582] close(3) = 0 [pid 5582] mkdir("./file0", 0777) = 0 [pid 5582] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [ 69.122693][ T5582] loop2: detected capacity change from 0 to 4096 [ 69.135436][ T5580] NILFS (loop1): invalid segment: Checksum error in segment payload [ 69.144402][ T5579] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5583] <... write resumed>) = 2097152 [pid 5583] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5001] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5583] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./48/file0") = 0 [pid 5583] <... openat resumed>) = 4 [pid 5001] getdents64(3, [pid 5583] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./48") = 0 [pid 5001] mkdir("./49", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5585 ./strace-static-x86_64: Process 5585 attached [pid 5585] chdir("./49") = 0 [pid 5585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5585] setpgid(0, 0) = 0 [pid 5585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5585] write(3, "1000", 4 [pid 5584] <... write resumed>) = 2097152 [pid 5585] <... write resumed>) = 4 [pid 5585] close(3) = 0 [pid 5585] symlink("/dev/binderfs", "./binderfs" [pid 5584] munmap(0x7f5db7f12000, 2097152 [pid 5585] <... symlink resumed>) = 0 [pid 5585] memfd_create("syzkaller", 0) = 3 [pid 5584] <... munmap resumed>) = 0 [pid 5583] <... ioctl resumed>) = 0 [pid 5585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5584] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 69.178500][ T5579] NILFS (loop0): trying rollback from an earlier position [ 69.179035][ T5582] NILFS (loop2): invalid segment: Checksum error in segment payload [ 69.195235][ T5580] NILFS (loop1): trying rollback from an earlier position [ 69.201673][ T5579] NILFS (loop0): recovery complete [ 69.210580][ T5583] loop5: detected capacity change from 0 to 4096 [pid 5583] close(3 [pid 5584] <... openat resumed>) = 4 [pid 5583] <... close resumed>) = 0 [pid 5579] <... mount resumed>) = 0 [pid 5584] ioctl(4, LOOP_SET_FD, 3 [pid 5583] mkdir("./file0", 0777 [pid 5579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5583] <... mkdir resumed>) = 0 [pid 5579] <... openat resumed>) = 3 [pid 5583] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5579] chdir("./file0") = 0 [pid 5579] ioctl(4, LOOP_CLR_FD) = 0 [pid 5579] close(4) = 0 [pid 5579] creat("./bus", 000 [pid 5585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5579] <... creat resumed>) = 4 [pid 5579] open("./bus", O_RDONLY) = 5 [pid 5579] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5579] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5579] unlink("./bus" [pid 5584] <... ioctl resumed>) = 0 [pid 5584] close(3) = 0 [pid 5584] mkdir("./file0", 0777 [pid 5579] <... unlink resumed>) = 0 [pid 5579] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5579] exit_group(0) = ? [pid 5584] <... mkdir resumed>) = 0 [pid 5584] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5579] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5579, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 69.230603][ T5586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.238204][ T5584] loop4: detected capacity change from 0 to 4096 [ 69.246350][ T5582] NILFS (loop2): trying rollback from an earlier position [ 69.249563][ T5580] NILFS (loop1): recovery complete [pid 4998] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5585] <... write resumed>) = 2097152 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./48/binderfs", [pid 5580] <... mount resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5580] chdir("./file0" [pid 4998] unlink("./48/binderfs" [pid 5580] <... chdir resumed>) = 0 [pid 5580] ioctl(4, LOOP_CLR_FD) = 0 [pid 5580] close(4) = 0 [pid 5580] creat("./bus", 000 [pid 5585] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5585] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 69.284813][ T5583] NILFS (loop5): invalid segment: Checksum error in segment payload [ 69.298517][ T5587] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.311450][ T5583] NILFS (loop5): trying rollback from an earlier position [ 69.317524][ T5584] NILFS (loop4): invalid segment: Checksum error in segment payload [ 69.319382][ T5582] NILFS (loop2): recovery complete [pid 5585] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... mount resumed>) = 0 [pid 5580] <... creat resumed>) = 4 [pid 5580] open("./bus", O_RDONLY) = 5 [pid 5580] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5580] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5580] unlink("./bus") = 0 [pid 5580] sendfile(4, 5, NULL, 145139829833722 [pid 5585] <... ioctl resumed>) = 0 [pid 5585] close(3) = 0 [pid 5585] mkdir("./file0", 0777) = 0 [pid 5580] <... sendfile resumed>) = 32 [pid 5580] exit_group(0) = ? [pid 5582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5582] chdir("./file0") = 0 [pid 5582] ioctl(4, LOOP_CLR_FD [pid 5585] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5582] <... ioctl resumed>) = 0 [pid 5582] close(4) = 0 [pid 5582] creat("./bus", 000 [pid 5580] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./48/binderfs") = 0 [ 69.330852][ T5585] loop3: detected capacity change from 0 to 4096 [ 69.339688][ T5584] NILFS (loop4): trying rollback from an earlier position [ 69.348321][ T5588] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... creat resumed>) = 4 [pid 5582] open("./bus", O_RDONLY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5582] <... open resumed>) = 5 [pid 4998] <... openat resumed>) = 4 [pid 5582] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] fstat(4, [pid 5582] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 4999] lstat("./48/file0", [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5583] <... mount resumed>) = 0 [pid 5582] <... write resumed>) = 32 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5582] unlink("./bus" [pid 4999] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] close(4 [pid 4999] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] rmdir("./48/file0" [pid 4999] fstat(4, [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] close(3 [pid 4999] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./48" [pid 4999] close(4 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] mkdir("./49", 0777 [pid 4999] rmdir("./48/file0" [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] getdents64(3, [pid 4998] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [ 69.397619][ T5583] NILFS (loop5): recovery complete [ 69.404876][ T5585] NILFS (loop3): invalid segment: Checksum error in segment payload [ 69.423458][ T5589] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.435668][ T5585] NILFS (loop3): trying rollback from an earlier position [ 69.436191][ T5584] NILFS (loop4): recovery complete [pid 5583] <... openat resumed>) = 3 [pid 4999] close(3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5583] chdir("./file0" [pid 5582] <... unlink resumed>) = 0 [pid 5583] <... chdir resumed>) = 0 [pid 5582] sendfile(4, 5, NULL, 145139829833722 [pid 5583] ioctl(4, LOOP_CLR_FD) = 0 [pid 5583] close(4) = 0 [pid 5582] <... sendfile resumed>) = 32 [pid 4999] <... close resumed>) = 0 [pid 4998] close(3 [pid 5583] creat("./bus", 000 [pid 5582] exit_group(0 [pid 5583] <... creat resumed>) = 4 [pid 5582] <... exit_group resumed>) = ? [pid 4999] rmdir("./48" [pid 4998] <... close resumed>) = 0 [pid 5583] open("./bus", O_RDONLY [pid 5582] +++ exited with 0 +++ [pid 4999] <... rmdir resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5583] <... open resumed>) = 5 [pid 5583] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5583] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5582, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4999] mkdir("./49", 0777./strace-static-x86_64: Process 5590 attached [pid 5583] unlink("./bus" [pid 5000] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5590 [pid 5590] chdir("./49") = 0 [pid 5583] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5583] sendfile(4, 5, NULL, 145139829833722 [pid 5590] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5585] <... mount resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 5583] <... sendfile resumed>) = 32 [pid 5583] exit_group(0) = ? [pid 5583] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5583, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5590] <... prctl resumed>) = 0 [pid 5590] setpgid(0, 0) = 0 [pid 5590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5584] <... mount resumed>) = 0 [pid 5585] <... openat resumed>) = 3 [pid 5584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] fstat(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5585] chdir("./file0" [pid 5584] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5585] <... chdir resumed>) = 0 [pid 5584] chdir("./file0" [pid 5000] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5585] ioctl(4, LOOP_CLR_FD [pid 5584] <... chdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5585] <... ioctl resumed>) = 0 [pid 5584] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] close(4 [pid 5584] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5593 [pid 5585] <... close resumed>) = 0 [pid 5584] close(4 [pid 5000] lstat("./47/binderfs", [pid 5585] creat("./bus", 000 [pid 5584] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5585] <... creat resumed>) = 4 [pid 5584] creat("./bus", 000 [pid 5000] unlink("./47/binderfs" [pid 5585] open("./bus", O_RDONLY [pid 5000] <... unlink resumed>) = 0 [pid 5585] <... open resumed>) = 5 [pid 5000] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5585] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32./strace-static-x86_64: Process 5593 attached [pid 5590] write(3, "1000", 4 [pid 5585] <... write resumed>) = 32 [pid 5000] <... umount2 resumed>) = 0 [pid 5585] unlink("./bus" [pid 5593] chdir("./49" [pid 5590] <... write resumed>) = 4 [pid 5585] <... unlink resumed>) = 0 [pid 5584] <... creat resumed>) = 4 [pid 5003] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] sendfile(4, 5, NULL, 145139829833722 [ 69.459534][ T5585] NILFS (loop3): recovery complete [ 69.470698][ T5591] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.481724][ T5592] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5584] open("./bus", O_RDONLY [pid 5593] <... chdir resumed>) = 0 [pid 5590] close(3 [pid 5585] <... sendfile resumed>) = 32 [pid 5584] <... open resumed>) = 5 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5590] <... close resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5593] <... prctl resumed>) = 0 [pid 5590] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5593] setpgid(0, 0 [pid 5590] <... symlink resumed>) = 0 [pid 5003] fstat(3, [pid 5593] <... setpgid resumed>) = 0 [pid 5590] memfd_create("syzkaller", 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./47/file0", [pid 5593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5590] <... memfd_create resumed>) = 3 [pid 5585] exit_group(0 [pid 5584] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] getdents64(3, [pid 5593] <... openat resumed>) = 3 [pid 5590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5585] <... exit_group resumed>) = ? [pid 5584] <... open resumed>) = 6 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5593] write(3, "1000", 4 [ 69.507461][ T27] kauditd_printk_skb: 106 callbacks suppressed [ 69.507476][ T27] audit: type=1804 audit(1684404989.279:582): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.vorshp/45/file0/bus" dev="loop4" ino=12 res=1 errno=0 [pid 5590] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] <... write resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] close(3 [pid 5585] +++ exited with 0 +++ [pid 5584] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] lstat("./48/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5593] <... close resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5585, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5593] symlink("/dev/binderfs", "./binderfs" [pid 5584] <... write resumed>) = 32 [pid 5003] unlink("./48/binderfs" [pid 5000] <... openat resumed>) = 4 [pid 5590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5593] <... symlink resumed>) = 0 [pid 5584] unlink("./bus" [pid 5003] <... unlink resumed>) = 0 [pid 5593] memfd_create("syzkaller", 0 [pid 5584] <... unlink resumed>) = 0 [pid 5003] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 5593] <... memfd_create resumed>) = 3 [pid 5584] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] getdents64(4, [pid 5593] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5590] <... write resumed>) = 2097152 [pid 5584] <... sendfile resumed>) = 32 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5590] munmap(0x7f5db7f12000, 2097152 [pid 5584] exit_group(0 [pid 5003] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(4, [pid 5590] <... munmap resumed>) = 0 [pid 5584] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5590] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] lstat("./48/file0", [pid 5001] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5590] <... openat resumed>) = 4 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(3, [pid 5000] close(4 [pid 5590] ioctl(4, LOOP_SET_FD, 3 [pid 5584] +++ exited with 0 +++ [ 69.538720][ T27] audit: type=1804 audit(1684404989.309:583): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.vorshp/45/file0/bus" dev="loop4" ino=12 res=1 errno=0 [pid 5003] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5584, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5001] getdents64(3, [pid 5000] rmdir("./47/file0" [pid 5003] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] <... openat resumed>) = 4 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./49/binderfs", [pid 5000] getdents64(3, [pid 5003] getdents64(4, [pid 5002] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./49/binderfs" [pid 5003] getdents64(4, [pid 5002] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... unlink resumed>) = 0 [pid 5000] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(4 [pid 5002] fstat(3, [pid 5000] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] rmdir("./47" [pid 5003] rmdir("./48/file0" [pid 5002] getdents64(3, [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5002] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] mkdir("./48", 0777 [pid 5003] close(3 [pid 5002] lstat("./45/binderfs", [pid 5003] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5003] rmdir("./48" [pid 5002] unlink("./45/binderfs" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5003] <... rmdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5003] mkdir("./49", 0777 [pid 5002] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5003] <... mkdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... openat resumed>) = 3 [pid 5000] close(3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] <... close resumed>) = 0 [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5594 [pid 5590] <... ioctl resumed>) = 0 [pid 5590] close(3) = 0 [pid 5590] mkdir("./file0", 0777) = 0 [pid 5590] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5594 attached [pid 5594] chdir("./49" [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5595 [pid 5594] <... chdir resumed>) = 0 [pid 5594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5594] setpgid(0, 0) = 0 [pid 5594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5594] write(3, "1000", 4) = 4 [pid 5594] close(3) = 0 [pid 5594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5594] memfd_create("syzkaller", 0) = 3 [pid 5594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 69.595759][ T5590] loop0: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5595 attached [pid 5595] chdir("./48") = 0 [pid 5595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5595] setpgid(0, 0) = 0 [pid 5595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5595] write(3, "1000", 4) = 4 [pid 5595] close(3) = 0 [pid 5595] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5595] memfd_create("syzkaller", 0) = 3 [pid 5595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./45/file0" [pid 5593] <... write resumed>) = 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 5593] munmap(0x7f5db7f12000, 2097152 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./45" [pid 5595] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 69.637194][ T5590] NILFS (loop0): invalid segment: Checksum error in segment payload [ 69.669070][ T5590] NILFS (loop0): trying rollback from an earlier position [pid 5594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5593] <... munmap resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5595] <... write resumed>) = 2097152 [pid 5594] <... write resumed>) = 2097152 [pid 5593] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5595] munmap(0x7f5db7f12000, 2097152 [pid 5594] munmap(0x7f5db7f12000, 2097152 [pid 5593] <... openat resumed>) = 4 [pid 5002] mkdir("./46", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5593] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] lstat("./49/file0", [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5597 [pid 5590] <... mount resumed>) = 0 [pid 5590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5590] chdir("./file0") = 0 [pid 5590] ioctl(4, LOOP_CLR_FD) = 0 [pid 5590] close(4 [pid 5594] <... munmap resumed>) = 0 [pid 5590] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5590] creat("./bus", 000./strace-static-x86_64: Process 5597 attached [pid 5594] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5597] chdir("./46" [pid 5594] <... openat resumed>) = 4 [pid 5597] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5597] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... openat resumed>) = 4 [pid 5597] <... prctl resumed>) = 0 [pid 5001] fstat(4, [pid 5597] setpgid(0, 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5597] <... setpgid resumed>) = 0 [pid 5597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] getdents64(4, [pid 5597] <... openat resumed>) = 3 [pid 5597] write(3, "1000", 4) = 4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5597] close(3 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5597] <... close resumed>) = 0 [pid 5597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] close(4 [pid 5597] memfd_create("syzkaller", 0 [pid 5001] <... close resumed>) = 0 [pid 5597] <... memfd_create resumed>) = 3 [pid 5597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] rmdir("./49/file0" [pid 5597] <... mmap resumed>) = 0x7f5db7f12000 [pid 5594] ioctl(4, LOOP_SET_FD, 3 [pid 5595] <... munmap resumed>) = 0 [pid 5593] <... ioctl resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5595] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] close(3) = 0 [pid 5595] <... openat resumed>) = 4 [pid 5001] rmdir("./49") = 0 [pid 5595] ioctl(4, LOOP_SET_FD, 3 [ 69.687995][ T5590] NILFS (loop0): recovery complete [ 69.694872][ T5593] loop1: detected capacity change from 0 to 4096 [ 69.699770][ T5596] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.725427][ T5594] loop5: detected capacity change from 0 to 4096 [pid 5593] close(3) = 0 [pid 5001] mkdir("./50", 0777 [pid 5590] <... creat resumed>) = 4 [pid 5590] open("./bus", O_RDONLY [pid 5597] <... write resumed>) = 2097152 [pid 5595] <... ioctl resumed>) = 0 [pid 5594] <... ioctl resumed>) = 0 [pid 5593] mkdir("./file0", 0777 [pid 5590] <... open resumed>) = 5 [pid 5001] <... mkdir resumed>) = 0 [pid 5595] close(3 [pid 5594] close(3 [pid 5593] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5595] <... close resumed>) = 0 [pid 5594] <... close resumed>) = 0 [pid 5593] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... openat resumed>) = 3 [pid 5595] mkdir("./file0", 0777 [pid 5594] mkdir("./file0", 0777 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5595] <... mkdir resumed>) = 0 [pid 5594] <... mkdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5595] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5594] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] close(3 [pid 5590] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... close resumed>) = 0 [pid 5590] <... open resumed>) = 6 [pid 5590] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5597] munmap(0x7f5db7f12000, 2097152 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5597] <... munmap resumed>) = 0 [pid 5597] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 69.735161][ T5595] loop2: detected capacity change from 0 to 4096 [ 69.736599][ T27] audit: type=1804 audit(1684404989.509:584): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.aQJbv6/49/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 69.769991][ T5594] NILFS (loop5): invalid segment: Checksum error in segment payload [ 69.775414][ T5597] loop4: detected capacity change from 0 to 4096 [pid 5597] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5597] close(3) = 0 [pid 5597] mkdir("./file0", 0777) = 0 [pid 5597] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, ""./strace-static-x86_64: Process 5598 attached [pid 5598] chdir("./50") = 0 [pid 5598] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5598] setpgid(0, 0) = 0 [pid 5598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5598] write(3, "1000", 4) = 4 [pid 5598] close(3) = 0 [pid 5598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5598 [pid 5598] memfd_create("syzkaller", 0) = 3 [pid 5598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5590] <... write resumed>) = 32 [pid 5590] unlink("./bus" [pid 5598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5590] <... unlink resumed>) = 0 [ 69.781753][ T5595] NILFS (loop2): invalid segment: Checksum error in segment payload [ 69.793997][ T5593] NILFS (loop1): invalid segment: Checksum error in segment payload [ 69.804124][ T5594] NILFS (loop5): trying rollback from an earlier position [ 69.809227][ T5597] NILFS (loop4): invalid segment: Checksum error in segment payload [ 69.811706][ T5593] NILFS (loop1): trying rollback from an earlier position [ 69.827658][ T5595] NILFS (loop2): trying rollback from an earlier position [pid 5590] sendfile(4, 5, NULL, 145139829833722 [pid 5598] <... write resumed>) = 2097152 [pid 5598] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5598] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5598] ioctl(4, LOOP_SET_FD, 3 [pid 5590] <... sendfile resumed>) = 32 [ 69.835765][ T5597] NILFS (loop4): trying rollback from an earlier position [ 69.843539][ T27] audit: type=1804 audit(1684404989.539:585): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.aQJbv6/49/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 69.857208][ T5598] loop3: detected capacity change from 0 to 4096 [ 69.875444][ T5595] NILFS (loop2): recovery complete [ 69.876629][ T5593] NILFS (loop1): recovery complete [pid 5598] <... ioctl resumed>) = 0 [pid 5590] exit_group(0 [pid 5598] close(3) = 0 [pid 5598] mkdir("./file0", 0777) = 0 [pid 5598] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5590] <... exit_group resumed>) = ? [pid 5595] <... mount resumed>) = 0 [pid 5595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5595] chdir("./file0") = 0 [pid 5595] ioctl(4, LOOP_CLR_FD) = 0 [pid 5595] close(4) = 0 [pid 5595] creat("./bus", 000 [pid 5590] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5590, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 69.881841][ T5597] NILFS (loop4): recovery complete [ 69.885913][ T5594] NILFS (loop5): recovery complete [ 69.895193][ T5598] NILFS (loop3): invalid segment: Checksum error in segment payload [ 69.905100][ T5598] NILFS (loop3): trying rollback from an earlier position [ 69.907412][ T5599] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5595] <... creat resumed>) = 4 [pid 5595] open("./bus", O_RDONLY) = 5 [pid 5595] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5595] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5594] <... mount resumed>) = 0 [pid 4998] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 69.929716][ T5600] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.937895][ T5598] NILFS (loop3): recovery complete [ 69.940905][ T27] audit: type=1804 audit(1684404989.699:586): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/48/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 69.970848][ T5601] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5594] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5595] <... write resumed>) = 32 [pid 5595] unlink("./bus") = 0 [pid 5594] chdir("./file0" [pid 5593] <... mount resumed>) = 0 [pid 4998] fstat(3, [pid 5595] sendfile(4, 5, NULL, 145139829833722 [pid 5598] <... mount resumed>) = 0 [pid 5594] <... chdir resumed>) = 0 [pid 5593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5594] ioctl(4, LOOP_CLR_FD [pid 5593] <... openat resumed>) = 3 [pid 4998] getdents64(3, [pid 5594] <... ioctl resumed>) = 0 [pid 5593] chdir("./file0" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5594] close(4 [pid 5593] <... chdir resumed>) = 0 [pid 4998] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5594] <... close resumed>) = 0 [pid 5593] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5594] creat("./bus", 000 [pid 5593] <... ioctl resumed>) = 0 [pid 4998] lstat("./49/binderfs", [pid 5593] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5593] <... close resumed>) = 0 [pid 4998] unlink("./49/binderfs" [pid 5593] creat("./bus", 000 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5594] <... creat resumed>) = 4 [ 69.971445][ T27] audit: type=1804 audit(1684404989.699:587): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/48/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 69.982972][ T5602] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.017890][ T5603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5594] open("./bus", O_RDONLY [pid 5598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5597] <... mount resumed>) = 0 [pid 5595] <... sendfile resumed>) = 32 [pid 5594] <... open resumed>) = 5 [pid 5593] <... creat resumed>) = 4 [pid 5598] <... openat resumed>) = 3 [pid 5597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5595] exit_group(0 [pid 5594] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5593] open("./bus", O_RDONLY [pid 4998] <... umount2 resumed>) = 0 [pid 5598] chdir("./file0" [pid 5597] <... openat resumed>) = 3 [pid 5595] <... exit_group resumed>) = ? [pid 5594] <... open resumed>) = 6 [pid 5593] <... open resumed>) = 5 [pid 5597] chdir("./file0" [pid 5594] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5593] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5598] <... chdir resumed>) = 0 [pid 5597] <... chdir resumed>) = 0 [pid 5595] +++ exited with 0 +++ [pid 5594] <... write resumed>) = 32 [pid 5593] <... open resumed>) = 6 [pid 5598] ioctl(4, LOOP_CLR_FD [pid 5597] ioctl(4, LOOP_CLR_FD [pid 5594] unlink("./bus" [pid 5593] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5595, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5598] <... ioctl resumed>) = 0 [pid 5597] <... ioctl resumed>) = 0 [pid 5594] <... unlink resumed>) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5598] close(4 [pid 5597] close(4 [pid 5594] sendfile(4, 5, NULL, 145139829833722 [pid 5593] <... write resumed>) = 32 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5598] <... close resumed>) = 0 [pid 5597] <... close resumed>) = 0 [pid 5593] unlink("./bus" [pid 5598] creat("./bus", 000 [pid 5597] creat("./bus", 000 [pid 5594] <... sendfile resumed>) = 32 [pid 5593] <... unlink resumed>) = 0 [pid 5000] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5594] exit_group(0 [pid 5593] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5594] <... exit_group resumed>) = ? [pid 5000] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5598] <... creat resumed>) = 4 [pid 5597] <... creat resumed>) = 4 [pid 5594] +++ exited with 0 +++ [pid 5593] <... sendfile resumed>) = 32 [pid 5000] <... openat resumed>) = 3 [pid 5598] open("./bus", O_RDONLY [pid 5597] open("./bus", O_RDONLY [pid 5593] exit_group(0 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5594, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] fstat(3, [pid 5598] <... open resumed>) = 5 [pid 5597] <... open resumed>) = 5 [pid 5593] <... exit_group resumed>) = ? [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5598] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5597] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] getdents64(3, [pid 5597] <... open resumed>) = 6 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5598] <... open resumed>) = 6 [pid 5597] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5593] +++ exited with 0 +++ [pid 5003] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5593, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] lstat("./48/binderfs", [pid 5003] <... openat resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5598] <... write resumed>) = 32 [pid 5597] <... write resumed>) = 32 [pid 5003] fstat(3, [pid 5000] unlink("./48/binderfs" [pid 4999] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] unlink("./bus" [pid 5597] unlink("./bus" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(3, [pid 5000] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5597] <... unlink resumed>) = 0 [pid 5003] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./49/file0", [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5598] <... unlink resumed>) = 0 [pid 5597] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./49/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] sendfile(4, 5, NULL, 145139829833722 [pid 5597] <... sendfile resumed>) = 32 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 70.028462][ T27] audit: type=1804 audit(1684404989.789:588): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.XGE8lx/49/file0/bus" dev="loop5" ino=12 res=1 errno=0 [pid 4999] lstat("./49/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5597] exit_group(0 [pid 5003] unlink("./49/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5598] <... sendfile resumed>) = 32 [pid 5597] <... exit_group resumed>) = ? [pid 5003] <... unlink resumed>) = 0 [pid 4999] unlink("./49/binderfs" [pid 4998] <... openat resumed>) = 4 [pid 5598] exit_group(0 [pid 5003] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4998] fstat(4, [pid 5598] <... exit_group resumed>) = ? [pid 4999] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./49/file0" [pid 5597] +++ exited with 0 +++ [pid 5598] +++ exited with 0 +++ [pid 4998] <... rmdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5597, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5598, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5001] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./49" [pid 5001] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4998] mkdir("./50", 0777 [pid 5001] fstat(3, [pid 4998] <... mkdir resumed>) = 0 [pid 5002] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4998] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] <... openat resumed>) = 3 [pid 5001] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./50/binderfs", [pid 4998] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] unlink("./50/binderfs" [pid 5002] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5604 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./46/binderfs") = 0 [pid 5002] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5604 attached [pid 5604] chdir("./50") = 0 [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5604] setpgid(0, 0) = 0 [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1000", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5604] memfd_create("syzkaller", 0) = 3 [pid 5604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./49/file0", [pid 5001] lstat("./50/file0", [pid 5000] lstat("./48/file0", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./49/file0", [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 4 [pid 5003] fstat(4, [pid 5001] fstat(4, [pid 5000] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(4, [pid 5003] getdents64(4, [pid 5001] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] close(4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 5003] <... close resumed>) = 0 [pid 5001] close(4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./49/file0" [pid 5001] <... close resumed>) = 0 [pid 5000] close(4 [pid 4999] close(4 [pid 5002] getdents64(4, [pid 5003] <... rmdir resumed>) = 0 [pid 5001] rmdir("./50/file0" [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] rmdir("./48/file0" [pid 5003] getdents64(3, [pid 4999] rmdir("./49/file0" [pid 5001] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 4999] getdents64(3, [pid 5003] close(3 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] rmdir("./50" [pid 5000] close(3 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] rmdir("./49" [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] close(3 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./50", 0777 [pid 5001] mkdir("./51", 0777 [pid 5000] rmdir("./48" [pid 4999] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5003] <... mkdir resumed>) = 0 [pid 4999] rmdir("./49" [pid 5002] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] close(4 [pid 5001] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] mkdir("./49", 0777 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5002] rmdir("./46/file0" [pid 5001] <... openat resumed>) = 3 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] mkdir("./50", 0777 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... rmdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... mkdir resumed>) = 0 [pid 5003] close(3 [pid 5002] getdents64(3, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] close(3 [pid 5001] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./46" [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5605 [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] mkdir("./47", 0777 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] close(3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] close(3 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5606 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5605 attached [pid 5002] close(3 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5607 [pid 5605] chdir("./50" [pid 5002] <... close resumed>) = 0 [ 70.132524][ T27] audit: type=1804 audit(1684404989.829:589): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.XGE8lx/49/file0/bus" dev="loop5" ino=12 res=1 errno=0 [pid 5605] <... chdir resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5608 [pid 5605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5609 [pid 5605] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5607 attached [pid 5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5606 attached [pid 5607] chdir("./49" [pid 5605] <... openat resumed>) = 3 [pid 5607] <... chdir resumed>) = 0 [pid 5606] chdir("./51" [pid 5605] write(3, "1000", 4./strace-static-x86_64: Process 5609 attached [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5606] <... chdir resumed>) = 0 [pid 5605] <... write resumed>) = 4 ./strace-static-x86_64: Process 5608 attached [pid 5609] chdir("./47" [pid 5607] <... prctl resumed>) = 0 [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] close(3 [pid 5604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5609] <... chdir resumed>) = 0 [pid 5608] chdir("./50" [pid 5607] setpgid(0, 0 [pid 5606] <... prctl resumed>) = 0 [pid 5605] <... close resumed>) = 0 [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5608] <... chdir resumed>) = 0 [pid 5607] <... setpgid resumed>) = 0 [pid 5606] setpgid(0, 0 [pid 5605] symlink("/dev/binderfs", "./binderfs" [pid 5609] <... prctl resumed>) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5606] <... setpgid resumed>) = 0 [pid 5605] <... symlink resumed>) = 0 [pid 5608] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] setpgid(0, 0 [pid 5607] <... openat resumed>) = 3 [pid 5605] memfd_create("syzkaller", 0 [pid 5609] <... setpgid resumed>) = 0 [pid 5608] <... prctl resumed>) = 0 [pid 5607] write(3, "1000", 4 [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5605] <... memfd_create resumed>) = 3 [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5608] setpgid(0, 0 [pid 5607] <... write resumed>) = 4 [pid 5606] <... openat resumed>) = 3 [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] <... openat resumed>) = 3 [pid 5608] <... setpgid resumed>) = 0 [pid 5607] close(3 [pid 5606] write(3, "1000", 4 [pid 5605] <... mmap resumed>) = 0x7f5db7f12000 [pid 5609] write(3, "1000", 4 [pid 5608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5607] <... close resumed>) = 0 [pid 5606] <... write resumed>) = 4 [pid 5609] <... write resumed>) = 4 [pid 5608] <... openat resumed>) = 3 [pid 5607] symlink("/dev/binderfs", "./binderfs" [pid 5606] close(3 [pid 5609] close(3 [pid 5608] write(3, "1000", 4 [pid 5607] <... symlink resumed>) = 0 [pid 5606] <... close resumed>) = 0 [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5609] <... close resumed>) = 0 [pid 5608] <... write resumed>) = 4 [pid 5607] memfd_create("syzkaller", 0 [pid 5606] symlink("/dev/binderfs", "./binderfs" [pid 5609] symlink("/dev/binderfs", "./binderfs" [pid 5608] close(3 [pid 5607] <... memfd_create resumed>) = 3 [pid 5606] <... symlink resumed>) = 0 [pid 5609] <... symlink resumed>) = 0 [pid 5608] <... close resumed>) = 0 [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5606] memfd_create("syzkaller", 0 [pid 5609] memfd_create("syzkaller", 0 [pid 5608] symlink("/dev/binderfs", "./binderfs" [pid 5607] <... mmap resumed>) = 0x7f5db7f12000 [pid 5606] <... memfd_create resumed>) = 3 [pid 5609] <... memfd_create resumed>) = 3 [pid 5608] <... symlink resumed>) = 0 [pid 5606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5608] memfd_create("syzkaller", 0 [pid 5609] <... mmap resumed>) = 0x7f5db7f12000 [pid 5608] <... memfd_create resumed>) = 3 [pid 5606] <... mmap resumed>) = 0x7f5db7f12000 [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5604] <... write resumed>) = 2097152 [pid 5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5608] <... mmap resumed>) = 0x7f5db7f12000 [pid 5606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5604] munmap(0x7f5db7f12000, 2097152 [pid 5609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5604] <... munmap resumed>) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5604] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5604] close(3) = 0 [pid 5606] <... write resumed>) = 2097152 [pid 5605] <... write resumed>) = 2097152 [pid 5604] mkdir("./file0", 0777) = 0 [pid 5604] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 70.276891][ T5604] loop0: detected capacity change from 0 to 4096 [ 70.277081][ T27] audit: type=1804 audit(1684404989.829:590): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EoL44c/49/file0/bus" dev="loop1" ino=12 res=1 errno=0 [pid 5605] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5607] <... write resumed>) = 2097152 [pid 5605] ioctl(4, LOOP_SET_FD, 3 [pid 5608] <... write resumed>) = 2097152 [pid 5606] munmap(0x7f5db7f12000, 2097152 [pid 5607] munmap(0x7f5db7f12000, 2097152 [pid 5609] <... write resumed>) = 2097152 [pid 5609] munmap(0x7f5db7f12000, 2097152 [pid 5607] <... munmap resumed>) = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5608] munmap(0x7f5db7f12000, 2097152 [pid 5607] ioctl(4, LOOP_SET_FD, 3 [pid 5606] <... munmap resumed>) = 0 [pid 5608] <... munmap resumed>) = 0 [pid 5606] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5608] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5606] <... openat resumed>) = 4 [pid 5608] <... openat resumed>) = 4 [pid 5606] ioctl(4, LOOP_SET_FD, 3 [pid 5608] ioctl(4, LOOP_SET_FD, 3 [pid 5609] <... munmap resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5609] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5609] close(3) = 0 [pid 5609] mkdir("./file0", 0777) = 0 [pid 5605] <... ioctl resumed>) = 0 [pid 5605] close(3) = 0 [ 70.328790][ T5604] NILFS (loop0): invalid segment: Checksum error in segment payload [ 70.332803][ T5605] loop5: detected capacity change from 0 to 4096 [ 70.341116][ T5604] NILFS (loop0): trying rollback from an earlier position [ 70.354307][ T5607] loop2: detected capacity change from 0 to 4096 [ 70.362925][ T5606] loop3: detected capacity change from 0 to 4096 [ 70.365729][ T5609] loop4: detected capacity change from 0 to 4096 [pid 5605] mkdir("./file0", 0777) = 0 [pid 5609] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5605] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5606] <... ioctl resumed>) = 0 [pid 5606] close(3) = 0 [pid 5606] mkdir("./file0", 0777 [pid 5608] <... ioctl resumed>) = 0 [pid 5606] <... mkdir resumed>) = 0 [pid 5608] close(3 [pid 5606] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5608] <... close resumed>) = 0 [pid 5608] mkdir("./file0", 0777) = 0 [pid 5608] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5607] <... ioctl resumed>) = 0 [pid 5607] close(3) = 0 [pid 5607] mkdir("./file0", 0777) = 0 [ 70.369881][ T5608] loop1: detected capacity change from 0 to 4096 [ 70.388055][ T5604] NILFS (loop0): recovery complete [ 70.400354][ T5608] NILFS (loop1): invalid segment: Checksum error in segment payload [ 70.408675][ T5606] NILFS (loop3): invalid segment: Checksum error in segment payload [ 70.415085][ T5605] NILFS (loop5): invalid segment: Checksum error in segment payload [ 70.416912][ T27] audit: type=1804 audit(1684404989.839:591): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EoL44c/49/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 70.425397][ T5609] NILFS (loop4): invalid segment: Checksum error in segment payload [ 70.447604][ T5606] NILFS (loop3): trying rollback from an earlier position [ 70.459780][ T5605] NILFS (loop5): trying rollback from an earlier position [ 70.462925][ T5608] NILFS (loop1): trying rollback from an earlier position [pid 5607] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5604] <... mount resumed>) = 0 [ 70.477021][ T5610] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.478439][ T5607] NILFS (loop2): invalid segment: Checksum error in segment payload [ 70.478459][ T5607] NILFS (loop2): trying rollback from an earlier position [ 70.490783][ T753] cfg80211: failed to load regulatory.db [ 70.504027][ T5609] NILFS (loop4): trying rollback from an earlier position [ 70.514622][ T5607] NILFS (loop2): recovery complete [ 70.520487][ T5606] NILFS (loop3): recovery complete [pid 5604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5604] chdir("./file0") = 0 [pid 5604] ioctl(4, LOOP_CLR_FD) = 0 [pid 5604] close(4) = 0 [pid 5604] creat("./bus", 000 [pid 5608] <... mount resumed>) = 0 [pid 5606] <... mount resumed>) = 0 [pid 5606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5606] <... openat resumed>) = 3 [pid 5608] chdir("./file0" [pid 5606] chdir("./file0" [pid 5608] <... chdir resumed>) = 0 [pid 5608] ioctl(4, LOOP_CLR_FD [pid 5606] <... chdir resumed>) = 0 [pid 5608] <... ioctl resumed>) = 0 [pid 5606] ioctl(4, LOOP_CLR_FD [pid 5608] close(4 [pid 5606] <... ioctl resumed>) = 0 [pid 5608] <... close resumed>) = 0 [pid 5608] creat("./bus", 000 [pid 5606] close(4 [pid 5604] <... creat resumed>) = 4 [pid 5606] <... close resumed>) = 0 [pid 5604] open("./bus", O_RDONLY [pid 5606] creat("./bus", 000 [pid 5604] <... open resumed>) = 5 [pid 5604] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5608] <... creat resumed>) = 4 [pid 5608] open("./bus", O_RDONLY [pid 5604] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5608] <... open resumed>) = 5 [pid 5608] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5604] <... write resumed>) = 32 [ 70.528098][ T5608] NILFS (loop1): recovery complete [ 70.543607][ T5612] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.546557][ T5611] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.557112][ T5613] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.571225][ T5609] NILFS (loop4): recovery complete [pid 5608] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5607] <... mount resumed>) = 0 [pid 5604] unlink("./bus" [pid 5607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5607] chdir("./file0") = 0 [pid 5607] ioctl(4, LOOP_CLR_FD) = 0 [pid 5607] close(4) = 0 [pid 5607] creat("./bus", 000) = 4 [pid 5607] open("./bus", O_RDONLY) = 5 [pid 5607] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5606] <... creat resumed>) = 4 [pid 5608] <... write resumed>) = 32 [pid 5607] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5608] unlink("./bus" [pid 5606] open("./bus", O_RDONLY) = 5 [pid 5608] <... unlink resumed>) = 0 [pid 5606] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5604] <... unlink resumed>) = 0 [pid 5608] sendfile(4, 5, NULL, 145139829833722 [pid 5606] <... open resumed>) = 6 [pid 5606] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5604] sendfile(4, 5, NULL, 145139829833722 [pid 5608] <... sendfile resumed>) = 32 [pid 5609] <... mount resumed>) = 0 [pid 5608] exit_group(0 [pid 5605] <... mount resumed>) = 0 [pid 5604] <... sendfile resumed>) = 32 [pid 5609] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5608] <... exit_group resumed>) = ? [pid 5605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5607] <... write resumed>) = 32 [pid 5604] exit_group(0 [pid 5607] unlink("./bus" [pid 5609] <... openat resumed>) = 3 [pid 5605] <... openat resumed>) = 3 [pid 5604] <... exit_group resumed>) = ? [pid 5608] +++ exited with 0 +++ [pid 5607] <... unlink resumed>) = 0 [pid 5606] <... write resumed>) = 32 [pid 5607] sendfile(4, 5, NULL, 145139829833722 [pid 5609] chdir("./file0" [pid 5607] <... sendfile resumed>) = 32 [pid 5605] chdir("./file0" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5608, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5609] <... chdir resumed>) = 0 [pid 5607] exit_group(0 [pid 5606] unlink("./bus" [pid 5605] <... chdir resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5607] <... exit_group resumed>) = ? [pid 5605] ioctl(4, LOOP_CLR_FD [pid 5609] ioctl(4, LOOP_CLR_FD [pid 4999] <... restart_syscall resumed>) = 0 [pid 5604] +++ exited with 0 +++ [pid 5609] <... ioctl resumed>) = 0 [pid 5607] +++ exited with 0 +++ [pid 5606] <... unlink resumed>) = 0 [pid 5605] <... ioctl resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5609] close(4 [pid 4999] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5606] sendfile(4, 5, NULL, 145139829833722 [pid 5609] <... close resumed>) = 0 [pid 5605] close(4 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5609] creat("./bus", 000 [pid 5605] <... close resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5606] <... sendfile resumed>) = 32 [pid 5605] creat("./bus", 000 [pid 4999] <... openat resumed>) = 3 [pid 5606] exit_group(0 [pid 4999] fstat(3, [pid 5606] <... exit_group resumed>) = ? [pid 5000] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./50/binderfs", [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] +++ exited with 0 +++ [pid 5000] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] unlink("./50/binderfs" [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5606, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4998] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] lstat("./49/binderfs", [pid 4998] lstat("./50/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./49/binderfs" [pid 4998] unlink("./50/binderfs" [pid 5001] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./51/binderfs") = 0 [pid 5001] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5609] <... creat resumed>) = 4 [pid 5609] open("./bus", O_RDONLY) = 5 [pid 5609] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5609] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5609] unlink("./bus") = 0 [ 70.596981][ T5605] NILFS (loop5): recovery complete [ 70.608216][ T5614] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.617313][ T5615] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5609] sendfile(4, 5, NULL, 145139829833722 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5609] <... sendfile resumed>) = 32 [pid 4999] close(4 [pid 5609] exit_group(0 [pid 4999] <... close resumed>) = 0 [pid 5609] <... exit_group resumed>) = ? [pid 4999] rmdir("./50/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./50") = 0 [pid 4999] mkdir("./51", 0777) = 0 [pid 5609] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5609, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5002] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5002] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... close resumed>) = 0 [pid 5002] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./47/binderfs") = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5616 [pid 5002] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5605] <... creat resumed>) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5002] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./47/file0" [pid 5605] open("./bus", O_RDONLY [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5605] <... open resumed>) = 5 [pid 5002] close(3 [pid 5605] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./47" [pid 5605] <... open resumed>) = 6 [pid 5002] <... rmdir resumed>) = 0 [pid 5605] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5002] mkdir("./48", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 5616 attached [pid 5002] close(3 [pid 5616] chdir("./51" [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5616] <... chdir resumed>) = 0 [pid 5605] <... write resumed>) = 32 [pid 5616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] unlink("./bus" [pid 5002] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5617 [pid 4998] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5616] <... prctl resumed>) = 0 [pid 5001] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5616] setpgid(0, 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5616] <... setpgid resumed>) = 0 [pid 5605] <... unlink resumed>) = 0 [pid 5616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5605] sendfile(4, 5, NULL, 145139829833722 [pid 5001] lstat("./51/file0", [pid 5000] lstat("./49/file0", [pid 4998] lstat("./50/file0", [pid 5616] <... openat resumed>) = 3 [pid 5616] write(3, "1000", 4 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5617 attached [pid 5616] <... write resumed>) = 4 [pid 5605] <... sendfile resumed>) = 32 [pid 5001] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5617] chdir("./48" [pid 5616] close(3 [pid 5605] exit_group(0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5617] <... chdir resumed>) = 0 [pid 5616] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5616] symlink("/dev/binderfs", "./binderfs" [pid 5605] <... exit_group resumed>) = ? [pid 5001] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5617] <... prctl resumed>) = 0 [pid 5616] <... symlink resumed>) = 0 [pid 5001] fstat(4, [pid 5000] fstat(4, [pid 4998] <... openat resumed>) = 4 [pid 5617] setpgid(0, 0 [pid 5616] memfd_create("syzkaller", 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 5617] <... setpgid resumed>) = 0 [pid 5616] <... memfd_create resumed>) = 3 [pid 5605] +++ exited with 0 +++ [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5617] <... openat resumed>) = 3 [pid 5616] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5605, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5617] write(3, "1000", 4 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5617] <... write resumed>) = 4 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5001] close(4 [pid 5000] close(4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5617] close(3 [pid 5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] close(4 [pid 5617] <... close resumed>) = 0 [pid 5001] rmdir("./51/file0" [pid 5000] rmdir("./49/file0" [pid 4998] <... close resumed>) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs" [pid 5003] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] rmdir("./50/file0" [pid 5617] <... symlink resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 5000] getdents64(3, [pid 4998] <... rmdir resumed>) = 0 [pid 5617] memfd_create("syzkaller", 0 [pid 5003] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(3, [pid 5617] <... memfd_create resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5000] close(3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] fstat(3, [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] close(3 [pid 5617] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] rmdir("./51" [pid 5000] rmdir("./49" [pid 4998] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] rmdir("./50" [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] mkdir("./52", 0777 [pid 5000] mkdir("./50", 0777 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4998] mkdir("./51", 0777 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... mkdir resumed>) = 0 [pid 5003] lstat("./50/binderfs", [pid 5001] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 3 [pid 5003] unlink("./50/binderfs" [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] <... unlink resumed>) = 0 [pid 5001] close(3 [pid 5000] close(3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5616] <... write resumed>) = 2097152 [pid 5003] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5618 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5619 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5620 [pid 5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5619 attached [pid 5619] chdir("./50") = 0 ./strace-static-x86_64: Process 5620 attached ./strace-static-x86_64: Process 5618 attached [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5618] chdir("./52" [pid 5619] setpgid(0, 0 [pid 5618] <... chdir resumed>) = 0 [pid 5619] <... setpgid resumed>) = 0 [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5620] chdir("./51" [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5618] <... prctl resumed>) = 0 [pid 5620] <... chdir resumed>) = 0 [pid 5619] <... openat resumed>) = 3 [pid 5618] setpgid(0, 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5619] write(3, "1000", 4 [pid 5618] <... setpgid resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5620] <... prctl resumed>) = 0 [pid 5619] <... write resumed>) = 4 [pid 5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5620] setpgid(0, 0 [pid 5619] close(3 [pid 5618] <... openat resumed>) = 3 [pid 5619] <... close resumed>) = 0 [pid 5618] write(3, "1000", 4 [pid 5619] symlink("/dev/binderfs", "./binderfs" [pid 5618] <... write resumed>) = 4 [pid 5620] <... setpgid resumed>) = 0 [pid 5619] <... symlink resumed>) = 0 [pid 5618] close(3 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5619] memfd_create("syzkaller", 0 [pid 5618] <... close resumed>) = 0 [pid 5619] <... memfd_create resumed>) = 3 [pid 5618] symlink("/dev/binderfs", "./binderfs" [pid 5620] <... openat resumed>) = 3 [pid 5619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5618] <... symlink resumed>) = 0 [pid 5619] <... mmap resumed>) = 0x7f5db7f12000 [pid 5618] memfd_create("syzkaller", 0 [pid 5620] write(3, "1000", 4 [pid 5618] <... memfd_create resumed>) = 3 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5620] <... write resumed>) = 4 [pid 5620] close(3 [pid 5616] munmap(0x7f5db7f12000, 2097152 [pid 5620] <... close resumed>) = 0 [pid 5003] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5620] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5620] memfd_create("syzkaller", 0 [pid 5616] <... munmap resumed>) = 0 [pid 5620] <... memfd_create resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] lstat("./50/file0", [pid 5620] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5616] ioctl(4, LOOP_SET_FD, 3 [pid 5003] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5617] <... write resumed>) = 2097152 [pid 5617] munmap(0x7f5db7f12000, 2097152 [pid 5003] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 5617] <... munmap resumed>) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5617] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5617] ioctl(4, LOOP_SET_FD, 3 [pid 5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5617] <... ioctl resumed>) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./50/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./50") = 0 [pid 5003] mkdir("./51", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5616] <... ioctl resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5616] close(3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5616] <... close resumed>) = 0 [pid 5616] mkdir("./file0", 0777) = 0 [pid 5616] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5621 [pid 5619] <... write resumed>) = 2097152 [pid 5617] close(3) = 0 [pid 5617] mkdir("./file0", 0777) = 0 [ 70.850480][ T5616] loop1: detected capacity change from 0 to 4096 [ 70.866825][ T5617] loop4: detected capacity change from 0 to 4096 [pid 5617] mount("/dev/loop4", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, ""./strace-static-x86_64: Process 5621 attached [pid 5619] munmap(0x7f5db7f12000, 2097152 [pid 5621] chdir("./51") = 0 [pid 5621] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5618] <... write resumed>) = 2097152 [pid 5621] <... prctl resumed>) = 0 [pid 5619] <... munmap resumed>) = 0 [pid 5621] setpgid(0, 0 [pid 5619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5618] munmap(0x7f5db7f12000, 2097152 [pid 5621] <... setpgid resumed>) = 0 [pid 5619] <... openat resumed>) = 4 [pid 5619] ioctl(4, LOOP_SET_FD, 3 [pid 5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5620] <... write resumed>) = 2097152 [pid 5618] <... munmap resumed>) = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5621] <... openat resumed>) = 3 [pid 5621] write(3, "1000", 4) = 4 [pid 5620] munmap(0x7f5db7f12000, 2097152 [pid 5621] close(3) = 0 [pid 5621] symlink("/dev/binderfs", "./binderfs" [pid 5620] <... munmap resumed>) = 0 [pid 5620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 70.912076][ T5616] NILFS (loop1): invalid segment: Checksum error in segment payload [ 70.930304][ T5617] NILFS (loop4): invalid segment: Checksum error in segment payload [ 70.942311][ T5619] loop2: detected capacity change from 0 to 4096 [ 70.953765][ T5618] loop3: detected capacity change from 0 to 4096 [pid 5620] ioctl(4, LOOP_SET_FD, 3 [pid 5621] <... symlink resumed>) = 0 [pid 5621] memfd_create("syzkaller", 0) = 3 [pid 5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5619] <... ioctl resumed>) = 0 [pid 5619] close(3 [pid 5621] <... mmap resumed>) = 0x7f5db7f12000 [pid 5619] <... close resumed>) = 0 [pid 5619] mkdir("./file0", 0777) = 0 [pid 5619] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5618] <... ioctl resumed>) = 0 [pid 5618] close(3) = 0 [pid 5618] mkdir("./file0", 0777) = 0 [pid 5618] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5620] <... ioctl resumed>) = 0 [pid 5620] close(3) = 0 [pid 5620] mkdir("./file0", 0777) = 0 [ 70.964440][ T5620] loop0: detected capacity change from 0 to 4096 [ 70.972179][ T5616] NILFS (loop1): trying rollback from an earlier position [ 70.983159][ T5617] NILFS (loop4): trying rollback from an earlier position [ 70.992514][ T5619] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5620] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 71.017396][ T5618] NILFS (loop3): invalid segment: Checksum error in segment payload [ 71.025436][ T5618] NILFS (loop3): trying rollback from an earlier position [ 71.042647][ T5620] NILFS (loop0): invalid segment: Checksum error in segment payload [ 71.055554][ T5616] NILFS (loop1): recovery complete [pid 5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5621] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5621] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5621] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5616] <... mount resumed>) = 0 [pid 5621] close(3 [pid 5617] <... mount resumed>) = 0 [pid 5616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5621] <... close resumed>) = 0 [pid 5617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5616] <... openat resumed>) = 3 [pid 5616] chdir("./file0") = 0 [pid 5616] ioctl(4, LOOP_CLR_FD) = 0 [ 71.062610][ T5619] NILFS (loop2): trying rollback from an earlier position [ 71.071805][ T5620] NILFS (loop0): trying rollback from an earlier position [ 71.079947][ T5617] NILFS (loop4): recovery complete [ 71.087438][ T5621] loop5: detected capacity change from 0 to 4096 [ 71.091688][ T5623] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5616] close(4) = 0 [pid 5621] mkdir("./file0", 0777 [pid 5617] <... openat resumed>) = 3 [pid 5616] creat("./bus", 000 [pid 5621] <... mkdir resumed>) = 0 [pid 5617] chdir("./file0") = 0 [pid 5617] ioctl(4, LOOP_CLR_FD [pid 5621] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5617] <... ioctl resumed>) = 0 [pid 5617] close(4) = 0 [pid 5617] creat("./bus", 000 [pid 5616] <... creat resumed>) = 4 [pid 5616] open("./bus", O_RDONLY) = 5 [pid 5616] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5617] <... creat resumed>) = 4 [pid 5616] <... open resumed>) = 6 [ 71.106629][ T5622] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.112565][ T5619] NILFS (loop2): recovery complete [ 71.140987][ T5621] NILFS (loop5): invalid segment: Checksum error in segment payload [ 71.151052][ T5620] NILFS (loop0): recovery complete [ 71.156391][ T5618] NILFS (loop3): recovery complete [pid 5617] open("./bus", O_RDONLY) = 5 [pid 5616] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5617] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5617] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5616] <... write resumed>) = 32 [pid 5616] unlink("./bus" [pid 5617] unlink("./bus" [pid 5616] <... unlink resumed>) = 0 [pid 5616] sendfile(4, 5, NULL, 145139829833722 [pid 5617] <... unlink resumed>) = 0 [pid 5617] sendfile(4, 5, NULL, 145139829833722 [pid 5616] <... sendfile resumed>) = 32 [pid 5617] <... sendfile resumed>) = 32 [pid 5616] exit_group(0 [pid 5617] exit_group(0 [pid 5616] <... exit_group resumed>) = ? [pid 5617] <... exit_group resumed>) = ? [pid 5617] +++ exited with 0 +++ [pid 5616] +++ exited with 0 +++ [pid 5618] <... mount resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5616, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5618] chdir("./file0" [pid 5002] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5618] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5618] ioctl(4, LOOP_CLR_FD [pid 5002] fstat(3, [pid 5618] <... ioctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5618] close(4 [pid 5002] getdents64(3, [pid 4999] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5618] creat("./bus", 000 [pid 5002] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 5002] lstat("./48/binderfs", [pid 4999] fstat(3, [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] unlink("./48/binderfs" [pid 4999] getdents64(3, [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./51/binderfs") = 0 [ 71.161824][ T5621] NILFS (loop5): trying rollback from an earlier position [ 71.172203][ T5624] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.198151][ T5625] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5619] <... mount resumed>) = 0 [pid 5620] <... mount resumed>) = 0 [pid 5619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5619] <... openat resumed>) = 3 [pid 5618] <... creat resumed>) = 4 [pid 5620] <... openat resumed>) = 3 [pid 5619] chdir("./file0" [pid 5618] open("./bus", O_RDONLY [pid 5620] chdir("./file0" [pid 5619] <... chdir resumed>) = 0 [pid 5618] <... open resumed>) = 5 [pid 5620] <... chdir resumed>) = 0 [pid 5619] ioctl(4, LOOP_CLR_FD [pid 5618] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5620] ioctl(4, LOOP_CLR_FD [pid 5619] <... ioctl resumed>) = 0 [pid 5618] <... open resumed>) = 6 [pid 5620] <... ioctl resumed>) = 0 [pid 5619] close(4 [pid 5618] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5620] close(4 [pid 5619] <... close resumed>) = 0 [pid 5618] <... write resumed>) = 32 [pid 5620] <... close resumed>) = 0 [pid 5619] creat("./bus", 000 [pid 5618] unlink("./bus" [pid 5620] creat("./bus", 000 [pid 5618] <... unlink resumed>) = 0 [pid 5618] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5618] exit_group(0) = ? [pid 5618] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5619] <... creat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5619] open("./bus", O_RDONLY [pid 5001] fstat(3, [pid 5619] <... open resumed>) = 5 [pid 5619] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5619] <... open resumed>) = 6 [pid 5619] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5619] <... write resumed>) = 32 [pid 5001] lstat("./52/binderfs", [pid 5619] unlink("./bus" [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./52/binderfs" [pid 5619] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [ 71.207517][ T5626] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5619] sendfile(4, 5, NULL, 145139829833722 [pid 5001] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5619] <... sendfile resumed>) = 32 [pid 5619] exit_group(0) = ? [pid 5619] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 4999] close(4 [pid 5000] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] rmdir("./51/file0" [pid 5000] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5620] <... creat resumed>) = 4 [pid 5620] open("./bus", O_RDONLY [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5620] <... open resumed>) = 5 [pid 5620] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5620] <... open resumed>) = 6 [pid 5620] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 5000] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] unlink("./50/binderfs" [pid 4999] close(3 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./51" [pid 5620] <... write resumed>) = 32 [pid 4999] <... rmdir resumed>) = 0 [pid 5620] unlink("./bus" [pid 4999] mkdir("./52", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5620] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5620] sendfile(4, 5, NULL, 145139829833722 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 5620] <... sendfile resumed>) = 32 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5620] exit_group(0) = ? [pid 5620] +++ exited with 0 +++ [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5627 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5627 attached [pid 5627] chdir("./52" [pid 4998] <... restart_syscall resumed>) = 0 [pid 5627] <... chdir resumed>) = 0 [pid 4998] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./51/binderfs" [pid 5627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5627] setpgid(0, 0 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5627] <... setpgid resumed>) = 0 [pid 5627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5627] write(3, "1000", 4) = 4 [pid 5627] close(3) = 0 [pid 5627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5627] memfd_create("syzkaller", 0) = 3 [pid 5627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 71.265967][ T5621] NILFS (loop5): recovery complete [pid 5627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5627] munmap(0x7f5db7f12000, 2097152 [pid 5621] <... mount resumed>) = 0 [pid 5621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5621] chdir("./file0") = 0 [pid 5621] ioctl(4, LOOP_CLR_FD) = 0 [pid 5621] close(4) = 0 [pid 5621] creat("./bus", 000 [pid 5627] <... munmap resumed>) = 0 [pid 5627] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5627] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5627] <... ioctl resumed>) = 0 [pid 5627] close(3) = 0 [pid 5627] mkdir("./file0", 0777 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5627] <... mkdir resumed>) = 0 [ 71.332512][ T5628] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.340137][ T5627] loop1: detected capacity change from 0 to 4096 [pid 5627] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./52/file0" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5621] <... creat resumed>) = 4 [pid 5621] open("./bus", O_RDONLY) = 5 [pid 5001] getdents64(3, [pid 5621] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5621] <... open resumed>) = 6 [pid 5001] close(3 [pid 5621] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5001] <... close resumed>) = 0 [pid 5000] lstat("./50/file0", [pid 5621] unlink("./bus" [pid 5001] rmdir("./52" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5621] <... unlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5621] sendfile(4, 5, NULL, 145139829833722 [pid 5001] mkdir("./53", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5000] fstat(4, [pid 5621] <... sendfile resumed>) = 32 [pid 5621] exit_group(0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5621] <... exit_group resumed>) = ? [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] getdents64(4, [pid 5001] close(3 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5621] +++ exited with 0 +++ [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5630 [pid 5000] close(4) = 0 [pid 5003] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./50/file0" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] fstat(3, [pid 5000] close(3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5000] rmdir("./50" [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] mkdir("./51", 0777 [pid 5003] lstat("./51/binderfs", ./strace-static-x86_64: Process 5630 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5003] unlink("./51/binderfs" [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5630] chdir("./53" [pid 5003] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5630] <... chdir resumed>) = 0 [pid 5003] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5630] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 71.398196][ T5627] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5630] <... prctl resumed>) = 0 [pid 5000] close(3 [pid 5630] setpgid(0, 0) = 0 [pid 5630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5630] write(3, "1000", 4) = 4 [pid 5630] close(3 [pid 5000] <... close resumed>) = 0 [pid 5630] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5630] memfd_create("syzkaller", 0) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5631 [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5631 attached [pid 4998] lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5631] chdir("./51" [pid 4998] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5631] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5631] <... prctl resumed>) = 0 [pid 5631] setpgid(0, 0 [pid 4998] <... openat resumed>) = 4 [pid 5631] <... setpgid resumed>) = 0 [pid 4998] fstat(4, [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5631] <... openat resumed>) = 3 [pid 5631] write(3, "1000", 4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5631] <... write resumed>) = 4 [pid 4998] getdents64(4, [pid 5631] close(3 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5631] <... close resumed>) = 0 [pid 4998] close(4 [pid 5631] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... close resumed>) = 0 [pid 5631] <... symlink resumed>) = 0 [pid 4998] rmdir("./51/file0" [pid 5631] memfd_create("syzkaller", 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5631] <... memfd_create resumed>) = 3 [pid 4998] getdents64(3, [pid 5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5631] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] close(3) = 0 [pid 4998] rmdir("./51") = 0 [pid 4998] mkdir("./52", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [ 71.456118][ T5627] NILFS (loop1): trying rollback from an earlier position [pid 5003] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5632 [pid 5003] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5632 attached [pid 5003] lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] chdir("./52" [pid 5003] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... chdir resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5632] <... prctl resumed>) = 0 [pid 5632] setpgid(0, 0 [pid 5003] <... openat resumed>) = 4 [pid 5632] <... setpgid resumed>) = 0 [pid 5003] fstat(4, [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] <... openat resumed>) = 3 [pid 5003] getdents64(4, [pid 5632] write(3, "1000", 4 [pid 5630] <... write resumed>) = 2097152 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5632] <... write resumed>) = 4 [pid 5003] getdents64(4, [pid 5632] close(3 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5632] <... close resumed>) = 0 [pid 5003] close(4 [pid 5632] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... close resumed>) = 0 [pid 5632] <... symlink resumed>) = 0 [pid 5003] rmdir("./51/file0" [pid 5632] memfd_create("syzkaller", 0) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] getdents64(3, [pid 5632] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5630] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 71.525668][ T5627] NILFS (loop1): recovery complete [pid 5630] ioctl(4, LOOP_SET_FD, 3 [pid 5003] close(3) = 0 [pid 5003] rmdir("./51" [pid 5630] <... ioctl resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./52", 0777 [pid 5630] close(3) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5630] mkdir("./file0", 0777) = 0 [pid 5630] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5634 [pid 5627] <... mount resumed>) = 0 [pid 5627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5627] chdir("./file0") = 0 [pid 5627] ioctl(4, LOOP_CLR_FD) = 0 [pid 5627] close(4) = 0 [pid 5627] creat("./bus", 000./strace-static-x86_64: Process 5634 attached [pid 5631] <... write resumed>) = 2097152 [pid 5631] munmap(0x7f5db7f12000, 2097152 [pid 5634] chdir("./52" [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5631] <... munmap resumed>) = 0 [pid 5631] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5631] ioctl(4, LOOP_SET_FD, 3 [pid 5634] <... chdir resumed>) = 0 [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5634] setpgid(0, 0) = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5634] write(3, "1000", 4) = 4 [ 71.561876][ T5630] loop3: detected capacity change from 0 to 4096 [ 71.580807][ T5633] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.598899][ T5631] loop2: detected capacity change from 0 to 4096 [pid 5634] close(3) = 0 [pid 5632] <... write resumed>) = 2097152 [pid 5634] symlink("/dev/binderfs", "./binderfs" [pid 5632] munmap(0x7f5db7f12000, 2097152 [pid 5631] <... ioctl resumed>) = 0 [pid 5634] <... symlink resumed>) = 0 [pid 5631] close(3 [pid 5627] <... creat resumed>) = 4 [pid 5634] memfd_create("syzkaller", 0 [pid 5632] <... munmap resumed>) = 0 [pid 5631] <... close resumed>) = 0 [pid 5627] open("./bus", O_RDONLY [pid 5634] <... memfd_create resumed>) = 3 [pid 5632] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5631] mkdir("./file0", 0777 [pid 5627] <... open resumed>) = 5 [pid 5634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5627] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5634] <... mmap resumed>) = 0x7f5db7f12000 [pid 5632] <... openat resumed>) = 4 [pid 5631] <... mkdir resumed>) = 0 [pid 5627] <... open resumed>) = 6 [pid 5632] ioctl(4, LOOP_SET_FD, 3 [pid 5631] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5627] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5632] <... ioctl resumed>) = 0 [pid 5627] <... write resumed>) = 32 [pid 5627] unlink("./bus" [pid 5632] close(3) = 0 [pid 5632] mkdir("./file0", 0777 [pid 5627] <... unlink resumed>) = 0 [pid 5627] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5632] <... mkdir resumed>) = 0 [pid 5627] exit_group(0) = ? [ 71.607219][ T5630] NILFS (loop3): invalid segment: Checksum error in segment payload [ 71.615262][ T5630] NILFS (loop3): trying rollback from an earlier position [ 71.637176][ T5632] loop0: detected capacity change from 0 to 4096 [ 71.647414][ T5631] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5632] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5627] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5627, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 4999] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./52/binderfs") = 0 [pid 4999] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4999] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./52/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./52") = 0 [ 71.661524][ T5631] NILFS (loop2): trying rollback from an earlier position [ 71.688510][ T5632] NILFS (loop0): invalid segment: Checksum error in segment payload [ 71.704889][ T5632] NILFS (loop0): trying rollback from an earlier position [pid 4999] mkdir("./53", 0777 [pid 5634] <... write resumed>) = 2097152 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 5631] <... mount resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5636 ./strace-static-x86_64: Process 5636 attached [pid 5636] chdir("./53") = 0 [pid 5636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] setpgid(0, 0) = 0 [pid 5636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5636] write(3, "1000", 4) = 4 [pid 5636] close(3 [pid 5634] munmap(0x7f5db7f12000, 2097152 [pid 5631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5636] <... close resumed>) = 0 [pid 5631] chdir("./file0" [pid 5636] symlink("/dev/binderfs", "./binderfs" [pid 5631] <... chdir resumed>) = 0 [pid 5636] <... symlink resumed>) = 0 [pid 5634] <... munmap resumed>) = 0 [pid 5631] ioctl(4, LOOP_CLR_FD [pid 5636] memfd_create("syzkaller", 0) = 3 [pid 5634] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5631] <... ioctl resumed>) = 0 [pid 5636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5634] <... openat resumed>) = 4 [pid 5631] close(4 [pid 5636] <... mmap resumed>) = 0x7f5db7f12000 [ 71.713778][ T5631] NILFS (loop2): recovery complete [ 71.730081][ T5635] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.743895][ T5630] NILFS (loop3): recovery complete [ 71.756100][ T5632] NILFS (loop0): recovery complete [pid 5634] ioctl(4, LOOP_SET_FD, 3 [pid 5632] <... mount resumed>) = 0 [pid 5631] <... close resumed>) = 0 [pid 5632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5631] creat("./bus", 000 [pid 5632] <... openat resumed>) = 3 [pid 5632] chdir("./file0") = 0 [pid 5632] ioctl(4, LOOP_CLR_FD) = 0 [pid 5631] <... creat resumed>) = 4 [pid 5632] close(4 [pid 5631] open("./bus", O_RDONLY [pid 5636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5634] <... ioctl resumed>) = 0 [pid 5632] <... close resumed>) = 0 [pid 5630] <... mount resumed>) = 0 [pid 5631] <... open resumed>) = 5 [pid 5634] close(3) = 0 [pid 5634] mkdir("./file0", 0777) = 0 [ 71.769040][ T5637] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.769695][ T5634] loop5: detected capacity change from 0 to 4096 [ 71.801010][ T5638] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5634] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5632] creat("./bus", 000 [pid 5631] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5636] <... write resumed>) = 2097152 [pid 5630] <... openat resumed>) = 3 [pid 5636] munmap(0x7f5db7f12000, 2097152 [pid 5630] chdir("./file0" [pid 5636] <... munmap resumed>) = 0 [pid 5630] <... chdir resumed>) = 0 [pid 5636] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5630] ioctl(4, LOOP_CLR_FD [pid 5636] <... openat resumed>) = 4 [pid 5630] <... ioctl resumed>) = 0 [pid 5636] ioctl(4, LOOP_SET_FD, 3 [pid 5630] close(4 [pid 5631] <... open resumed>) = 6 [pid 5630] <... close resumed>) = 0 [pid 5630] creat("./bus", 000 [pid 5636] <... ioctl resumed>) = 0 [pid 5636] close(3) = 0 [pid 5636] mkdir("./file0", 0777) = 0 [pid 5636] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5632] <... creat resumed>) = 4 [pid 5632] open("./bus", O_RDONLY) = 5 [pid 5632] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5630] <... creat resumed>) = 4 [pid 5630] open("./bus", O_RDONLY) = 5 [pid 5630] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5630] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5632] <... open resumed>) = 6 [pid 5632] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5630] <... write resumed>) = 32 [pid 5630] unlink("./bus" [pid 5632] <... write resumed>) = 32 [pid 5632] unlink("./bus" [pid 5631] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5631] unlink("./bus" [pid 5632] <... unlink resumed>) = 0 [pid 5631] <... unlink resumed>) = 0 [pid 5632] sendfile(4, 5, NULL, 145139829833722 [pid 5631] sendfile(4, 5, NULL, 145139829833722 [pid 5630] <... unlink resumed>) = 0 [pid 5630] sendfile(4, 5, NULL, 145139829833722 [pid 5632] <... sendfile resumed>) = 32 [pid 5632] exit_group(0) = ? [pid 5631] <... sendfile resumed>) = 32 [pid 5631] exit_group(0 [pid 5630] <... sendfile resumed>) = 32 [pid 5631] <... exit_group resumed>) = ? [pid 5630] exit_group(0) = ? [pid 5632] +++ exited with 0 +++ [pid 5631] +++ exited with 0 +++ [pid 5630] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 71.820881][ T5634] NILFS (loop5): invalid segment: Checksum error in segment payload [ 71.824991][ T5636] loop1: detected capacity change from 0 to 4096 [ 71.829729][ T5634] NILFS (loop5): trying rollback from an earlier position [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5630, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4998] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./51/binderfs", [pid 5001] lstat("./53/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./51/binderfs" [pid 5001] unlink("./53/binderfs" [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5634] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./52/binderfs") = 0 [pid 4998] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5634] <... openat resumed>) = 3 [pid 5634] chdir("./file0") = 0 [pid 5634] ioctl(4, LOOP_CLR_FD) = 0 [pid 5634] close(4) = 0 [ 71.862415][ T5636] NILFS (loop1): invalid segment: Checksum error in segment payload [ 71.871055][ T5636] NILFS (loop1): trying rollback from an earlier position [ 71.874761][ T5634] NILFS (loop5): recovery complete [ 71.886038][ T5636] NILFS (loop1): recovery complete [ 71.893213][ T5639] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5634] creat("./bus", 000 [pid 5636] <... mount resumed>) = 0 [pid 5634] <... creat resumed>) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5636] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5634] open("./bus", O_RDONLY [pid 5000] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5636] <... openat resumed>) = 3 [pid 5634] <... open resumed>) = 5 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5636] chdir("./file0" [pid 5634] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] lstat("./51/file0", [pid 5636] <... chdir resumed>) = 0 [pid 5634] <... open resumed>) = 6 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5636] ioctl(4, LOOP_CLR_FD [pid 5634] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5636] <... ioctl resumed>) = 0 [pid 5634] <... write resumed>) = 32 [pid 5001] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5636] close(4 [pid 5634] unlink("./bus" [pid 5000] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5636] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5636] creat("./bus", 000 [pid 5634] <... unlink resumed>) = 0 [pid 5001] lstat("./53/file0", [pid 5000] <... openat resumed>) = 4 [pid 4998] lstat("./52/file0", [pid 5634] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 5634] <... sendfile resumed>) = 32 [pid 5001] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5634] exit_group(0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5634] <... exit_group resumed>) = ? [pid 5001] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5636] <... creat resumed>) = 4 [pid 5001] fstat(4, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 4 [pid 5636] open("./bus", O_RDONLY [pid 5634] +++ exited with 0 +++ [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] fstat(4, [pid 5636] <... open resumed>) = 5 [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5634, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5001] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5636] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] close(4 [pid 4998] getdents64(4, [pid 5636] <... open resumed>) = 6 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5001] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5636] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./51/file0" [pid 4998] getdents64(4, [pid 5001] close(4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] close(4 [pid 5636] <... write resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] rmdir("./53/file0" [pid 5000] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5636] unlink("./bus" [pid 5003] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... rmdir resumed>) = 0 [pid 4998] rmdir("./52/file0" [pid 5003] <... openat resumed>) = 3 [pid 5001] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5636] <... unlink resumed>) = 0 [pid 5003] fstat(3, [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4998] getdents64(3, [pid 5636] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./51" [pid 4998] close(3 [pid 5636] <... sendfile resumed>) = 32 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] rmdir("./53" [pid 4998] <... close resumed>) = 0 [pid 5636] exit_group(0 [pid 5003] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] rmdir("./52" [pid 5636] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] mkdir("./54", 0777 [pid 5000] mkdir("./52", 0777 [pid 4998] <... rmdir resumed>) = 0 [pid 5003] lstat("./52/binderfs", [pid 5001] <... mkdir resumed>) = 0 [pid 4998] mkdir("./53", 0777 [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... mkdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5636] +++ exited with 0 +++ [pid 5003] unlink("./52/binderfs" [pid 5001] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... unlink resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [ 71.936920][ T5640] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5636, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] close(3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5641 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5642 ./strace-static-x86_64: Process 5642 attached [pid 5642] chdir("./53") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5642] memfd_create("syzkaller", 0) = 3 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] close(3) = 0 [pid 4999] fstat(3, [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5643 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./53/binderfs") = 0 [pid 4999] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5643 attached [pid 5643] chdir("./52") = 0 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5643] write(3, "1000", 4) = 4 [pid 5643] close(3) = 0 [pid 5643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5643] memfd_create("syzkaller", 0) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5003] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5641 attached [pid 4999] <... umount2 resumed>) = 0 [pid 5003] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] chdir("./54" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5641] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... openat resumed>) = 4 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] fstat(4, [pid 5641] <... prctl resumed>) = 0 [pid 4999] lstat("./53/file0", [pid 5641] setpgid(0, 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5641] <... setpgid resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] close(4 [pid 5641] <... openat resumed>) = 3 [pid 5003] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5641] write(3, "1000", 4 [pid 5003] rmdir("./52/file0" [pid 4999] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 5003] getdents64(3, [pid 5641] <... write resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5641] close(3 [pid 4999] fstat(4, [pid 5003] close(3 [pid 5641] <... close resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs" [pid 5003] rmdir("./52" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5641] <... symlink resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] mkdir("./53", 0777 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5641] memfd_create("syzkaller", 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] close(4 [pid 5641] <... memfd_create resumed>) = 3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... close resumed>) = 0 [pid 5642] <... write resumed>) = 2097152 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5003] <... openat resumed>) = 3 [pid 4999] rmdir("./53/file0" [pid 5641] <... mmap resumed>) = 0x7f5db7f12000 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... rmdir resumed>) = 0 [pid 5642] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 4999] getdents64(3, [pid 5003] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] close(3) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5644 [pid 4999] rmdir("./53" [pid 5642] <... openat resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./54", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5642] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5645 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5644 attached [pid 5644] chdir("./53") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5645 attached ) = 0 [pid 5645] chdir("./54" [pid 5644] memfd_create("syzkaller", 0 [pid 5645] <... chdir resumed>) = 0 [pid 5644] <... memfd_create resumed>) = 3 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5643] <... write resumed>) = 2097152 [pid 5641] <... write resumed>) = 2097152 [pid 5645] <... prctl resumed>) = 0 [pid 5644] <... mmap resumed>) = 0x7f5db7f12000 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 [pid 5645] close(3) = 0 [pid 5645] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5645] memfd_create("syzkaller", 0) = 3 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5641] munmap(0x7f5db7f12000, 2097152 [pid 5642] <... ioctl resumed>) = 0 [pid 5642] close(3) = 0 [pid 5642] mkdir("./file0", 0777) = 0 [pid 5641] <... munmap resumed>) = 0 [pid 5643] munmap(0x7f5db7f12000, 2097152 [pid 5642] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5645] <... write resumed>) = 2097152 [pid 5644] <... write resumed>) = 2097152 [pid 5643] <... munmap resumed>) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5643] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5641] <... openat resumed>) = 4 [pid 5643] <... openat resumed>) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3 [ 72.067030][ T5642] loop0: detected capacity change from 0 to 4096 [pid 5641] ioctl(4, LOOP_SET_FD, 3 [pid 5643] <... ioctl resumed>) = 0 [pid 5643] close(3) = 0 [pid 5643] mkdir("./file0", 0777) = 0 [pid 5643] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5645] munmap(0x7f5db7f12000, 2097152 [pid 5644] munmap(0x7f5db7f12000, 2097152 [pid 5641] <... ioctl resumed>) = 0 [pid 5645] <... munmap resumed>) = 0 [pid 5644] <... munmap resumed>) = 0 [ 72.119924][ T5641] loop3: detected capacity change from 0 to 4096 [ 72.120071][ T5643] loop2: detected capacity change from 0 to 4096 [ 72.129279][ T5642] NILFS (loop0): invalid segment: Checksum error in segment payload [ 72.141414][ T5642] NILFS (loop0): trying rollback from an earlier position [ 72.145083][ T5643] NILFS (loop2): invalid segment: Checksum error in segment payload [ 72.155289][ T5642] NILFS (loop0): recovery complete [ 72.157067][ T5643] NILFS (loop2): trying rollback from an earlier position [pid 5641] close(3 [pid 5645] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5644] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5641] <... close resumed>) = 0 [pid 5645] <... openat resumed>) = 4 [pid 5644] <... openat resumed>) = 4 [pid 5641] mkdir("./file0", 0777 [pid 5645] ioctl(4, LOOP_SET_FD, 3 [pid 5644] ioctl(4, LOOP_SET_FD, 3 [pid 5641] <... mkdir resumed>) = 0 [pid 5641] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5645] <... ioctl resumed>) = 0 [pid 5644] <... ioctl resumed>) = 0 [pid 5645] close(3 [pid 5644] close(3 [pid 5642] <... mount resumed>) = 0 [pid 5645] <... close resumed>) = 0 [pid 5644] <... close resumed>) = 0 [pid 5644] mkdir("./file0", 0777 [pid 5645] mkdir("./file0", 0777 [pid 5644] <... mkdir resumed>) = 0 [pid 5645] <... mkdir resumed>) = 0 [pid 5642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5645] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5642] <... openat resumed>) = 3 [pid 5644] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5642] chdir("./file0") = 0 [pid 5642] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] close(4) = 0 [ 72.164891][ T5644] loop5: detected capacity change from 0 to 4096 [ 72.172129][ T5645] loop1: detected capacity change from 0 to 4096 [ 72.180355][ T5641] NILFS (loop3): invalid segment: Checksum error in segment payload [ 72.182778][ T5646] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.191518][ T5641] NILFS (loop3): trying rollback from an earlier position [ 72.202931][ T5643] NILFS (loop2): recovery complete [pid 5642] creat("./bus", 000 [pid 5643] <... mount resumed>) = 0 [pid 5642] <... creat resumed>) = 4 [pid 5642] open("./bus", O_RDONLY) = 5 [pid 5643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5642] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5643] <... openat resumed>) = 3 [pid 5643] chdir("./file0") = 0 [pid 5642] <... open resumed>) = 6 [ 72.222801][ T5645] NILFS (loop1): invalid segment: Checksum error in segment payload [ 72.232734][ T5644] NILFS (loop5): invalid segment: Checksum error in segment payload [ 72.233706][ T5647] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.242218][ T5641] NILFS (loop3): recovery complete [ 72.257603][ T5644] NILFS (loop5): trying rollback from an earlier position [ 72.264949][ T5645] NILFS (loop1): trying rollback from an earlier position [pid 5643] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5643] close(4) = 0 [pid 5643] creat("./bus", 000 [pid 5641] <... mount resumed>) = 0 [pid 5642] <... write resumed>) = 32 [pid 5642] unlink("./bus" [pid 5641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5642] <... unlink resumed>) = 0 [pid 5641] chdir("./file0") = 0 [pid 5642] sendfile(4, 5, NULL, 145139829833722 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4 [pid 5642] <... sendfile resumed>) = 32 [pid 5641] <... close resumed>) = 0 [pid 5641] creat("./bus", 000 [pid 5642] exit_group(0) = ? [pid 5643] <... creat resumed>) = 4 [pid 5642] +++ exited with 0 +++ [pid 5643] open("./bus", O_RDONLY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5643] <... open resumed>) = 5 [pid 5643] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 72.276425][ T5644] NILFS (loop5): recovery complete [ 72.280329][ T5645] NILFS (loop1): recovery complete [ 72.284602][ T5648] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.316422][ T5649] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5643] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 4998] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] unlink("./bus" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] <... mount resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5645] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5645] chdir("./file0" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5645] <... chdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5645] ioctl(4, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5645] <... ioctl resumed>) = 0 [pid 4998] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] <... close resumed>) = 0 [pid 4998] lstat("./53/binderfs", [pid 5645] creat("./bus", 000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./53/binderfs") = 0 [pid 4998] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] <... mount resumed>) = 0 [pid 5644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5644] chdir("./file0") = 0 [pid 5644] ioctl(4, LOOP_CLR_FD) = 0 [pid 5644] close(4) = 0 [pid 5644] creat("./bus", 000 [pid 5643] <... unlink resumed>) = 0 [pid 5641] <... creat resumed>) = 4 [pid 5643] sendfile(4, 5, NULL, 145139829833722 [pid 5641] open("./bus", O_RDONLY [pid 5643] <... sendfile resumed>) = 32 [pid 5641] <... open resumed>) = 5 [pid 5645] <... creat resumed>) = 4 [pid 5643] exit_group(0 [pid 5641] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5645] open("./bus", O_RDONLY [pid 5644] <... creat resumed>) = 4 [pid 5643] <... exit_group resumed>) = ? [pid 5645] <... open resumed>) = 5 [pid 5641] <... open resumed>) = 6 [pid 5641] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5644] open("./bus", O_RDONLY [pid 5645] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5644] <... open resumed>) = 5 [pid 5643] +++ exited with 0 +++ [pid 5641] <... write resumed>) = 32 [pid 5645] <... open resumed>) = 6 [pid 5644] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5641] unlink("./bus" [pid 5645] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5644] <... open resumed>) = 6 [pid 5641] <... unlink resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5645] <... write resumed>) = 32 [pid 5644] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5641] sendfile(4, 5, NULL, 145139829833722 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5645] unlink("./bus" [pid 5641] <... sendfile resumed>) = 32 [pid 5644] <... write resumed>) = 32 [pid 5641] exit_group(0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5645] <... unlink resumed>) = 0 [pid 5644] unlink("./bus" [pid 5641] <... exit_group resumed>) = ? [pid 5645] sendfile(4, 5, NULL, 145139829833722 [pid 5644] <... unlink resumed>) = 0 [pid 5641] +++ exited with 0 +++ [pid 4998] <... umount2 resumed>) = 0 [pid 5644] sendfile(4, 5, NULL, 145139829833722 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] <... sendfile resumed>) = 32 [pid 5644] <... sendfile resumed>) = 32 [pid 5000] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5645] exit_group(0 [pid 5644] exit_group(0 [pid 5001] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5644] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(3, [pid 5645] <... exit_group resumed>) = ? [pid 5001] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5644] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5001] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 5001] fstat(3, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] lstat("./53/file0", [pid 5645] +++ exited with 0 +++ [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5645, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] lstat("./52/binderfs", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./52/binderfs" [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./54/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... unlink resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] unlink("./54/binderfs" [pid 5003] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 4999] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 5003] lstat("./53/binderfs", [pid 5001] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] unlink("./53/binderfs" [pid 4999] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(4, [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [ 72.327048][ T5650] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5003] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 4999] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] rmdir("./53/file0" [pid 4999] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(3, [pid 4999] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] unlink("./54/binderfs" [pid 4998] close(3 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./53") = 0 [pid 4998] mkdir("./54", 0777) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5003] lstat("./53/file0", [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3 [pid 5003] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] <... umount2 resumed>) = 0 [pid 4999] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5651 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./54/file0", [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 4999] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] close(4 [pid 4999] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5003] rmdir("./53/file0" [pid 4999] fstat(4, [pid 5003] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5003] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5003] close(3 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] close(4./strace-static-x86_64: Process 5651 attached [pid 5651] chdir("./54" [pid 5003] rmdir("./53" [pid 4999] <... close resumed>) = 0 [pid 5651] <... chdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] rmdir("./54/file0" [pid 5003] mkdir("./54", 0777 [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... rmdir resumed>) = 0 [pid 5651] <... prctl resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] rmdir("./54" [pid 5003] close(3 [pid 5651] setpgid(0, 0 [pid 5003] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] mkdir("./55", 0777 [pid 5651] <... setpgid resumed>) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5652 attached [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5652 [pid 5001] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./54/file0", [pid 5652] chdir("./54" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] <... chdir resumed>) = 0 [pid 5001] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5652] <... prctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5652] setpgid(0, 0 [pid 5000] lstat("./52/file0", [pid 5001] <... openat resumed>) = 4 [pid 5652] <... setpgid resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(4, [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5000] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5652] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 5652] <... write resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5652] close(3) = 0 [pid 5651] <... openat resumed>) = 3 [pid 5001] close(4 [pid 5000] <... openat resumed>) = 4 [pid 5652] symlink("/dev/binderfs", "./binderfs" [pid 5651] write(3, "1000", 4 [pid 5001] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 5001] rmdir("./54/file0" [pid 5651] <... write resumed>) = 4 [pid 5652] <... symlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5652] memfd_create("syzkaller", 0 [pid 5651] close(3 [pid 5001] getdents64(3, [pid 5000] getdents64(4, [pid 5652] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5652] <... mmap resumed>) = 0x7f5db7f12000 [pid 5651] <... close resumed>) = 0 [pid 5001] rmdir("./54" [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5651] memfd_create("syzkaller", 0) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] close(4 [pid 4999] <... openat resumed>) = 3 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] mkdir("./55", 0777 [pid 5000] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5651] <... mmap resumed>) = 0x7f5db7f12000 [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] rmdir("./52/file0" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5653 [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./52" [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5654 [pid 5000] mkdir("./53", 0777./strace-static-x86_64: Process 5653 attached ) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5653] chdir("./55" [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5655 [pid 5653] <... chdir resumed>) = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5654 attached ) = 0 [pid 5654] chdir("./55" [pid 5653] setpgid(0, 0 [pid 5654] <... chdir resumed>) = 0 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5654] setpgid(0, 0) = 0 [pid 5653] <... setpgid resumed>) = 0 [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5654] <... openat resumed>) = 3 [pid 5654] write(3, "1000", 4 [pid 5653] <... openat resumed>) = 3 [pid 5654] <... write resumed>) = 4 ./strace-static-x86_64: Process 5655 attached [pid 5653] write(3, "1000", 4 [pid 5655] chdir("./53" [pid 5654] close(3) = 0 [pid 5653] <... write resumed>) = 4 [pid 5654] symlink("/dev/binderfs", "./binderfs" [pid 5655] <... chdir resumed>) = 0 [pid 5653] close(3 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5654] <... symlink resumed>) = 0 [pid 5653] <... close resumed>) = 0 [pid 5655] <... prctl resumed>) = 0 [pid 5654] memfd_create("syzkaller", 0 [pid 5653] symlink("/dev/binderfs", "./binderfs" [pid 5652] <... write resumed>) = 2097152 [pid 5655] setpgid(0, 0 [pid 5654] <... memfd_create resumed>) = 3 [pid 5653] <... symlink resumed>) = 0 [pid 5655] <... setpgid resumed>) = 0 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5653] memfd_create("syzkaller", 0 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5654] <... mmap resumed>) = 0x7f5db7f12000 [pid 5653] <... memfd_create resumed>) = 3 [pid 5652] munmap(0x7f5db7f12000, 2097152 [pid 5655] <... openat resumed>) = 3 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5655] write(3, "1000", 4 [pid 5653] <... mmap resumed>) = 0x7f5db7f12000 [pid 5655] <... write resumed>) = 4 [pid 5655] close(3 [pid 5652] <... munmap resumed>) = 0 [pid 5655] <... close resumed>) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5652] <... openat resumed>) = 4 [pid 5655] memfd_create("syzkaller", 0) = 3 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5652] ioctl(4, LOOP_SET_FD, 3 [pid 5655] <... mmap resumed>) = 0x7f5db7f12000 [pid 5654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5652] <... ioctl resumed>) = 0 [pid 5652] close(3) = 0 [pid 5652] mkdir("./file0", 0777) = 0 [pid 5651] <... write resumed>) = 2097152 [pid 5652] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5651] munmap(0x7f5db7f12000, 2097152 [pid 5654] <... write resumed>) = 2097152 [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5651] <... munmap resumed>) = 0 [pid 5654] munmap(0x7f5db7f12000, 2097152 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5651] ioctl(4, LOOP_SET_FD, 3 [pid 5653] <... write resumed>) = 2097152 [pid 5653] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 72.534506][ T5652] loop5: detected capacity change from 0 to 4096 [ 72.561925][ T5652] NILFS (loop5): invalid segment: Checksum error in segment payload [ 72.572756][ T5651] loop0: detected capacity change from 0 to 4096 [pid 5653] ioctl(4, LOOP_SET_FD, 3 [pid 5654] <... munmap resumed>) = 0 [pid 5653] <... ioctl resumed>) = 0 [pid 5651] <... ioctl resumed>) = 0 [pid 5655] <... write resumed>) = 2097152 [pid 5654] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5653] close(3 [pid 5651] close(3 [pid 5655] munmap(0x7f5db7f12000, 2097152 [pid 5653] <... close resumed>) = 0 [pid 5655] <... munmap resumed>) = 0 [pid 5653] mkdir("./file0", 0777) = 0 [pid 5653] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5655] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5654] <... openat resumed>) = 4 [pid 5651] <... close resumed>) = 0 [pid 5655] ioctl(4, LOOP_SET_FD, 3 [pid 5654] ioctl(4, LOOP_SET_FD, 3 [pid 5651] mkdir("./file0", 0777 [pid 5655] <... ioctl resumed>) = 0 [pid 5655] close(3) = 0 [pid 5655] mkdir("./file0", 0777) = 0 [pid 5655] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5651] <... mkdir resumed>) = 0 [pid 5651] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5654] <... ioctl resumed>) = 0 [ 72.578654][ T5653] loop1: detected capacity change from 0 to 4096 [ 72.587608][ T5652] NILFS (loop5): trying rollback from an earlier position [ 72.598718][ T5655] loop2: detected capacity change from 0 to 4096 [ 72.600525][ T5654] loop3: detected capacity change from 0 to 4096 [ 72.611928][ T5653] NILFS (loop1): invalid segment: Checksum error in segment payload [ 72.621571][ T5653] NILFS (loop1): trying rollback from an earlier position [pid 5654] close(3) = 0 [pid 5654] mkdir("./file0", 0777) = 0 [pid 5654] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5655] <... mount resumed>) = 0 [ 72.622574][ T5655] NILFS (loop2): invalid segment: Checksum error in segment payload [ 72.634735][ T5652] NILFS (loop5): recovery complete [ 72.637059][ T5655] NILFS (loop2): trying rollback from an earlier position [ 72.649572][ T5651] NILFS (loop0): invalid segment: Checksum error in segment payload [ 72.655935][ T5655] NILFS (loop2): recovery complete [ 72.658712][ T5654] NILFS (loop3): invalid segment: Checksum error in segment payload [ 72.663862][ T5656] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5652] <... mount resumed>) = 0 [pid 5655] chdir("./file0" [pid 5653] <... mount resumed>) = 0 [pid 5652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5655] <... chdir resumed>) = 0 [pid 5653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5652] <... openat resumed>) = 3 [pid 5655] ioctl(4, LOOP_CLR_FD) = 0 [pid 5655] close(4) = 0 [pid 5653] <... openat resumed>) = 3 [pid 5652] chdir("./file0" [ 72.671636][ T5651] NILFS (loop0): trying rollback from an earlier position [ 72.682955][ T5653] NILFS (loop1): recovery complete [ 72.689655][ T5654] NILFS (loop3): trying rollback from an earlier position [ 72.694984][ T5657] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.713207][ T5658] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.717275][ T5654] NILFS (loop3): recovery complete [ 72.724395][ T5651] NILFS (loop0): recovery complete [pid 5655] creat("./bus", 000 [pid 5653] chdir("./file0" [pid 5652] <... chdir resumed>) = 0 [pid 5655] <... creat resumed>) = 4 [pid 5655] open("./bus", O_RDONLY) = 5 [pid 5655] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5655] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5655] unlink("./bus") = 0 [pid 5655] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5655] exit_group(0) = ? [pid 5653] <... chdir resumed>) = 0 [pid 5652] ioctl(4, LOOP_CLR_FD [pid 5655] +++ exited with 0 +++ [pid 5653] ioctl(4, LOOP_CLR_FD [pid 5652] <... ioctl resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5655, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5653] <... ioctl resumed>) = 0 [pid 5652] close(4 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5653] close(4 [pid 5652] <... close resumed>) = 0 [pid 5651] <... mount resumed>) = 0 [pid 5000] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./53/binderfs") = 0 [pid 5000] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5654] <... mount resumed>) = 0 [pid 5653] <... close resumed>) = 0 [pid 5652] creat("./bus", 000 [pid 5651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5653] creat("./bus", 000 [pid 5651] <... openat resumed>) = 3 [pid 5654] <... openat resumed>) = 3 [pid 5653] <... creat resumed>) = 4 [pid 5652] <... creat resumed>) = 4 [pid 5651] chdir("./file0" [pid 5000] <... umount2 resumed>) = 0 [pid 5654] chdir("./file0" [pid 5653] open("./bus", O_RDONLY [pid 5652] open("./bus", O_RDONLY [pid 5651] <... chdir resumed>) = 0 [pid 5000] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5654] <... chdir resumed>) = 0 [pid 5653] <... open resumed>) = 5 [pid 5652] <... open resumed>) = 5 [pid 5651] ioctl(4, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5654] ioctl(4, LOOP_CLR_FD [pid 5653] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5652] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5651] <... ioctl resumed>) = 0 [pid 5000] lstat("./53/file0", [pid 5654] <... ioctl resumed>) = 0 [pid 5653] <... open resumed>) = 6 [pid 5652] <... open resumed>) = 6 [pid 5651] close(4 [pid 5654] close(4 [pid 5653] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5652] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5651] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5654] <... close resumed>) = 0 [pid 5653] <... write resumed>) = 32 [pid 5651] creat("./bus", 000 [pid 5654] creat("./bus", 000 [pid 5653] unlink("./bus" [pid 5652] <... write resumed>) = 32 [pid 5000] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5654] <... creat resumed>) = 4 [pid 5653] <... unlink resumed>) = 0 [pid 5652] unlink("./bus" [pid 5651] <... creat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5654] open("./bus", O_RDONLY [pid 5653] sendfile(4, 5, NULL, 145139829833722 [pid 5651] open("./bus", O_RDONLY [pid 5654] <... open resumed>) = 5 [pid 5652] <... unlink resumed>) = 0 [pid 5651] <... open resumed>) = 5 [pid 5653] <... sendfile resumed>) = 32 [pid 5000] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5654] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5653] exit_group(0 [pid 5652] sendfile(4, 5, NULL, 145139829833722 [pid 5651] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5654] <... open resumed>) = 6 [pid 5653] <... exit_group resumed>) = ? [pid 5651] <... open resumed>) = 6 [pid 5000] <... openat resumed>) = 4 [pid 5654] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5652] <... sendfile resumed>) = 32 [pid 5653] +++ exited with 0 +++ [pid 5651] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] fstat(4, [pid 5654] <... write resumed>) = 32 [pid 5652] exit_group(0 [pid 5654] unlink("./bus" [pid 5652] <... exit_group resumed>) = ? [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5651] <... write resumed>) = 32 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5653, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5654] <... unlink resumed>) = 0 [ 72.736391][ T5660] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.749290][ T5659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5651] unlink("./bus" [pid 5654] sendfile(4, 5, NULL, 145139829833722 [pid 5652] +++ exited with 0 +++ [pid 5651] <... unlink resumed>) = 0 [pid 5000] getdents64(4, [pid 5654] <... sendfile resumed>) = 32 [pid 5651] sendfile(4, 5, NULL, 145139829833722 [pid 5654] exit_group(0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5654] <... exit_group resumed>) = ? [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5652, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5651] <... sendfile resumed>) = 32 [pid 5000] getdents64(4, [pid 5654] +++ exited with 0 +++ [pid 5651] exit_group(0 [pid 5003] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5651] <... exit_group resumed>) = ? [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5654, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5000] close(4 [pid 5003] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5651] +++ exited with 0 +++ [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... openat resumed>) = 3 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] rmdir("./53/file0" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] fstat(3, [pid 5000] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5651, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] <... openat resumed>) = 3 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5003] getdents64(3, [pid 5001] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] fstat(3, [pid 4998] <... restart_syscall resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 3 [pid 5000] rmdir("./53" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./54/binderfs", [pid 5001] fstat(3, [pid 5000] <... rmdir resumed>) = 0 [pid 4999] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] mkdir("./54", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] unlink("./54/binderfs" [pid 5001] getdents64(3, [pid 5000] <... mkdir resumed>) = 0 [pid 4999] lstat("./55/binderfs", [pid 4998] <... openat resumed>) = 3 [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] fstat(3, [pid 5003] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] unlink("./55/binderfs" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./55/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(3, [pid 4999] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] <... close resumed>) = 0 [pid 4998] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5661 attached [pid 4998] lstat("./54/binderfs", [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5661 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./54/binderfs") = 0 [pid 4998] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./54/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5001] <... umount2 resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./54" [pid 5661] chdir("./54" [pid 5001] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5661] <... chdir resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./55", 0777) = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5661] write(3, "1000", 4 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5661] <... write resumed>) = 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5661] close(3) = 0 [pid 5003] close(3 [pid 5661] symlink("/dev/binderfs", "./binderfs" [pid 5003] <... close resumed>) = 0 [pid 5661] <... symlink resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5661] memfd_create("syzkaller", 0) = 3 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5001] lstat("./55/file0", ./strace-static-x86_64: Process 5662 attached [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5662] chdir("./55" [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5662 [pid 5001] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5662] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./55/file0", [pid 5662] <... prctl resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5662] setpgid(0, 0 [pid 5001] fstat(4, [pid 4999] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5662] <... setpgid resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] getdents64(4, [pid 4999] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5662] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 4 [pid 5662] write(3, "1000", 4 [pid 5001] getdents64(4, [pid 4999] fstat(4, [pid 5662] <... write resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5662] close(3 [pid 5001] close(4 [pid 4999] getdents64(4, [pid 5662] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5662] symlink("/dev/binderfs", "./binderfs" [pid 5001] rmdir("./55/file0" [pid 4999] getdents64(4, [pid 5662] <... symlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5662] memfd_create("syzkaller", 0 [pid 5001] getdents64(3, [pid 4999] close(4 [pid 5662] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] close(3 [pid 4999] rmdir("./55/file0" [pid 5662] <... mmap resumed>) = 0x7f5db7f12000 [pid 5001] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] rmdir("./55" [pid 4999] getdents64(3, [pid 4998] <... umount2 resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] mkdir("./56", 0777 [pid 4999] close(3 [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] rmdir("./55" [pid 5001] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] mkdir("./56", 0777 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... mkdir resumed>) = 0 [pid 5001] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5663 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5664 ./strace-static-x86_64: Process 5663 attached [pid 4998] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5663] chdir("./56" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5663] <... chdir resumed>) = 0 [pid 4998] lstat("./54/file0", [pid 5663] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5664 attached [pid 5664] chdir("./56") = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5663] <... prctl resumed>) = 0 [pid 4998] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5664] setpgid(0, 0 [pid 5663] setpgid(0, 0 [pid 5664] <... setpgid resumed>) = 0 [pid 5664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5663] <... setpgid resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5664] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5664] write(3, "1000", 4 [pid 5663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... openat resumed>) = 4 [pid 5664] <... write resumed>) = 4 [pid 5663] <... openat resumed>) = 3 [pid 5664] close(3) = 0 [pid 5664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5664] memfd_create("syzkaller", 0) = 3 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5663] write(3, "1000", 4 [pid 4998] fstat(4, [pid 5663] <... write resumed>) = 4 [pid 5663] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5663] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5663] memfd_create("syzkaller", 0 [pid 4998] getdents64(4, [pid 5661] <... write resumed>) = 2097152 [pid 5663] <... memfd_create resumed>) = 3 [pid 5661] munmap(0x7f5db7f12000, 2097152 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] close(4 [pid 5663] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] <... close resumed>) = 0 [pid 5664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5661] <... munmap resumed>) = 0 [pid 4998] rmdir("./54/file0" [pid 5661] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5661] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./54" [pid 5662] <... write resumed>) = 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 5662] munmap(0x7f5db7f12000, 2097152 [pid 4998] mkdir("./55", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5662] <... munmap resumed>) = 0 [pid 4998] close(3 [pid 5662] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5662] <... openat resumed>) = 4 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5662] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5665 [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5661] <... ioctl resumed>) = 0 [pid 5661] close(3) = 0 [pid 5661] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 5665 attached [pid 5665] chdir("./55") = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5665] setpgid(0, 0) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] memfd_create("syzkaller", 0) = 3 [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 72.957413][ T5661] loop2: detected capacity change from 0 to 4096 [ 72.971461][ T5662] loop5: detected capacity change from 0 to 4096 [pid 5665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5664] <... write resumed>) = 2097152 [pid 5663] <... write resumed>) = 2097152 [pid 5662] <... ioctl resumed>) = 0 [pid 5662] close(3) = 0 [pid 5662] mkdir("./file0", 0777 [pid 5663] munmap(0x7f5db7f12000, 2097152 [pid 5662] <... mkdir resumed>) = 0 [pid 5662] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5663] <... munmap resumed>) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5663] ioctl(4, LOOP_SET_FD, 3 [pid 5664] munmap(0x7f5db7f12000, 2097152 [pid 5665] <... write resumed>) = 2097152 [pid 5663] <... ioctl resumed>) = 0 [pid 5665] munmap(0x7f5db7f12000, 2097152 [pid 5663] close(3 [pid 5664] <... munmap resumed>) = 0 [pid 5663] <... close resumed>) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5664] ioctl(4, LOOP_SET_FD, 3 [ 73.002195][ T5661] NILFS (loop2): invalid segment: Checksum error in segment payload [ 73.019918][ T5663] loop3: detected capacity change from 0 to 4096 [ 73.029258][ T5662] NILFS (loop5): invalid segment: Checksum error in segment payload [ 73.034684][ T5661] NILFS (loop2): trying rollback from an earlier position [pid 5663] mkdir("./file0", 0777 [pid 5665] <... munmap resumed>) = 0 [pid 5664] <... ioctl resumed>) = 0 [pid 5664] close(3) = 0 [pid 5664] mkdir("./file0", 0777) = 0 [pid 5664] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5663] <... mkdir resumed>) = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5663] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5665] <... openat resumed>) = 4 [pid 5665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5665] close(3) = 0 [pid 5665] mkdir("./file0", 0777) = 0 [ 73.046786][ T5664] loop1: detected capacity change from 0 to 4096 [ 73.049354][ T5662] NILFS (loop5): trying rollback from an earlier position [ 73.062863][ T5665] loop0: detected capacity change from 0 to 4096 [ 73.070159][ T5661] NILFS (loop2): recovery complete [ 73.072844][ T5664] NILFS (loop1): invalid segment: Checksum error in segment payload [ 73.084127][ T5664] NILFS (loop1): trying rollback from an earlier position [ 73.087552][ T5665] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5665] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5661] <... mount resumed>) = 0 [pid 5661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5665] <... mount resumed>) = 0 [pid 5661] chdir("./file0") = 0 [pid 5661] ioctl(4, LOOP_CLR_FD) = 0 [ 73.091588][ T5663] NILFS (loop3): invalid segment: Checksum error in segment payload [ 73.099647][ T5665] NILFS (loop0): trying rollback from an earlier position [ 73.108100][ T5666] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.115725][ T5662] NILFS (loop5): recovery complete [ 73.125424][ T5663] NILFS (loop3): trying rollback from an earlier position [ 73.137283][ T5665] NILFS (loop0): recovery complete [pid 5661] close(4) = 0 [pid 5661] creat("./bus", 000) = 4 [pid 5661] open("./bus", O_RDONLY [pid 5665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5661] <... open resumed>) = 5 [pid 5665] <... openat resumed>) = 3 [pid 5665] chdir("./file0") = 0 [pid 5661] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5665] ioctl(4, LOOP_CLR_FD [pid 5662] <... mount resumed>) = 0 [pid 5661] <... open resumed>) = 6 [pid 5661] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5665] <... ioctl resumed>) = 0 [pid 5665] close(4) = 0 [pid 5665] creat("./bus", 000 [pid 5662] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5662] chdir("./file0" [pid 5661] <... write resumed>) = 32 [pid 5665] <... creat resumed>) = 4 [pid 5662] <... chdir resumed>) = 0 [pid 5661] unlink("./bus" [pid 5665] open("./bus", O_RDONLY [pid 5662] ioctl(4, LOOP_CLR_FD [pid 5661] <... unlink resumed>) = 0 [pid 5665] <... open resumed>) = 5 [pid 5662] <... ioctl resumed>) = 0 [pid 5661] sendfile(4, 5, NULL, 145139829833722 [pid 5665] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5662] close(4 [pid 5665] <... open resumed>) = 6 [pid 5665] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5662] <... close resumed>) = 0 [pid 5665] <... write resumed>) = 32 [pid 5662] creat("./bus", 000 [pid 5661] <... sendfile resumed>) = 32 [pid 5665] unlink("./bus" [pid 5662] <... creat resumed>) = 4 [pid 5661] exit_group(0 [pid 5665] <... unlink resumed>) = 0 [pid 5662] open("./bus", O_RDONLY [pid 5661] <... exit_group resumed>) = ? [pid 5665] sendfile(4, 5, NULL, 145139829833722 [pid 5662] <... open resumed>) = 5 [pid 5661] +++ exited with 0 +++ [pid 5662] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5662] <... open resumed>) = 6 [pid 5665] <... sendfile resumed>) = 32 [pid 5662] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5665] exit_group(0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5665] <... exit_group resumed>) = ? [pid 5662] <... write resumed>) = 32 [pid 5662] unlink("./bus" [pid 5000] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5665] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5665, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5662] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [ 73.145391][ T5667] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.163325][ T5663] NILFS (loop3): recovery complete [ 73.166838][ T5668] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.192490][ T5664] NILFS (loop1): recovery complete [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5662] sendfile(4, 5, NULL, 145139829833722 [pid 5000] fstat(3, [pid 4998] <... restart_syscall resumed>) = 0 [pid 5662] <... sendfile resumed>) = 32 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5662] exit_group(0 [pid 5000] getdents64(3, [pid 5662] <... exit_group resumed>) = ? [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5664] <... mount resumed>) = 0 [pid 5663] <... mount resumed>) = 0 [pid 5000] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] lstat("./54/binderfs", [pid 4998] <... openat resumed>) = 3 [pid 5664] <... openat resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] fstat(3, [pid 5664] chdir("./file0" [pid 5000] unlink("./54/binderfs" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5664] <... chdir resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4998] getdents64(3, [pid 5664] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5664] <... ioctl resumed>) = 0 [pid 4998] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5664] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5664] <... close resumed>) = 0 [pid 4998] lstat("./55/binderfs", [pid 5664] creat("./bus", 000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./55/binderfs") = 0 [pid 4998] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5663] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5663] chdir("./file0") = 0 [pid 5663] ioctl(4, LOOP_CLR_FD) = 0 [pid 5663] close(4) = 0 [pid 5663] creat("./bus", 000 [pid 5662] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5662, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5663] <... creat resumed>) = 4 [pid 5663] open("./bus", O_RDONLY [pid 5003] <... openat resumed>) = 3 [pid 5663] <... open resumed>) = 5 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5663] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5663] <... open resumed>) = 6 [pid 5003] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5663] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./55/binderfs" [pid 5663] <... write resumed>) = 32 [pid 5663] unlink("./bus" [pid 5003] <... unlink resumed>) = 0 [pid 5003] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5663] <... unlink resumed>) = 0 [pid 5663] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5663] exit_group(0) = ? [pid 5663] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5663, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.211169][ T5669] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.224064][ T5670] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5664] <... creat resumed>) = 4 [pid 5664] open("./bus", O_RDONLY [pid 5001] unlink("./56/binderfs" [pid 5664] <... open resumed>) = 5 [pid 5664] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5001] <... unlink resumed>) = 0 [pid 5664] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5664] <... write resumed>) = 32 [pid 5664] unlink("./bus") = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5664] sendfile(4, 5, NULL, 145139829833722 [pid 5000] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5664] <... sendfile resumed>) = 32 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./55/file0", [pid 5003] lstat("./55/file0", [pid 5000] lstat("./54/file0", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5664] exit_group(0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5664] <... exit_group resumed>) = ? [pid 5003] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5664] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 4 [pid 5003] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5664, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 4998] fstat(4, [pid 5003] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5000] getdents64(4, [pid 4998] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, [pid 5000] getdents64(4, [pid 4998] getdents64(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5000] close(4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5003] rmdir("./55/file0" [pid 4999] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./54/file0" [pid 4998] close(4 [pid 5003] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 5003] getdents64(3, [pid 5000] getdents64(3, [pid 4999] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] rmdir("./55/file0" [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5003] close(3 [pid 5000] close(3 [pid 4999] fstat(3, [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5003] rmdir("./55" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./54" [pid 4999] getdents64(3, [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 5001] lstat("./56/file0", [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] close(3 [pid 5003] mkdir("./56", 0777 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] mkdir("./55", 0777 [pid 4999] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5003] <... mkdir resumed>) = 0 [pid 5001] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./55" [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] lstat("./56/binderfs", [pid 4998] <... rmdir resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] mkdir("./56", 0777 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 4 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] unlink("./56/binderfs" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... mkdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5001] fstat(4, [pid 5000] close(3 [pid 4999] <... unlink resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5003] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./56/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 5001] rmdir("./56") = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] mkdir("./57", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5673 ./strace-static-x86_64: Process 5671 attached [pid 5671] chdir("./56") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5671 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5672 [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5671] <... openat resumed>) = 3 [pid 5671] write(3, "1000", 4 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5674 [pid 5671] <... write resumed>) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5673 attached ) = 0 [pid 5673] chdir("./57" [pid 5671] memfd_create("syzkaller", 0 [pid 5673] <... chdir resumed>) = 0 [pid 5671] <... memfd_create resumed>) = 3 [pid 5673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5673] <... prctl resumed>) = 0 [pid 5671] <... mmap resumed>) = 0x7f5db7f12000 [pid 5673] setpgid(0, 0) = 0 [pid 5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5672 attached ./strace-static-x86_64: Process 5674 attached [pid 5673] <... openat resumed>) = 3 [pid 5673] write(3, "1000", 4 [pid 5674] chdir("./56" [pid 5672] chdir("./55" [pid 5674] <... chdir resumed>) = 0 [pid 5673] <... write resumed>) = 4 [pid 5672] <... chdir resumed>) = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5673] close(3 [pid 5672] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5674] <... prctl resumed>) = 0 [pid 5673] <... close resumed>) = 0 [pid 5672] <... prctl resumed>) = 0 [pid 5674] setpgid(0, 0 [pid 5673] symlink("/dev/binderfs", "./binderfs" [pid 5672] setpgid(0, 0 [pid 4999] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5674] <... setpgid resumed>) = 0 [pid 5673] <... symlink resumed>) = 0 [pid 5672] <... setpgid resumed>) = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5673] memfd_create("syzkaller", 0 [pid 5672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5674] <... openat resumed>) = 3 [pid 5673] <... memfd_create resumed>) = 3 [pid 5672] <... openat resumed>) = 3 [pid 4999] lstat("./56/file0", [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5674] write(3, "1000", 4 [pid 5673] <... mmap resumed>) = 0x7f5db7f12000 [pid 5672] write(3, "1000", 4 [pid 5674] <... write resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5672] <... write resumed>) = 4 [pid 5674] close(3 [pid 4999] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5674] <... close resumed>) = 0 [pid 5672] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5674] symlink("/dev/binderfs", "./binderfs" [pid 5672] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5674] <... symlink resumed>) = 0 [pid 5674] memfd_create("syzkaller", 0 [pid 5672] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 4 [pid 5674] <... memfd_create resumed>) = 3 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5672] <... symlink resumed>) = 0 [pid 4999] fstat(4, [pid 5674] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] getdents64(4, [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5672] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] close(4) = 0 [pid 4999] rmdir("./56/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./56") = 0 [pid 4999] mkdir("./57", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5675 ./strace-static-x86_64: Process 5675 attached [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5675] chdir("./57") = 0 [pid 5675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5675] setpgid(0, 0) = 0 [pid 5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5675] write(3, "1000", 4) = 4 [pid 5673] <... write resumed>) = 2097152 [pid 5675] close(3) = 0 [pid 5675] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5675] memfd_create("syzkaller", 0) = 3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5674] <... write resumed>) = 2097152 [pid 5671] <... write resumed>) = 2097152 [pid 5674] munmap(0x7f5db7f12000, 2097152 [pid 5673] munmap(0x7f5db7f12000, 2097152 [pid 5672] <... write resumed>) = 2097152 [pid 5671] munmap(0x7f5db7f12000, 2097152 [pid 5674] <... munmap resumed>) = 0 [pid 5673] <... munmap resumed>) = 0 [pid 5672] munmap(0x7f5db7f12000, 2097152 [pid 5674] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5673] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5672] <... munmap resumed>) = 0 [pid 5671] <... munmap resumed>) = 0 [pid 5674] <... openat resumed>) = 4 [pid 5673] <... openat resumed>) = 4 [pid 5672] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5671] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5674] ioctl(4, LOOP_SET_FD, 3 [pid 5673] ioctl(4, LOOP_SET_FD, 3 [pid 5672] <... openat resumed>) = 4 [pid 5671] <... openat resumed>) = 4 [pid 5674] <... ioctl resumed>) = 0 [pid 5675] <... write resumed>) = 2097152 [pid 5675] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3 [pid 5673] <... ioctl resumed>) = 0 [pid 5672] ioctl(4, LOOP_SET_FD, 3 [pid 5671] ioctl(4, LOOP_SET_FD, 3 [pid 5674] close(3 [pid 5673] close(3) = 0 [pid 5673] mkdir("./file0", 0777) = 0 [pid 5673] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5674] <... close resumed>) = 0 [pid 5674] mkdir("./file0", 0777) = 0 [pid 5674] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5672] <... ioctl resumed>) = 0 [pid 5675] <... ioctl resumed>) = 0 [pid 5671] <... ioctl resumed>) = 0 [ 73.442560][ T5674] loop0: detected capacity change from 0 to 4096 [ 73.449742][ T5673] loop3: detected capacity change from 0 to 4096 [ 73.456677][ T5675] loop1: detected capacity change from 0 to 4096 [ 73.463335][ T5672] loop2: detected capacity change from 0 to 4096 [ 73.468686][ T5673] NILFS (loop3): invalid segment: Checksum error in segment payload [ 73.469932][ T5671] loop5: detected capacity change from 0 to 4096 [ 73.484238][ T5673] NILFS (loop3): trying rollback from an earlier position [pid 5675] close(3 [pid 5672] close(3 [pid 5671] close(3 [pid 5675] <... close resumed>) = 0 [pid 5672] <... close resumed>) = 0 [pid 5671] <... close resumed>) = 0 [pid 5675] mkdir("./file0", 0777 [pid 5672] mkdir("./file0", 0777 [pid 5671] mkdir("./file0", 0777 [pid 5675] <... mkdir resumed>) = 0 [pid 5672] <... mkdir resumed>) = 0 [pid 5671] <... mkdir resumed>) = 0 [pid 5675] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5672] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 73.491139][ T5674] NILFS (loop0): invalid segment: Checksum error in segment payload [ 73.500532][ T5674] NILFS (loop0): trying rollback from an earlier position [ 73.507611][ T5672] NILFS (loop2): invalid segment: Checksum error in segment payload [ 73.507914][ T5671] NILFS (loop5): invalid segment: Checksum error in segment payload [ 73.516019][ T5675] NILFS (loop1): invalid segment: Checksum error in segment payload [ 73.531705][ T5672] NILFS (loop2): trying rollback from an earlier position [pid 5671] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5674] <... mount resumed>) = 0 [pid 5674] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5674] chdir("./file0") = 0 [pid 5674] ioctl(4, LOOP_CLR_FD) = 0 [pid 5674] close(4) = 0 [pid 5674] creat("./bus", 000 [pid 5675] <... mount resumed>) = 0 [pid 5675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 73.534332][ T5674] NILFS (loop0): recovery complete [ 73.539775][ T5673] NILFS (loop3): recovery complete [ 73.544616][ T5671] NILFS (loop5): trying rollback from an earlier position [ 73.555994][ T5672] NILFS (loop2): recovery complete [ 73.562978][ T5675] NILFS (loop1): trying rollback from an earlier position [ 73.568279][ T5671] NILFS (loop5): recovery complete [ 73.576216][ T5677] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.584079][ T5675] NILFS (loop1): recovery complete [pid 5675] chdir("./file0" [pid 5674] <... creat resumed>) = 4 [pid 5672] <... mount resumed>) = 0 [pid 5674] open("./bus", O_RDONLY) = 5 [pid 5674] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5674] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5675] <... chdir resumed>) = 0 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] creat("./bus", 000 [pid 5672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./file0") = 0 [pid 5672] ioctl(4, LOOP_CLR_FD) = 0 [pid 5672] close(4) = 0 [pid 5672] creat("./bus", 000 [pid 5673] <... mount resumed>) = 0 [pid 5672] <... creat resumed>) = 4 [pid 5671] <... mount resumed>) = 0 [pid 5673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5672] open("./bus", O_RDONLY [pid 5671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5673] <... openat resumed>) = 3 [pid 5672] <... open resumed>) = 5 [pid 5671] <... openat resumed>) = 3 [pid 5673] chdir("./file0" [pid 5672] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5671] chdir("./file0" [pid 5673] <... chdir resumed>) = 0 [pid 5672] <... open resumed>) = 6 [pid 5671] <... chdir resumed>) = 0 [pid 5674] <... write resumed>) = 32 [pid 5673] ioctl(4, LOOP_CLR_FD [pid 5672] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5671] ioctl(4, LOOP_CLR_FD [pid 5674] unlink("./bus" [pid 5673] <... ioctl resumed>) = 0 [pid 5671] <... ioctl resumed>) = 0 [pid 5674] <... unlink resumed>) = 0 [pid 5673] close(4 [pid 5672] <... write resumed>) = 32 [pid 5671] close(4 [pid 5674] sendfile(4, 5, NULL, 145139829833722 [pid 5673] <... close resumed>) = 0 [pid 5672] unlink("./bus" [pid 5671] <... close resumed>) = 0 [pid 5674] <... sendfile resumed>) = 32 [pid 5673] creat("./bus", 000 [pid 5672] <... unlink resumed>) = 0 [pid 5671] creat("./bus", 000 [pid 5674] exit_group(0 [pid 5673] <... creat resumed>) = 4 [pid 5672] sendfile(4, 5, NULL, 145139829833722 [pid 5674] <... exit_group resumed>) = ? [pid 5673] open("./bus", O_RDONLY [pid 5672] <... sendfile resumed>) = 32 [ 73.595084][ T5678] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.602995][ T5680] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.605732][ T5676] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.616195][ T5679] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5675] <... creat resumed>) = 4 [pid 5674] +++ exited with 0 +++ [pid 5673] <... open resumed>) = 5 [pid 5672] exit_group(0 [pid 5671] <... creat resumed>) = 4 [pid 5675] open("./bus", O_RDONLY [pid 5673] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5672] <... exit_group resumed>) = ? [pid 5671] open("./bus", O_RDONLY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5674, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5675] <... open resumed>) = 5 [pid 5673] <... open resumed>) = 6 [pid 5672] +++ exited with 0 +++ [pid 5671] <... open resumed>) = 5 [pid 5675] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5673] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5671] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5672, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5675] <... open resumed>) = 6 [pid 5673] <... write resumed>) = 32 [pid 5671] <... open resumed>) = 6 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5675] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5673] unlink("./bus" [pid 5671] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5673] <... unlink resumed>) = 0 [pid 5671] <... write resumed>) = 32 [pid 4998] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] sendfile(4, 5, NULL, 145139829833722 [pid 5671] unlink("./bus" [pid 5000] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5675] <... write resumed>) = 32 [pid 5673] <... sendfile resumed>) = 32 [pid 5671] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5675] unlink("./bus" [pid 5673] exit_group(0 [pid 5000] fstat(3, [pid 4998] fstat(3, [pid 5675] <... unlink resumed>) = 0 [pid 5673] <... exit_group resumed>) = ? [pid 5671] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5675] sendfile(4, 5, NULL, 145139829833722 [pid 5673] +++ exited with 0 +++ [pid 5671] <... sendfile resumed>) = 32 [pid 5000] getdents64(3, [pid 4998] getdents64(3, [pid 5675] <... sendfile resumed>) = 32 [pid 5671] exit_group(0 [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5675] exit_group(0 [pid 5671] <... exit_group resumed>) = ? [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5673, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5000] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5675] <... exit_group resumed>) = ? [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5675] +++ exited with 0 +++ [pid 5671] +++ exited with 0 +++ [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] lstat("./55/binderfs", [pid 4998] lstat("./56/binderfs", [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5675, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./55/binderfs" [pid 4998] unlink("./56/binderfs" [pid 5001] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] fstat(3, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(3, [pid 5003] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] fstat(3, [pid 5001] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] getdents64(3, [pid 5001] lstat("./57/binderfs", [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] unlink("./57/binderfs" [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... unlink resumed>) = 0 [pid 5003] lstat("./56/binderfs", [pid 5001] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] unlink("./56/binderfs") = 0 [pid 5003] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] lstat("./57/file0", [pid 4999] unlink("./57/binderfs" [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5001] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5003] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] rmdir("./57/file0") = 0 [pid 5003] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... close resumed>) = 0 [pid 5003] close(4) = 0 [pid 5001] rmdir("./57") = 0 [pid 5003] rmdir("./56/file0") = 0 [pid 5001] mkdir("./58", 0777 [pid 5003] getdents64(3, [pid 5001] <... mkdir resumed>) = 0 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./56") = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5003] mkdir("./57", 0777 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] <... mkdir resumed>) = 0 [pid 5001] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5681 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5682 ./strace-static-x86_64: Process 5681 attached [pid 5681] chdir("./58"./strace-static-x86_64: Process 5682 attached [pid 5682] chdir("./57" [pid 5681] <... chdir resumed>) = 0 [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] setpgid(0, 0 [pid 5682] <... chdir resumed>) = 0 [pid 5681] <... setpgid resumed>) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5682] setpgid(0, 0) = 0 [pid 5681] <... openat resumed>) = 3 [pid 5682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5682] write(3, "1000", 4 [pid 5681] symlink("/dev/binderfs", "./binderfs" [pid 5682] <... write resumed>) = 4 [pid 5681] <... symlink resumed>) = 0 [pid 5682] close(3) = 0 [pid 5682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5681] memfd_create("syzkaller", 0 [pid 5682] memfd_create("syzkaller", 0 [pid 5681] <... memfd_create resumed>) = 3 [pid 5682] <... memfd_create resumed>) = 3 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5681] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./55/file0", [pid 4998] lstat("./56/file0", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 4999] lstat("./57/file0", [pid 4998] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 4998] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] fstat(4, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 5682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 5000] rmdir("./55/file0" [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] rmdir("./56/file0" [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4998] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] close(3 [pid 5000] rmdir("./55") = 0 [pid 5000] mkdir("./56", 0777) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] rmdir("./56" [pid 4999] close(4 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 4999] <... close resumed>) = 0 [pid 4998] mkdir("./57", 0777 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] rmdir("./57/file0" [pid 4998] <... mkdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5683 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 4998] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5683 attached [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5683] chdir("./56" [pid 4999] close(3 [pid 4998] close(3 [pid 5683] <... chdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] rmdir("./57" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... rmdir resumed>) = 0 [pid 5683] <... prctl resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5684 [pid 5683] setpgid(0, 0 [pid 4999] mkdir("./58", 0777 [pid 5683] <... setpgid resumed>) = 0 [pid 5683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... mkdir resumed>) = 0 [pid 5683] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5683] write(3, "1000", 4) = 4 [pid 4999] <... openat resumed>) = 3 [pid 5683] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5683] <... close resumed>) = 0 [pid 5683] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5684 attached [pid 5683] <... symlink resumed>) = 0 [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5684] chdir("./57" [pid 5683] memfd_create("syzkaller", 0 [pid 5684] <... chdir resumed>) = 0 [pid 5684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5683] <... memfd_create resumed>) = 3 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5685 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5684] setpgid(0, 0) = 0 [pid 5684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5683] <... mmap resumed>) = 0x7f5db7f12000 [pid 5684] <... openat resumed>) = 3 [pid 5684] write(3, "1000", 4) = 4 [pid 5684] close(3) = 0 [pid 5684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5684] memfd_create("syzkaller", 0) = 3 [pid 5684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5682] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5685 attached [pid 5685] chdir("./58") = 0 [pid 5685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5685] setpgid(0, 0) = 0 [pid 5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5685] write(3, "1000", 4) = 4 [pid 5685] close(3) = 0 [pid 5685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5682] munmap(0x7f5db7f12000, 2097152 [pid 5685] memfd_create("syzkaller", 0 [pid 5682] <... munmap resumed>) = 0 [pid 5685] <... memfd_create resumed>) = 3 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5682] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5682] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5681] <... write resumed>) = 2097152 [pid 5681] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5681] ioctl(4, LOOP_SET_FD, 3 [pid 5684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5682] close(3) = 0 [pid 5682] mkdir("./file0", 0777) = 0 [pid 5681] <... ioctl resumed>) = 0 [pid 5682] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5681] close(3) = 0 [pid 5681] mkdir("./file0", 0777) = 0 [pid 5681] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5683] <... write resumed>) = 2097152 [pid 5684] <... write resumed>) = 2097152 [ 73.877695][ T5682] loop5: detected capacity change from 0 to 4096 [ 73.888579][ T5681] loop3: detected capacity change from 0 to 4096 [ 73.910337][ T5681] NILFS (loop3): invalid segment: Checksum error in segment payload [ 73.919708][ T5682] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5683] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5684] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5684] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5683] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5684] <... openat resumed>) = 4 [pid 5684] ioctl(4, LOOP_SET_FD, 3 [pid 5683] <... openat resumed>) = 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5683] close(3 [pid 5685] <... write resumed>) = 2097152 [pid 5685] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5683] <... close resumed>) = 0 [pid 5681] <... mount resumed>) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 73.920783][ T5681] NILFS (loop3): trying rollback from an earlier position [ 73.936662][ T5683] loop2: detected capacity change from 0 to 4096 [ 73.936831][ T5684] loop0: detected capacity change from 0 to 4096 [ 73.950334][ T5681] NILFS (loop3): recovery complete [ 73.952745][ T5682] NILFS (loop5): trying rollback from an earlier position [ 73.957194][ T5686] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5685] ioctl(4, LOOP_SET_FD, 3 [pid 5684] <... ioctl resumed>) = 0 [pid 5683] mkdir("./file0", 0777 [pid 5681] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5684] close(3 [pid 5683] <... mkdir resumed>) = 0 [pid 5681] <... openat resumed>) = 3 [pid 5683] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5681] chdir("./file0") = 0 [pid 5684] <... close resumed>) = 0 [pid 5681] ioctl(4, LOOP_CLR_FD [pid 5684] mkdir("./file0", 0777 [pid 5681] <... ioctl resumed>) = 0 [pid 5684] <... mkdir resumed>) = 0 [pid 5682] <... mount resumed>) = 0 [pid 5681] close(4 [pid 5684] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5685] <... ioctl resumed>) = 0 [pid 5685] close(3) = 0 [pid 5685] mkdir("./file0", 0777) = 0 [pid 5685] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5681] <... close resumed>) = 0 [pid 5682] chdir("./file0") = 0 [pid 5682] ioctl(4, LOOP_CLR_FD) = 0 [pid 5682] close(4) = 0 [pid 5682] creat("./bus", 000) = 4 [pid 5682] open("./bus", O_RDONLY) = 5 [pid 5682] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5682] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [ 73.963990][ T5685] loop1: detected capacity change from 0 to 4096 [ 73.985021][ T5683] NILFS (loop2): invalid segment: Checksum error in segment payload [ 73.985545][ T5682] NILFS (loop5): recovery complete [ 73.993342][ T5683] NILFS (loop2): trying rollback from an earlier position [ 73.999659][ T5687] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5681] creat("./bus", 000) = 4 [pid 5681] open("./bus", O_RDONLY [pid 5682] <... write resumed>) = 32 [pid 5682] unlink("./bus" [pid 5681] <... open resumed>) = 5 [pid 5682] <... unlink resumed>) = 0 [pid 5682] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5682] exit_group(0) = ? [pid 5681] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5682] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5682, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] <... open resumed>) = 6 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5681] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 5681] <... write resumed>) = 32 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5681] unlink("./bus" [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5681] <... unlink resumed>) = 0 [pid 5003] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5683] <... mount resumed>) = 0 [pid 5003] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./57/binderfs") = 0 [ 74.028866][ T5685] NILFS (loop1): invalid segment: Checksum error in segment payload [ 74.030822][ T5683] NILFS (loop2): recovery complete [ 74.042480][ T5684] NILFS (loop0): invalid segment: Checksum error in segment payload [ 74.049743][ T5685] NILFS (loop1): trying rollback from an earlier position [pid 5003] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5681] <... sendfile resumed>) = 32 [pid 5683] <... openat resumed>) = 3 [pid 5681] exit_group(0) = ? [pid 5683] chdir("./file0") = 0 [pid 5683] ioctl(4, LOOP_CLR_FD [pid 5681] +++ exited with 0 +++ [pid 5683] <... ioctl resumed>) = 0 [pid 5683] close(4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5681, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5683] <... close resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4) = 0 [pid 5003] rmdir("./57/file0") = 0 [pid 5685] <... mount resumed>) = 0 [pid 5683] creat("./bus", 000 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5685] chdir("./file0") = 0 [pid 5001] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5685] ioctl(4, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5685] <... ioctl resumed>) = 0 [pid 5683] <... creat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5685] close(4 [pid 5001] <... openat resumed>) = 3 [pid 5685] <... close resumed>) = 0 [pid 5001] fstat(3, [pid 5685] creat("./bus", 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5683] open("./bus", O_RDONLY [pid 5001] getdents64(3, [pid 5683] <... open resumed>) = 5 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./58/binderfs", [pid 5683] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5683] <... open resumed>) = 6 [pid 5003] getdents64(3, [pid 5001] unlink("./58/binderfs" [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5683] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] <... unlink resumed>) = 0 [pid 5003] close(3 [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... close resumed>) = 0 [pid 5683] <... write resumed>) = 32 [pid 5003] rmdir("./57" [pid 5683] unlink("./bus" [pid 5685] <... creat resumed>) = 4 [pid 5683] <... unlink resumed>) = 0 [pid 5685] open("./bus", O_RDONLY [pid 5683] sendfile(4, 5, NULL, 145139829833722 [pid 5685] <... open resumed>) = 5 [pid 5685] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5683] <... sendfile resumed>) = 32 [pid 5685] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5683] exit_group(0) = ? [pid 5683] +++ exited with 0 +++ [pid 5003] <... rmdir resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5683, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] mkdir("./58", 0777 [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 74.072423][ T5688] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.080452][ T5684] NILFS (loop0): trying rollback from an earlier position [ 74.086190][ T5685] NILFS (loop1): recovery complete [ 74.117153][ T5689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] <... umount2 resumed>) = 0 [pid 5685] <... write resumed>) = 32 [pid 5685] unlink("./bus" [pid 5003] <... mkdir resumed>) = 0 [pid 5000] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5685] <... unlink resumed>) = 0 [pid 5685] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./56/binderfs", [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5691 [pid 5685] <... sendfile resumed>) = 32 [pid 5685] exit_group(0) = ? [pid 5685] +++ exited with 0 +++ [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5691 attached [pid 5691] chdir("./58" [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5685, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5684] <... mount resumed>) = 0 [pid 5000] unlink("./56/binderfs" [pid 5001] close(4 [pid 4999] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5684] <... openat resumed>) = 3 [pid 5000] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5684] chdir("./file0" [pid 4999] <... openat resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./58/file0") = 0 [pid 5691] <... chdir resumed>) = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5691] setpgid(0, 0) = 0 [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] getdents64(3, [pid 5691] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./58" [pid 5684] <... chdir resumed>) = 0 [pid 4999] fstat(3, [pid 5684] ioctl(4, LOOP_CLR_FD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5684] <... ioctl resumed>) = 0 [pid 4999] getdents64(3, [pid 5684] close(4) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5684] creat("./bus", 000 [pid 4999] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./58/binderfs") = 0 [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] write(3, "1000", 4) = 4 [pid 5691] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 5691] <... close resumed>) = 0 [pid 5691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5691] memfd_create("syzkaller", 0 [pid 5001] mkdir("./59", 0777) = 0 [pid 5691] <... memfd_create resumed>) = 3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5692 ./strace-static-x86_64: Process 5692 attached [pid 5692] chdir("./59") = 0 [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./58/file0", [pid 5692] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5692] <... prctl resumed>) = 0 [pid 5692] setpgid(0, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5692] <... setpgid resumed>) = 0 [ 74.146308][ T5684] NILFS (loop0): recovery complete [ 74.157957][ T5690] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5684] <... creat resumed>) = 4 [pid 5000] <... umount2 resumed>) = 0 [pid 5692] <... openat resumed>) = 3 [pid 5692] write(3, "1000", 4) = 4 [pid 5692] close(3) = 0 [pid 5692] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5692] memfd_create("syzkaller", 0 [pid 5000] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5692] <... memfd_create resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] lstat("./56/file0", [pid 5692] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5684] open("./bus", O_RDONLY [pid 5000] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 5684] <... open resumed>) = 5 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5684] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] close(4 [pid 5684] <... open resumed>) = 6 [pid 5000] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... close resumed>) = 0 [pid 5684] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] rmdir("./58/file0" [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5000] getdents64(4, [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] close(3 [pid 5684] <... write resumed>) = 32 [pid 5000] getdents64(4, [pid 5684] unlink("./bus" [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] close(4 [pid 4999] rmdir("./58" [pid 5684] <... unlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./56/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./56") = 0 [pid 5000] mkdir("./57", 0777 [pid 5684] sendfile(4, 5, NULL, 145139829833722 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5684] <... sendfile resumed>) = 32 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4999] mkdir("./59", 0777 [pid 5684] exit_group(0 [pid 5000] <... openat resumed>) = 3 [pid 5684] <... exit_group resumed>) = ? [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... mkdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5684] +++ exited with 0 +++ [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5693 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5684, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- ./strace-static-x86_64: Process 5693 attached [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5693] chdir("./57") = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4999] close(3) = 0 [pid 4998] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5694 [pid 4998] <... openat resumed>) = 3 [pid 5693] <... prctl resumed>) = 0 [pid 4998] fstat(3, [pid 5693] setpgid(0, 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5693] <... setpgid resumed>) = 0 [pid 4998] getdents64(3, [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5691] <... write resumed>) = 2097152 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5693] write(3, "1000", 4) = 4 [pid 5693] close(3 [pid 4998] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5694 attached [pid 5693] symlink("/dev/binderfs", "./binderfs" [pid 5691] munmap(0x7f5db7f12000, 2097152 [pid 4998] lstat("./57/binderfs", [pid 5694] chdir("./59" [pid 5693] <... symlink resumed>) = 0 [pid 5691] <... munmap resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5694] <... chdir resumed>) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] unlink("./57/binderfs" [pid 5694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5693] memfd_create("syzkaller", 0 [pid 5691] <... openat resumed>) = 4 [pid 4998] <... unlink resumed>) = 0 [pid 5694] <... prctl resumed>) = 0 [pid 5693] <... memfd_create resumed>) = 3 [pid 5691] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5694] setpgid(0, 0 [pid 5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5692] <... write resumed>) = 2097152 [pid 5691] <... ioctl resumed>) = 0 [pid 5694] <... setpgid resumed>) = 0 [pid 5693] <... mmap resumed>) = 0x7f5db7f12000 [pid 5692] munmap(0x7f5db7f12000, 2097152 [pid 5694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5692] <... munmap resumed>) = 0 [pid 5694] <... openat resumed>) = 3 [pid 5692] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5694] write(3, "1000", 4 [pid 5692] <... openat resumed>) = 4 [pid 5694] <... write resumed>) = 4 [pid 5692] ioctl(4, LOOP_SET_FD, 3 [pid 5694] close(3 [pid 5691] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 5694] <... close resumed>) = 0 [pid 5691] <... close resumed>) = 0 [pid 4998] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5694] symlink("/dev/binderfs", "./binderfs" [pid 5691] mkdir("./file0", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5694] <... symlink resumed>) = 0 [pid 5691] <... mkdir resumed>) = 0 [pid 4998] lstat("./57/file0", [pid 5694] memfd_create("syzkaller", 0 [pid 5691] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5694] <... memfd_create resumed>) = 3 [pid 5692] <... ioctl resumed>) = 0 [pid 4998] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./57/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./57" [pid 5694] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] <... rmdir resumed>) = 0 [ 74.276479][ T5691] loop5: detected capacity change from 0 to 4096 [ 74.301747][ T5692] loop3: detected capacity change from 0 to 4096 [ 74.317839][ T5691] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 4998] mkdir("./58", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5692] close(3 [pid 4998] close(3 [pid 5692] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5692] mkdir("./file0", 0777 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5692] <... mkdir resumed>) = 0 [pid 5692] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5695 ./strace-static-x86_64: Process 5695 attached [pid 5695] chdir("./58") = 0 [pid 5695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5695] setpgid(0, 0) = 0 [pid 5695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5695] write(3, "1000", 4) = 4 [pid 5695] close(3) = 0 [pid 5695] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5693] <... write resumed>) = 2097152 [pid 5695] memfd_create("syzkaller", 0) = 3 [pid 5693] munmap(0x7f5db7f12000, 2097152 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5693] <... munmap resumed>) = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 74.326041][ T5691] NILFS (loop5): trying rollback from an earlier position [ 74.340558][ T5692] NILFS (loop3): invalid segment: Checksum error in segment payload [ 74.365606][ T5693] loop2: detected capacity change from 0 to 4096 [pid 5693] ioctl(4, LOOP_SET_FD, 3 [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5693] <... ioctl resumed>) = 0 [pid 5691] <... mount resumed>) = 0 [pid 5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5693] close(3 [pid 5691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5693] <... close resumed>) = 0 [pid 5691] chdir("./file0" [pid 5693] mkdir("./file0", 0777 [pid 5691] <... chdir resumed>) = 0 [pid 5693] <... mkdir resumed>) = 0 [pid 5691] ioctl(4, LOOP_CLR_FD [pid 5693] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5691] <... ioctl resumed>) = 0 [pid 5691] close(4) = 0 [ 74.373752][ T5691] NILFS (loop5): recovery complete [ 74.378815][ T5692] NILFS (loop3): trying rollback from an earlier position [ 74.381358][ T5696] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5691] creat("./bus", 000 [pid 5695] <... write resumed>) = 2097152 [pid 5695] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5694] <... write resumed>) = 2097152 [pid 5695] <... openat resumed>) = 4 [pid 5695] ioctl(4, LOOP_SET_FD, 3 [pid 5694] munmap(0x7f5db7f12000, 2097152 [pid 5695] <... ioctl resumed>) = 0 [pid 5695] close(3 [pid 5694] <... munmap resumed>) = 0 [pid 5691] <... creat resumed>) = 4 [pid 5694] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5695] <... close resumed>) = 0 [pid 5691] open("./bus", O_RDONLY [pid 5694] <... openat resumed>) = 4 [pid 5694] ioctl(4, LOOP_SET_FD, 3 [pid 5695] mkdir("./file0", 0777 [pid 5691] <... open resumed>) = 5 [pid 5695] <... mkdir resumed>) = 0 [pid 5691] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5695] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5691] <... open resumed>) = 6 [ 74.421509][ T5693] NILFS (loop2): invalid segment: Checksum error in segment payload [ 74.431627][ T5692] NILFS (loop3): recovery complete [ 74.432424][ T5693] NILFS (loop2): trying rollback from an earlier position [ 74.443579][ T5695] loop0: detected capacity change from 0 to 4096 [ 74.453644][ T5697] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.454969][ T5694] loop1: detected capacity change from 0 to 4096 [pid 5691] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5694] <... ioctl resumed>) = 0 [pid 5692] <... mount resumed>) = 0 [pid 5691] <... write resumed>) = 32 [pid 5692] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5691] unlink("./bus" [pid 5692] <... openat resumed>) = 3 [pid 5692] chdir("./file0") = 0 [pid 5692] ioctl(4, LOOP_CLR_FD) = 0 [pid 5692] close(4) = 0 [pid 5692] creat("./bus", 000 [pid 5694] close(3) = 0 [pid 5694] mkdir("./file0", 0777) = 0 [pid 5694] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5692] <... creat resumed>) = 4 [pid 5691] <... unlink resumed>) = 0 [pid 5693] <... mount resumed>) = 0 [pid 5692] open("./bus", O_RDONLY [pid 5691] sendfile(4, 5, NULL, 145139829833722 [pid 5693] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5692] <... open resumed>) = 5 [pid 5693] <... openat resumed>) = 3 [pid 5692] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5691] <... sendfile resumed>) = 32 [pid 5693] chdir("./file0" [pid 5692] <... open resumed>) = 6 [pid 5691] exit_group(0 [pid 5693] <... chdir resumed>) = 0 [pid 5692] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5691] <... exit_group resumed>) = ? [pid 5693] ioctl(4, LOOP_CLR_FD) = 0 [pid 5693] close(4) = 0 [pid 5692] <... write resumed>) = 32 [pid 5693] creat("./bus", 000 [pid 5692] unlink("./bus" [pid 5691] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5691, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5692] <... unlink resumed>) = 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5692] sendfile(4, 5, NULL, 145139829833722 [pid 5003] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5692] <... sendfile resumed>) = 32 [pid 5003] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5692] exit_group(0 [pid 5003] <... openat resumed>) = 3 [pid 5003] fstat(3, [pid 5692] <... exit_group resumed>) = ? [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5692] +++ exited with 0 +++ [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./58/binderfs", [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5692, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5003] unlink("./58/binderfs") = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5003] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./59/binderfs") = 0 [ 74.470923][ T5695] NILFS (loop0): invalid segment: Checksum error in segment payload [ 74.471299][ T5693] NILFS (loop2): recovery complete [ 74.479924][ T5695] NILFS (loop0): trying rollback from an earlier position [ 74.493716][ T5698] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... umount2 resumed>) = 0 [pid 5003] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5693] <... creat resumed>) = 4 [pid 5003] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] open("./bus", O_RDONLY [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5693] <... open resumed>) = 5 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./59/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./59") = 0 [pid 5001] mkdir("./60", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5699 ./strace-static-x86_64: Process 5699 attached [pid 5699] chdir("./60") = 0 [pid 5699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5699] setpgid(0, 0) = 0 [pid 5699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5699] <... openat resumed>) = 3 [ 74.537935][ T5694] NILFS (loop1): invalid segment: Checksum error in segment payload [ 74.547468][ T5694] NILFS (loop1): trying rollback from an earlier position [ 74.557595][ T27] kauditd_printk_skb: 94 callbacks suppressed [ 74.557605][ T27] audit: type=1804 audit(1684404994.329:686): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/57/file0/bus" dev="loop2" ino=12 res=1 errno=0 [pid 5693] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5003] <... openat resumed>) = 4 [pid 5693] <... open resumed>) = 6 [pid 5003] fstat(4, [pid 5693] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, [pid 5699] write(3, "1000", 4) = 4 [pid 5699] close(3) = 0 [pid 5699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5699] memfd_create("syzkaller", 0) = 3 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5695] <... mount resumed>) = 0 [pid 5695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5695] chdir("./file0") = 0 [pid 5695] ioctl(4, LOOP_CLR_FD) = 0 [pid 5695] close(4) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5695] creat("./bus", 000 [pid 5693] <... write resumed>) = 32 [pid 5003] getdents64(4, [pid 5693] unlink("./bus" [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./58/file0") = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3) = 0 [pid 5003] rmdir("./58") = 0 [pid 5003] mkdir("./59", 0777) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5693] <... unlink resumed>) = 0 [pid 5693] sendfile(4, 5, NULL, 145139829833722 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5701 [pid 5693] <... sendfile resumed>) = 32 [pid 5693] exit_group(0) = ? [pid 5693] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5693, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, ./strace-static-x86_64: Process 5701 attached [ 74.591506][ T5695] NILFS (loop0): recovery complete [ 74.593688][ T27] audit: type=1804 audit(1684404994.359:687): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/57/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 74.622397][ T5694] NILFS (loop1): recovery complete [ 74.623332][ T5700] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./57/binderfs") = 0 [pid 5000] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5694] <... mount resumed>) = 0 [pid 5694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5694] chdir("./file0") = 0 [pid 5699] <... write resumed>) = 2097152 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [pid 5701] chdir("./59" [pid 5694] close(4) = 0 [pid 5694] creat("./bus", 000 [pid 5701] <... chdir resumed>) = 0 [pid 5699] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5699] ioctl(4, LOOP_SET_FD, 3 [pid 5701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5701] setpgid(0, 0) = 0 [pid 5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5701] write(3, "1000", 4) = 4 [pid 5701] close(3) = 0 [pid 5695] <... creat resumed>) = 4 [pid 5000] <... umount2 resumed>) = 0 [pid 5701] symlink("/dev/binderfs", "./binderfs" [pid 5695] open("./bus", O_RDONLY [pid 5694] <... creat resumed>) = 4 [pid 5000] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5701] <... symlink resumed>) = 0 [pid 5695] <... open resumed>) = 5 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5701] memfd_create("syzkaller", 0 [pid 5695] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] lstat("./57/file0", [pid 5701] <... memfd_create resumed>) = 3 [pid 5695] <... open resumed>) = 6 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5695] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [ 74.651635][ T5702] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.682736][ T5699] loop3: detected capacity change from 0 to 4096 [pid 5000] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5701] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./57/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./57") = 0 [pid 5000] mkdir("./58", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5703 [pid 5695] <... write resumed>) = 32 [pid 5695] unlink("./bus") = 0 [pid 5695] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5695] exit_group(0) = ? [pid 5694] open("./bus", O_RDONLY) = 5 [pid 5694] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5694] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5694] unlink("./bus"./strace-static-x86_64: Process 5703 attached [pid 5695] +++ exited with 0 +++ [pid 5694] <... unlink resumed>) = 0 [pid 5703] chdir("./58" [pid 5694] sendfile(4, 5, NULL, 145139829833722 [pid 5703] <... chdir resumed>) = 0 [pid 5694] <... sendfile resumed>) = 32 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5695, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5694] exit_group(0 [pid 5703] <... prctl resumed>) = 0 [pid 5703] setpgid(0, 0) = 0 [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5703] write(3, "1000", 4) = 4 [pid 5703] close(3) = 0 [pid 5703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5703] memfd_create("syzkaller", 0 [pid 5694] <... exit_group resumed>) = ? [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5703] <... memfd_create resumed>) = 3 [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5699] <... ioctl resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [ 74.695490][ T27] audit: type=1804 audit(1684404994.459:688): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.aQJbv6/58/file0/bus" dev="loop0" ino=12 res=1 errno=0 [pid 5701] <... write resumed>) = 2097152 [pid 5701] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5694] +++ exited with 0 +++ [pid 5699] close(3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5694, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5701] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5699] <... close resumed>) = 0 [pid 4998] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5699] mkdir("./file0", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5701] <... openat resumed>) = 4 [pid 5699] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 74.736383][ T27] audit: type=1804 audit(1684404994.459:689): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.aQJbv6/58/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 74.760249][ T27] audit: type=1804 audit(1684404994.489:690): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EoL44c/59/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 74.761947][ T5701] loop5: detected capacity change from 0 to 4096 [pid 5701] ioctl(4, LOOP_SET_FD, 3 [pid 5699] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 4999] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 3 [pid 4998] lstat("./58/binderfs", [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 4998] unlink("./58/binderfs" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] <... unlink resumed>) = 0 [pid 4999] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./59/binderfs") = 0 [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5703] <... write resumed>) = 2097152 [pid 5703] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5703] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 [pid 5703] <... ioctl resumed>) = 0 [pid 5703] close(3) = 0 [pid 5703] mkdir("./file0", 0777) = 0 [ 74.785429][ T27] audit: type=1804 audit(1684404994.489:691): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EoL44c/59/file0/bus" dev="loop1" ino=12 res=1 errno=0 [ 74.826441][ T5699] NILFS (loop3): invalid segment: Checksum error in segment payload [ 74.837621][ T5703] loop2: detected capacity change from 0 to 4096 [pid 5703] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5701] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./59/file0", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] lstat("./58/file0", [pid 4999] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] fstat(4, [pid 4998] <... openat resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 4999] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 4999] close(4 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] close(4 [pid 4999] rmdir("./59/file0" [pid 4998] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] rmdir("./58/file0" [pid 4999] getdents64(3, [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(3, [pid 4999] close(3) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./59" [pid 4998] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] mkdir("./60", 0777 [pid 4998] rmdir("./58" [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4998] mkdir("./59", 0777 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 3 [pid 4999] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] close(3) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5704 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5701] close(3 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5705 [pid 5701] <... close resumed>) = 0 [pid 5701] mkdir("./file0", 0777) = 0 [pid 5701] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, ""./strace-static-x86_64: Process 5704 attached [pid 5704] chdir("./60") = 0 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5704] setpgid(0, 0) = 0 [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] write(3, "1000", 4) = 4 [pid 5704] close(3) = 0 [ 74.861489][ T5703] NILFS (loop2): invalid segment: Checksum error in segment payload [ 74.863753][ T5699] NILFS (loop3): trying rollback from an earlier position [ 74.870756][ T5703] NILFS (loop2): trying rollback from an earlier position [ 74.897811][ T5699] NILFS (loop3): recovery complete [ 74.906835][ T5703] NILFS (loop2): recovery complete ./strace-static-x86_64: Process 5705 attached [pid 5705] chdir("./59" [pid 5704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5704] memfd_create("syzkaller", 0) = 3 [pid 5704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5705] <... chdir resumed>) = 0 [pid 5705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5699] <... mount resumed>) = 0 [pid 5699] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5705] <... prctl resumed>) = 0 [pid 5699] <... openat resumed>) = 3 [pid 5699] chdir("./file0") = 0 [pid 5699] ioctl(4, LOOP_CLR_FD) = 0 [pid 5699] close(4 [pid 5705] setpgid(0, 0 [pid 5703] <... mount resumed>) = 0 [pid 5699] <... close resumed>) = 0 [pid 5699] creat("./bus", 000 [pid 5705] <... setpgid resumed>) = 0 [pid 5703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5703] <... openat resumed>) = 3 [pid 5705] <... openat resumed>) = 3 [pid 5703] chdir("./file0" [pid 5705] write(3, "1000", 4 [pid 5703] <... chdir resumed>) = 0 [pid 5705] <... write resumed>) = 4 [pid 5703] ioctl(4, LOOP_CLR_FD [pid 5705] close(3) = 0 [pid 5703] <... ioctl resumed>) = 0 [pid 5705] symlink("/dev/binderfs", "./binderfs" [pid 5703] close(4 [pid 5705] <... symlink resumed>) = 0 [pid 5703] <... close resumed>) = 0 [pid 5703] creat("./bus", 000 [pid 5705] memfd_create("syzkaller", 0) = 3 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5699] <... creat resumed>) = 4 [ 74.916026][ T5701] NILFS (loop5): invalid segment: Checksum error in segment payload [ 74.924980][ T5706] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.939772][ T5707] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.946516][ T5701] NILFS (loop5): trying rollback from an earlier position [pid 5699] open("./bus", O_RDONLY [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5703] <... creat resumed>) = 4 [pid 5699] <... open resumed>) = 5 [pid 5699] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5699] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5703] open("./bus", O_RDONLY) = 5 [pid 5699] <... write resumed>) = 32 [pid 5703] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5699] unlink("./bus" [pid 5703] <... open resumed>) = 6 [pid 5703] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5699] <... unlink resumed>) = 0 [pid 5703] <... write resumed>) = 32 [pid 5699] sendfile(4, 5, NULL, 145139829833722 [pid 5703] unlink("./bus") = 0 [pid 5699] <... sendfile resumed>) = 32 [pid 5703] sendfile(4, 5, NULL, 145139829833722 [pid 5699] exit_group(0) = ? [pid 5703] <... sendfile resumed>) = 32 [pid 5703] exit_group(0 [pid 5699] +++ exited with 0 +++ [pid 5703] <... exit_group resumed>) = ? [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5699, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5704] <... write resumed>) = 2097152 [pid 5703] +++ exited with 0 +++ [pid 5001] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5704] munmap(0x7f5db7f12000, 2097152 [pid 5001] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5703, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5001] <... openat resumed>) = 3 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5705] <... write resumed>) = 2097152 [pid 5704] <... munmap resumed>) = 0 [pid 5001] fstat(3, [pid 5000] <... restart_syscall resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 74.984286][ T27] audit: type=1804 audit(1684404994.749:692): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.EF5sxk/60/file0/bus" dev="loop3" ino=12 res=1 errno=0 [ 74.993122][ T5701] NILFS (loop5): recovery complete [pid 5705] munmap(0x7f5db7f12000, 2097152 [pid 5701] <... mount resumed>) = 0 [pid 5001] getdents64(3, [pid 5704] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5704] <... openat resumed>) = 4 [pid 5001] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5704] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5705] <... munmap resumed>) = 0 [pid 5701] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] lstat("./60/binderfs", [pid 5000] <... openat resumed>) = 3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] fstat(3, [pid 5001] unlink("./60/binderfs" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] getdents64(3, [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./58/binderfs") = 0 [pid 5000] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5704] <... ioctl resumed>) = 0 [pid 5704] close(3) = 0 [pid 5704] mkdir("./file0", 0777) = 0 [pid 5704] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5705] ioctl(4, LOOP_SET_FD, 3 [pid 5701] <... openat resumed>) = 3 [pid 5705] <... ioctl resumed>) = 0 [pid 5705] close(3) = 0 [pid 5705] mkdir("./file0", 0777) = 0 [ 75.040088][ T5708] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.041472][ T5704] loop1: detected capacity change from 0 to 4096 [ 75.051714][ T27] audit: type=1804 audit(1684404994.779:693): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.EF5sxk/60/file0/bus" dev="loop3" ino=12 res=1 errno=0 [ 75.064551][ T5705] loop0: detected capacity change from 0 to 4096 [pid 5705] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5701] chdir("./file0") = 0 [pid 5701] ioctl(4, LOOP_CLR_FD) = 0 [pid 5701] close(4) = 0 [ 75.086012][ T27] audit: type=1804 audit(1684404994.789:694): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor341" name="/root/syzkaller.g0oHOf/58/file0/bus" dev="loop2" ino=12 res=1 errno=0 [ 75.112161][ T5704] NILFS (loop1): invalid segment: Checksum error in segment payload [ 75.122526][ T5704] NILFS (loop1): trying rollback from an earlier position [ 75.132818][ T5705] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5701] creat("./bus", 000) = 4 [pid 5701] open("./bus", O_RDONLY) = 5 [pid 5701] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5701] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5701] unlink("./bus") = 0 [pid 5701] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5701] exit_group(0) = ? [pid 5701] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5701, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./59/binderfs") = 0 [pid 5003] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./60/file0") = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./60") = 0 [pid 5001] mkdir("./61", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5709 [pid 5000] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./58/file0") = 0 [pid 5000] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [ 75.150159][ T5705] NILFS (loop0): trying rollback from an earlier position [ 75.168107][ T5704] NILFS (loop1): recovery complete [ 75.174491][ T27] audit: type=1804 audit(1684404994.789:695): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor341" name="/root/syzkaller.g0oHOf/58/file0/bus" dev="loop2" ino=12 res=1 errno=0 [pid 5000] close(3./strace-static-x86_64: Process 5709 attached ) = 0 [pid 5709] chdir("./61") = 0 [pid 5709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5709] setpgid(0, 0) = 0 [pid 5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5709] write(3, "1000", 4) = 4 [pid 5709] close(3) = 0 [pid 5709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5709] memfd_create("syzkaller", 0) = 3 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5704] <... mount resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5000] rmdir("./58" [pid 5704] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5704] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] mkdir("./59", 0777 [pid 5704] chdir("./file0" [pid 5003] lstat("./59/file0", [pid 5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... mkdir resumed>) = 0 [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5704] <... chdir resumed>) = 0 [pid 5003] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5704] ioctl(4, LOOP_CLR_FD [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5704] <... ioctl resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5704] close(4 [pid 5000] <... openat resumed>) = 3 [pid 5705] <... mount resumed>) = 0 [pid 5704] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5704] creat("./bus", 000 [pid 5003] fstat(4, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5705] <... openat resumed>) = 3 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 5705] chdir("./file0") = 0 [pid 5003] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5705] ioctl(4, LOOP_CLR_FD) = 0 [pid 5704] <... creat resumed>) = 4 [pid 5003] getdents64(4, [pid 5705] close(4 [pid 5704] open("./bus", O_RDONLY) = 5 [pid 5704] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5705] <... close resumed>) = 0 [pid 5704] <... open resumed>) = 6 [pid 5705] creat("./bus", 000 [pid 5704] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5712 [pid 5003] close(4) = 0 [pid 5704] <... write resumed>) = 32 [pid 5003] rmdir("./59/file0" [pid 5704] unlink("./bus" [pid 5003] <... rmdir resumed>) = 0 [pid 5704] <... unlink resumed>) = 0 [pid 5704] sendfile(4, 5, NULL, 145139829833722 [pid 5003] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3./strace-static-x86_64: Process 5712 attached [pid 5712] chdir("./59" [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./59" [pid 5704] <... sendfile resumed>) = 32 [pid 5003] <... rmdir resumed>) = 0 [pid 5704] exit_group(0 [pid 5003] mkdir("./60", 0777 [pid 5704] <... exit_group resumed>) = ? [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5712] <... chdir resumed>) = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] +++ exited with 0 +++ [pid 5003] <... openat resumed>) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5704, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5712] write(3, "1000", 4 [pid 5705] <... creat resumed>) = 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5712] <... write resumed>) = 4 [pid 5712] close(3) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5712] memfd_create("syzkaller", 0 [pid 5705] open("./bus", O_RDONLY [pid 5003] close(3 [pid 4999] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5712] <... memfd_create resumed>) = 3 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5003] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5709] <... write resumed>) = 2097152 [pid 5705] <... open resumed>) = 5 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5709] munmap(0x7f5db7f12000, 2097152 [pid 5705] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... openat resumed>) = 3 [pid 5709] <... munmap resumed>) = 0 [pid 5705] <... open resumed>) = 6 [pid 4999] fstat(3, [pid 5705] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5705] <... write resumed>) = 32 [pid 4999] lstat("./60/binderfs", [pid 5705] unlink("./bus" [pid 5709] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5713 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5709] <... openat resumed>) = 4 [pid 5709] ioctl(4, LOOP_SET_FD, 3 [ 75.215612][ T5710] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.219118][ T5705] NILFS (loop0): recovery complete [ 75.238856][ T5711] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] unlink("./60/binderfs") = 0 ./strace-static-x86_64: Process 5713 attached [pid 5709] <... ioctl resumed>) = 0 [pid 5705] <... unlink resumed>) = 0 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5705] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5705] exit_group(0) = ? [pid 5705] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5705, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5713] chdir("./60" [pid 4998] <... restart_syscall resumed>) = 0 [pid 5713] <... chdir resumed>) = 0 [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5712] <... write resumed>) = 2097152 [pid 5709] close(3 [pid 5713] <... prctl resumed>) = 0 [pid 5712] munmap(0x7f5db7f12000, 2097152 [pid 5709] <... close resumed>) = 0 [pid 5713] setpgid(0, 0 [pid 5712] <... munmap resumed>) = 0 [pid 5709] mkdir("./file0", 0777 [pid 4998] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5713] <... setpgid resumed>) = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5709] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5712] <... openat resumed>) = 4 [pid 5709] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5713] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./60/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./60") = 0 [pid 4999] mkdir("./61", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 75.293571][ T5709] loop3: detected capacity change from 0 to 4096 [ 75.329475][ T5709] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4999] close(3 [pid 5713] write(3, "1000", 4 [pid 5712] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5714 [pid 5713] <... write resumed>) = 4 ./strace-static-x86_64: Process 5714 attached [pid 5714] chdir("./61") = 0 [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5714] setpgid(0, 0) = 0 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5714] memfd_create("syzkaller", 0) = 3 [pid 5714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5713] close(3 [pid 4998] fstat(3, [pid 5713] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5713] symlink("/dev/binderfs", "./binderfs" [pid 4998] getdents64(3, [pid 5713] <... symlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5713] memfd_create("syzkaller", 0 [pid 4998] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5713] <... memfd_create resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] lstat("./59/binderfs", [pid 5713] <... mmap resumed>) = 0x7f5db7f12000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./59/binderfs") = 0 [pid 4998] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5712] <... ioctl resumed>) = 0 [pid 5712] close(3) = 0 [pid 5712] mkdir("./file0", 0777) = 0 [pid 5712] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5709] <... mount resumed>) = 0 [pid 5709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5709] chdir("./file0") = 0 [pid 5709] ioctl(4, LOOP_CLR_FD) = 0 [pid 5709] close(4) = 0 [ 75.338577][ T5709] NILFS (loop3): trying rollback from an earlier position [ 75.346102][ T5712] loop2: detected capacity change from 0 to 4096 [ 75.379855][ T5712] NILFS (loop2): invalid segment: Checksum error in segment payload [ 75.388000][ T5709] NILFS (loop3): recovery complete [pid 5709] creat("./bus", 000 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./59/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./59") = 0 [pid 4998] mkdir("./60", 0777) = 0 [pid 5713] <... write resumed>) = 2097152 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5713] munmap(0x7f5db7f12000, 2097152 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5714] <... write resumed>) = 2097152 [pid 5713] <... munmap resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5714] munmap(0x7f5db7f12000, 2097152 [pid 5713] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5714] <... munmap resumed>) = 0 [pid 5713] <... openat resumed>) = 4 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5714] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5713] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5716 [pid 5714] <... openat resumed>) = 4 [pid 5714] ioctl(4, LOOP_SET_FD, 3 [pid 5713] <... ioctl resumed>) = 0 [pid 5709] <... creat resumed>) = 4 [pid 5709] open("./bus", O_RDONLY) = 5 [pid 5709] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5709] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5709] unlink("./bus") = 0 [pid 5709] sendfile(4, 5, NULL, 145139829833722 [pid 5714] <... ioctl resumed>) = 0 [pid 5709] <... sendfile resumed>) = 32 [pid 5709] exit_group(0) = ? ./strace-static-x86_64: Process 5716 attached [pid 5714] close(3 [pid 5713] close(3) = 0 [pid 5713] mkdir("./file0", 0777 [pid 5714] <... close resumed>) = 0 [ 75.413602][ T5715] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.414623][ T5712] NILFS (loop2): trying rollback from an earlier position [ 75.449177][ T5713] loop5: detected capacity change from 0 to 4096 [ 75.456465][ T5714] loop1: detected capacity change from 0 to 4096 [pid 5714] mkdir("./file0", 0777) = 0 [pid 5713] <... mkdir resumed>) = 0 [pid 5713] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5714] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5716] chdir("./60" [pid 5709] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5709, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5712] <... mount resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./61/binderfs") = 0 [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5716] <... chdir resumed>) = 0 [pid 5716] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5716] setpgid(0, 0) = 0 [pid 5716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5716] write(3, "1000", 4) = 4 [pid 5716] close(3) = 0 [pid 5716] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5716] memfd_create("syzkaller", 0) = 3 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5712] <... openat resumed>) = 3 [ 75.466170][ T5712] NILFS (loop2): recovery complete [ 75.475245][ T5717] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.489274][ T5713] NILFS (loop5): invalid segment: Checksum error in segment payload [ 75.497681][ T5714] NILFS (loop1): invalid segment: Checksum error in segment payload [ 75.505695][ T5714] NILFS (loop1): trying rollback from an earlier position [pid 5712] chdir("./file0") = 0 [pid 5712] ioctl(4, LOOP_CLR_FD) = 0 [pid 5712] close(4) = 0 [pid 5712] creat("./bus", 000) = 4 [pid 5712] open("./bus", O_RDONLY) = 5 [pid 5712] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 75.513391][ T5713] NILFS (loop5): trying rollback from an earlier position [pid 5712] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5712] unlink("./bus") = 0 [pid 5712] sendfile(4, 5, NULL, 145139829833722 [pid 5001] <... umount2 resumed>) = 0 [pid 5712] <... sendfile resumed>) = 32 [pid 5712] exit_group(0) = ? [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./61/file0", [pid 5712] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5712, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5714] <... mount resumed>) = 0 [pid 5713] <... mount resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 5000] fstat(3, [pid 5001] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5001] getdents64(4, [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5000] lstat("./59/binderfs", [pid 5001] close(4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] unlink("./59/binderfs" [pid 5001] rmdir("./61/file0" [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./61" [pid 5716] <... write resumed>) = 2097152 [pid 5714] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5716] munmap(0x7f5db7f12000, 2097152 [pid 5714] <... openat resumed>) = 3 [pid 5713] <... openat resumed>) = 3 [pid 5716] <... munmap resumed>) = 0 [pid 5714] chdir("./file0" [pid 5713] chdir("./file0" [pid 5716] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5714] <... chdir resumed>) = 0 [pid 5713] <... chdir resumed>) = 0 [pid 5716] <... openat resumed>) = 4 [pid 5714] ioctl(4, LOOP_CLR_FD [ 75.539306][ T5713] NILFS (loop5): recovery complete [ 75.545787][ T5714] NILFS (loop1): recovery complete [ 75.565911][ T5718] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.567179][ T5719] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5713] ioctl(4, LOOP_CLR_FD [pid 5716] ioctl(4, LOOP_SET_FD, 3 [pid 5714] <... ioctl resumed>) = 0 [pid 5713] <... ioctl resumed>) = 0 [pid 5714] close(4 [pid 5713] close(4 [pid 5001] <... rmdir resumed>) = 0 [pid 5714] <... close resumed>) = 0 [pid 5713] <... close resumed>) = 0 [pid 5714] creat("./bus", 000 [pid 5713] creat("./bus", 000 [pid 5001] mkdir("./62", 0777 [pid 5714] <... creat resumed>) = 4 [pid 5714] open("./bus", O_RDONLY [pid 5713] <... creat resumed>) = 4 [pid 5001] <... mkdir resumed>) = 0 [pid 5714] <... open resumed>) = 5 [pid 5713] open("./bus", O_RDONLY [pid 5714] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5716] <... ioctl resumed>) = 0 [pid 5713] <... open resumed>) = 5 [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5716] close(3 [pid 5714] <... open resumed>) = 6 [pid 5713] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5716] <... close resumed>) = 0 [pid 5716] mkdir("./file0", 0777) = 0 [pid 5716] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5714] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5713] <... open resumed>) = 6 [pid 5714] <... write resumed>) = 32 [pid 5713] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5001] <... openat resumed>) = 3 [pid 5714] unlink("./bus" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5714] <... unlink resumed>) = 0 [pid 5713] <... write resumed>) = 32 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5714] sendfile(4, 5, NULL, 145139829833722 [pid 5713] unlink("./bus" [pid 5001] close(3 [pid 5714] <... sendfile resumed>) = 32 [pid 5713] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5714] exit_group(0 [pid 5713] sendfile(4, 5, NULL, 145139829833722 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5714] <... exit_group resumed>) = ? [pid 5713] <... sendfile resumed>) = 32 [pid 5713] exit_group(0 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5720 [pid 5000] <... umount2 resumed>) = 0 [pid 5713] <... exit_group resumed>) = ? [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5720 attached ) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./59/file0", [pid 5720] chdir("./62" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5720] <... chdir resumed>) = 0 [pid 5713] +++ exited with 0 +++ [pid 5000] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5720] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5713, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5720] <... prctl resumed>) = 0 [pid 5003] restart_syscall(<... resuming interrupted clone ...> [pid 5000] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5720] setpgid(0, 0 [pid 5003] <... restart_syscall resumed>) = 0 [pid 5720] <... setpgid resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5714] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5714, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5003] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5003] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5000] getdents64(4, [pid 5003] fstat(3, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5720] <... openat resumed>) = 3 [pid 5000] getdents64(4, [pid 5720] write(3, "1000", 4 [pid 5003] getdents64(3, [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5720] <... write resumed>) = 4 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5000] close(4 [pid 5720] close(3 [pid 5003] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5720] <... close resumed>) = 0 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./59/file0" [pid 5720] symlink("/dev/binderfs", "./binderfs" [pid 5003] lstat("./60/binderfs", [pid 4999] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5720] <... symlink resumed>) = 0 [pid 5003] unlink("./60/binderfs" [pid 5000] getdents64(3, [pid 4999] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5720] memfd_create("syzkaller", 0 [pid 5003] <... unlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5720] <... memfd_create resumed>) = 3 [pid 5003] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] fstat(3, [pid 5720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5720] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5000] rmdir("./59" [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] unlink("./61/binderfs" [pid 5000] mkdir("./60", 0777 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5721 [pid 4999] <... umount2 resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [ 75.592930][ T5716] loop0: detected capacity change from 0 to 4096 [ 75.615571][ T5716] NILFS (loop0): invalid segment: Checksum error in segment payload [ 75.627924][ T5716] NILFS (loop0): trying rollback from an earlier position [pid 5003] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./60/file0", ./strace-static-x86_64: Process 5721 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5721] chdir("./60" [pid 5003] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5003] fstat(4, [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5721] <... chdir resumed>) = 0 [pid 4999] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5721] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5721] <... prctl resumed>) = 0 [pid 5721] setpgid(0, 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5721] <... setpgid resumed>) = 0 [pid 5716] <... mount resumed>) = 0 [pid 5003] getdents64(4, [pid 4999] fstat(4, [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] close(4 [pid 5721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5716] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] rmdir("./60/file0" [pid 5721] <... openat resumed>) = 3 [pid 5716] <... openat resumed>) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5721] write(3, "1000", 4 [pid 5716] chdir("./file0" [pid 5003] getdents64(3, [pid 4999] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5721] <... write resumed>) = 4 [pid 5716] <... chdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5003] rmdir("./60" [pid 5721] close(3 [pid 5716] ioctl(4, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5721] <... close resumed>) = 0 [pid 5716] <... ioctl resumed>) = 0 [pid 5003] <... rmdir resumed>) = 0 [pid 4999] close(4 [pid 5721] symlink("/dev/binderfs", "./binderfs" [pid 5716] close(4 [pid 5003] mkdir("./61", 0777 [pid 4999] <... close resumed>) = 0 [pid 5721] <... symlink resumed>) = 0 [pid 5716] <... close resumed>) = 0 [pid 4999] rmdir("./61/file0" [pid 5721] memfd_create("syzkaller", 0 [pid 5716] creat("./bus", 000 [pid 4999] <... rmdir resumed>) = 0 [pid 5721] <... memfd_create resumed>) = 3 [pid 4999] getdents64(3, [pid 5721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5721] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] close(3 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... close resumed>) = 0 [pid 5003] <... openat resumed>) = 3 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 4999] rmdir("./61" [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5003] close(3) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5723 [pid 4999] mkdir("./62", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5723 attached ) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5723] chdir("./61" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5723] <... chdir resumed>) = 0 [pid 5721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] close(3 [pid 5723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5723] <... prctl resumed>) = 0 [pid 5723] setpgid(0, 0) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5724 [pid 5723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5723] write(3, "1000", 4) = 4 [pid 5723] close(3) = 0 [pid 5723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5723] memfd_create("syzkaller", 0) = 3 [ 75.675274][ T5716] NILFS (loop0): recovery complete [ 75.694911][ T5722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5720] <... write resumed>) = 2097152 [pid 5720] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5720] ioctl(4, LOOP_SET_FD, 3 [pid 5716] <... creat resumed>) = 4 [pid 5716] open("./bus", O_RDONLY) = 5 [pid 5716] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000./strace-static-x86_64: Process 5724 attached [pid 5723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5721] <... write resumed>) = 2097152 [pid 5720] <... ioctl resumed>) = 0 [pid 5716] <... open resumed>) = 6 [pid 5724] chdir("./62" [pid 5721] munmap(0x7f5db7f12000, 2097152 [pid 5716] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5724] <... chdir resumed>) = 0 [pid 5721] <... munmap resumed>) = 0 [pid 5720] close(3 [pid 5716] <... write resumed>) = 32 [pid 5724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5721] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5720] <... close resumed>) = 0 [pid 5716] unlink("./bus" [pid 5724] <... prctl resumed>) = 0 [pid 5721] <... openat resumed>) = 4 [pid 5720] mkdir("./file0", 0777 [pid 5716] <... unlink resumed>) = 0 [pid 5724] setpgid(0, 0 [pid 5721] ioctl(4, LOOP_SET_FD, 3 [pid 5720] <... mkdir resumed>) = 0 [pid 5716] sendfile(4, 5, NULL, 145139829833722 [pid 5724] <... setpgid resumed>) = 0 [pid 5723] <... write resumed>) = 2097152 [pid 5723] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5723] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5723] ioctl(4, LOOP_SET_FD, 3 [pid 5724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5721] <... ioctl resumed>) = 0 [pid 5720] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5716] <... sendfile resumed>) = 32 [pid 5724] <... openat resumed>) = 3 [pid 5716] exit_group(0 [pid 5724] write(3, "1000", 4 [pid 5716] <... exit_group resumed>) = ? [pid 5724] <... write resumed>) = 4 [pid 5716] +++ exited with 0 +++ [pid 5724] close(3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5716, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5724] <... close resumed>) = 0 [pid 5724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5723] <... ioctl resumed>) = 0 [pid 5721] close(3 [pid 4998] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] memfd_create("syzkaller", 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] <... memfd_create resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... openat resumed>) = 3 [pid 5724] <... mmap resumed>) = 0x7f5db7f12000 [ 75.745816][ T5720] loop3: detected capacity change from 0 to 4096 [ 75.773364][ T5721] loop2: detected capacity change from 0 to 4096 [ 75.776441][ T5723] loop5: detected capacity change from 0 to 4096 [pid 4998] fstat(3, [pid 5723] close(3 [pid 5721] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./60/binderfs") = 0 [pid 4998] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5723] <... close resumed>) = 0 [pid 5721] mkdir("./file0", 0777 [pid 5723] mkdir("./file0", 0777 [pid 5721] <... mkdir resumed>) = 0 [pid 5723] <... mkdir resumed>) = 0 [pid 5721] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5723] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 75.794352][ T5720] NILFS (loop3): invalid segment: Checksum error in segment payload [ 75.803104][ T5720] NILFS (loop3): trying rollback from an earlier position [ 75.828863][ T5721] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./60/file0") = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./60") = 0 [pid 4998] mkdir("./61", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5725 [pid 5724] <... write resumed>) = 2097152 [pid 5724] munmap(0x7f5db7f12000, 2097152./strace-static-x86_64: Process 5725 attached [pid 5725] chdir("./61") = 0 [pid 5725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5725] setpgid(0, 0) = 0 [pid 5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5724] <... munmap resumed>) = 0 [pid 5725] <... openat resumed>) = 3 [pid 5724] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5725] write(3, "1000", 4 [pid 5724] <... openat resumed>) = 4 [pid 5725] <... write resumed>) = 4 [pid 5724] ioctl(4, LOOP_SET_FD, 3 [pid 5725] close(3) = 0 [pid 5725] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5725] memfd_create("syzkaller", 0) = 3 [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 75.839559][ T5723] NILFS (loop5): invalid segment: Checksum error in segment payload [ 75.855693][ T5720] NILFS (loop3): recovery complete [ 75.861184][ T5721] NILFS (loop2): trying rollback from an earlier position [ 75.874518][ T5723] NILFS (loop5): trying rollback from an earlier position [ 75.875252][ T5724] loop1: detected capacity change from 0 to 4096 [pid 5720] <... mount resumed>) = 0 [pid 5720] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5720] <... openat resumed>) = 3 [pid 5720] chdir("./file0") = 0 [pid 5720] ioctl(4, LOOP_CLR_FD) = 0 [pid 5720] close(4) = 0 [pid 5724] <... ioctl resumed>) = 0 [pid 5724] close(3) = 0 [pid 5724] mkdir("./file0", 0777) = 0 [pid 5724] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5720] creat("./bus", 000) = 4 [pid 5720] open("./bus", O_RDONLY) = 5 [pid 5720] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5720] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 5720] unlink("./bus") = 0 [pid 5720] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5720] exit_group(0) = ? [pid 5720] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5720, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 75.897327][ T5726] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.899397][ T5723] NILFS (loop5): recovery complete [ 75.913344][ T5721] NILFS (loop2): recovery complete [pid 5001] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./62/binderfs" [pid 5725] <... write resumed>) = 2097152 [pid 5721] <... mount resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5721] <... openat resumed>) = 3 [pid 5721] chdir("./file0") = 0 [pid 5721] ioctl(4, LOOP_CLR_FD) = 0 [pid 5721] close(4) = 0 [pid 5721] creat("./bus", 000 [pid 5725] munmap(0x7f5db7f12000, 2097152 [pid 5723] <... mount resumed>) = 0 [pid 5725] <... munmap resumed>) = 0 [pid 5723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5725] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5723] <... openat resumed>) = 3 [pid 5725] <... openat resumed>) = 4 [pid 5723] chdir("./file0") = 0 [ 75.949464][ T5728] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.953091][ T5724] NILFS (loop1): invalid segment: Checksum error in segment payload [ 75.961199][ T5727] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.972400][ T5724] NILFS (loop1): trying rollback from an earlier position [pid 5723] ioctl(4, LOOP_CLR_FD) = 0 [pid 5725] ioctl(4, LOOP_SET_FD, 3 [pid 5723] close(4) = 0 [pid 5723] creat("./bus", 000 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, [pid 5725] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5723] <... creat resumed>) = 4 [pid 5721] <... creat resumed>) = 4 [pid 5723] open("./bus", O_RDONLY [pid 5721] open("./bus", O_RDONLY [pid 5725] close(3 [pid 5723] <... open resumed>) = 5 [pid 5721] <... open resumed>) = 5 [pid 5723] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5721] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5723] <... open resumed>) = 6 [pid 5721] <... open resumed>) = 6 [pid 5723] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5721] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5725] <... close resumed>) = 0 [pid 5725] mkdir("./file0", 0777 [pid 5723] <... write resumed>) = 32 [pid 5721] <... write resumed>) = 32 [pid 5723] unlink("./bus" [pid 5721] unlink("./bus" [pid 5723] <... unlink resumed>) = 0 [pid 5721] <... unlink resumed>) = 0 [pid 5723] sendfile(4, 5, NULL, 145139829833722 [pid 5721] sendfile(4, 5, NULL, 145139829833722 [pid 5725] <... mkdir resumed>) = 0 [pid 5723] <... sendfile resumed>) = 32 [pid 5721] <... sendfile resumed>) = 32 [pid 5723] exit_group(0 [pid 5721] exit_group(0 [pid 5723] <... exit_group resumed>) = ? [pid 5721] <... exit_group resumed>) = ? [pid 5725] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5723] +++ exited with 0 +++ [pid 5003] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5723, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5003] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5003] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5003] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5003] lstat("./61/binderfs", [pid 5721] +++ exited with 0 +++ [pid 5003] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] unlink("./61/binderfs" [pid 5001] getdents64(4, [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5721, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5003] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [ 75.998908][ T5725] loop0: detected capacity change from 0 to 4096 [ 76.028985][ T5724] NILFS (loop1): recovery complete [ 76.039618][ T5725] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5003] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5000] <... restart_syscall resumed>) = 0 [pid 5003] <... umount2 resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5003] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5000] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] lstat("./61/file0", [pid 5001] rmdir("./62/file0" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5000] <... openat resumed>) = 3 [pid 5003] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5000] fstat(3, [pid 5003] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5003] <... openat resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 5003] fstat(4, [pid 5001] rmdir("./62" [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5003] getdents64(4, [pid 5001] mkdir("./63", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5003] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] lstat("./60/binderfs", [pid 5003] getdents64(4, [pid 5001] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5003] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5000] unlink("./60/binderfs" [pid 5003] close(4 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... unlink resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] <... mount resumed>) = 0 [pid 5003] rmdir("./61/file0" [pid 5001] close(3 [pid 5724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5003] <... rmdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5003] getdents64(3, [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5003] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5003] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5730 [pid 5003] <... close resumed>) = 0 [pid 5003] rmdir("./61" [pid 5724] <... openat resumed>) = 3 [pid 5003] <... rmdir resumed>) = 0 [pid 5003] mkdir("./62", 0777 [pid 5724] chdir("./file0" [pid 5003] <... mkdir resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5724] <... chdir resumed>) = 0 [pid 5724] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5724] <... ioctl resumed>) = 0 [pid 5000] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5724] close(4) = 0 [pid 5724] creat("./bus", 000 [pid 5000] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5730 attached [pid 5000] getdents64(4, [pid 5730] chdir("./63" [pid 5724] <... creat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 5730] <... chdir resumed>) = 0 [pid 5724] open("./bus", O_RDONLY [pid 5000] close(4 [pid 5730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] <... close resumed>) = 0 [pid 5730] setpgid(0, 0 [pid 5724] <... open resumed>) = 5 [pid 5730] <... setpgid resumed>) = 0 [pid 5724] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] rmdir("./60/file0" [pid 5730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5724] <... open resumed>) = 6 [pid 5003] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5730] <... openat resumed>) = 3 [pid 5724] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5003] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(3, [pid 5730] write(3, "1000", 4 [pid 5003] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 5730] <... write resumed>) = 4 [pid 5003] close(3 [pid 5000] close(3 [pid 5730] close(3 [pid 5003] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5730] <... close resumed>) = 0 [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5730] symlink("/dev/binderfs", "./binderfs" [pid 5724] <... write resumed>) = 32 [pid 5000] rmdir("./60" [pid 5730] <... symlink resumed>) = 0 [pid 5724] unlink("./bus" [pid 5003] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5731 [pid 5000] <... rmdir resumed>) = 0 [pid 5730] memfd_create("syzkaller", 0 [pid 5000] mkdir("./61", 0777 [pid 5730] <... memfd_create resumed>) = 3 [pid 5724] <... unlink resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5724] sendfile(4, 5, NULL, 145139829833722 [pid 5000] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5730] <... mmap resumed>) = 0x7f5db7f12000 [pid 5000] <... openat resumed>) = 3 [pid 5724] <... sendfile resumed>) = 32 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5724] exit_group(0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5731 attached [pid 5724] <... exit_group resumed>) = ? [pid 5000] close(3 [pid 5731] chdir("./62" [pid 5000] <... close resumed>) = 0 [pid 5731] <... chdir resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5724] +++ exited with 0 +++ [pid 5000] <... clone resumed>, child_tidptr=0x555555ac45d0) = 5732 [pid 5731] setpgid(0, 0) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5724, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5731] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5731] write(3, "1000", 4 [pid 4999] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5731] <... write resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 5731] close(3 [pid 4999] fstat(3, [pid 5731] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5731] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(3, [pid 5731] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 5731] memfd_create("syzkaller", 0 [pid 4999] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5731] <... memfd_create resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5732 attached [pid 5731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] lstat("./62/binderfs", [pid 5732] chdir("./61" [pid 5731] <... mmap resumed>) = 0x7f5db7f12000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5732] <... chdir resumed>) = 0 [pid 5731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] unlink("./62/binderfs" [pid 5732] prctl(PR_SET_PDEATHSIG, SIGKILL [ 76.048560][ T5729] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.059140][ T5725] NILFS (loop0): trying rollback from an earlier position [ 76.077468][ T5725] NILFS (loop0): recovery complete [pid 5730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... unlink resumed>) = 0 [pid 5732] <... prctl resumed>) = 0 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5732] setpgid(0, 0) = 0 [pid 5732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5732] write(3, "1000", 4) = 4 [pid 5732] close(3) = 0 [pid 5732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5732] memfd_create("syzkaller", 0) = 3 [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [pid 5725] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5725] <... openat resumed>) = 3 [pid 4999] lstat("./62/file0", [pid 5725] chdir("./file0" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5725] <... chdir resumed>) = 0 [pid 4999] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5725] <... ioctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5725] close(4 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5725] <... close resumed>) = 0 [pid 4999] getdents64(4, 0x555555acd660 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./62/file0") = 0 [pid 4999] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./62") = 0 [pid 4999] mkdir("./63", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = 0 [pid 4999] close(3) = 0 [pid 5725] creat("./bus", 000 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5734 ./strace-static-x86_64: Process 5734 attached [pid 5734] chdir("./63") = 0 [pid 5732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5734] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5734] setpgid(0, 0) = 0 [pid 5734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5734] write(3, "1000", 4) = 4 [pid 5730] <... write resumed>) = 2097152 [pid 5734] close(3) = 0 [pid 5734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5734] memfd_create("syzkaller", 0) = 3 [pid 5734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5731] <... write resumed>) = 2097152 [pid 5734] <... mmap resumed>) = 0x7f5db7f12000 [ 76.136682][ T5733] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5730] munmap(0x7f5db7f12000, 2097152 [pid 5731] munmap(0x7f5db7f12000, 2097152 [pid 5730] <... munmap resumed>) = 0 [pid 5725] <... creat resumed>) = 4 [pid 5730] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5725] open("./bus", O_RDONLY) = 5 [pid 5725] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5730] <... openat resumed>) = 4 [pid 5730] ioctl(4, LOOP_SET_FD, 3 [pid 5725] <... open resumed>) = 6 [pid 5732] <... write resumed>) = 2097152 [pid 5731] <... munmap resumed>) = 0 [pid 5725] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 5734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5730] <... ioctl resumed>) = 0 [pid 5732] munmap(0x7f5db7f12000, 2097152 [pid 5731] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5730] close(3) = 0 [pid 5730] mkdir("./file0", 0777) = 0 [pid 5730] mount("/dev/loop3", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5731] <... openat resumed>) = 4 [pid 5725] <... write resumed>) = 32 [pid 5732] <... munmap resumed>) = 0 [pid 5731] ioctl(4, LOOP_SET_FD, 3 [pid 5725] unlink("./bus" [pid 5732] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5725] <... unlink resumed>) = 0 [pid 5725] sendfile(4, 5, NULL, 145139829833722) = 32 [pid 5725] exit_group(0) = ? [pid 5734] <... write resumed>) = 2097152 [pid 5732] <... openat resumed>) = 4 [pid 5731] <... ioctl resumed>) = 0 [pid 5725] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5725, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 4998] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555555ac5620 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./61/binderfs") = 0 [pid 4998] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5734] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5732] ioctl(4, LOOP_SET_FD, 3 [pid 5731] close(3 [ 76.209720][ T5730] loop3: detected capacity change from 0 to 4096 [ 76.228601][ T5731] loop5: detected capacity change from 0 to 4096 [ 76.237452][ T5730] NILFS (loop3): invalid segment: Checksum error in segment payload [ 76.246119][ T5730] NILFS (loop3): trying rollback from an earlier position [pid 5734] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5732] <... ioctl resumed>) = 0 [pid 5731] <... close resumed>) = 0 [pid 5734] ioctl(4, LOOP_SET_FD, 3 [pid 5731] mkdir("./file0", 0777 [pid 5734] <... ioctl resumed>) = 0 [pid 5731] <... mkdir resumed>) = 0 [pid 5731] mount("/dev/loop5", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5732] close(3 [pid 5734] close(3) = 0 [pid 5734] mkdir("./file0", 0777) = 0 [pid 5734] mount("/dev/loop1", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5732] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5732] mkdir("./file0", 0777 [pid 4998] <... getdents64 resumed>0x555555acd660 /* 2 entries */, 32768) = 48 [pid 5732] <... mkdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5732] mount("/dev/loop2", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 4998] <... getdents64 resumed>0x555555acd660 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./61/file0") = 0 [ 76.256727][ T5732] loop2: detected capacity change from 0 to 4096 [ 76.264893][ T5734] loop1: detected capacity change from 0 to 4096 [ 76.277555][ T5731] NILFS (loop5): invalid segment: Checksum error in segment payload [ 76.285791][ T5731] NILFS (loop5): trying rollback from an earlier position [ 76.296779][ T5730] NILFS (loop3): recovery complete [pid 4998] getdents64(3, 0x555555ac5620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./61") = 0 [pid 4998] mkdir("./62", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555ac45d0) = 5736 ./strace-static-x86_64: Process 5736 attached [pid 5736] chdir("./62") = 0 [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5736] memfd_create("syzkaller", 0) = 3 [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5db7f12000 [ 76.305843][ T5732] NILFS (loop2): invalid segment: Checksum error in segment payload [ 76.306618][ T5734] NILFS (loop1): invalid segment: Checksum error in segment payload [ 76.326303][ C1] ================================================================== [ 76.333203][ T5734] NILFS (loop1): trying rollback from an earlier position [ 76.334359][ C1] BUG: KASAN: slab-use-after-free in __lock_acquire+0x3ffd/0x5df0 [ 76.334409][ C1] Read of size 8 at addr ffff888027508a00 by task syz-executor341/5731 [ 76.357524][ C1] [pid 5736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5736] munmap(0x7f5db7f12000, 2097152) = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5736] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5736] close(3) = 0 [pid 5736] mkdir("./file0", 0777) = 0 [ 76.359847][ C1] CPU: 1 PID: 5731 Comm: syz-executor341 Not tainted 6.4.0-rc2-syzkaller-00015-g1b66c114d161 #0 [ 76.370258][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 76.380317][ C1] Call Trace: [ 76.382526][ T5736] loop0: detected capacity change from 0 to 4096 [ 76.383583][ C1] [ 76.383591][ C1] dump_stack_lvl+0xd9/0x150 [ 76.383636][ C1] print_address_description.constprop.0+0x2c/0x3c0 [ 76.395139][ T5732] NILFS (loop2): trying rollback from an earlier position [ 76.397346][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 76.397378][ C1] kasan_report+0x11c/0x130 [ 76.397407][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 76.397433][ C1] __lock_acquire+0x3ffd/0x5df0 [ 76.397458][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 76.415647][ T5734] NILFS (loop1): recovery complete [ 76.416107][ C1] ? mark_lock.part.0+0xee/0x1970 [ 76.429236][ T5736] NILFS (loop0): invalid segment: Checksum error in segment payload [ 76.430410][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [pid 5736] mount("/dev/loop0", "./file0", "nilfs2", MS_NOEXEC|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5732] <... mount resumed>) = 0 [pid 5732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 76.430444][ C1] ? lockdep_unlock+0x11b/0x290 [ 76.436534][ T5736] NILFS (loop0): trying rollback from an earlier position [ 76.441047][ C1] ? __lock_acquire+0x280a/0x5df0 [ 76.453809][ T5732] NILFS (loop2): recovery complete [ 76.453986][ C1] lock_acquire+0x1b1/0x520 [ 76.476801][ T5738] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.476871][ C1] ? try_to_wake_up+0xab/0x1c40 [ 76.488854][ T5736] NILFS (loop0): recovery complete [ 76.496923][ C1] ? lock_sync+0x190/0x190 [ 76.496956][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 76.496983][ C1] _raw_spin_lock_irqsave+0x3d/0x60 [ 76.497008][ C1] ? try_to_wake_up+0xab/0x1c40 [ 76.497024][ C1] try_to_wake_up+0xab/0x1c40 [ 76.497040][ C1] ? lock_sync+0x190/0x190 [ 76.497096][ C1] ? lock_downgrade+0x690/0x690 [ 76.540984][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 76.546550][ C1] ? sched_ttwu_pending+0x550/0x550 [ 76.547835][ T5735] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.551739][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 76.551771][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 76.574267][ C1] call_timer_fn+0x1a0/0x580 [ 76.578893][ C1] ? msleep_interruptible+0x180/0x180 [ 76.584272][ C1] ? lock_downgrade+0x690/0x690 [ 76.589310][ C1] ? mark_held_locks+0x9f/0xe0 [ 76.594091][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 76.600164][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.605373][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 76.611473][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 76.612552][ T5737] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.617550][ C1] expire_timers+0x29b/0x4b0 [ 76.617575][ C1] run_timer_softirq+0x326/0x910 [ 76.617598][ C1] ? expire_timers+0x4b0/0x4b0 [ 76.617618][ C1] ? kvm_clock_read+0x14/0x30 [ 76.646998][ C1] ? mark_held_locks+0x9f/0xe0 [ 76.651774][ C1] __do_softirq+0x1d4/0x905 [ 76.656298][ C1] __irq_exit_rcu+0x114/0x190 [ 76.660987][ C1] irq_exit_rcu+0x9/0x20 [ 76.665241][ C1] sysvec_apic_timer_interrupt+0x97/0xc0 [ 76.670883][ C1] [ 76.673813][ C1] [ 76.676747][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.682744][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x3c/0x70 [ 76.685215][ T5739] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.689156][ C1] Code: 74 24 10 e8 f6 fa 52 f7 48 89 ef e8 1e 69 53 f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 df 3f 45 f7 65 8b 05 00 d2 f0 75 85 c0 74 0a 5b 5d c3 e8 6c f5 [ 76.689176][ C1] RSP: 0018:ffffc9000540f4a0 EFLAGS: 00000206 [ 76.689193][ C1] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff22ae966 [ 76.689207][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 76.689218][ C1] RBP: ffff888014af36c0 R08: 0000000000000001 R09: ffffffff91528dcf [ 76.689231][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888014af36c0 [ 76.757202][ C1] R13: ffff888014ef2c80 R14: ffff8880227cadc0 R15: ffff888014e838c0 [ 76.765169][ C1] get_partial_node.part.0+0x209/0x3d0 [ 76.770622][ C1] ? mark_held_locks+0x9f/0xe0 [ 76.775377][ C1] ? ___slab_alloc+0x3f6/0x1400 [ 76.780238][ C1] ___slab_alloc+0xcd7/0x1400 [ 76.784931][ C1] ? mempool_alloc+0x158/0x360 [ 76.789692][ C1] ? mempool_alloc+0x158/0x360 [ 76.794461][ C1] __slab_alloc.constprop.0+0x56/0xa0 [ 76.799856][ C1] ? mempool_alloc+0x158/0x360 [ 76.804613][ C1] kmem_cache_alloc+0x38e/0x3b0 [ 76.809454][ C1] ? mempool_free+0x3b0/0x3b0 [ 76.814123][ C1] mempool_alloc+0x158/0x360 [ 76.818704][ C1] ? mempool_resize+0x7d0/0x7d0 [ 76.823552][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 76.829100][ C1] ? find_held_lock+0x2d/0x110 [ 76.833874][ C1] bio_alloc_bioset+0x41e/0x900 [ 76.838719][ C1] ? lock_downgrade+0x690/0x690 [ 76.843556][ C1] ? bvec_alloc+0x200/0x200 [ 76.848067][ C1] ? mark_held_locks+0x9f/0xe0 [ 76.852842][ C1] submit_bh_wbc+0x281/0x650 [ 76.857423][ C1] __bh_read+0xa7/0x1f0 [ 76.861561][ C1] __breadahead+0xf9/0x160 [ 76.865974][ C1] nilfs_search_super_root+0xea6/0x14b0 [ 76.871562][ C1] ? nilfs_truncate+0x47/0x510 [ 76.876330][ C1] ? nilfs_salvage_orphan_logs+0x2730/0x2730 [ 76.882334][ C1] load_nilfs+0x101e/0x1340 [ 76.886830][ C1] ? destroy_nilfs+0x110/0x110 [ 76.891588][ C1] ? up_write+0x1b4/0x520 [ 76.895907][ C1] ? __init_rwsem+0x12d/0x1b0 [ 76.900573][ C1] nilfs_mount+0xb52/0x1160 [ 76.905066][ C1] ? nilfs_attach_checkpoint+0x4d0/0x4d0 [ 76.910690][ C1] ? legacy_parse_param+0x3ee/0x8c0 [ 76.915882][ C1] ? security_fs_context_parse_param+0x9d/0xd0 [ 76.922038][ C1] ? rcu_is_watching+0x12/0xb0 [ 76.926821][ C1] ? kfree+0x10e/0x150 [ 76.930889][ C1] ? apparmor_capable+0x1dc/0x460 [ 76.935940][ C1] ? nilfs_attach_checkpoint+0x4d0/0x4d0 [ 76.941583][ C1] legacy_get_tree+0x109/0x220 [ 76.946352][ C1] vfs_get_tree+0x8d/0x350 [ 76.950768][ C1] path_mount+0x134b/0x1e40 [ 76.955270][ C1] ? kmem_cache_free+0xe9/0x480 [ 76.960141][ C1] ? finish_automount+0x9b0/0x9b0 [ 76.965160][ C1] ? putname+0x102/0x140 [ 76.969474][ C1] __x64_sys_mount+0x283/0x300 [ 76.974236][ C1] ? copy_mnt_ns+0xb30/0xb30 [ 76.978836][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.984045][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.989230][ C1] ? ptrace_notify+0xfe/0x140 [ 76.993894][ C1] do_syscall_64+0x39/0xb0 [ 76.998303][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.004194][ C1] RIP: 0033:0x7f5dc0360faa [ 77.008604][ C1] Code: 48 c7 c2 c0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 a8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 77.028251][ C1] RSP: 002b:00007ffec904ca98 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 77.036659][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5dc0360faa [ 77.044661][ C1] RDX: 0000000020000dc0 RSI: 0000000020000100 RDI: 00007ffec904cab0 [ 77.052647][ C1] RBP: 00007ffec904cab0 R08: 00007ffec904caf0 R09: 0000000000000da0 [ 77.060607][ C1] R10: 0000000000010018 R11: 0000000000000286 R12: 0000000000000004 [ 77.068582][ C1] R13: 0000555555ac42c0 R14: 0000000000010018 R15: 00007ffec904caf0 [ 77.076558][ C1] [ 77.079564][ C1] [ 77.081873][ C1] Allocated by task 2: [ 77.085918][ C1] kasan_save_stack+0x22/0x40 [ 77.090587][ C1] kasan_set_track+0x25/0x30 [ 77.095175][ C1] __kasan_slab_alloc+0x7f/0x90 [ 77.100039][ C1] kmem_cache_alloc_node+0x185/0x3e0 [ 77.105325][ C1] copy_process+0x3c0/0x7600 [ 77.109955][ C1] kernel_clone+0xeb/0x890 [ 77.114373][ C1] kernel_thread+0xc0/0x100 [ 77.118888][ C1] kthreadd+0x50c/0x790 [ 77.123031][ C1] ret_from_fork+0x1f/0x30 [ 77.127438][ C1] [ 77.129757][ C1] Last potentially related work creation: [ 77.135452][ C1] kasan_save_stack+0x22/0x40 [ 77.140210][ C1] __kasan_record_aux_stack+0xbc/0xd0 [ 77.145570][ C1] __call_rcu_common.constprop.0+0x99/0x7e0 [ 77.151467][ C1] put_task_struct_rcu_user+0x87/0xc0 [ 77.156847][ C1] __schedule+0xca2/0x5880 [ 77.161249][ C1] preempt_schedule_common+0x45/0xb0 [ 77.166527][ C1] preempt_schedule_thunk+0x1a/0x20 [ 77.171754][ C1] _raw_spin_unlock+0x3a/0x40 [ 77.176449][ C1] fsnotify_add_mark_locked+0x280/0x1470 [ 77.182077][ C1] inotify_update_watch+0x9e8/0xc30 [ 77.187267][ C1] __x64_sys_inotify_add_watch+0x2bf/0x350 [ 77.193062][ C1] do_syscall_64+0x39/0xb0 [ 77.197467][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.203350][ C1] [ 77.205654][ C1] Second to last potentially related work creation: [ 77.212216][ C1] kasan_save_stack+0x22/0x40 [ 77.216884][ C1] __kasan_record_aux_stack+0xbc/0xd0 [ 77.222240][ C1] __call_rcu_common.constprop.0+0x99/0x7e0 [ 77.228125][ C1] put_task_struct_rcu_user+0x87/0xc0 [ 77.233503][ C1] __schedule+0xca2/0x5880 [ 77.237915][ C1] schedule+0xde/0x1a0 [ 77.241984][ C1] do_wait+0x6fc/0xc30 [ 77.246062][ C1] kernel_wait4+0x150/0x260 [ 77.250554][ C1] __do_sys_wait4+0x13f/0x150 [ 77.255218][ C1] do_syscall_64+0x39/0xb0 [ 77.259630][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.265541][ C1] [ 77.267853][ C1] The buggy address belongs to the object at ffff888027508000 [ 77.267853][ C1] which belongs to the cache task_struct of size 7360 [ 77.282072][ C1] The buggy address is located 2560 bytes inside of [ 77.282072][ C1] freed 7360-byte region [ffff888027508000, ffff888027509cc0) [ 77.296031][ C1] [ 77.298343][ C1] The buggy address belongs to the physical page: [ 77.304734][ C1] page:ffffea00009d4200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888027509dc0 pfn:0x27508 [ 77.316355][ C1] head:ffffea00009d4200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 77.325276][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.333244][ C1] page_type: 0xffffffff() [ 77.337572][ C1] raw: 00fff00000010200 ffff888140007500 ffffea00007f2c10 ffffea0000925a10 [ 77.346163][ C1] raw: ffff888027509dc0 0000000000040002 00000001ffffffff 0000000000000000 [ 77.354729][ C1] page dumped because: kasan: bad access detected [ 77.361128][ C1] page_owner tracks the page as allocated [ 77.366840][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u4:1), ts 7435077998, free_ts 0 [ 77.386943][ C1] post_alloc_hook+0x2db/0x350 [ 77.391705][ C1] get_page_from_freelist+0xf41/0x2c00 [ 77.397200][ C1] __alloc_pages+0x1cb/0x4a0 [ 77.401805][ C1] alloc_pages+0x1aa/0x270 [ 77.406223][ C1] allocate_slab+0x25f/0x390 [ 77.410831][ C1] ___slab_alloc+0xa91/0x1400 [ 77.415495][ C1] __slab_alloc.constprop.0+0x56/0xa0 [ 77.420874][ C1] kmem_cache_alloc_node+0x138/0x3e0 [ 77.426149][ C1] copy_process+0x3c0/0x7600 [ 77.430729][ C1] kernel_clone+0xeb/0x890 [ 77.435130][ C1] user_mode_thread+0xb1/0xf0 [ 77.439829][ C1] call_usermodehelper_exec_work+0xd0/0x180 [ 77.445724][ C1] process_one_work+0x99a/0x15e0 [ 77.450704][ C1] worker_thread+0x67d/0x10c0 [ 77.455392][ C1] kthread+0x344/0x440 [ 77.459453][ C1] ret_from_fork+0x1f/0x30 [ 77.463857][ C1] page_owner free stack trace missing [ 77.469216][ C1] [ 77.471523][ C1] Memory state around the buggy address: [ 77.477133][ C1] ffff888027508900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.485186][ C1] ffff888027508980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.493249][ C1] >ffff888027508a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.501286][ C1] ^ [ 77.505331][ C1] ffff888027508a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.513387][ C1] ffff888027508b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.521431][ C1] ================================================================== [ 77.529660][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.536885][ C1] CPU: 1 PID: 5731 Comm: syz-executor341 Not tainted 6.4.0-rc2-syzkaller-00015-g1b66c114d161 #0 [ 77.547318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 77.557380][ C1] Call Trace: [ 77.560650][ C1] [ 77.563479][ C1] dump_stack_lvl+0xd9/0x150 [ 77.568062][ C1] panic+0x686/0x730 [ 77.571973][ C1] ? panic_smp_self_stop+0xa0/0xa0 [ 77.577112][ C1] ? lock_downgrade+0x690/0x690 [ 77.581950][ C1] check_panic_on_warn+0xb1/0xc0 [ 77.586879][ C1] end_report+0xe9/0x120 [ 77.591109][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 77.596122][ C1] kasan_report+0xf9/0x130 [ 77.600537][ C1] ? __lock_acquire+0x3ffd/0x5df0 [ 77.605571][ C1] __lock_acquire+0x3ffd/0x5df0 [ 77.610415][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 77.615955][ C1] ? mark_lock.part.0+0xee/0x1970 [ 77.620980][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 77.626969][ C1] ? lockdep_unlock+0x11b/0x290 [ 77.631805][ C1] ? __lock_acquire+0x280a/0x5df0 [ 77.636828][ C1] lock_acquire+0x1b1/0x520 [ 77.641325][ C1] ? try_to_wake_up+0xab/0x1c40 [ 77.646258][ C1] ? lock_sync+0x190/0x190 [ 77.650688][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 77.656071][ C1] _raw_spin_lock_irqsave+0x3d/0x60 [ 77.661262][ C1] ? try_to_wake_up+0xab/0x1c40 [ 77.666100][ C1] try_to_wake_up+0xab/0x1c40 [ 77.670766][ C1] ? lock_sync+0x190/0x190 [ 77.675169][ C1] ? lock_downgrade+0x690/0x690 [ 77.680007][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 77.685568][ C1] ? sched_ttwu_pending+0x550/0x550 [ 77.690776][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 77.696772][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 77.702817][ C1] call_timer_fn+0x1a0/0x580 [ 77.707492][ C1] ? msleep_interruptible+0x180/0x180 [ 77.712847][ C1] ? lock_downgrade+0x690/0x690 [ 77.717681][ C1] ? mark_held_locks+0x9f/0xe0 [ 77.722438][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 77.728506][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.733695][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 77.739760][ C1] ? nilfs_segctor_zeropad_segsum+0x180/0x180 [ 77.745829][ C1] expire_timers+0x29b/0x4b0 [ 77.750403][ C1] run_timer_softirq+0x326/0x910 [ 77.755328][ C1] ? expire_timers+0x4b0/0x4b0 [ 77.760094][ C1] ? kvm_clock_read+0x14/0x30 [ 77.764753][ C1] ? mark_held_locks+0x9f/0xe0 [ 77.769500][ C1] __do_softirq+0x1d4/0x905 [ 77.773989][ C1] __irq_exit_rcu+0x114/0x190 [ 77.778653][ C1] irq_exit_rcu+0x9/0x20 [ 77.782880][ C1] sysvec_apic_timer_interrupt+0x97/0xc0 [ 77.788501][ C1] [ 77.791413][ C1] [ 77.794325][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.800385][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x3c/0x70 [ 77.806787][ C1] Code: 74 24 10 e8 f6 fa 52 f7 48 89 ef e8 1e 69 53 f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 df 3f 45 f7 65 8b 05 00 d2 f0 75 85 c0 74 0a 5b 5d c3 e8 6c f5 [ 77.826383][ C1] RSP: 0018:ffffc9000540f4a0 EFLAGS: 00000206 [ 77.832434][ C1] RAX: 0000000000000006 RBX: 0000000000000200 RCX: 1ffffffff22ae966 [ 77.840399][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 77.848400][ C1] RBP: ffff888014af36c0 R08: 0000000000000001 R09: ffffffff91528dcf [ 77.856358][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888014af36c0 [ 77.864312][ C1] R13: ffff888014ef2c80 R14: ffff8880227cadc0 R15: ffff888014e838c0 [ 77.872451][ C1] get_partial_node.part.0+0x209/0x3d0 [ 77.877904][ C1] ? mark_held_locks+0x9f/0xe0 [ 77.882653][ C1] ? ___slab_alloc+0x3f6/0x1400 [ 77.887505][ C1] ___slab_alloc+0xcd7/0x1400 [ 77.892181][ C1] ? mempool_alloc+0x158/0x360 [ 77.896931][ C1] ? mempool_alloc+0x158/0x360 [ 77.901682][ C1] __slab_alloc.constprop.0+0x56/0xa0 [ 77.907044][ C1] ? mempool_alloc+0x158/0x360 [ 77.911791][ C1] kmem_cache_alloc+0x38e/0x3b0 [ 77.916639][ C1] ? mempool_free+0x3b0/0x3b0 [ 77.921411][ C1] mempool_alloc+0x158/0x360 [ 77.925989][ C1] ? mempool_resize+0x7d0/0x7d0 [ 77.930823][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 77.936356][ C1] ? find_held_lock+0x2d/0x110 [ 77.941103][ C1] bio_alloc_bioset+0x41e/0x900 [ 77.945944][ C1] ? lock_downgrade+0x690/0x690 [ 77.950788][ C1] ? bvec_alloc+0x200/0x200 [ 77.955299][ C1] ? mark_held_locks+0x9f/0xe0 [ 77.960052][ C1] submit_bh_wbc+0x281/0x650 [ 77.964726][ C1] __bh_read+0xa7/0x1f0 [ 77.968884][ C1] __breadahead+0xf9/0x160 [ 77.973280][ C1] nilfs_search_super_root+0xea6/0x14b0 [ 77.978826][ C1] ? nilfs_truncate+0x47/0x510 [ 77.983618][ C1] ? nilfs_salvage_orphan_logs+0x2730/0x2730 [ 77.989588][ C1] load_nilfs+0x101e/0x1340 [ 77.994088][ C1] ? destroy_nilfs+0x110/0x110 [ 77.998842][ C1] ? up_write+0x1b4/0x520 [ 78.003159][ C1] ? __init_rwsem+0x12d/0x1b0 [ 78.007826][ C1] nilfs_mount+0xb52/0x1160 [ 78.012353][ C1] ? nilfs_attach_checkpoint+0x4d0/0x4d0 [ 78.017979][ C1] ? legacy_parse_param+0x3ee/0x8c0 [ 78.023202][ C1] ? security_fs_context_parse_param+0x9d/0xd0 [ 78.029365][ C1] ? rcu_is_watching+0x12/0xb0 [ 78.034145][ C1] ? kfree+0x10e/0x150 [ 78.038294][ C1] ? apparmor_capable+0x1dc/0x460 [ 78.043346][ C1] ? nilfs_attach_checkpoint+0x4d0/0x4d0 [ 78.048982][ C1] legacy_get_tree+0x109/0x220 [ 78.053732][ C1] vfs_get_tree+0x8d/0x350 [ 78.058162][ C1] path_mount+0x134b/0x1e40 [ 78.062655][ C1] ? kmem_cache_free+0xe9/0x480 [ 78.067504][ C1] ? finish_automount+0x9b0/0x9b0 [ 78.072551][ C1] ? putname+0x102/0x140 [ 78.076784][ C1] __x64_sys_mount+0x283/0x300 [ 78.081539][ C1] ? copy_mnt_ns+0xb30/0xb30 [ 78.086137][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 78.091318][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.096504][ C1] ? ptrace_notify+0xfe/0x140 [ 78.101252][ C1] do_syscall_64+0x39/0xb0 [ 78.105659][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.111566][ C1] RIP: 0033:0x7f5dc0360faa [ 78.115964][ C1] Code: 48 c7 c2 c0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 a8 00 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.135654][ C1] RSP: 002b:00007ffec904ca98 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 78.144046][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5dc0360faa [ 78.151996][ C1] RDX: 0000000020000dc0 RSI: 0000000020000100 RDI: 00007ffec904cab0 [ 78.159994][ C1] RBP: 00007ffec904cab0 R08: 00007ffec904caf0 R09: 0000000000000da0 [ 78.167954][ C1] R10: 0000000000010018 R11: 0000000000000286 R12: 0000000000000004 [ 78.175919][ C1] R13: 0000555555ac42c0 R14: 0000000000010018 R15: 00007ffec904caf0 [ 78.183873][ C1] [ 78.187808][ C1] Kernel Offset: disabled [ 78.192114][ C1] Rebooting in 86400 seconds..