./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1504681094 <...> Warning: Permanently added '10.128.1.184' (ECDSA) to the list of known hosts. execve("./syz-executor1504681094", ["./syz-executor1504681094"], 0x7ffd42b77c10 /* 10 vars */) = 0 brk(NULL) = 0x5555559b0000 brk(0x5555559b0c40) = 0x5555559b0c40 arch_prctl(ARCH_SET_FS, 0x5555559b0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1504681094", 4096) = 28 brk(0x5555559d1c40) = 0x5555559d1c40 brk(0x5555559d2000) = 0x5555559d2000 mprotect(0x7f24228f8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x5555559b05d0) = 5063 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getpid() = 5063 ./strace-static-x86_64: Process 5064 attached [pid 5063] mkdir("./syzkaller.3j1dT4", 0700 [pid 5062] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5064 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5065 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5066 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5067 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5068 [pid 5063] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5065 attached [pid 5064] getpid() = 5064 [pid 5064] mkdir("./syzkaller.CfSUF6", 0700 [pid 5063] chmod("./syzkaller.3j1dT4", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] chmod("./syzkaller.CfSUF6", 0777) = 0 [pid 5064] chdir("./syzkaller.CfSUF6") = 0 [pid 5064] mkdir("./0", 0777 [pid 5063] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5068 attached [pid 5068] getpid( [pid 5063] chdir("./syzkaller.3j1dT4" [pid 5068] <... getpid resumed>) = 5068 [pid 5064] <... mkdir resumed>) = 0 [pid 5068] mkdir("./syzkaller.IvgIyr", 0700 [pid 5063] <... chdir resumed>) = 0 [pid 5065] getpid( [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5067 attached [pid 5067] getpid( [pid 5063] mkdir("./0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... getpid resumed>) = 5067 [pid 5065] <... getpid resumed>) = 5065 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] mkdir("./syzkaller.RGsGMm", 0700 [pid 5065] mkdir("./syzkaller.q2H5oa", 0700./strace-static-x86_64: Process 5066 attached [pid 5068] chmod("./syzkaller.IvgIyr", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5068] <... chmod resumed>) = 0 [pid 5066] getpid( [pid 5068] chdir("./syzkaller.IvgIyr" [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getpid resumed>) = 5066 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] mkdir("./syzkaller.I1OaDf", 0700 [pid 5063] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] chmod("./syzkaller.q2H5oa", 0777) = 0 [pid 5068] <... chdir resumed>) = 0 [pid 5065] chdir("./syzkaller.q2H5oa" [pid 5067] chmod("./syzkaller.RGsGMm", 0777 [pid 5065] <... chdir resumed>) = 0 [pid 5068] mkdir("./0", 0777 [pid 5067] <... chmod resumed>) = 0 [pid 5065] mkdir("./0", 0777 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... mkdir resumed>) = 0 [pid 5066] chmod("./syzkaller.I1OaDf", 0777./strace-static-x86_64: Process 5070 attached ./strace-static-x86_64: Process 5069 attached [pid 5070] chdir("./0" [pid 5066] <... chmod resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5069] chdir("./0" [pid 5065] <... mkdir resumed>) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... chdir resumed>) = 0 [pid 5070] <... prctl resumed>) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] setpgid(0, 0 [pid 5069] <... prctl resumed>) = 0 [pid 5070] <... setpgid resumed>) = 0 [pid 5069] setpgid(0, 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... setpgid resumed>) = 0 [pid 5067] chdir("./syzkaller.RGsGMm" [pid 5070] <... openat resumed>) = 3 [pid 5067] <... chdir resumed>) = 0 [pid 5066] chdir("./syzkaller.I1OaDf" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5069 [pid 5070] write(3, "1000", 4 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] <... write resumed>) = 4 [pid 5070] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] mkdir("./0", 0777 [pid 5066] <... chdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5070 [pid 5070] <... close resumed>) = 0 [pid 5069] write(3, "1000", 4 [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... write resumed>) = 4 [pid 5070] <... symlink resumed>) = 0 [pid 5069] close(3 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./0", 0777 [pid 5070] memfd_create("syzkaller", 0) = 3 [pid 5069] <... close resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5070] <... mmap resumed>) = 0x7f241a43b000 [pid 5069] <... symlink resumed>) = 0 [pid 5068] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] memfd_create("syzkaller", 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5069] <... memfd_create resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 5065] <... close resumed>) = 0 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5072 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... mmap resumed>) = 0x7f241a43b000 ./strace-static-x86_64: Process 5073 attached ./strace-static-x86_64: Process 5072 attached [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] chdir("./0"./strace-static-x86_64: Process 5074 attached [pid 5074] chdir("./0") = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5073 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5074 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... chdir resumed>) = 0 [pid 5072] chdir("./0" [pid 5074] <... openat resumed>) = 3 [pid 5074] write(3, "1000", 4) = 4 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... chdir resumed>) = 0 [pid 5073] <... prctl resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5075 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] setpgid(0, 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... setpgid resumed>) = 0 [pid 5072] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5075 attached [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] setpgid(0, 0 [pid 5075] chdir("./0" [pid 5074] memfd_create("syzkaller", 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... setpgid resumed>) = 0 [pid 5075] <... chdir resumed>) = 0 [pid 5074] <... memfd_create resumed>) = 3 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... prctl resumed>) = 0 [pid 5074] <... mmap resumed>) = 0x7f241a43b000 [pid 5073] write(3, "1000", 4 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5075] setpgid(0, 0 [pid 5073] <... write resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5075] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] close(3 [pid 5072] write(3, "1000", 4 [pid 5070] <... write resumed>) = 2097152 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... write resumed>) = 4 [pid 5070] munmap(0x7f241a43b000, 2097152 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5073] symlink("/dev/binderfs", "./binderfs" [pid 5072] close(3 [pid 5073] <... symlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5070] <... munmap resumed>) = 0 [pid 5073] memfd_create("syzkaller", 0 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... memfd_create resumed>) = 3 [pid 5072] <... symlink resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] memfd_create("syzkaller", 0 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... mmap resumed>) = 0x7f241a43b000 [pid 5072] <... memfd_create resumed>) = 3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(3) = 0 [pid 5070] mkdir("./file0", 0777 [pid 5069] <... write resumed>) = 2097152 [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5070] <... mkdir resumed>) = 0 [pid 5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 69.540759][ T5070] loop1: detected capacity change from 0 to 4096 [pid 5070] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5069] munmap(0x7f241a43b000, 2097152) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5069] close(3) = 0 [pid 5069] mkdir("./file0", 0777 [pid 5074] <... write resumed>) = 2097152 [pid 5073] <... write resumed>) = 2097152 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5074] munmap(0x7f241a43b000, 2097152 [pid 5073] munmap(0x7f241a43b000, 2097152 [pid 5070] <... mount resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5073] <... munmap resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5074] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5070] chdir("./file0" [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] <... chdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5075] <... write resumed>) = 2097152 [pid 5074] <... openat resumed>) = 4 [pid 5075] munmap(0x7f241a43b000, 2097152 [ 69.636835][ T5069] loop0: detected capacity change from 0 to 4096 [ 69.661536][ T5077] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5074] ioctl(4, LOOP_SET_FD, 3 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5075] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... ioctl resumed>) = 0 [pid 5072] <... write resumed>) = 2097152 [pid 5070] close(4 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] munmap(0x7f241a43b000, 2097152 [pid 5073] close(3 [pid 5070] <... close resumed>) = 0 [pid 5072] <... munmap resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5072] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [ 69.688352][ T5074] loop2: detected capacity change from 0 to 4096 [ 69.705002][ T5073] loop4: detected capacity change from 0 to 4096 [ 69.707318][ T5075] loop3: detected capacity change from 0 to 4096 [pid 5070] unlink("./file1" [pid 5073] mkdir("./file0", 0777) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5072] mkdir("./file0", 0777 [pid 5070] <... unlink resumed>) = 0 [pid 5074] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 5070] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5074] <... close resumed>) = 0 [pid 5072] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5074] mkdir("./file0", 0777 [pid 5069] <... mount resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] chdir("./file0") = 0 [pid 5069] ioctl(4, LOOP_CLR_FD [pid 5074] <... mkdir resumed>) = 0 [pid 5069] <... ioctl resumed>) = 0 [pid 5069] close(4) = 0 [pid 5069] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5074] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5069] <... openat resumed>) = 4 [ 69.737349][ T5072] loop5: detected capacity change from 0 to 4096 [ 69.756792][ T5078] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5069] unlink("./file1" [pid 5073] <... mount resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5069] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5073] chdir("./file0" [pid 5075] <... close resumed>) = 0 [pid 5075] mkdir("./file0", 0777 [pid 5073] <... chdir resumed>) = 0 [pid 5073] ioctl(4, LOOP_CLR_FD [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5073] close(4 [pid 5075] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5073] <... close resumed>) = 0 [ 69.801819][ T5080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5073] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5073] unlink("./file1") = 0 [pid 5072] <... mount resumed>) = 0 [pid 5074] <... mount resumed>) = 0 [pid 5073] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5072] chdir("./file0" [pid 5074] chdir("./file0" [pid 5072] <... chdir resumed>) = 0 [pid 5074] <... chdir resumed>) = 0 [pid 5072] ioctl(4, LOOP_CLR_FD [pid 5074] ioctl(4, LOOP_CLR_FD [pid 5072] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] close(4 [pid 5074] close(4 [pid 5072] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5074] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5072] <... openat resumed>) = 4 [pid 5072] unlink("./file1" [pid 5074] <... openat resumed>) = 4 [ 69.863931][ T5082] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.877483][ T5083] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5074] unlink("./file1" [pid 5075] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file0") = 0 [pid 5075] ioctl(4, LOOP_CLR_FD [pid 5072] <... unlink resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5075] close(4) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 69.920112][ T5084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5075] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5075] unlink("./file1") = 0 [pid 5075] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5070] <... pwritev resumed>) = 1114112 [pid 5070] exit_group(0) = ? [pid 5074] <... pwritev resumed>) = 1114112 [pid 5073] <... pwritev resumed>) = 1114112 [pid 5074] exit_group(0) = ? [pid 5073] exit_group(0) = ? [pid 5069] <... pwritev resumed>) = 1114112 [pid 5069] exit_group(0) = ? [pid 5072] <... pwritev resumed>) = 1114112 [pid 5072] exit_group(0) = ? [pid 5073] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5067] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5069] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] lstat("./0/binderfs", [pid 5072] +++ exited with 0 +++ [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... pwritev resumed>) = 1114112 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] unlink("./0/binderfs" [pid 5063] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5075] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5075] <... exit_group resumed>) = ? [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5070] +++ exited with 0 +++ [pid 5068] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5063] getdents64(3, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./0/binderfs", [pid 5068] unlink("./0/binderfs" [pid 5064] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] unlink("./0/binderfs" [pid 5064] fstat(3, [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5064] getdents64(3, [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5064] lstat("./0/binderfs", [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./0/binderfs" [pid 5065] unlink("./0/binderfs") = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 70.454356][ T5070] syz-executor150 (5070) used greatest stack depth: 18864 bytes left [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./0/file0", [pid 5068] lstat("./0/file0", [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] getdents64(4, [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5068] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] close(4 [pid 5068] getdents64(4, [pid 5067] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./0/file0" [pid 5068] close(4 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5068] rmdir("./0/file0" [pid 5067] lstat("./0/file0", [pid 5063] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5067] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] rmdir("./0" [pid 5075] +++ exited with 0 +++ [pid 5068] rmdir("./0" [pid 5067] fstat(4, [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./1", 0777 [pid 5068] mkdir("./1", 0777 [pid 5067] getdents64(4, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] lstat("./0/file0", [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... openat resumed>) = 3 [pid 5067] getdents64(4, [pid 5066] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] lstat("./0/file0", [pid 5063] <... openat resumed>) = 3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(4 [pid 5066] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3 [pid 5067] <... close resumed>) = 0 [pid 5066] fstat(3, [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5067] rmdir("./0/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... rmdir resumed>) = 0 [pid 5065] fstat(4, [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(4, [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] lstat("./0/binderfs", [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5086 [pid 5067] rmdir("./0" [pid 5066] unlink("./0/binderfs" [pid 5065] close(4 [pid 5064] fstat(4, ./strace-static-x86_64: Process 5086 attached [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5086] chdir("./1" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1", 0777 [pid 5065] rmdir("./0/file0" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] <... chdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5087 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] close(4 [pid 5067] <... close resumed>) = 0 [pid 5065] rmdir("./0" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./0/file0" [pid 5086] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5065] mkdir("./1", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5086] <... setpgid resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5088 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5086] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5088 attached ./strace-static-x86_64: Process 5087 attached [pid 5086] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5087] chdir("./1" [pid 5086] close(3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] close(3 [pid 5088] chdir("./1" [pid 5087] <... chdir resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... close resumed>) = 0 [pid 5088] <... chdir resumed>) = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5064] rmdir("./0" [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] <... prctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5088] <... prctl resumed>) = 0 [pid 5087] setpgid(0, 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] mkdir("./1", 0777 [pid 5088] setpgid(0, 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... mkdir resumed>) = 0 [pid 5088] <... setpgid resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5089 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] <... openat resumed>) = 3 [pid 5086] <... symlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 3 [pid 5087] write(3, "1000", 4 [pid 5086] memfd_create("syzkaller", 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5088] write(3, "1000", 4 [pid 5087] <... write resumed>) = 4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5088] <... write resumed>) = 4 [pid 5087] close(3 [pid 5064] close(3./strace-static-x86_64: Process 5089 attached [pid 5088] close(3 [pid 5087] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5089] chdir("./1" [pid 5088] <... close resumed>) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] <... chdir resumed>) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5087] <... symlink resumed>) = 0 [pid 5086] <... memfd_create resumed>) = 3 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... symlink resumed>) = 0 [pid 5087] memfd_create("syzkaller", 0 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5090 [pid 5089] <... prctl resumed>) = 0 [pid 5088] memfd_create("syzkaller", 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] setpgid(0, 0 [pid 5088] <... memfd_create resumed>) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] <... setpgid resumed>) = 0 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = 0 [pid 5089] write(3, "1000", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5089] memfd_create("syzkaller", 0) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 ./strace-static-x86_64: Process 5090 attached [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] chdir("./1" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] <... chdir resumed>) = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] lstat("./0/file0", [pid 5090] <... prctl resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5090] setpgid(0, 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... setpgid resumed>) = 0 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 4 [pid 5090] <... write resumed>) = 4 [pid 5066] fstat(4, [pid 5090] close(3) = 0 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(4, [pid 5090] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5090] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5090] <... memfd_create resumed>) = 3 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] close(4 [pid 5090] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./0/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./0") = 0 [pid 5066] mkdir("./1", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] <... write resumed>) = 2097152 [pid 5066] close(3 [pid 5086] munmap(0x7f241a43b000, 2097152 [pid 5066] <... close resumed>) = 0 [pid 5087] <... write resumed>) = 2097152 [pid 5086] <... munmap resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5088] <... write resumed>) = 2097152 [pid 5086] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5091 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5091] chdir("./1" [pid 5086] <... ioctl resumed>) = 0 [pid 5091] <... chdir resumed>) = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] <... write resumed>) = 2097152 [pid 5088] munmap(0x7f241a43b000, 2097152 [pid 5091] <... prctl resumed>) = 0 [pid 5088] <... munmap resumed>) = 0 [pid 5087] munmap(0x7f241a43b000, 2097152 [pid 5091] setpgid(0, 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5091] <... setpgid resumed>) = 0 [pid 5088] <... openat resumed>) = 4 [pid 5087] <... munmap resumed>) = 0 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] <... openat resumed>) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5091] <... openat resumed>) = 3 [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3) = 0 [pid 5091] write(3, "1000", 4 [pid 5087] mkdir("./file0", 0777) = 0 [pid 5091] <... write resumed>) = 4 [pid 5087] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5091] close(3 [pid 5090] <... write resumed>) = 2097152 [pid 5089] munmap(0x7f241a43b000, 2097152 [pid 5088] <... ioctl resumed>) = 0 [pid 5086] close(3 [pid 5091] <... close resumed>) = 0 [pid 5090] munmap(0x7f241a43b000, 2097152 [pid 5089] <... munmap resumed>) = 0 [pid 5088] close(3 [pid 5086] <... close resumed>) = 0 [pid 5091] symlink("/dev/binderfs", "./binderfs" [pid 5090] <... munmap resumed>) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5088] <... close resumed>) = 0 [pid 5086] mkdir("./file0", 0777 [pid 5091] <... symlink resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5089] <... openat resumed>) = 4 [pid 5088] mkdir("./file0", 0777 [pid 5086] <... mkdir resumed>) = 0 [pid 5091] memfd_create("syzkaller", 0 [pid 5090] <... openat resumed>) = 4 [ 70.818981][ T5086] loop5: detected capacity change from 0 to 4096 [ 70.840173][ T5088] loop4: detected capacity change from 0 to 4096 [ 70.848936][ T5087] loop0: detected capacity change from 0 to 4096 [pid 5089] ioctl(4, LOOP_SET_FD, 3 [pid 5088] <... mkdir resumed>) = 0 [pid 5086] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5091] <... memfd_create resumed>) = 3 [pid 5090] ioctl(4, LOOP_SET_FD, 3 [pid 5089] <... ioctl resumed>) = 0 [pid 5088] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5090] <... ioctl resumed>) = 0 [pid 5089] close(3 [pid 5091] <... mmap resumed>) = 0x7f241a43b000 [pid 5087] <... mount resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5090] close(3 [pid 5089] mkdir("./file0", 0777 [pid 5087] <... openat resumed>) = 3 [pid 5087] chdir("./file0" [pid 5090] <... close resumed>) = 0 [pid 5089] <... mkdir resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5090] mkdir("./file0", 0777 [pid 5089] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 70.897019][ T5089] loop2: detected capacity change from 0 to 4096 [ 70.909710][ T5090] loop1: detected capacity change from 0 to 4096 [ 70.935583][ T5093] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5086] <... mount resumed>) = 0 [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5090] <... mkdir resumed>) = 0 [pid 5087] <... ioctl resumed>) = 0 [pid 5090] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5087] close(4 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5087] <... close resumed>) = 0 [pid 5086] <... openat resumed>) = 3 [pid 5087] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5086] chdir("./file0" [pid 5087] <... openat resumed>) = 4 [pid 5086] <... chdir resumed>) = 0 [pid 5087] unlink("./file1" [pid 5086] ioctl(4, LOOP_CLR_FD [pid 5088] <... mount resumed>) = 0 [pid 5087] <... unlink resumed>) = 0 [pid 5086] <... ioctl resumed>) = 0 [pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5087] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5086] close(4 [pid 5088] <... openat resumed>) = 3 [pid 5086] <... close resumed>) = 0 [pid 5088] chdir("./file0" [pid 5086] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5088] <... chdir resumed>) = 0 [pid 5088] ioctl(4, LOOP_CLR_FD [pid 5086] <... openat resumed>) = 4 [pid 5088] <... ioctl resumed>) = 0 [ 70.938288][ T5092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.975201][ T5094] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5086] unlink("./file1" [pid 5088] close(4) = 0 [pid 5088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5088] unlink("./file1" [pid 5086] <... unlink resumed>) = 0 [pid 5090] <... mount resumed>) = 0 [pid 5089] <... mount resumed>) = 0 [pid 5086] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5091] <... write resumed>) = 2097152 [pid 5090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5091] munmap(0x7f241a43b000, 2097152 [pid 5090] <... openat resumed>) = 3 [pid 5089] <... openat resumed>) = 3 [pid 5091] <... munmap resumed>) = 0 [pid 5090] chdir("./file0" [pid 5089] chdir("./file0" [pid 5091] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5090] <... chdir resumed>) = 0 [pid 5089] <... chdir resumed>) = 0 [pid 5091] <... openat resumed>) = 4 [pid 5090] ioctl(4, LOOP_CLR_FD [pid 5089] ioctl(4, LOOP_CLR_FD [pid 5088] <... unlink resumed>) = 0 [ 71.017103][ T5095] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.032565][ T5096] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5090] <... ioctl resumed>) = 0 [pid 5089] <... ioctl resumed>) = 0 [pid 5088] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5091] <... ioctl resumed>) = 0 [pid 5090] close(4 [pid 5089] close(4 [pid 5090] <... close resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5090] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5089] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5091] close(3 [pid 5089] <... openat resumed>) = 4 [pid 5091] <... close resumed>) = 0 [pid 5090] <... openat resumed>) = 4 [pid 5089] unlink("./file1" [pid 5091] mkdir("./file0", 0777 [pid 5090] unlink("./file1" [pid 5089] <... unlink resumed>) = 0 [pid 5091] <... mkdir resumed>) = 0 [pid 5089] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 71.077721][ T5091] loop3: detected capacity change from 0 to 4096 [pid 5091] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5090] <... unlink resumed>) = 0 [pid 5090] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5091] <... mount resumed>) = 0 [pid 5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5091] chdir("./file0") = 0 [pid 5091] ioctl(4, LOOP_CLR_FD) = 0 [pid 5091] close(4) = 0 [pid 5091] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5091] unlink("./file1") = 0 [ 71.216639][ T5097] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5091] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5087] <... pwritev resumed>) = 1114112 [pid 5087] exit_group(0) = ? [pid 5088] <... pwritev resumed>) = 1114112 [pid 5088] exit_group(0) = ? [pid 5086] <... pwritev resumed>) = 1114112 [pid 5086] exit_group(0) = ? [pid 5089] <... pwritev resumed>) = 1114112 [pid 5089] exit_group(0) = ? [pid 5087] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./1/binderfs") = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... pwritev resumed>) = 1114112 [pid 5090] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./1/file0", [pid 5089] +++ exited with 0 +++ [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] +++ exited with 0 +++ [pid 5065] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5063] fstat(4, [pid 5068] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5088] +++ exited with 0 +++ [pid 5068] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... openat resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, [pid 5068] fstat(3, [pid 5090] +++ exited with 0 +++ [pid 5065] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5091] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5065] lstat("./1/binderfs", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5091] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5091] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5068] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] rmdir("./1/file0" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./1/binderfs" [pid 5063] <... rmdir resumed>) = 0 [pid 5068] lstat("./1/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] unlink("./1/binderfs" [pid 5067] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 5067] fstat(3, [pid 5064] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./1" [pid 5067] getdents64(3, [pid 5064] fstat(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] mkdir("./2", 0777 [pid 5067] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] lstat("./1/binderfs", [pid 5064] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5067] unlink("./1/binderfs" [pid 5064] lstat("./1/binderfs", [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] close(3 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./1/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5098 ./strace-static-x86_64: Process 5098 attached [pid 5098] chdir("./2") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] memfd_create("syzkaller", 0) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./1/file0") = 0 [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./1" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5068] lstat("./1/file0", [pid 5065] mkdir("./2", 0777 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5099 [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5099 attached [pid 5068] close(4 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] chdir("./2" [pid 5091] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] <... chdir resumed>) = 0 [pid 5068] rmdir("./1/file0" [pid 5067] lstat("./1/file0", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5064] lstat("./1/file0", [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] <... prctl resumed>) = 0 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] getdents64(3, [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] setpgid(0, 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] <... setpgid resumed>) = 0 [pid 5068] close(3 [pid 5067] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5066] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5099] <... openat resumed>) = 3 [pid 5068] rmdir("./1" [pid 5067] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(4, [pid 5099] write(3, "1000", 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] <... write resumed>) = 4 [pid 5068] mkdir("./2", 0777 [pid 5067] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5099] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] fstat(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5099] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5099] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5099] <... symlink resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] close(4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] close(4 [pid 5099] memfd_create("syzkaller", 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5099] <... memfd_create resumed>) = 3 [pid 5068] close(3 [pid 5067] rmdir("./1/file0" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... close resumed>) = 0 [pid 5066] lstat("./1/binderfs", [pid 5064] rmdir("./1/file0" [pid 5099] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5066] unlink("./1/binderfs" [pid 5064] <... rmdir resumed>) = 0 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] <... write resumed>) = 2097152 [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5100 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5064] close(3 [pid 5067] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] rmdir("./1" [pid 5064] rmdir("./1"./strace-static-x86_64: Process 5100 attached [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5098] munmap(0x7f241a43b000, 2097152 [pid 5064] mkdir("./2", 0777 [pid 5100] chdir("./2" [pid 5098] <... munmap resumed>) = 0 [pid 5067] mkdir("./2", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5100] <... chdir resumed>) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5098] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5100] <... prctl resumed>) = 0 [pid 5099] <... write resumed>) = 2097152 [pid 5098] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5100] setpgid(0, 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5100] <... setpgid resumed>) = 0 [pid 5099] munmap(0x7f241a43b000, 2097152 [pid 5098] <... ioctl resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5099] <... munmap resumed>) = 0 [pid 5098] close(3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5101 [pid 5100] <... openat resumed>) = 3 [pid 5098] <... close resumed>) = 0 [pid 5067] close(3 [pid 5100] write(3, "1000", 4 [pid 5099] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5098] mkdir("./file0", 0777 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] <... mkdir resumed>) = 0 [pid 5100] <... write resumed>) = 4 [pid 5098] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5100] close(3 [pid 5099] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5101 attached [pid 5100] <... close resumed>) = 0 [pid 5101] chdir("./2" [pid 5100] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5102 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5101] <... chdir resumed>) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] <... symlink resumed>) = 0 [pid 5101] <... prctl resumed>) = 0 [pid 5101] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5102 attached [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5102] chdir("./2" [pid 5101] <... openat resumed>) = 3 [pid 5102] <... chdir resumed>) = 0 [pid 5101] write(3, "1000", 4 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5101] <... write resumed>) = 4 [pid 5102] <... prctl resumed>) = 0 [pid 5101] close(3 [pid 5102] setpgid(0, 0 [pid 5101] <... close resumed>) = 0 [pid 5102] <... setpgid resumed>) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs" [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] <... symlink resumed>) = 0 [pid 5102] <... openat resumed>) = 3 [pid 5101] memfd_create("syzkaller", 0 [pid 5100] memfd_create("syzkaller", 0 [pid 5099] <... ioctl resumed>) = 0 [pid 5102] write(3, "1000", 4 [pid 5101] <... memfd_create resumed>) = 3 [pid 5100] <... memfd_create resumed>) = 3 [pid 5102] <... write resumed>) = 4 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] close(3 [pid 5101] <... mmap resumed>) = 0x7f241a43b000 [pid 5100] <... mmap resumed>) = 0x7f241a43b000 [pid 5102] <... close resumed>) = 0 [pid 5066] lstat("./1/file0", [pid 5102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5102] memfd_create("syzkaller", 0) = 3 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] close(3 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] mkdir("./file0", 0777 [pid 5066] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5099] <... mkdir resumed>) = 0 [pid 5099] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [ 71.928523][ T5098] loop0: detected capacity change from 0 to 4096 [ 71.948996][ T5099] loop2: detected capacity change from 0 to 4096 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] <... mount resumed>) = 0 [pid 5066] rmdir("./1/file0" [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 5098] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5098] chdir("./file0" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5098] <... chdir resumed>) = 0 [pid 5066] close(3 [pid 5098] ioctl(4, LOOP_CLR_FD [pid 5066] <... close resumed>) = 0 [pid 5098] <... ioctl resumed>) = 0 [pid 5098] close(4 [pid 5066] rmdir("./1" [pid 5098] <... close resumed>) = 0 [pid 5098] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./2", 0777) = 0 [pid 5098] <... openat resumed>) = 4 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5098] unlink("./file1" [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.000879][ T5103] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] close(3 [pid 5099] <... mount resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] chdir("./file0" [pid 5098] <... unlink resumed>) = 0 [pid 5099] <... chdir resumed>) = 0 [pid 5099] ioctl(4, LOOP_CLR_FD [pid 5098] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5105 [pid 5099] <... ioctl resumed>) = 0 [pid 5099] close(4) = 0 [pid 5099] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5099] unlink("./file1"./strace-static-x86_64: Process 5105 attached [pid 5105] chdir("./2") = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] <... write resumed>) = 2097152 [pid 5105] write(3, "1000", 4 [pid 5101] <... write resumed>) = 2097152 [pid 5105] <... write resumed>) = 4 [pid 5101] munmap(0x7f241a43b000, 2097152 [pid 5105] close(3) = 0 [ 72.050293][ T5104] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] symlink("/dev/binderfs", "./binderfs" [pid 5101] <... munmap resumed>) = 0 [pid 5105] <... symlink resumed>) = 0 [pid 5102] munmap(0x7f241a43b000, 2097152 [pid 5101] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5105] memfd_create("syzkaller", 0 [pid 5101] <... openat resumed>) = 4 [pid 5105] <... memfd_create resumed>) = 3 [pid 5101] ioctl(4, LOOP_SET_FD, 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5102] <... munmap resumed>) = 0 [pid 5101] <... ioctl resumed>) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5105] <... mmap resumed>) = 0x7f241a43b000 [pid 5102] <... openat resumed>) = 4 [pid 5102] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5100] <... write resumed>) = 2097152 [pid 5100] munmap(0x7f241a43b000, 2097152 [pid 5099] <... unlink resumed>) = 0 [pid 5099] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5100] <... munmap resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3 [pid 5101] close(3) = 0 [pid 5101] mkdir("./file0", 0777 [pid 5102] close(3 [pid 5101] <... mkdir resumed>) = 0 [pid 5102] <... close resumed>) = 0 [pid 5101] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5102] mkdir("./file0", 0777) = 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5102] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 72.117099][ T5101] loop1: detected capacity change from 0 to 4096 [ 72.127006][ T5102] loop4: detected capacity change from 0 to 4096 [ 72.156995][ T5100] loop5: detected capacity change from 0 to 4096 [pid 5100] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5105] <... write resumed>) = 2097152 [pid 5102] <... mount resumed>) = 0 [pid 5101] <... mount resumed>) = 0 [pid 5100] <... mount resumed>) = 0 [pid 5105] munmap(0x7f241a43b000, 2097152 [pid 5102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5102] <... openat resumed>) = 3 [pid 5102] chdir("./file0") = 0 [pid 5105] <... munmap resumed>) = 0 [pid 5102] ioctl(4, LOOP_CLR_FD [pid 5105] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5102] <... ioctl resumed>) = 0 [pid 5101] <... openat resumed>) = 3 [pid 5100] <... openat resumed>) = 3 [pid 5105] <... openat resumed>) = 4 [pid 5102] close(4 [pid 5101] chdir("./file0" [pid 5100] chdir("./file0" [ 72.237303][ T5106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.238667][ T5107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.249303][ T5108] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... chdir resumed>) = 0 [pid 5100] <... chdir resumed>) = 0 [pid 5102] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5102] unlink("./file1" [pid 5101] ioctl(4, LOOP_CLR_FD [pid 5100] ioctl(4, LOOP_CLR_FD [pid 5101] <... ioctl resumed>) = 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5101] close(4 [pid 5100] close(4 [pid 5101] <... close resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5101] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5100] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5105] <... ioctl resumed>) = 0 [pid 5101] <... openat resumed>) = 4 [pid 5101] unlink("./file1" [pid 5105] close(3 [pid 5100] <... openat resumed>) = 4 [pid 5105] <... close resumed>) = 0 [pid 5100] unlink("./file1" [pid 5105] mkdir("./file0", 0777) = 0 [pid 5105] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5101] <... unlink resumed>) = 0 [pid 5101] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5100] <... unlink resumed>) = 0 [ 72.288139][ T5105] loop3: detected capacity change from 0 to 4096 [pid 5100] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5105] <... mount resumed>) = 0 [pid 5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5102] <... unlink resumed>) = 0 [pid 5102] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5105] chdir("./file0") = 0 [pid 5105] ioctl(4, LOOP_CLR_FD) = 0 [pid 5105] close(4) = 0 [pid 5105] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 72.355791][ T5109] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] unlink("./file1") = 0 [pid 5105] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5098] <... pwritev resumed>) = 1114112 [pid 5098] exit_group(0) = ? [pid 5099] <... pwritev resumed>) = 1114112 [pid 5099] exit_group(0) = ? [pid 5098] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./2/binderfs") = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... pwritev resumed>) = 1114112 [pid 5101] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./2/file0", [pid 5102] <... pwritev resumed>) = 1114112 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5102] exit_group(0) = ? [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] +++ exited with 0 +++ [pid 5100] <... pwritev resumed>) = 1114112 [pid 5099] +++ exited with 0 +++ [pid 5100] exit_group(0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5100] <... exit_group resumed>) = ? [pid 5063] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./2/binderfs") = 0 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5063] <... openat resumed>) = 4 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5065] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] rmdir("./2/file0") = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 5065] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./2/binderfs", [pid 5063] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./2/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./2") = 0 [pid 5063] mkdir("./3", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5110 ./strace-static-x86_64: Process 5110 attached [pid 5110] chdir("./3") = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4) = 4 [pid 5110] close(3) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5110] memfd_create("syzkaller", 0) = 3 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5105] <... pwritev resumed>) = 1114112 [pid 5102] +++ exited with 0 +++ [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5105] exit_group(0) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./2/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] lstat("./2/file0", [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(3, [pid 5065] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5065] fstat(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] fstat(4, [pid 5067] lstat("./2/binderfs", [pid 5065] getdents64(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./2/binderfs" [pid 5065] close(4 [pid 5064] getdents64(4, [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 72.886519][ T5102] syz-executor150 (5102) used greatest stack depth: 18688 bytes left [pid 5065] rmdir("./2/file0" [pid 5064] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./2/file0") = 0 [pid 5065] getdents64(3, [pid 5064] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5064] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] rmdir("./2") = 0 [pid 5064] rmdir("./2" [pid 5065] mkdir("./3", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] mkdir("./3", 0777 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] close(3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5105] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5111 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./2/file0", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(3, [pid 5111] chdir("./3" [pid 5068] fstat(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5112 [pid 5111] <... chdir resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5111] <... prctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5111] setpgid(0, 0 [pid 5067] fstat(4, [pid 5066] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... setpgid resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, [pid 5066] lstat("./2/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] lstat("./2/binderfs", [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] unlink("./2/binderfs"./strace-static-x86_64: Process 5112 attached [pid 5111] <... openat resumed>) = 3 [pid 5110] <... write resumed>) = 2097152 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] <... unlink resumed>) = 0 [pid 5111] write(3, "1000", 4 [pid 5110] munmap(0x7f241a43b000, 2097152 [pid 5068] unlink("./2/binderfs" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... write resumed>) = 4 [pid 5112] chdir("./3") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0 [pid 5110] <... munmap resumed>) = 0 [pid 5112] <... setpgid resumed>) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(4 [pid 5068] <... unlink resumed>) = 0 [pid 5111] close(3 [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5112] <... openat resumed>) = 3 [pid 5111] <... close resumed>) = 0 [pid 5110] <... openat resumed>) = 4 [pid 5067] rmdir("./2/file0" [pid 5112] write(3, "1000", 4 [pid 5111] symlink("/dev/binderfs", "./binderfs" [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5112] <... write resumed>) = 4 [pid 5111] <... symlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5112] close(3 [pid 5111] memfd_create("syzkaller", 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5112] <... close resumed>) = 0 [pid 5111] <... memfd_create resumed>) = 3 [pid 5067] close(3 [pid 5112] symlink("/dev/binderfs", "./binderfs" [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5110] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5112] <... symlink resumed>) = 0 [pid 5111] <... mmap resumed>) = 0x7f241a43b000 [pid 5110] close(3 [pid 5067] rmdir("./2" [pid 5112] memfd_create("syzkaller", 0 [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5110] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5112] <... memfd_create resumed>) = 3 [pid 5110] mkdir("./file0", 0777 [pid 5067] mkdir("./3", 0777 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5110] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5112] <... mmap resumed>) = 0x7f241a43b000 [pid 5110] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 73.044388][ T5110] loop0: detected capacity change from 0 to 4096 [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5113 ./strace-static-x86_64: Process 5113 attached [pid 5113] chdir("./3") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] <... umount2 resumed>) = 0 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3 [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5113] <... close resumed>) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] lstat("./2/file0", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5113] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./2/file0", [pid 5110] <... mount resumed>) = 0 [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] chdir("./file0" [pid 5068] <... openat resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5110] <... chdir resumed>) = 0 [pid 5068] fstat(4, [pid 5066] <... openat resumed>) = 4 [pid 5110] ioctl(4, LOOP_CLR_FD [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] fstat(4, [pid 5110] <... ioctl resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5110] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5110] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5110] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5110] unlink("./file1" [pid 5068] rmdir("./2/file0" [pid 5066] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [ 73.147950][ T5114] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] rmdir("./2/file0" [pid 5111] <... write resumed>) = 2097152 [pid 5068] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5112] <... write resumed>) = 2097152 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5110] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5110] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] rmdir("./2" [pid 5066] <... close resumed>) = 0 [pid 5111] munmap(0x7f241a43b000, 2097152) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] rmdir("./2" [pid 5112] munmap(0x7f241a43b000, 2097152 [pid 5068] mkdir("./3", 0777 [pid 5112] <... munmap resumed>) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... rmdir resumed>) = 0 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5111] <... openat resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] mkdir("./3", 0777 [pid 5112] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5111] ioctl(4, LOOP_SET_FD, 3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5112] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5115 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5111] <... ioctl resumed>) = 0 [pid 5111] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5116 [pid 5111] <... close resumed>) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5111] mkdir("./file0", 0777./strace-static-x86_64: Process 5116 attached [pid 5112] close(3 [pid 5111] <... mkdir resumed>) = 0 [pid 5116] chdir("./3" [pid 5112] <... close resumed>) = 0 [pid 5111] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5115 attached [pid 5116] <... chdir resumed>) = 0 [pid 5112] mkdir("./file0", 0777 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5115] chdir("./3" [pid 5112] <... mkdir resumed>) = 0 [pid 5116] <... prctl resumed>) = 0 [pid 5115] <... chdir resumed>) = 0 [pid 5112] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5116] setpgid(0, 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] <... setpgid resumed>) = 0 [ 73.256163][ T5111] loop2: detected capacity change from 0 to 4096 [ 73.265102][ T5112] loop1: detected capacity change from 0 to 4096 [pid 5115] <... prctl resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5115] setpgid(0, 0 [pid 5116] <... openat resumed>) = 3 [pid 5115] <... setpgid resumed>) = 0 [pid 5116] write(3, "1000", 4 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5116] <... write resumed>) = 4 [pid 5115] <... openat resumed>) = 3 [pid 5116] close(3 [pid 5115] write(3, "1000", 4 [pid 5116] <... close resumed>) = 0 [pid 5115] <... write resumed>) = 4 [pid 5113] <... write resumed>) = 2097152 [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5115] close(3 [pid 5113] munmap(0x7f241a43b000, 2097152 [pid 5116] <... symlink resumed>) = 0 [pid 5115] <... close resumed>) = 0 [pid 5116] memfd_create("syzkaller", 0 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 5113] <... munmap resumed>) = 0 [pid 5116] <... memfd_create resumed>) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5115] <... symlink resumed>) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5116] <... mmap resumed>) = 0x7f241a43b000 [pid 5115] memfd_create("syzkaller", 0 [pid 5113] <... openat resumed>) = 4 [pid 5111] <... mount resumed>) = 0 [pid 5115] <... memfd_create resumed>) = 3 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5113] <... ioctl resumed>) = 0 [pid 5111] <... openat resumed>) = 3 [pid 5115] <... mmap resumed>) = 0x7f241a43b000 [pid 5113] close(3 [pid 5112] <... mount resumed>) = 0 [pid 5111] chdir("./file0" [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5113] <... close resumed>) = 0 [pid 5112] close(4 [pid 5111] <... chdir resumed>) = 0 [pid 5113] mkdir("./file0", 0777 [pid 5112] <... close resumed>) = 0 [pid 5112] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5112] unlink("./file1" [pid 5111] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] <... mkdir resumed>) = 0 [pid 5111] close(4 [pid 5113] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5111] <... close resumed>) = 0 [pid 5111] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 73.364800][ T5117] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.388127][ T5113] loop4: detected capacity change from 0 to 4096 [ 73.388579][ T5118] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5111] unlink("./file1") = 0 [pid 5111] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5113] <... mount resumed>) = 0 [pid 5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./file0") = 0 [pid 5113] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] close(4 [pid 5112] <... unlink resumed>) = 0 [pid 5113] <... close resumed>) = 0 [ 73.474481][ T5119] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5112] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5113] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5113] unlink("./file1" [pid 5116] <... write resumed>) = 2097152 [pid 5116] munmap(0x7f241a43b000, 2097152) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5113] <... unlink resumed>) = 0 [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5115] <... write resumed>) = 2097152 [pid 5113] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5116] <... ioctl resumed>) = 0 [pid 5115] munmap(0x7f241a43b000, 2097152) = 0 [pid 5115] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5115] ioctl(4, LOOP_SET_FD, 3 [pid 5116] close(3) = 0 [pid 5115] <... ioctl resumed>) = 0 [pid 5116] mkdir("./file0", 0777 [pid 5115] close(3 [pid 5116] <... mkdir resumed>) = 0 [pid 5115] <... close resumed>) = 0 [pid 5116] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5115] mkdir("./file0", 0777) = 0 [ 73.588430][ T5116] loop3: detected capacity change from 0 to 4096 [ 73.628056][ T5115] loop5: detected capacity change from 0 to 4096 [pid 5115] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5110] <... pwritev resumed>) = 1114112 [pid 5110] exit_group(0 [pid 5115] <... mount resumed>) = 0 [pid 5115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5110] <... exit_group resumed>) = ? [pid 5115] <... openat resumed>) = 3 [pid 5115] chdir("./file0") = 0 [pid 5116] <... mount resumed>) = 0 [pid 5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5115] ioctl(4, LOOP_CLR_FD [pid 5116] <... openat resumed>) = 3 [pid 5115] <... ioctl resumed>) = 0 [pid 5116] chdir("./file0" [pid 5115] close(4 [pid 5116] <... chdir resumed>) = 0 [pid 5115] <... close resumed>) = 0 [pid 5116] ioctl(4, LOOP_CLR_FD [pid 5115] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5116] <... ioctl resumed>) = 0 [pid 5116] close(4 [pid 5115] <... openat resumed>) = 4 [pid 5116] <... close resumed>) = 0 [pid 5115] unlink("./file1" [pid 5116] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5115] <... unlink resumed>) = 0 [pid 5116] unlink("./file1" [ 73.691650][ T5121] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.707711][ T5120] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5115] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5116] <... unlink resumed>) = 0 [pid 5116] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5111] <... pwritev resumed>) = 1114112 [pid 5112] <... pwritev resumed>) = 1114112 [pid 5111] exit_group(0 [pid 5112] exit_group(0 [pid 5111] <... exit_group resumed>) = ? [pid 5112] <... exit_group resumed>) = ? [pid 5110] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5113] <... pwritev resumed>) = 1114112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5113] exit_group(0 [pid 5063] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./3/binderfs") = 0 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5111] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5065] fstat(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./3/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./3/binderfs", [pid 5065] lstat("./3/binderfs", [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./3/binderfs" [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./3/binderfs" [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./3/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./3") = 0 [pid 5063] mkdir("./4", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5122 ./strace-static-x86_64: Process 5122 attached [pid 5122] chdir("./4" [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = 0 [pid 5064] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] +++ exited with 0 +++ [pid 5122] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] setpgid(0, 0 [pid 5067] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5122] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5122] write(3, "1000", 4 [pid 5067] fstat(3, [pid 5122] <... write resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5122] close(3 [pid 5067] getdents64(3, [pid 5122] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5122] symlink("/dev/binderfs", "./binderfs" [pid 5115] <... pwritev resumed>) = 1114112 [pid 5067] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5122] <... symlink resumed>) = 0 [pid 5115] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5122] memfd_create("syzkaller", 0 [pid 5115] <... exit_group resumed>) = ? [pid 5067] lstat("./3/binderfs", [pid 5065] lstat("./3/file0", [pid 5064] fstat(4, [pid 5122] <... memfd_create resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./3/binderfs" [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5122] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] fstat(4, [pid 5064] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] rmdir("./3/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] rmdir("./3/file0" [pid 5064] rmdir("./3" [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] mkdir("./4", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5065] rmdir("./3" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./4", 0777 [pid 5064] close(3 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5123 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 ./strace-static-x86_64: Process 5123 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5123] chdir("./4") = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5124 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5124 attached [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5124] chdir("./4" [pid 5123] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5123] write(3, "1000", 4 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5123] <... write resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5124] <... prctl resumed>) = 0 [pid 5123] close(3 [pid 5067] lstat("./3/file0", [pid 5123] <... close resumed>) = 0 [pid 5124] setpgid(0, 0 [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5124] <... setpgid resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5123] <... symlink resumed>) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... openat resumed>) = 3 [pid 5123] memfd_create("syzkaller", 0 [pid 5116] <... pwritev resumed>) = 1114112 [pid 5124] write(3, "1000", 4 [pid 5123] <... memfd_create resumed>) = 3 [pid 5116] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5124] <... write resumed>) = 4 [pid 5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5116] <... exit_group resumed>) = ? [pid 5067] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5124] close(3 [pid 5123] <... mmap resumed>) = 0x7f241a43b000 [pid 5124] <... close resumed>) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5122] <... write resumed>) = 2097152 [pid 5067] getdents64(4, [pid 5122] munmap(0x7f241a43b000, 2097152 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5122] <... munmap resumed>) = 0 [pid 5067] getdents64(4, [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5122] <... openat resumed>) = 4 [pid 5067] close(4 [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... close resumed>) = 0 [pid 5122] <... ioctl resumed>) = 0 [pid 5067] rmdir("./3/file0" [pid 5122] close(3 [pid 5115] +++ exited with 0 +++ [pid 5122] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5067] <... rmdir resumed>) = 0 [pid 5122] mkdir("./file0", 0777 [pid 5067] getdents64(3, [pid 5123] <... write resumed>) = 2097152 [pid 5122] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5123] munmap(0x7f241a43b000, 2097152 [pid 5068] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] close(3 [pid 5123] <... munmap resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./3" [pid 5123] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5123] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5067] mkdir("./4", 0777 [pid 5123] ioctl(4, LOOP_SET_FD, 3 [ 74.309298][ T5122] loop0: detected capacity change from 0 to 4096 [pid 5068] fstat(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5123] <... ioctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5123] close(3 [pid 5068] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5123] <... close resumed>) = 0 [pid 5116] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5123] mkdir("./file0", 0777 [pid 5068] lstat("./3/binderfs", [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5123] <... mkdir resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5123] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] unlink("./3/binderfs" [pid 5067] <... close resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5124] <... write resumed>) = 2097152 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... restart_syscall resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5126 [pid 5124] munmap(0x7f241a43b000, 2097152 [pid 5066] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... munmap resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5126 attached [pid 5124] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] lstat("./3/binderfs", [pid 5126] chdir("./4" [pid 5124] <... openat resumed>) = 4 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5126] <... chdir resumed>) = 0 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [ 74.355528][ T5123] loop1: detected capacity change from 0 to 4096 [pid 5066] unlink("./3/binderfs" [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... unlink resumed>) = 0 [pid 5122] <... mount resumed>) = 0 [pid 5126] <... prctl resumed>) = 0 [pid 5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] <... openat resumed>) = 3 [pid 5122] chdir("./file0") = 0 [pid 5122] ioctl(4, LOOP_CLR_FD) = 0 [pid 5122] close(4 [pid 5126] setpgid(0, 0 [pid 5122] <... close resumed>) = 0 [pid 5126] <... setpgid resumed>) = 0 [pid 5122] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] <... openat resumed>) = 4 [pid 5122] unlink("./file1" [pid 5126] <... openat resumed>) = 3 [pid 5126] write(3, "1000", 4) = 4 [pid 5123] <... mount resumed>) = 0 [pid 5126] close(3 [pid 5123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5126] <... close resumed>) = 0 [pid 5123] <... openat resumed>) = 3 [pid 5126] symlink("/dev/binderfs", "./binderfs" [pid 5123] chdir("./file0" [pid 5124] <... ioctl resumed>) = 0 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file0", 0777) = 0 [pid 5124] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5126] <... symlink resumed>) = 0 [pid 5123] <... chdir resumed>) = 0 [pid 5126] memfd_create("syzkaller", 0 [pid 5123] ioctl(4, LOOP_CLR_FD [pid 5126] <... memfd_create resumed>) = 3 [pid 5123] <... ioctl resumed>) = 0 [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5123] close(4 [pid 5126] <... mmap resumed>) = 0x7f241a43b000 [pid 5123] <... close resumed>) = 0 [pid 5123] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 74.403307][ T5124] loop2: detected capacity change from 0 to 4096 [ 74.411122][ T5125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.434798][ T5127] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5123] unlink("./file1" [pid 5066] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5122] <... unlink resumed>) = 0 [pid 5068] lstat("./3/file0", [pid 5122] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5123] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5123] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] fstat(4, [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(4, [pid 5066] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5124] <... openat resumed>) = 3 [pid 5068] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5124] chdir("./file0" [pid 5068] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5124] <... chdir resumed>) = 0 [pid 5068] rmdir("./3/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5124] ioctl(4, LOOP_CLR_FD [pid 5066] getdents64(4, [pid 5124] <... ioctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5124] close(4 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5124] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5124] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5124] <... openat resumed>) = 4 [pid 5068] close(3 [pid 5066] <... close resumed>) = 0 [pid 5124] unlink("./file1" [pid 5066] rmdir("./3/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./3" [pid 5066] close(3) = 0 [pid 5066] rmdir("./3" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] mkdir("./4", 0777 [pid 5066] mkdir("./4", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5066] close(3 [pid 5068] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5129 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5130 ./strace-static-x86_64: Process 5129 attached [pid 5129] chdir("./4") = 0 ./strace-static-x86_64: Process 5130 attached [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5130] chdir("./4" [pid 5129] <... prctl resumed>) = 0 [pid 5124] <... unlink resumed>) = 0 [ 74.517669][ T5128] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5130] <... chdir resumed>) = 0 [pid 5129] setpgid(0, 0 [pid 5124] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5129] <... setpgid resumed>) = 0 [pid 5130] <... prctl resumed>) = 0 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] setpgid(0, 0 [pid 5129] <... openat resumed>) = 3 [pid 5130] <... setpgid resumed>) = 0 [pid 5129] write(3, "1000", 4 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5129] <... write resumed>) = 4 [pid 5130] <... openat resumed>) = 3 [pid 5129] close(3 [pid 5130] write(3, "1000", 4 [pid 5129] <... close resumed>) = 0 [pid 5130] <... write resumed>) = 4 [pid 5129] symlink("/dev/binderfs", "./binderfs" [pid 5130] close(3 [pid 5129] <... symlink resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5129] memfd_create("syzkaller", 0 [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 5129] <... memfd_create resumed>) = 3 [pid 5130] <... symlink resumed>) = 0 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5130] memfd_create("syzkaller", 0 [pid 5129] <... mmap resumed>) = 0x7f241a43b000 [pid 5130] <... memfd_create resumed>) = 3 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5126] <... write resumed>) = 2097152 [pid 5126] munmap(0x7f241a43b000, 2097152 [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5126] <... munmap resumed>) = 0 [pid 5126] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5126] ioctl(4, LOOP_SET_FD, 3 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5126] <... ioctl resumed>) = 0 [pid 5126] close(3) = 0 [pid 5126] mkdir("./file0", 0777) = 0 [ 74.647690][ T5126] loop4: detected capacity change from 0 to 4096 [pid 5126] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5129] <... write resumed>) = 2097152 [pid 5130] <... write resumed>) = 2097152 [pid 5126] <... mount resumed>) = 0 [pid 5126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5126] chdir("./file0") = 0 [pid 5126] ioctl(4, LOOP_CLR_FD) = 0 [pid 5126] close(4) = 0 [pid 5126] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5126] unlink("./file1" [pid 5129] munmap(0x7f241a43b000, 2097152 [pid 5130] munmap(0x7f241a43b000, 2097152) = 0 [ 74.746323][ T5131] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5129] <... munmap resumed>) = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5129] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5130] <... openat resumed>) = 4 [pid 5129] <... openat resumed>) = 4 [pid 5130] ioctl(4, LOOP_SET_FD, 3 [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 5130] <... ioctl resumed>) = 0 [pid 5126] <... unlink resumed>) = 0 [pid 5126] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5130] close(3 [pid 5129] <... ioctl resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5129] close(3 [pid 5130] mkdir("./file0", 0777 [pid 5129] <... close resumed>) = 0 [pid 5129] mkdir("./file0", 0777 [pid 5130] <... mkdir resumed>) = 0 [pid 5130] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5129] <... mkdir resumed>) = 0 [ 74.819155][ T5130] loop3: detected capacity change from 0 to 4096 [ 74.825781][ T5129] loop5: detected capacity change from 0 to 4096 [pid 5129] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5122] <... pwritev resumed>) = 1114112 [pid 5122] exit_group(0) = ? [pid 5130] <... mount resumed>) = 0 [pid 5130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5130] chdir("./file0") = 0 [pid 5130] ioctl(4, LOOP_CLR_FD) = 0 [pid 5130] close(4) = 0 [pid 5130] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5130] unlink("./file1" [pid 5123] <... pwritev resumed>) = 1114112 [pid 5123] exit_group(0) = ? [ 74.906950][ T5132] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5130] <... unlink resumed>) = 0 [pid 5130] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5129] <... mount resumed>) = 0 [pid 5124] <... pwritev resumed>) = 1114112 [pid 5124] exit_group(0) = ? [pid 5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5129] chdir("./file0") = 0 [pid 5129] ioctl(4, LOOP_CLR_FD) = 0 [pid 5129] close(4) = 0 [pid 5129] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 74.948862][ T5133] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5129] unlink("./file1") = 0 [pid 5129] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5124] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./4/binderfs") = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5123] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(3, [pid 5063] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./4/binderfs", [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] lstat("./4/binderfs", [pid 5065] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] unlink("./4/binderfs" [pid 5065] getdents64(4, [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./4/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./4/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./4") = 0 [pid 5065] mkdir("./5", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5134 ./strace-static-x86_64: Process 5134 attached [pid 5134] chdir("./5") = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5134] setpgid(0, 0) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./4/file0", [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./4/file0" [pid 5064] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5064] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] fstat(4, [pid 5063] close(3) = 0 [pid 5063] rmdir("./4" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] mkdir("./5", 0777 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] close(4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] rmdir("./4/file0" [pid 5063] close(3 [pid 5130] <... pwritev resumed>) = 1114112 [pid 5126] <... pwritev resumed>) = 1114112 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5130] exit_group(0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5130] <... exit_group resumed>) = ? [pid 5126] exit_group(0 [pid 5064] getdents64(3, ./strace-static-x86_64: Process 5135 attached [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5135 [pid 5126] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5135] chdir("./5" [pid 5064] close(3 [pid 5135] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] <... write resumed>) = 2097152 [pid 5135] <... prctl resumed>) = 0 [pid 5134] munmap(0x7f241a43b000, 2097152 [pid 5064] rmdir("./4" [pid 5135] setpgid(0, 0 [pid 5134] <... munmap resumed>) = 0 [pid 5135] <... setpgid resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5134] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] mkdir("./5", 0777 [pid 5135] <... openat resumed>) = 3 [pid 5135] write(3, "1000", 4 [pid 5134] <... openat resumed>) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 5135] <... write resumed>) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5135] close(3 [pid 5064] <... openat resumed>) = 3 [pid 5135] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5135] <... symlink resumed>) = 0 [pid 5064] close(3 [pid 5135] memfd_create("syzkaller", 0 [pid 5134] <... ioctl resumed>) = 0 [pid 5135] <... memfd_create resumed>) = 3 [pid 5134] close(3 [pid 5064] <... close resumed>) = 0 [pid 5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5135] <... mmap resumed>) = 0x7f241a43b000 [pid 5134] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 5136 attached [pid 5136] chdir("./5") = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3 [pid 5134] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5130] +++ exited with 0 +++ [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5136 [pid 5136] <... close resumed>) = 0 [pid 5126] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [ 75.392799][ T5134] loop2: detected capacity change from 0 to 4096 [pid 5136] memfd_create("syzkaller", 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5136] <... memfd_create resumed>) = 3 [pid 5067] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5134] <... mount resumed>) = 0 [pid 5129] <... pwritev resumed>) = 1114112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5134] chdir("./file0" [pid 5066] fstat(3, [pid 5134] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5134] ioctl(4, LOOP_CLR_FD [pid 5066] getdents64(3, [pid 5134] <... ioctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5134] close(4 [pid 5129] exit_group(0 [pid 5066] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... close resumed>) = 0 [pid 5129] <... exit_group resumed>) = ? [pid 5067] fstat(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5135] <... write resumed>) = 2097152 [pid 5134] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] lstat("./4/binderfs", [pid 5134] <... openat resumed>) = 4 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5134] unlink("./file1" [pid 5066] unlink("./4/binderfs" [pid 5135] munmap(0x7f241a43b000, 2097152 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [ 75.461696][ T5137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(3, [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] <... munmap resumed>) = 0 [pid 5134] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5135] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5134] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5135] ioctl(4, LOOP_SET_FD, 3 [pid 5067] lstat("./4/binderfs", [pid 5135] <... ioctl resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./4/binderfs" [pid 5135] close(3) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5135] mkdir("./file0", 0777 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] <... mkdir resumed>) = 0 [pid 5135] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [ 75.538843][ T5135] loop0: detected capacity change from 0 to 4096 [pid 5066] rmdir("./4/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./4") = 0 [pid 5066] mkdir("./5", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5139 [pid 5135] <... mount resumed>) = 0 [pid 5135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5139 attached ) = 3 [pid 5139] chdir("./5" [pid 5136] <... write resumed>) = 2097152 [pid 5139] <... chdir resumed>) = 0 [pid 5135] chdir("./file0" [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5135] <... chdir resumed>) = 0 [pid 5139] setpgid(0, 0 [pid 5135] ioctl(4, LOOP_CLR_FD [pid 5139] <... setpgid resumed>) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5135] <... ioctl resumed>) = 0 [pid 5139] <... openat resumed>) = 3 [pid 5136] munmap(0x7f241a43b000, 2097152 [pid 5139] write(3, "1000", 4 [pid 5136] <... munmap resumed>) = 0 [pid 5135] close(4 [pid 5129] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = 0 [pid 5139] <... write resumed>) = 4 [pid 5135] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5139] close(3 [pid 5136] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5135] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] <... close resumed>) = 0 [pid 5136] <... openat resumed>) = 4 [pid 5139] symlink("/dev/binderfs", "./binderfs" [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5135] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5139] <... symlink resumed>) = 0 [ 75.627989][ T5138] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5135] unlink("./file1" [pid 5067] lstat("./4/file0", [pid 5139] memfd_create("syzkaller", 0 [pid 5136] <... ioctl resumed>) = 0 [pid 5068] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5139] <... memfd_create resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5139] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] fstat(3, [pid 5067] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(4, [pid 5068] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] getdents64(4, [pid 5068] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] close(3 [pid 5135] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5136] <... close resumed>) = 0 [pid 5135] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] lstat("./4/binderfs", [pid 5067] getdents64(4, [pid 5136] mkdir("./file0", 0777 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./4/binderfs") = 0 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5136] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 75.677681][ T5136] loop1: detected capacity change from 0 to 4096 [pid 5067] close(4) = 0 [pid 5067] rmdir("./4/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./4") = 0 [pid 5067] mkdir("./5", 0777 [pid 5139] <... write resumed>) = 2097152 [pid 5136] <... mount resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5136] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5139] munmap(0x7f241a43b000, 2097152 [pid 5136] chdir("./file0" [pid 5068] <... umount2 resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5136] <... chdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5136] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 5136] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5136] close(4 [pid 5068] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5136] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5139] <... munmap resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] fstat(4, [pid 5139] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5136] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5141 [pid 5136] unlink("./file1" [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./4/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./4") = 0 [pid 5068] mkdir("./5", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [ 75.771757][ T5140] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5142 attached ./strace-static-x86_64: Process 5141 attached [pid 5139] <... openat resumed>) = 4 [pid 5142] chdir("./5" [pid 5141] chdir("./5" [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5142 [pid 5142] <... chdir resumed>) = 0 [pid 5141] <... chdir resumed>) = 0 [pid 5136] <... unlink resumed>) = 0 [pid 5136] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5139] <... ioctl resumed>) = 0 [pid 5142] <... prctl resumed>) = 0 [pid 5141] <... prctl resumed>) = 0 [pid 5139] close(3 [pid 5142] setpgid(0, 0 [pid 5141] setpgid(0, 0 [pid 5139] <... close resumed>) = 0 [pid 5142] <... setpgid resumed>) = 0 [pid 5141] <... setpgid resumed>) = 0 [pid 5139] mkdir("./file0", 0777 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5139] <... mkdir resumed>) = 0 [pid 5142] <... openat resumed>) = 3 [pid 5139] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5142] write(3, "1000", 4) = 4 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5142] close(3) = 0 [pid 5141] <... openat resumed>) = 3 [pid 5142] symlink("/dev/binderfs", "./binderfs" [pid 5141] write(3, "1000", 4 [pid 5142] <... symlink resumed>) = 0 [pid 5141] <... write resumed>) = 4 [pid 5142] memfd_create("syzkaller", 0 [pid 5141] close(3 [pid 5142] <... memfd_create resumed>) = 3 [pid 5141] <... close resumed>) = 0 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5141] symlink("/dev/binderfs", "./binderfs" [pid 5142] <... mmap resumed>) = 0x7f241a43b000 [pid 5141] <... symlink resumed>) = 0 [ 75.848839][ T5139] loop3: detected capacity change from 0 to 4096 [pid 5141] memfd_create("syzkaller", 0) = 3 [pid 5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] <... pwritev resumed>) = 1114112 [pid 5141] <... mmap resumed>) = 0x7f241a43b000 [pid 5139] <... mount resumed>) = 0 [pid 5134] exit_group(0 [pid 5139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5134] <... exit_group resumed>) = ? [pid 5139] <... openat resumed>) = 3 [pid 5139] chdir("./file0") = 0 [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 75.907015][ T5143] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5139] ioctl(4, LOOP_CLR_FD) = 0 [pid 5139] close(4) = 0 [pid 5139] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5139] unlink("./file1") = 0 [pid 5139] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5141] <... write resumed>) = 2097152 [pid 5141] munmap(0x7f241a43b000, 2097152 [pid 5134] +++ exited with 0 +++ [pid 5141] <... munmap resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5141] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5141] <... openat resumed>) = 4 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5141] ioctl(4, LOOP_SET_FD, 3 [pid 5142] <... write resumed>) = 2097152 [pid 5065] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] munmap(0x7f241a43b000, 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./5/binderfs", [pid 5142] <... munmap resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] unlink("./5/binderfs" [pid 5142] <... openat resumed>) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 5142] ioctl(4, LOOP_SET_FD, 3 [pid 5141] <... ioctl resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] close(3) = 0 [pid 5141] mkdir("./file0", 0777) = 0 [pid 5141] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5142] <... ioctl resumed>) = 0 [ 76.055705][ T5141] loop4: detected capacity change from 0 to 4096 [ 76.087993][ T5142] loop5: detected capacity change from 0 to 4096 [pid 5142] close(3) = 0 [pid 5135] <... pwritev resumed>) = 1114112 [pid 5142] mkdir("./file0", 0777 [pid 5135] exit_group(0 [pid 5142] <... mkdir resumed>) = 0 [pid 5135] <... exit_group resumed>) = ? [pid 5142] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... umount2 resumed>) = 0 [pid 5141] <... mount resumed>) = 0 [pid 5141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5141] chdir("./file0") = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5141] <... ioctl resumed>) = 0 [pid 5065] lstat("./5/file0", [pid 5141] close(4 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5142] <... mount resumed>) = 0 [pid 5141] <... close resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5141] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5142] <... openat resumed>) = 3 [pid 5141] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5142] chdir("./file0" [pid 5141] unlink("./file1" [pid 5065] <... openat resumed>) = 4 [pid 5142] <... chdir resumed>) = 0 [pid 5065] fstat(4, [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5142] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5142] close(4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5142] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5142] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5142] <... openat resumed>) = 4 [pid 5065] rmdir("./5/file0" [ 76.155992][ T5144] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.183860][ T5145] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5142] unlink("./file1" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./5") = 0 [pid 5142] <... unlink resumed>) = 0 [pid 5141] <... unlink resumed>) = 0 [pid 5065] mkdir("./6", 0777 [pid 5142] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5141] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5135] +++ exited with 0 +++ [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- ./strace-static-x86_64: Process 5146 attached [pid 5063] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] chdir("./6" [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5146 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5146] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... openat resumed>) = 3 [pid 5146] <... prctl resumed>) = 0 [pid 5063] fstat(3, [pid 5146] setpgid(0, 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5146] <... setpgid resumed>) = 0 [pid 5063] getdents64(3, [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5146] <... openat resumed>) = 3 [pid 5063] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5146] <... write resumed>) = 4 [pid 5063] lstat("./5/binderfs", [pid 5146] close(3 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5146] <... close resumed>) = 0 [pid 5063] unlink("./5/binderfs" [pid 5146] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] <... symlink resumed>) = 0 [pid 5146] memfd_create("syzkaller", 0) = 3 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5136] <... pwritev resumed>) = 1114112 [pid 5146] <... mmap resumed>) = 0x7f241a43b000 [pid 5136] exit_group(0) = ? [pid 5139] <... pwritev resumed>) = 1114112 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5139] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./5/file0") = 0 [pid 5063] getdents64(3, [pid 5146] <... write resumed>) = 2097152 [pid 5139] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] close(3 [pid 5136] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5066] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./5" [pid 5066] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] <... openat resumed>) = 3 [pid 5064] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5066] fstat(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./6", 0777 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5066] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(3, [pid 5146] munmap(0x7f241a43b000, 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./5/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5146] <... munmap resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] getdents64(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5066] unlink("./5/binderfs" [pid 5146] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5146] <... openat resumed>) = 4 [pid 5142] <... pwritev resumed>) = 1114112 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5064] lstat("./5/binderfs", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./5/binderfs" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5147 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] exit_group(0) = ? [pid 5146] <... ioctl resumed>) = 0 [pid 5146] close(3) = 0 [pid 5146] mkdir("./file0", 0777) = 0 [pid 5146] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5147 attached [pid 5147] chdir("./6") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5147] write(3, "1000", 4 [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 76.546672][ T5146] loop2: detected capacity change from 0 to 4096 [pid 5064] lstat("./5/file0", [pid 5147] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5147] close(3 [pid 5066] lstat("./5/file0", [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] <... close resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] symlink("/dev/binderfs", "./binderfs" [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5147] <... symlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5147] memfd_create("syzkaller", 0 [pid 5066] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 4 [pid 5147] <... memfd_create resumed>) = 3 [pid 5066] <... openat resumed>) = 4 [pid 5064] fstat(4, [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] fstat(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5064] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, [pid 5064] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5146] <... mount resumed>) = 0 [pid 5142] +++ exited with 0 +++ [pid 5066] close(4 [pid 5064] rmdir("./5/file0" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] <... close resumed>) = 0 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] rmdir("./5/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5146] <... openat resumed>) = 3 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5146] chdir("./file0" [pid 5066] getdents64(3, [pid 5064] getdents64(3, [pid 5146] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5146] ioctl(4, LOOP_CLR_FD [pid 5068] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5064] close(3 [pid 5146] <... ioctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5146] close(4 [pid 5068] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./5" [pid 5064] rmdir("./5" [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5146] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5146] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] fstat(3, [pid 5066] mkdir("./6", 0777 [pid 5064] mkdir("./6", 0777 [pid 5146] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5146] unlink("./file1" [pid 5141] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5141] exit_group(0 [ 76.638672][ T5148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5141] <... exit_group resumed>) = ? [pid 5068] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] lstat("./5/binderfs", [pid 5066] close(3 [pid 5064] close(3 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] unlink("./5/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5149 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5150 [pid 5146] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5150 attached [pid 5150] chdir("./6" [pid 5146] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5150] <... chdir resumed>) = 0 [pid 5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5150] setpgid(0, 0) = 0 [pid 5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5150] write(3, "1000", 4) = 4 [pid 5150] close(3) = 0 [pid 5150] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5150] memfd_create("syzkaller", 0 [pid 5147] <... write resumed>) = 2097152 [pid 5150] <... memfd_create resumed>) = 3 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5147] munmap(0x7f241a43b000, 2097152) = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5147] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5149 attached [pid 5149] chdir("./6") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4 [pid 5068] <... umount2 resumed>) = 0 [pid 5147] <... ioctl resumed>) = 0 [pid 5149] <... write resumed>) = 4 [pid 5147] close(3) = 0 [pid 5147] mkdir("./file0", 0777 [pid 5149] close(3 [pid 5147] <... mkdir resumed>) = 0 [pid 5147] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5149] memfd_create("syzkaller", 0 [pid 5068] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5149] <... memfd_create resumed>) = 3 [pid 5068] <... openat resumed>) = 4 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 76.744016][ T5147] loop0: detected capacity change from 0 to 4096 [pid 5068] fstat(4, [pid 5149] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./5/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./5") = 0 [pid 5068] mkdir("./6", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5152 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5152 attached [pid 5147] <... mount resumed>) = 0 [pid 5152] chdir("./6" [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5152] <... chdir resumed>) = 0 [pid 5147] <... openat resumed>) = 3 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5147] chdir("./file0" [pid 5152] <... prctl resumed>) = 0 [pid 5147] <... chdir resumed>) = 0 [pid 5152] setpgid(0, 0 [pid 5147] ioctl(4, LOOP_CLR_FD [pid 5152] <... setpgid resumed>) = 0 [pid 5147] <... ioctl resumed>) = 0 [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5147] close(4 [pid 5152] <... openat resumed>) = 3 [pid 5147] <... close resumed>) = 0 [pid 5152] write(3, "1000", 4 [pid 5147] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5152] <... write resumed>) = 4 [pid 5147] <... openat resumed>) = 4 [pid 5152] close(3 [pid 5147] unlink("./file1" [pid 5152] <... close resumed>) = 0 [pid 5152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5141] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5150] <... write resumed>) = 2097152 [pid 5067] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5150] munmap(0x7f241a43b000, 2097152 [pid 5067] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5150] <... munmap resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 76.830799][ T5151] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(3, [pid 5150] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5150] ioctl(4, LOOP_SET_FD, 3 [pid 5147] <... unlink resumed>) = 0 [pid 5067] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5147] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./5/binderfs") = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] <... ioctl resumed>) = 0 [pid 5150] close(3) = 0 [pid 5150] mkdir("./file0", 0777) = 0 [ 76.893506][ T5150] loop1: detected capacity change from 0 to 4096 [pid 5150] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5149] <... write resumed>) = 2097152 [pid 5149] munmap(0x7f241a43b000, 2097152) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] <... write resumed>) = 2097152 [pid 5149] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5152] munmap(0x7f241a43b000, 2097152 [pid 5149] close(3 [pid 5067] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5152] <... munmap resumed>) = 0 [pid 5149] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [ 76.973005][ T5149] loop3: detected capacity change from 0 to 4096 [pid 5152] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5150] <... mount resumed>) = 0 [pid 5149] mkdir("./file0", 0777 [pid 5067] fstat(4, [pid 5150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5152] <... openat resumed>) = 4 [pid 5150] <... openat resumed>) = 3 [pid 5150] chdir("./file0") = 0 [pid 5149] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5152] ioctl(4, LOOP_SET_FD, 3 [pid 5150] ioctl(4, LOOP_CLR_FD) = 0 [pid 5067] getdents64(4, [pid 5150] close(4) = 0 [pid 5150] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5150] unlink("./file1" [pid 5152] <... ioctl resumed>) = 0 [pid 5149] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5152] close(3 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5152] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5152] mkdir("./file0", 0777 [pid 5067] rmdir("./5/file0" [pid 5152] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5152] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 77.021989][ T5153] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.039607][ T5152] loop5: detected capacity change from 0 to 4096 [pid 5150] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5150] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5149] <... mount resumed>) = 0 [pid 5067] close(3 [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... close resumed>) = 0 [pid 5149] <... openat resumed>) = 3 [pid 5149] chdir("./file0" [pid 5067] rmdir("./5" [pid 5149] <... chdir resumed>) = 0 [pid 5149] ioctl(4, LOOP_CLR_FD [pid 5067] <... rmdir resumed>) = 0 [pid 5149] <... ioctl resumed>) = 0 [pid 5067] mkdir("./6", 0777 [pid 5149] close(4) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5149] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5149] <... openat resumed>) = 4 [pid 5146] <... pwritev resumed>) = 1114112 [pid 5067] <... openat resumed>) = 3 [pid 5149] unlink("./file1" [pid 5146] exit_group(0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5146] <... exit_group resumed>) = ? [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5156 ./strace-static-x86_64: Process 5156 attached [ 77.097300][ T5154] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5156] chdir("./6" [pid 5149] <... unlink resumed>) = 0 [pid 5156] <... chdir resumed>) = 0 [pid 5152] <... mount resumed>) = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5149] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5156] <... prctl resumed>) = 0 [pid 5152] <... openat resumed>) = 3 [pid 5152] chdir("./file0" [pid 5156] setpgid(0, 0) = 0 [pid 5152] <... chdir resumed>) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5152] ioctl(4, LOOP_CLR_FD [pid 5156] <... openat resumed>) = 3 [pid 5152] <... ioctl resumed>) = 0 [pid 5156] write(3, "1000", 4 [pid 5152] close(4 [pid 5156] <... write resumed>) = 4 [pid 5152] <... close resumed>) = 0 [pid 5156] close(3 [pid 5152] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5156] <... close resumed>) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs" [pid 5152] <... openat resumed>) = 4 [pid 5156] <... symlink resumed>) = 0 [pid 5152] unlink("./file1" [pid 5156] memfd_create("syzkaller", 0) = 3 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 77.158696][ T5155] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5152] <... unlink resumed>) = 0 [pid 5152] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5146] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./6/binderfs") = 0 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./6/file0", [pid 5147] <... pwritev resumed>) = 1114112 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] exit_group(0) = ? [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] <... write resumed>) = 2097152 [pid 5156] munmap(0x7f241a43b000, 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./6/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5156] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5156] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] rmdir("./6" [pid 5156] <... openat resumed>) = 4 [pid 5156] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5156] <... ioctl resumed>) = 0 [pid 5065] mkdir("./7", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5157 [pid 5147] +++ exited with 0 +++ ./strace-static-x86_64: Process 5157 attached [pid 5156] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5157] chdir("./7" [pid 5156] <... close resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5157] <... chdir resumed>) = 0 [pid 5156] mkdir("./file0", 0777) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5156] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 77.419451][ T5156] loop4: detected capacity change from 0 to 4096 [pid 5157] <... prctl resumed>) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5063] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] <... openat resumed>) = 3 [pid 5157] write(3, "1000", 4 [pid 5152] <... pwritev resumed>) = 1114112 [pid 5063] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5157] <... write resumed>) = 4 [pid 5152] exit_group(0 [pid 5157] close(3 [pid 5152] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 5157] <... close resumed>) = 0 [pid 5150] <... pwritev resumed>) = 1114112 [pid 5150] exit_group(0) = ? [pid 5157] symlink("/dev/binderfs", "./binderfs" [pid 5063] fstat(3, [pid 5157] <... symlink resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5157] memfd_create("syzkaller", 0 [pid 5063] getdents64(3, [pid 5157] <... memfd_create resumed>) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5157] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./6/binderfs", [pid 5156] <... mount resumed>) = 0 [pid 5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5156] <... openat resumed>) = 3 [pid 5063] unlink("./6/binderfs" [pid 5156] chdir("./file0") = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5156] ioctl(4, LOOP_CLR_FD [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] <... ioctl resumed>) = 0 [pid 5156] close(4) = 0 [pid 5156] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5156] unlink("./file1" [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5156] <... unlink resumed>) = 0 [ 77.535743][ T5158] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5156] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5149] <... pwritev resumed>) = 1114112 [pid 5149] exit_group(0) = ? [pid 5150] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5150, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5152] +++ exited with 0 +++ [pid 5064] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] lstat("./6/binderfs", [pid 5068] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./6/binderfs" [pid 5068] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] <... write resumed>) = 2097152 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./6/binderfs", [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5157] munmap(0x7f241a43b000, 2097152 [pid 5149] +++ exited with 0 +++ [pid 5068] unlink("./6/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5157] <... munmap resumed>) = 0 [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./6/file0", [pid 5157] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5157] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5157] <... ioctl resumed>) = 0 [pid 5066] unlink("./6/binderfs" [pid 5157] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5157] <... close resumed>) = 0 [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] mkdir("./file0", 0777 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5157] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5157] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./6/file0" [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5063] getdents64(3, [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./6" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5064] lstat("./6/file0", [pid 5063] mkdir("./7", 0777 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] lstat("./6/file0", [pid 5064] fstat(4, [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [ 77.708059][ T5157] loop2: detected capacity change from 0 to 4096 [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 5064] getdents64(4, ./strace-static-x86_64: Process 5159 attached [pid 5068] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5159 [pid 5159] chdir("./7" [pid 5068] fstat(4, [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4 [pid 5159] <... chdir resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(4, [pid 5066] lstat("./6/file0", [pid 5064] rmdir("./6/file0" [pid 5159] <... prctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5159] setpgid(0, 0 [pid 5157] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5159] <... setpgid resumed>) = 0 [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5157] <... openat resumed>) = 3 [pid 5068] close(4 [pid 5066] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] close(3 [pid 5159] <... openat resumed>) = 3 [pid 5157] chdir("./file0" [pid 5068] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5159] write(3, "1000", 4 [pid 5157] <... chdir resumed>) = 0 [pid 5068] rmdir("./6/file0" [pid 5066] fstat(4, [pid 5064] rmdir("./6" [pid 5159] <... write resumed>) = 4 [pid 5157] ioctl(4, LOOP_CLR_FD [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5159] close(3 [pid 5157] <... ioctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] getdents64(4, [pid 5064] mkdir("./7", 0777 [pid 5159] <... close resumed>) = 0 [pid 5157] close(4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5159] symlink("/dev/binderfs", "./binderfs" [pid 5157] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5064] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 5159] <... symlink resumed>) = 0 [pid 5157] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5159] memfd_create("syzkaller", 0 [pid 5157] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5064] <... openat resumed>) = 3 [pid 5159] <... memfd_create resumed>) = 3 [pid 5157] unlink("./file1" [pid 5068] rmdir("./6" [pid 5066] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5157] <... unlink resumed>) = 0 [pid 5066] rmdir("./6/file0" [pid 5159] <... mmap resumed>) = 0x7f241a43b000 [pid 5157] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] mkdir("./7", 0777 [pid 5066] getdents64(3, [ 77.797607][ T5160] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5161 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5162 [pid 5066] close(3) = 0 ./strace-static-x86_64: Process 5161 attached [pid 5066] rmdir("./6" [pid 5161] chdir("./7"./strace-static-x86_64: Process 5162 attached ) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5162] chdir("./7" [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] mkdir("./7", 0777 [pid 5162] <... chdir resumed>) = 0 [pid 5161] <... prctl resumed>) = 0 [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5161] setpgid(0, 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5162] <... prctl resumed>) = 0 [pid 5161] <... setpgid resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5162] setpgid(0, 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5162] <... setpgid resumed>) = 0 [pid 5161] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5161] write(3, "1000", 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5162] <... openat resumed>) = 3 [pid 5161] <... write resumed>) = 4 [pid 5066] close(3 [pid 5162] write(3, "1000", 4 [pid 5161] close(3 [pid 5066] <... close resumed>) = 0 [pid 5162] <... write resumed>) = 4 [pid 5161] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5162] close(3 [pid 5161] symlink("/dev/binderfs", "./binderfs" [pid 5162] <... close resumed>) = 0 [pid 5161] <... symlink resumed>) = 0 [pid 5162] symlink("/dev/binderfs", "./binderfs" [pid 5161] memfd_create("syzkaller", 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5163 [pid 5162] <... symlink resumed>) = 0 [pid 5161] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5163 attached [pid 5162] memfd_create("syzkaller", 0 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5163] chdir("./7" [pid 5162] <... memfd_create resumed>) = 3 [pid 5161] <... mmap resumed>) = 0x7f241a43b000 [pid 5163] <... chdir resumed>) = 0 [pid 5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5162] <... mmap resumed>) = 0x7f241a43b000 [pid 5163] <... prctl resumed>) = 0 [pid 5159] <... write resumed>) = 2097152 [pid 5163] setpgid(0, 0 [pid 5159] munmap(0x7f241a43b000, 2097152 [pid 5163] <... setpgid resumed>) = 0 [pid 5159] <... munmap resumed>) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5163] <... openat resumed>) = 3 [pid 5159] <... openat resumed>) = 4 [pid 5163] write(3, "1000", 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3 [pid 5163] <... write resumed>) = 4 [pid 5163] close(3 [pid 5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5156] <... pwritev resumed>) = 1114112 [pid 5163] <... close resumed>) = 0 [pid 5156] exit_group(0 [pid 5163] symlink("/dev/binderfs", "./binderfs" [pid 5159] <... ioctl resumed>) = 0 [pid 5156] <... exit_group resumed>) = ? [pid 5163] <... symlink resumed>) = 0 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5163] memfd_create("syzkaller", 0 [pid 5159] close(3 [pid 5163] <... memfd_create resumed>) = 3 [pid 5159] <... close resumed>) = 0 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5159] mkdir("./file0", 0777 [pid 5163] <... mmap resumed>) = 0x7f241a43b000 [pid 5159] <... mkdir resumed>) = 0 [ 77.966696][ T5159] loop0: detected capacity change from 0 to 4096 [pid 5159] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5161] <... write resumed>) = 2097152 [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5159] <... mount resumed>) = 0 [pid 5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5161] munmap(0x7f241a43b000, 2097152 [pid 5159] <... openat resumed>) = 3 [pid 5161] <... munmap resumed>) = 0 [pid 5159] chdir("./file0") = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5161] <... openat resumed>) = 4 [pid 5159] <... ioctl resumed>) = 0 [pid 5161] ioctl(4, LOOP_SET_FD, 3 [pid 5159] close(4 [pid 5161] <... ioctl resumed>) = 0 [pid 5159] <... close resumed>) = 0 [pid 5159] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5161] close(3 [pid 5159] <... openat resumed>) = 4 [pid 5159] unlink("./file1" [pid 5162] <... write resumed>) = 2097152 [pid 5162] munmap(0x7f241a43b000, 2097152 [pid 5161] <... close resumed>) = 0 [pid 5162] <... munmap resumed>) = 0 [pid 5162] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5161] mkdir("./file0", 0777 [pid 5157] <... pwritev resumed>) = 1114112 [pid 5162] <... openat resumed>) = 4 [pid 5161] <... mkdir resumed>) = 0 [pid 5157] exit_group(0 [pid 5162] ioctl(4, LOOP_SET_FD, 3 [pid 5161] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5157] <... exit_group resumed>) = ? [ 78.057290][ T5164] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.089094][ T5161] loop1: detected capacity change from 0 to 4096 [pid 5163] <... write resumed>) = 2097152 [pid 5162] <... ioctl resumed>) = 0 [pid 5162] close(3) = 0 [pid 5162] mkdir("./file0", 0777) = 0 [pid 5162] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5163] munmap(0x7f241a43b000, 2097152 [pid 5156] +++ exited with 0 +++ [pid 5159] <... unlink resumed>) = 0 [pid 5159] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5163] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 5163] ioctl(4, LOOP_SET_FD, 3 [ 78.129222][ T5162] loop5: detected capacity change from 0 to 4096 [pid 5067] fstat(3, [pid 5163] <... ioctl resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5163] close(3 [pid 5067] getdents64(3, [pid 5163] <... close resumed>) = 0 [pid 5161] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5163] mkdir("./file0", 0777 [pid 5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... mkdir resumed>) = 0 [pid 5161] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5161] chdir("./file0" [pid 5067] lstat("./6/binderfs", [pid 5162] <... mount resumed>) = 0 [pid 5161] <... chdir resumed>) = 0 [pid 5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5161] ioctl(4, LOOP_CLR_FD [pid 5162] <... openat resumed>) = 3 [pid 5161] <... ioctl resumed>) = 0 [pid 5162] chdir("./file0" [pid 5161] close(4 [pid 5162] <... chdir resumed>) = 0 [pid 5161] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5162] ioctl(4, LOOP_CLR_FD [pid 5161] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] unlink("./6/binderfs" [pid 5162] <... ioctl resumed>) = 0 [pid 5161] <... openat resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 5162] close(4 [pid 5161] unlink("./file1" [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5162] <... close resumed>) = 0 [pid 5162] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 78.177960][ T5163] loop3: detected capacity change from 0 to 4096 [ 78.190949][ T5165] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.209022][ T5166] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5162] unlink("./file1" [pid 5163] <... mount resumed>) = 0 [pid 5163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file0") = 0 [pid 5163] ioctl(4, LOOP_CLR_FD) = 0 [pid 5163] close(4 [pid 5162] <... unlink resumed>) = 0 [pid 5163] <... close resumed>) = 0 [pid 5162] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5163] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5157] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5161] <... unlink resumed>) = 0 [pid 5161] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5163] <... openat resumed>) = 4 [ 78.260411][ T5167] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5163] unlink("./file1" [pid 5067] <... umount2 resumed>) = 0 [pid 5065] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] lstat("./6/file0", [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(4, [pid 5065] lstat("./7/binderfs", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] getdents64(4, [pid 5065] unlink("./7/binderfs" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... unlink resumed>) = 0 [pid 5163] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./6/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./6") = 0 [pid 5067] mkdir("./7", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5168 ./strace-static-x86_64: Process 5168 attached [pid 5168] chdir("./7") = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5168] close(3 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... close resumed>) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] <... symlink resumed>) = 0 [pid 5159] <... pwritev resumed>) = 1114112 [pid 5065] lstat("./7/file0", [pid 5168] memfd_create("syzkaller", 0 [pid 5159] exit_group(0 [pid 5168] <... memfd_create resumed>) = 3 [pid 5159] <... exit_group resumed>) = ? [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5168] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./7/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./7") = 0 [pid 5065] mkdir("./8", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5169 ./strace-static-x86_64: Process 5169 attached [pid 5169] chdir("./8") = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5168] <... write resumed>) = 2097152 [pid 5162] <... pwritev resumed>) = 1114112 [pid 5169] symlink("/dev/binderfs", "./binderfs" [pid 5168] munmap(0x7f241a43b000, 2097152 [pid 5162] exit_group(0) = ? [pid 5169] <... symlink resumed>) = 0 [pid 5168] <... munmap resumed>) = 0 [pid 5169] memfd_create("syzkaller", 0 [pid 5168] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5159] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5063] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... memfd_create resumed>) = 3 [pid 5168] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5169] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./7/binderfs") = 0 [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5168] <... ioctl resumed>) = 0 [pid 5161] <... pwritev resumed>) = 1114112 [pid 5168] close(3 [pid 5161] exit_group(0 [pid 5168] <... close resumed>) = 0 [pid 5162] +++ exited with 0 +++ [pid 5161] <... exit_group resumed>) = ? [pid 5168] mkdir("./file0", 0777) = 0 [ 78.648519][ T5168] loop4: detected capacity change from 0 to 4096 [pid 5168] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./7/binderfs") = 0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... write resumed>) = 2097152 [pid 5169] munmap(0x7f241a43b000, 2097152) = 0 [pid 5169] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5169] close(3) = 0 [pid 5169] mkdir("./file0", 0777) = 0 [pid 5169] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5168] <... mount resumed>) = 0 [pid 5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] chdir("./file0" [pid 5068] <... umount2 resumed>) = 0 [pid 5063] lstat("./7/file0", [pid 5168] <... chdir resumed>) = 0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] ioctl(4, LOOP_CLR_FD [ 78.750960][ T5169] loop2: detected capacity change from 0 to 4096 [ 78.786492][ T5170] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... ioctl resumed>) = 0 [pid 5068] lstat("./7/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] close(4 [pid 5163] <... pwritev resumed>) = 1114112 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5168] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5168] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5163] exit_group(0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(4, [pid 5163] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] <... openat resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] unlink("./file1" [pid 5068] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5068] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] fstat(4, [pid 5063] getdents64(4, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5063] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5063] rmdir("./7/file0" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5168] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5168] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5068] rmdir("./7/file0" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] close(3 [pid 5063] rmdir("./7" [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./7" [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5063] mkdir("./8", 0777 [pid 5169] <... mount resumed>) = 0 [pid 5161] +++ exited with 0 +++ [pid 5068] mkdir("./8", 0777 [pid 5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 5169] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5169] chdir("./file0" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5169] <... chdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... openat resumed>) = 3 [pid 5169] ioctl(4, LOOP_CLR_FD) = 0 [pid 5169] close(4) = 0 [pid 5169] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5169] <... openat resumed>) = 4 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5169] unlink("./file1" [pid 5068] close(3) = 0 [pid 5063] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5172 [pid 5064] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5172 attached [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5172] chdir("./8" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5173 [pid 5172] <... chdir resumed>) = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] getdents64(3, [pid 5172] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5173 attached [pid 5172] setpgid(0, 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5173] chdir("./8" [pid 5172] <... setpgid resumed>) = 0 [pid 5064] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] <... chdir resumed>) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5172] <... openat resumed>) = 3 [pid 5064] lstat("./7/binderfs", [pid 5173] <... prctl resumed>) = 0 [ 78.874566][ T5171] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5172] write(3, "1000", 4 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5172] <... write resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5173] write(3, "1000", 4 [pid 5172] close(3 [pid 5064] unlink("./7/binderfs" [pid 5173] <... write resumed>) = 4 [pid 5172] <... close resumed>) = 0 [pid 5169] <... unlink resumed>) = 0 [pid 5173] close(3 [pid 5172] symlink("/dev/binderfs", "./binderfs" [pid 5169] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... unlink resumed>) = 0 [pid 5173] <... close resumed>) = 0 [pid 5172] <... symlink resumed>) = 0 [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5172] memfd_create("syzkaller", 0) = 3 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5163] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5066] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = 0 [pid 5066] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./7/binderfs") = 0 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./7/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./7") = 0 [pid 5064] mkdir("./8", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5174 ./strace-static-x86_64: Process 5174 attached [pid 5174] chdir("./8") = 0 [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5174] setpgid(0, 0 [pid 5173] <... write resumed>) = 2097152 [pid 5174] <... setpgid resumed>) = 0 [pid 5172] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = 0 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5173] munmap(0x7f241a43b000, 2097152 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] <... openat resumed>) = 3 [pid 5173] <... munmap resumed>) = 0 [pid 5174] write(3, "1000", 4 [pid 5173] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5174] <... write resumed>) = 4 [pid 5173] <... openat resumed>) = 4 [pid 5172] munmap(0x7f241a43b000, 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] close(3 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5174] <... close resumed>) = 0 [pid 5172] <... munmap resumed>) = 0 [pid 5066] lstat("./7/file0", [pid 5174] symlink("/dev/binderfs", "./binderfs" [pid 5172] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] <... symlink resumed>) = 0 [pid 5172] <... openat resumed>) = 4 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] memfd_create("syzkaller", 0 [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... memfd_create resumed>) = 3 [pid 5173] <... ioctl resumed>) = 0 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5173] close(3 [pid 5168] <... pwritev resumed>) = 1114112 [pid 5066] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5173] <... close resumed>) = 0 [pid 5172] <... ioctl resumed>) = 0 [pid 5168] exit_group(0 [pid 5066] <... openat resumed>) = 4 [pid 5173] mkdir("./file0", 0777 [pid 5172] close(3 [pid 5168] <... exit_group resumed>) = ? [pid 5066] fstat(4, [pid 5173] <... mkdir resumed>) = 0 [pid 5172] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 79.180646][ T5173] loop0: detected capacity change from 0 to 4096 [ 79.214575][ T5172] loop5: detected capacity change from 0 to 4096 [pid 5173] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5172] mkdir("./file0", 0777 [pid 5066] getdents64(4, [pid 5172] <... mkdir resumed>) = 0 [pid 5169] <... pwritev resumed>) = 1114112 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5172] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5169] exit_group(0 [pid 5066] getdents64(4, [pid 5169] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./7/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./7") = 0 [pid 5066] mkdir("./8", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5175 ./strace-static-x86_64: Process 5175 attached [pid 5175] chdir("./8") = 0 [pid 5173] <... mount resumed>) = 0 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4 [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5172] <... mount resumed>) = 0 [pid 5175] <... write resumed>) = 4 [pid 5175] close(3) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] <... openat resumed>) = 3 [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5173] chdir("./file0" [pid 5172] <... openat resumed>) = 3 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5173] <... chdir resumed>) = 0 [pid 5172] chdir("./file0" [pid 5175] <... mmap resumed>) = 0x7f241a43b000 [pid 5173] ioctl(4, LOOP_CLR_FD [pid 5172] <... chdir resumed>) = 0 [pid 5173] <... ioctl resumed>) = 0 [pid 5172] ioctl(4, LOOP_CLR_FD [pid 5173] close(4 [pid 5172] <... ioctl resumed>) = 0 [pid 5173] <... close resumed>) = 0 [pid 5172] close(4 [pid 5173] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5172] <... close resumed>) = 0 [pid 5172] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5173] <... openat resumed>) = 4 [pid 5172] <... openat resumed>) = 4 [ 79.285366][ T5177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.296627][ T5176] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5173] unlink("./file1" [pid 5172] unlink("./file1" [pid 5173] <... unlink resumed>) = 0 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5172] <... unlink resumed>) = 0 [pid 5169] +++ exited with 0 +++ [pid 5168] +++ exited with 0 +++ [pid 5173] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5067] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5174] <... write resumed>) = 2097152 [pid 5172] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] fstat(3, [pid 5065] fstat(3, [pid 5174] munmap(0x7f241a43b000, 2097152 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] <... munmap resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] getdents64(3, [pid 5174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5174] <... openat resumed>) = 4 [pid 5067] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... ioctl resumed>) = 0 [pid 5067] lstat("./7/binderfs", [pid 5065] lstat("./8/binderfs", [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./7/binderfs" [pid 5065] unlink("./8/binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] close(3) = 0 [pid 5174] mkdir("./file0", 0777) = 0 [pid 5174] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5175] <... write resumed>) = 2097152 [pid 5175] munmap(0x7f241a43b000, 2097152) = 0 [ 79.398265][ T5174] loop1: detected capacity change from 0 to 4096 [pid 5175] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5175] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./7/file0", [pid 5065] <... umount2 resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... ioctl resumed>) = 0 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./8/file0", [pid 5067] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5175] close(3 [pid 5174] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] fstat(4, [pid 5065] getdents64(4, [pid 5175] <... close resumed>) = 0 [pid 5174] <... openat resumed>) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5175] mkdir("./file0", 0777 [pid 5174] chdir("./file0" [pid 5067] getdents64(4, [pid 5065] getdents64(4, [pid 5174] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5174] ioctl(4, LOOP_CLR_FD [pid 5067] getdents64(4, [pid 5065] close(4 [pid 5174] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5175] <... mkdir resumed>) = 0 [pid 5174] close(4 [pid 5067] close(4 [pid 5065] rmdir("./8/file0" [pid 5175] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5174] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5174] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [ 79.475118][ T5175] loop3: detected capacity change from 0 to 4096 [ 79.510378][ T5178] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] rmdir("./8" [pid 5174] <... openat resumed>) = 4 [pid 5067] rmdir("./7/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5174] unlink("./file1" [pid 5065] mkdir("./9", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [pid 5065] close(3 [pid 5067] rmdir("./7" [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./8", 0777 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5179 [pid 5174] <... unlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5174] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5179 attached [pid 5179] chdir("./9" [pid 5067] <... openat resumed>) = 3 [pid 5179] <... chdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5179] <... prctl resumed>) = 0 [pid 5067] close(3 [pid 5179] setpgid(0, 0 [pid 5067] <... close resumed>) = 0 [pid 5179] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5181 attached ) = 3 [pid 5175] <... mount resumed>) = 0 [pid 5181] chdir("./8" [pid 5179] write(3, "1000", 4 [pid 5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5179] <... write resumed>) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5181 [pid 5181] <... chdir resumed>) = 0 [pid 5179] close(3 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5179] <... close resumed>) = 0 [pid 5175] <... openat resumed>) = 3 [pid 5181] <... prctl resumed>) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] setpgid(0, 0 [pid 5175] chdir("./file0" [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5181] <... setpgid resumed>) = 0 [pid 5179] <... mmap resumed>) = 0x7f241a43b000 [pid 5175] <... chdir resumed>) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5175] ioctl(4, LOOP_CLR_FD [pid 5181] <... openat resumed>) = 3 [pid 5175] <... ioctl resumed>) = 0 [pid 5181] write(3, "1000", 4 [pid 5175] close(4 [pid 5181] <... write resumed>) = 4 [pid 5175] <... close resumed>) = 0 [pid 5181] close(3 [pid 5175] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5181] <... close resumed>) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5175] <... openat resumed>) = 4 [ 79.591995][ T5180] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5175] unlink("./file1" [pid 5181] <... mmap resumed>) = 0x7f241a43b000 [pid 5175] <... unlink resumed>) = 0 [pid 5175] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5179] <... write resumed>) = 2097152 [pid 5179] munmap(0x7f241a43b000, 2097152) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3 [pid 5173] <... pwritev resumed>) = 1114112 [pid 5173] exit_group(0) = ? [pid 5172] <... pwritev resumed>) = 1114112 [pid 5172] exit_group(0) = ? [pid 5179] <... ioctl resumed>) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [pid 5179] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5181] <... write resumed>) = 2097152 [pid 5181] munmap(0x7f241a43b000, 2097152) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 79.783864][ T5179] loop2: detected capacity change from 0 to 4096 [pid 5181] ioctl(4, LOOP_SET_FD, 3 [pid 5179] <... mount resumed>) = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4 [pid 5181] <... ioctl resumed>) = 0 [pid 5179] <... close resumed>) = 0 [pid 5181] close(3 [pid 5179] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5181] <... close resumed>) = 0 [pid 5179] <... openat resumed>) = 4 [pid 5173] +++ exited with 0 +++ [pid 5181] mkdir("./file0", 0777 [pid 5179] unlink("./file1" [pid 5172] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5181] <... mkdir resumed>) = 0 [pid 5179] <... unlink resumed>) = 0 [pid 5063] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 79.842863][ T5181] loop4: detected capacity change from 0 to 4096 [ 79.865678][ T5182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5179] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./8/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] lstat("./8/binderfs", [pid 5068] unlink("./8/binderfs" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5063] unlink("./8/binderfs" [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5174] <... pwritev resumed>) = 1114112 [pid 5174] exit_group(0 [pid 5181] <... mount resumed>) = 0 [pid 5174] <... exit_group resumed>) = ? [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./file0") = 0 [pid 5181] ioctl(4, LOOP_CLR_FD) = 0 [pid 5181] close(4) = 0 [pid 5181] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = 0 [pid 5181] <... openat resumed>) = 4 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] unlink("./file1" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5181] <... unlink resumed>) = 0 [ 79.994236][ T5183] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5068] lstat("./8/file0", [pid 5063] fstat(4, [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5068] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5175] <... pwritev resumed>) = 1114112 [pid 5068] fstat(4, [pid 5063] close(4 [pid 5175] exit_group(0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5175] <... exit_group resumed>) = ? [pid 5068] getdents64(4, [pid 5063] rmdir("./8/file0" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] getdents64(4, [pid 5063] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5063] close(3 [pid 5068] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] rmdir("./8/file0" [pid 5063] rmdir("./8" [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5063] mkdir("./9", 0777 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5068] rmdir("./8" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] mkdir("./9", 0777 [pid 5063] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5184 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5185 ./strace-static-x86_64: Process 5184 attached [pid 5184] chdir("./9"./strace-static-x86_64: Process 5185 attached ) = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5185] chdir("./9" [pid 5184] <... prctl resumed>) = 0 [pid 5184] setpgid(0, 0 [pid 5185] <... chdir resumed>) = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5184] <... setpgid resumed>) = 0 [pid 5185] <... prctl resumed>) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] setpgid(0, 0 [pid 5184] <... openat resumed>) = 3 [pid 5185] <... setpgid resumed>) = 0 [pid 5184] write(3, "1000", 4 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5184] <... write resumed>) = 4 [pid 5185] <... openat resumed>) = 3 [pid 5184] close(3 [pid 5185] write(3, "1000", 4 [pid 5184] <... close resumed>) = 0 [pid 5185] <... write resumed>) = 4 [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5185] close(3 [pid 5184] <... symlink resumed>) = 0 [pid 5175] +++ exited with 0 +++ [pid 5185] <... close resumed>) = 0 [pid 5184] memfd_create("syzkaller", 0 [pid 5185] symlink("/dev/binderfs", "./binderfs" [pid 5184] <... memfd_create resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5185] <... symlink resumed>) = 0 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5185] memfd_create("syzkaller", 0 [pid 5184] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5185] <... memfd_create resumed>) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(3, [pid 5066] lstat("./8/binderfs", [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] getdents64(3, [pid 5066] unlink("./8/binderfs" [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... unlink resumed>) = 0 [pid 5064] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./8/binderfs", [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./8/binderfs") = 0 [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... umount2 resumed>) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5181] <... pwritev resumed>) = 1114112 [pid 5066] rmdir("./8/file0" [pid 5064] lstat("./8/file0", [pid 5181] exit_group(0 [pid 5066] <... rmdir resumed>) = 0 [pid 5181] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 5179] <... pwritev resumed>) = 1114112 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5179] exit_group(0 [pid 5066] close(3 [pid 5185] <... write resumed>) = 2097152 [pid 5184] <... write resumed>) = 2097152 [pid 5179] <... exit_group resumed>) = ? [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5185] munmap(0x7f241a43b000, 2097152 [pid 5184] munmap(0x7f241a43b000, 2097152 [pid 5066] rmdir("./8" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... munmap resumed>) = 0 [pid 5184] <... munmap resumed>) = 0 [pid 5181] +++ exited with 0 +++ [pid 5064] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5185] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5184] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5185] <... openat resumed>) = 4 [pid 5184] <... openat resumed>) = 4 [pid 5066] mkdir("./9", 0777 [pid 5064] fstat(4, [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5185] <... ioctl resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5185] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5185] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5185] mkdir("./file0", 0777 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5185] <... mkdir resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5185] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] close(3 [pid 5184] <... ioctl resumed>) = 0 [pid 5179] +++ exited with 0 +++ [pid 5067] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5184] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5184] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5186 [pid 5184] mkdir("./file0", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5065] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] fstat(3, ./strace-static-x86_64: Process 5186 attached [pid 5184] <... mkdir resumed>) = 0 [pid 5064] close(4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5064] rmdir("./8/file0" [pid 5186] chdir("./9" [pid 5065] <... openat resumed>) = 3 [pid 5186] <... chdir resumed>) = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] fstat(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5186] <... prctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5186] setpgid(0, 0 [pid 5067] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5186] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] lstat("./8/binderfs", [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] close(3 [pid 5186] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5186] write(3, "1000", 4 [pid 5067] unlink("./8/binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./8" [pid 5186] <... write resumed>) = 4 [pid 5186] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5065] lstat("./9/binderfs", [pid 5064] <... rmdir resumed>) = 0 [pid 5186] <... close resumed>) = 0 [ 80.384213][ T5185] loop5: detected capacity change from 0 to 4096 [ 80.391768][ T5184] loop0: detected capacity change from 0 to 4096 [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] mkdir("./9", 0777 [pid 5186] symlink("/dev/binderfs", "./binderfs" [pid 5065] unlink("./9/binderfs" [pid 5186] <... symlink resumed>) = 0 [pid 5186] memfd_create("syzkaller", 0 [pid 5065] <... unlink resumed>) = 0 [pid 5186] <... memfd_create resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5186] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5187 ./strace-static-x86_64: Process 5187 attached [pid 5187] chdir("./9" [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5187] <... chdir resumed>) = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] memfd_create("syzkaller", 0) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4) = 0 [pid 5065] <... umount2 resumed>) = 0 [ 80.468971][ T5188] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5185] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5185] unlink("./file1" [pid 5184] <... mount resumed>) = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5185] <... unlink resumed>) = 0 [pid 5184] <... openat resumed>) = 3 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5184] chdir("./file0") = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] lstat("./9/file0", [pid 5184] close(4 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5184] <... close resumed>) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5184] unlink("./file1" [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5067] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] fstat(4, [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5184] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 80.515591][ T5189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] getdents64(4, [pid 5184] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] fstat(4, [pid 5065] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5186] <... write resumed>) = 2097152 [pid 5067] getdents64(4, [pid 5065] close(4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] rmdir("./9/file0" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] close(4 [pid 5065] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./8/file0" [pid 5065] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] rmdir("./9" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] mkdir("./10", 0777 [pid 5067] rmdir("./8") = 0 [pid 5067] mkdir("./9", 0777) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5186] munmap(0x7f241a43b000, 2097152 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5186] <... munmap resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5186] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] close(3 [pid 5065] close(3 [pid 5186] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5186] ioctl(4, LOOP_SET_FD, 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5190 attached ./strace-static-x86_64: Process 5191 attached [pid 5190] chdir("./9" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5190 [pid 5191] chdir("./10" [pid 5190] <... chdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5191 [pid 5191] <... chdir resumed>) = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5191] <... prctl resumed>) = 0 [pid 5190] <... prctl resumed>) = 0 [pid 5186] <... ioctl resumed>) = 0 [pid 5186] close(3) = 0 [pid 5186] mkdir("./file0", 0777) = 0 [pid 5186] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5191] setpgid(0, 0 [pid 5190] setpgid(0, 0 [pid 5191] <... setpgid resumed>) = 0 [pid 5190] <... setpgid resumed>) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5191] <... openat resumed>) = 3 [pid 5190] <... openat resumed>) = 3 [pid 5191] write(3, "1000", 4 [ 80.629451][ T5186] loop3: detected capacity change from 0 to 4096 [pid 5190] write(3, "1000", 4 [pid 5191] <... write resumed>) = 4 [pid 5190] <... write resumed>) = 4 [pid 5191] close(3 [pid 5190] close(3 [pid 5191] <... close resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs" [pid 5190] symlink("/dev/binderfs", "./binderfs" [pid 5187] <... write resumed>) = 2097152 [pid 5191] <... symlink resumed>) = 0 [pid 5190] <... symlink resumed>) = 0 [pid 5191] memfd_create("syzkaller", 0 [pid 5190] memfd_create("syzkaller", 0 [pid 5191] <... memfd_create resumed>) = 3 [pid 5190] <... memfd_create resumed>) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5187] munmap(0x7f241a43b000, 2097152 [pid 5191] <... mmap resumed>) = 0x7f241a43b000 [pid 5190] <... mmap resumed>) = 0x7f241a43b000 [pid 5187] <... munmap resumed>) = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5187] ioctl(4, LOOP_SET_FD, 3 [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5187] <... ioctl resumed>) = 0 [pid 5187] close(3) = 0 [pid 5187] mkdir("./file0", 0777) = 0 [pid 5187] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5186] <... mount resumed>) = 0 [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5186] chdir("./file0") = 0 [pid 5186] ioctl(4, LOOP_CLR_FD) = 0 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5186] close(4) = 0 [pid 5186] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 80.713254][ T5187] loop1: detected capacity change from 0 to 4096 [ 80.740928][ T5192] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5186] unlink("./file1" [pid 5187] <... mount resumed>) = 0 [pid 5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5187] chdir("./file0") = 0 [pid 5187] ioctl(4, LOOP_CLR_FD) = 0 [pid 5187] close(4) = 0 [pid 5187] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5187] unlink("./file1" [pid 5186] <... unlink resumed>) = 0 [pid 5186] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5187] <... unlink resumed>) = 0 [pid 5187] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5191] <... write resumed>) = 2097152 [ 80.808445][ T5193] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5190] <... write resumed>) = 2097152 [pid 5191] munmap(0x7f241a43b000, 2097152) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3 [pid 5190] munmap(0x7f241a43b000, 2097152) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5191] <... ioctl resumed>) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file0", 0777) = 0 [pid 5184] <... pwritev resumed>) = 1114112 [pid 5184] exit_group(0 [pid 5191] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5184] <... exit_group resumed>) = ? [pid 5190] <... ioctl resumed>) = 0 [pid 5190] close(3) = 0 [pid 5190] mkdir("./file0", 0777) = 0 [pid 5190] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5185] <... pwritev resumed>) = 1114112 [pid 5185] exit_group(0) = ? [ 80.900266][ T5191] loop2: detected capacity change from 0 to 4096 [ 80.919802][ T5190] loop4: detected capacity change from 0 to 4096 [pid 5191] <... mount resumed>) = 0 [pid 5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5190] <... mount resumed>) = 0 [pid 5191] <... openat resumed>) = 3 [pid 5191] chdir("./file0") = 0 [pid 5191] ioctl(4, LOOP_CLR_FD) = 0 [pid 5191] close(4) = 0 [pid 5190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5191] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5190] <... openat resumed>) = 3 [pid 5191] <... openat resumed>) = 4 [pid 5190] chdir("./file0" [pid 5191] unlink("./file1" [pid 5190] <... chdir resumed>) = 0 [pid 5190] ioctl(4, LOOP_CLR_FD) = 0 [pid 5190] close(4) = 0 [pid 5190] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 80.987716][ T5194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.998282][ T5195] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5190] unlink("./file1" [pid 5184] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5190] <... unlink resumed>) = 0 [pid 5190] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./9/binderfs") = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... unlink resumed>) = 0 [pid 5191] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5185] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5068] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./9/binderfs") = 0 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5187] <... pwritev resumed>) = 1114112 [pid 5063] lstat("./9/file0", [pid 5187] exit_group(0) = ? [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(4 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5063] rmdir("./9/file0" [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] getdents64(4, [pid 5063] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./9/file0" [pid 5063] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5186] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5186] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5186] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 5063] rmdir("./9" [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./9") = 0 [pid 5068] mkdir("./10", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] mkdir("./10", 0777 [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... mkdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5196 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5196 attached ) = -1 ENXIO (No such device or address) [pid 5196] chdir("./10" [pid 5063] close(3) = 0 [pid 5196] <... chdir resumed>) = 0 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5196] <... prctl resumed>) = 0 [pid 5196] setpgid(0, 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5197 [pid 5196] <... setpgid resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5196] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5197 attached [pid 5196] close(3 [pid 5187] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5197] chdir("./10" [pid 5196] <... close resumed>) = 0 [pid 5197] <... chdir resumed>) = 0 [pid 5196] symlink("/dev/binderfs", "./binderfs" [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] <... symlink resumed>) = 0 [pid 5064] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] memfd_create("syzkaller", 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] <... prctl resumed>) = 0 [pid 5196] <... memfd_create resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5197] setpgid(0, 0 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... openat resumed>) = 3 [pid 5196] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5197] <... setpgid resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] write(3, "1000", 4 [pid 5064] lstat("./9/binderfs", [pid 5197] <... write resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5197] close(3 [pid 5064] unlink("./9/binderfs" [pid 5197] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs" [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] <... symlink resumed>) = 0 [pid 5197] memfd_create("syzkaller", 0 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5197] <... memfd_create resumed>) = 3 [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5186] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./9/binderfs", [pid 5190] <... pwritev resumed>) = 1114112 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./9/binderfs" [pid 5190] exit_group(0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] lstat("./9/file0", [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... exit_group resumed>) = ? [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 81.408227][ T897] cfg80211: failed to load regulatory.db [pid 5064] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] <... openat resumed>) = 4 [pid 5067] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5067] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] fstat(3, [pid 5064] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5064] close(4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5067] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./9/file0" [pid 5191] <... pwritev resumed>) = 1114112 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5191] exit_group(0 [pid 5067] lstat("./9/binderfs", [pid 5064] getdents64(3, [pid 5191] <... exit_group resumed>) = ? [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./9/binderfs" [pid 5064] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./9" [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./10", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5198 ./strace-static-x86_64: Process 5198 attached [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] chdir("./10" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5198] <... chdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... openat resumed>) = 4 [pid 5198] <... prctl resumed>) = 0 [pid 5066] fstat(4, [pid 5198] setpgid(0, 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] <... setpgid resumed>) = 0 [pid 5066] getdents64(4, [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5198] <... openat resumed>) = 3 [pid 5066] getdents64(4, [pid 5198] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5198] <... write resumed>) = 4 [pid 5066] close(4 [pid 5198] close(3 [pid 5066] <... close resumed>) = 0 [pid 5198] <... close resumed>) = 0 [pid 5066] rmdir("./9/file0" [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5198] <... symlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5198] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5198] <... memfd_create resumed>) = 3 [pid 5066] close(3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 5198] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] rmdir("./9" [pid 5196] <... write resumed>) = 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./10", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5196] munmap(0x7f241a43b000, 2097152 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5199 [pid 5196] <... munmap resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 ./strace-static-x86_64: Process 5199 attached [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5199] chdir("./10") = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5199] write(3, "1000", 4 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5199] <... write resumed>) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] memfd_create("syzkaller", 0) = 3 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5191] +++ exited with 0 +++ [pid 5197] <... write resumed>) = 2097152 [pid 5196] <... ioctl resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5065] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] munmap(0x7f241a43b000, 2097152 [pid 5196] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5197] <... munmap resumed>) = 0 [pid 5196] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5196] mkdir("./file0", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5197] <... openat resumed>) = 4 [pid 5065] unlink("./10/binderfs" [pid 5197] ioctl(4, LOOP_SET_FD, 3 [pid 5196] <... mkdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [ 81.587946][ T5196] loop5: detected capacity change from 0 to 4096 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5197] <... ioctl resumed>) = 0 [ 81.640055][ T5197] loop0: detected capacity change from 0 to 4096 [pid 5197] close(3 [pid 5196] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5197] <... close resumed>) = 0 [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5197] mkdir("./file0", 0777 [pid 5196] <... openat resumed>) = 3 [pid 5197] <... mkdir resumed>) = 0 [pid 5196] chdir("./file0" [pid 5197] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5196] <... chdir resumed>) = 0 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] close(4) = 0 [pid 5196] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5198] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5196] <... openat resumed>) = 4 [pid 5196] unlink("./file1" [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 81.690896][ T5200] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] munmap(0x7f241a43b000, 2097152 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, [pid 5198] <... munmap resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5198] <... openat resumed>) = 4 [pid 5067] lstat("./9/file0", [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5198] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] close(4 [pid 5197] <... mount resumed>) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./10/file0" [pid 5197] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] getdents64(3, [pid 5067] fstat(4, [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] close(3 [pid 5067] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] rmdir("./10" [pid 5067] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5197] chdir("./file0" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] mkdir("./11", 0777 [pid 5197] <... chdir resumed>) = 0 [pid 5067] close(4 [pid 5065] <... mkdir resumed>) = 0 [pid 5197] ioctl(4, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5197] <... ioctl resumed>) = 0 [pid 5067] rmdir("./9/file0" [pid 5065] <... openat resumed>) = 3 [pid 5197] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(3, [pid 5197] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5199] <... write resumed>) = 2097152 [pid 5197] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 5197] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5197] unlink("./file1" [pid 5067] rmdir("./9" [pid 5196] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5202 [pid 5199] munmap(0x7f241a43b000, 2097152 [pid 5196] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] mkdir("./10", 0777 [pid 5199] <... munmap resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5202 attached [pid 5199] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5198] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5202] chdir("./11" [pid 5199] <... openat resumed>) = 4 [pid 5198] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5202] <... chdir resumed>) = 0 [pid 5199] ioctl(4, LOOP_SET_FD, 3 [pid 5198] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 81.749960][ T5201] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.756605][ T5198] loop1: detected capacity change from 0 to 4096 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5198] mkdir("./file0", 0777 [pid 5067] close(3 [pid 5202] <... prctl resumed>) = 0 [pid 5198] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5202] setpgid(0, 0 [pid 5198] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5202] <... setpgid resumed>) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5203 [pid 5202] <... openat resumed>) = 3 [pid 5202] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5203 attached [pid 5202] close(3 [pid 5197] <... unlink resumed>) = 0 [pid 5203] chdir("./10" [pid 5202] <... close resumed>) = 0 [pid 5197] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5203] <... chdir resumed>) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] <... ioctl resumed>) = 0 [pid 5202] memfd_create("syzkaller", 0 [pid 5199] close(3 [pid 5202] <... memfd_create resumed>) = 3 [pid 5199] <... close resumed>) = 0 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5199] mkdir("./file0", 0777 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5202] <... mmap resumed>) = 0x7f241a43b000 [pid 5199] <... mkdir resumed>) = 0 [pid 5203] <... prctl resumed>) = 0 [ 81.808494][ T5199] loop3: detected capacity change from 0 to 4096 [pid 5199] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5198] <... mount resumed>) = 0 [pid 5203] close(3 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5203] <... close resumed>) = 0 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5198] <... openat resumed>) = 3 [pid 5203] symlink("/dev/binderfs", "./binderfs" [pid 5198] chdir("./file0" [pid 5203] <... symlink resumed>) = 0 [pid 5198] <... chdir resumed>) = 0 [pid 5203] memfd_create("syzkaller", 0 [pid 5198] ioctl(4, LOOP_CLR_FD [pid 5203] <... memfd_create resumed>) = 3 [pid 5198] <... ioctl resumed>) = 0 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5198] close(4 [pid 5203] <... mmap resumed>) = 0x7f241a43b000 [pid 5198] <... close resumed>) = 0 [pid 5198] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 81.883121][ T5204] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5198] unlink("./file1" [pid 5199] <... mount resumed>) = 0 [pid 5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5198] <... unlink resumed>) = 0 [pid 5199] <... openat resumed>) = 3 [pid 5198] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5199] chdir("./file0") = 0 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5199] ioctl(4, LOOP_CLR_FD) = 0 [pid 5199] close(4) = 0 [pid 5199] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 81.931724][ T5205] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5199] unlink("./file1") = 0 [pid 5199] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5202] <... write resumed>) = 2097152 [pid 5202] munmap(0x7f241a43b000, 2097152) = 0 [pid 5202] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5203] <... write resumed>) = 2097152 [pid 5202] <... ioctl resumed>) = 0 [pid 5202] close(3) = 0 [pid 5202] mkdir("./file0", 0777) = 0 [ 82.042558][ T5202] loop2: detected capacity change from 0 to 4096 [pid 5202] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5203] munmap(0x7f241a43b000, 2097152) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5203] close(3 [pid 5202] <... mount resumed>) = 0 [pid 5203] <... close resumed>) = 0 [pid 5202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5203] mkdir("./file0", 0777 [pid 5202] <... openat resumed>) = 3 [pid 5203] <... mkdir resumed>) = 0 [pid 5202] chdir("./file0" [pid 5203] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5202] <... chdir resumed>) = 0 [pid 5202] ioctl(4, LOOP_CLR_FD) = 0 [pid 5202] close(4) = 0 [ 82.119863][ T5203] loop4: detected capacity change from 0 to 4096 [ 82.151369][ T5206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5202] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5202] unlink("./file1" [pid 5196] <... pwritev resumed>) = 1114112 [pid 5203] <... mount resumed>) = 0 [pid 5196] exit_group(0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5196] <... exit_group resumed>) = ? [pid 5203] <... openat resumed>) = 3 [pid 5203] chdir("./file0") = 0 [pid 5203] ioctl(4, LOOP_CLR_FD) = 0 [pid 5203] close(4) = 0 [pid 5202] <... unlink resumed>) = 0 [pid 5203] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5202] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5203] <... openat resumed>) = 4 [ 82.221745][ T5207] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5203] unlink("./file1" [pid 5197] <... pwritev resumed>) = 1114112 [pid 5197] exit_group(0 [pid 5203] <... unlink resumed>) = 0 [pid 5197] <... exit_group resumed>) = ? [pid 5203] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5196] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5198] <... pwritev resumed>) = 1114112 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5198] exit_group(0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5198] <... exit_group resumed>) = ? [pid 5068] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./10/binderfs") = 0 [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5197] +++ exited with 0 +++ [pid 5199] <... pwritev resumed>) = 1114112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5199] exit_group(0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5199] <... exit_group resumed>) = ? [pid 5063] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] +++ exited with 0 +++ [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] lstat("./10/file0", [pid 5063] <... openat resumed>) = 3 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(3, [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5068] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 3 [pid 5068] fstat(4, [pid 5064] fstat(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 5064] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./10/binderfs", [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(4 [pid 5064] lstat("./10/binderfs", [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./10/binderfs" [pid 5068] rmdir("./10/file0" [pid 5064] unlink("./10/binderfs" [pid 5068] <... rmdir resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./10") = 0 [pid 5068] mkdir("./11", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5208 [pid 5064] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5208 attached [pid 5208] chdir("./11" [pid 5199] +++ exited with 0 +++ [pid 5208] <... chdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] setpgid(0, 0) = 0 [pid 5064] lstat("./10/file0", [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5208] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... write resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5208] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5208] <... close resumed>) = 0 [pid 5066] fstat(3, [pid 5064] <... openat resumed>) = 4 [pid 5208] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(4, [pid 5208] <... symlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] getdents64(4, [pid 5208] <... memfd_create resumed>) = 3 [pid 5066] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5208] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] lstat("./10/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] lstat("./10/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] unlink("./10/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5064] rmdir("./10/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, [pid 5064] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5064] rmdir("./10" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5064] mkdir("./11", 0777 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] close(4 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./10/file0" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] getdents64(3, [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5203] <... pwritev resumed>) = 1114112 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5203] exit_group(0 [pid 5202] <... pwritev resumed>) = 1114112 [pid 5063] rmdir("./10" [pid 5203] <... exit_group resumed>) = ? [pid 5202] exit_group(0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5209 [pid 5063] <... rmdir resumed>) = 0 [pid 5202] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = 0 [pid 5063] mkdir("./11", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5209 attached ) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5209] chdir("./11" [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5209] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5209] <... prctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5209] setpgid(0, 0 [pid 5066] lstat("./10/file0", [pid 5209] <... setpgid resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5210 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5210 attached [pid 5209] write(3, "1000", 4 [pid 5066] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5210] chdir("./11" [pid 5209] <... write resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5210] <... chdir resumed>) = 0 [pid 5209] close(3 [pid 5066] fstat(4, [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5209] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5210] <... prctl resumed>) = 0 [pid 5209] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(4, [pid 5210] setpgid(0, 0 [pid 5209] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5210] <... setpgid resumed>) = 0 [pid 5209] memfd_create("syzkaller", 0 [pid 5066] getdents64(4, [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5209] <... memfd_create resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5210] <... openat resumed>) = 3 [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] close(4 [pid 5210] write(3, "1000", 4 [pid 5209] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... close resumed>) = 0 [pid 5210] <... write resumed>) = 4 [pid 5066] rmdir("./10/file0" [pid 5210] close(3) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5210] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(3, [pid 5210] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5210] memfd_create("syzkaller", 0 [pid 5066] close(3 [pid 5210] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] rmdir("./10" [pid 5210] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... rmdir resumed>) = 0 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] mkdir("./11", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5208] <... write resumed>) = 2097152 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5208] munmap(0x7f241a43b000, 2097152) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5211 attached [pid 5202] +++ exited with 0 +++ [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5211 [pid 5211] chdir("./11" [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5211] <... chdir resumed>) = 0 [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5211] setpgid(0, 0) = 0 [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] <... ioctl resumed>) = 0 [pid 5065] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] write(3, "1000", 4 [pid 5208] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5211] <... write resumed>) = 4 [pid 5208] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5211] close(3 [pid 5208] mkdir("./file0", 0777 [pid 5203] +++ exited with 0 +++ [pid 5065] <... openat resumed>) = 3 [pid 5211] <... close resumed>) = 0 [pid 5209] <... write resumed>) = 2097152 [pid 5208] <... mkdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5065] fstat(3, [pid 5211] symlink("/dev/binderfs", "./binderfs" [pid 5208] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5211] <... symlink resumed>) = 0 [pid 5065] getdents64(3, [pid 5211] memfd_create("syzkaller", 0 [pid 5067] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5211] <... memfd_create resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5211] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... openat resumed>) = 3 [pid 5065] lstat("./11/binderfs", [pid 5067] fstat(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] unlink("./11/binderfs" [pid 5067] getdents64(3, [pid 5065] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [ 82.879775][ T5208] loop5: detected capacity change from 0 to 4096 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./10/binderfs") = 0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... mount resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5208] chdir("./file0") = 0 [pid 5208] ioctl(4, LOOP_CLR_FD) = 0 [pid 5208] close(4 [pid 5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5210] <... write resumed>) = 2097152 [pid 5208] <... close resumed>) = 0 [pid 5210] munmap(0x7f241a43b000, 2097152 [pid 5208] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5210] <... munmap resumed>) = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5209] munmap(0x7f241a43b000, 2097152 [pid 5208] <... openat resumed>) = 4 [pid 5210] ioctl(4, LOOP_SET_FD, 3 [ 82.947875][ T5212] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5208] unlink("./file1" [pid 5209] <... munmap resumed>) = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5209] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5210] <... ioctl resumed>) = 0 [pid 5065] lstat("./11/file0", [pid 5210] close(3) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5210] mkdir("./file0", 0777 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5210] <... mkdir resumed>) = 0 [pid 5065] fstat(4, [pid 5210] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5209] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5209] close(3 [pid 5067] lstat("./10/file0", [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5209] <... close resumed>) = 0 [pid 5208] <... unlink resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5209] mkdir("./file0", 0777 [pid 5208] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 82.994977][ T5210] loop0: detected capacity change from 0 to 4096 [ 83.009939][ T5209] loop1: detected capacity change from 0 to 4096 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5209] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(4 [pid 5209] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] rmdir("./11/file0" [pid 5067] fstat(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5211] <... write resumed>) = 2097152 [pid 5210] <... mount resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5211] munmap(0x7f241a43b000, 2097152 [pid 5210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] close(3 [pid 5067] getdents64(4, [pid 5211] <... munmap resumed>) = 0 [pid 5210] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5211] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5210] chdir("./file0" [pid 5067] close(4 [pid 5065] rmdir("./11" [pid 5211] <... openat resumed>) = 4 [pid 5210] <... chdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5211] ioctl(4, LOOP_SET_FD, 3 [pid 5210] ioctl(4, LOOP_CLR_FD [pid 5067] rmdir("./10/file0" [pid 5065] mkdir("./12", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./10" [pid 5210] <... ioctl resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5210] close(4 [pid 5067] mkdir("./11", 0777 [pid 5065] <... mkdir resumed>) = 0 [pid 5210] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5215 ./strace-static-x86_64: Process 5215 attached [pid 5211] <... ioctl resumed>) = 0 [pid 5210] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5215] chdir("./11" [pid 5211] close(3 [pid 5210] <... openat resumed>) = 4 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 83.076816][ T5213] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.108878][ T5211] loop3: detected capacity change from 0 to 4096 [pid 5215] <... chdir resumed>) = 0 [pid 5211] <... close resumed>) = 0 [pid 5210] unlink("./file1" [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5215] <... prctl resumed>) = 0 [pid 5211] mkdir("./file0", 0777 [pid 5209] <... mount resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5215] setpgid(0, 0 [pid 5211] <... mkdir resumed>) = 0 [pid 5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5215] <... setpgid resumed>) = 0 [pid 5211] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5209] <... openat resumed>) = 3 [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5209] chdir("./file0" [pid 5215] <... openat resumed>) = 3 [pid 5210] <... unlink resumed>) = 0 [pid 5209] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5216 attached [pid 5215] write(3, "1000", 4 [pid 5210] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5209] ioctl(4, LOOP_CLR_FD [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5216 [pid 5216] chdir("./12" [pid 5215] <... write resumed>) = 4 [pid 5209] <... ioctl resumed>) = 0 [pid 5216] <... chdir resumed>) = 0 [pid 5215] close(3 [pid 5209] close(4 [pid 5216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5215] <... close resumed>) = 0 [pid 5209] <... close resumed>) = 0 [pid 5216] <... prctl resumed>) = 0 [pid 5215] symlink("/dev/binderfs", "./binderfs" [pid 5209] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5216] setpgid(0, 0 [pid 5215] <... symlink resumed>) = 0 [pid 5209] <... openat resumed>) = 4 [pid 5216] <... setpgid resumed>) = 0 [pid 5215] memfd_create("syzkaller", 0 [pid 5209] unlink("./file1" [pid 5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5215] <... memfd_create resumed>) = 3 [pid 5216] <... openat resumed>) = 3 [ 83.131226][ T5214] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5216] write(3, "1000", 4 [pid 5215] <... mmap resumed>) = 0x7f241a43b000 [pid 5216] <... write resumed>) = 4 [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5216] close(3 [pid 5211] <... mount resumed>) = 0 [pid 5209] <... unlink resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5209] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5216] symlink("/dev/binderfs", "./binderfs" [pid 5211] <... openat resumed>) = 3 [pid 5216] <... symlink resumed>) = 0 [pid 5211] chdir("./file0" [pid 5216] memfd_create("syzkaller", 0 [pid 5211] <... chdir resumed>) = 0 [pid 5216] <... memfd_create resumed>) = 3 [pid 5211] ioctl(4, LOOP_CLR_FD [pid 5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5211] <... ioctl resumed>) = 0 [pid 5216] <... mmap resumed>) = 0x7f241a43b000 [pid 5211] close(4) = 0 [pid 5211] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 83.204468][ T5217] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5211] unlink("./file1" [pid 5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5211] <... unlink resumed>) = 0 [pid 5211] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5215] <... write resumed>) = 2097152 [pid 5215] munmap(0x7f241a43b000, 2097152) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5215] close(3) = 0 [pid 5215] mkdir("./file0", 0777) = 0 [ 83.370735][ T5215] loop4: detected capacity change from 0 to 4096 [pid 5215] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5216] <... write resumed>) = 2097152 [pid 5216] munmap(0x7f241a43b000, 2097152) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5216] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5216] close(3) = 0 [pid 5216] mkdir("./file0", 0777) = 0 [pid 5216] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5208] <... pwritev resumed>) = 1114112 [pid 5215] <... mount resumed>) = 0 [pid 5208] exit_group(0 [pid 5215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5208] <... exit_group resumed>) = ? [pid 5215] <... openat resumed>) = 3 [pid 5215] chdir("./file0") = 0 [pid 5215] ioctl(4, LOOP_CLR_FD) = 0 [pid 5215] close(4) = 0 [pid 5215] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 83.453028][ T5216] loop2: detected capacity change from 0 to 4096 [ 83.492586][ T5218] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5215] unlink("./file1" [pid 5216] <... mount resumed>) = 0 [pid 5216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5216] chdir("./file0" [pid 5210] <... pwritev resumed>) = 1114112 [pid 5216] <... chdir resumed>) = 0 [pid 5210] exit_group(0 [pid 5216] ioctl(4, LOOP_CLR_FD [pid 5210] <... exit_group resumed>) = ? [pid 5216] <... ioctl resumed>) = 0 [pid 5210] +++ exited with 0 +++ [pid 5216] close(4 [pid 5215] <... unlink resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5215] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5210, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 83.539475][ T5219] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5216] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5216] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] unlink("./file1" [pid 5063] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5209] <... pwritev resumed>) = 1114112 [pid 5063] unlink("./11/binderfs" [pid 5209] exit_group(0 [pid 5063] <... unlink resumed>) = 0 [pid 5209] <... exit_group resumed>) = ? [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5064] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5216] <... unlink resumed>) = 0 [pid 5064] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5216] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./11/binderfs", [pid 5208] +++ exited with 0 +++ [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./11/binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] <... unlink resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... restart_syscall resumed>) = 0 [pid 5068] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./11/binderfs") = 0 [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] <... pwritev resumed>) = 1114112 [pid 5211] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./11/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./11") = 0 [pid 5063] mkdir("./12", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5220 [pid 5211] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, ./strace-static-x86_64: Process 5220 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5220] chdir("./12" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] <... chdir resumed>) = 0 [pid 5066] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] <... prctl resumed>) = 0 [pid 5066] lstat("./11/binderfs", [pid 5220] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] <... setpgid resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] unlink("./11/binderfs" [pid 5064] getdents64(4, [pid 5220] <... openat resumed>) = 3 [pid 5220] write(3, "1000", 4 [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5220] <... write resumed>) = 4 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5220] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5220] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs" [pid 5064] rmdir("./11/file0" [pid 5220] <... symlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5220] memfd_create("syzkaller", 0 [pid 5064] rmdir("./11" [pid 5220] <... memfd_create resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./12", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5220] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5221 [pid 5068] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5221 attached [pid 5221] chdir("./12") = 0 [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] <... prctl resumed>) = 0 [pid 5068] lstat("./11/file0", [pid 5221] setpgid(0, 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5221] <... setpgid resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./11/file0" [pid 5221] write(3, "1000", 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5221] <... write resumed>) = 4 [pid 5068] getdents64(3, [pid 5221] close(3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./11") = 0 [pid 5068] mkdir("./12", 0777 [pid 5221] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5221] <... symlink resumed>) = 0 [pid 5215] <... pwritev resumed>) = 1114112 [pid 5068] <... openat resumed>) = 3 [pid 5221] memfd_create("syzkaller", 0 [pid 5215] exit_group(0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5221] <... memfd_create resumed>) = 3 [pid 5215] <... exit_group resumed>) = ? [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5222 ./strace-static-x86_64: Process 5222 attached [pid 5222] chdir("./12") = 0 [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] setpgid(0, 0) = 0 [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5216] <... pwritev resumed>) = 1114112 [pid 5222] write(3, "1000", 4 [pid 5216] exit_group(0 [pid 5222] <... write resumed>) = 4 [pid 5216] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5222] memfd_create("syzkaller", 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... memfd_create resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] lstat("./11/file0", [pid 5222] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./11/file0" [pid 5220] <... write resumed>) = 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./11") = 0 [pid 5066] mkdir("./12", 0777 [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5220] munmap(0x7f241a43b000, 2097152 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5223 ./strace-static-x86_64: Process 5223 attached [pid 5220] <... munmap resumed>) = 0 [pid 5223] chdir("./12" [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5223] <... chdir resumed>) = 0 [pid 5220] <... openat resumed>) = 4 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5220] ioctl(4, LOOP_SET_FD, 3 [pid 5223] <... prctl resumed>) = 0 [pid 5215] +++ exited with 0 +++ [pid 5223] setpgid(0, 0) = 0 [pid 5220] <... ioctl resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5220] close(3 [pid 5067] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... openat resumed>) = 3 [pid 5220] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] write(3, "1000", 4 [pid 5220] mkdir("./file0", 0777 [pid 5067] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5223] <... write resumed>) = 4 [pid 5220] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5223] close(3 [pid 5220] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] fstat(3, [pid 5223] <... close resumed>) = 0 [pid 5221] <... write resumed>) = 2097152 [pid 5216] +++ exited with 0 +++ [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs" [pid 5221] munmap(0x7f241a43b000, 2097152 [pid 5067] getdents64(3, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5216, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5223] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5223] memfd_create("syzkaller", 0 [pid 5221] <... munmap resumed>) = 0 [pid 5067] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5223] <... memfd_create resumed>) = 3 [pid 5221] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... restart_syscall resumed>) = 0 [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5221] <... openat resumed>) = 4 [ 84.158825][ T5220] loop0: detected capacity change from 0 to 4096 [pid 5067] lstat("./11/binderfs", [pid 5223] <... mmap resumed>) = 0x7f241a43b000 [pid 5221] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./11/binderfs") = 0 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... write resumed>) = 2097152 [pid 5065] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] close(3 [pid 5065] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] <... close resumed>) = 0 [pid 5222] munmap(0x7f241a43b000, 2097152 [pid 5221] mkdir("./file0", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5220] <... mount resumed>) = 0 [pid 5221] <... mkdir resumed>) = 0 [pid 5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] fstat(3, [pid 5222] <... munmap resumed>) = 0 [pid 5221] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5220] <... openat resumed>) = 3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5220] chdir("./file0" [pid 5065] getdents64(3, [pid 5222] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5220] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5222] <... openat resumed>) = 4 [pid 5220] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5220] <... ioctl resumed>) = 0 [ 84.227007][ T5221] loop1: detected capacity change from 0 to 4096 [ 84.244293][ T5224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] close(4 [pid 5065] lstat("./12/binderfs", [pid 5220] <... close resumed>) = 0 [pid 5222] <... ioctl resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] mkdir("./file0", 0777 [pid 5067] <... umount2 resumed>) = 0 [pid 5220] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5221] <... mount resumed>) = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file0") = 0 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5221] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5065] unlink("./12/binderfs" [pid 5222] <... mkdir resumed>) = 0 [pid 5221] unlink("./file1" [pid 5220] <... openat resumed>) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 5222] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5220] unlink("./file1" [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./11/file0", [pid 5220] <... unlink resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./11/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [ 84.289949][ T5222] loop5: detected capacity change from 0 to 4096 [ 84.306892][ T5225] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] rmdir("./11") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5067] mkdir("./12", 0777 [pid 5223] <... write resumed>) = 2097152 [pid 5067] <... mkdir resumed>) = 0 [pid 5221] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5222] <... mount resumed>) = 0 [pid 5221] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... openat resumed>) = 3 [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5222] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5222] chdir("./file0" [pid 5067] close(3 [pid 5222] <... chdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5222] ioctl(4, LOOP_CLR_FD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5223] munmap(0x7f241a43b000, 2097152 [pid 5222] <... ioctl resumed>) = 0 [pid 5223] <... munmap resumed>) = 0 [pid 5222] close(4 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5227 [pid 5223] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5222] <... close resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5227 attached [pid 5223] <... openat resumed>) = 4 [pid 5222] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5227] chdir("./12" [pid 5223] ioctl(4, LOOP_SET_FD, 3 [ 84.385713][ T5226] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5222] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5227] <... chdir resumed>) = 0 [pid 5223] <... ioctl resumed>) = 0 [pid 5222] unlink("./file1" [pid 5065] lstat("./12/file0", [pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5227] <... prctl resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5227] <... setpgid resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5222] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5227] <... openat resumed>) = 3 [pid 5222] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] fstat(4, [pid 5227] write(3, "1000", 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5227] <... write resumed>) = 4 [pid 5065] getdents64(4, [pid 5227] close(3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5227] <... close resumed>) = 0 [pid 5223] close(3 [pid 5065] getdents64(4, [pid 5227] symlink("/dev/binderfs", "./binderfs" [pid 5223] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5227] <... symlink resumed>) = 0 [pid 5223] mkdir("./file0", 0777 [pid 5065] close(4 [pid 5227] memfd_create("syzkaller", 0 [pid 5223] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [ 84.427390][ T5223] loop3: detected capacity change from 0 to 4096 [pid 5227] <... memfd_create resumed>) = 3 [pid 5223] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] rmdir("./12/file0" [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5227] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./12") = 0 [pid 5065] mkdir("./13", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5228 ./strace-static-x86_64: Process 5228 attached [pid 5228] chdir("./13") = 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5223] <... mount resumed>) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5228] <... openat resumed>) = 3 [pid 5223] <... openat resumed>) = 3 [pid 5228] write(3, "1000", 4 [pid 5223] chdir("./file0" [pid 5228] <... write resumed>) = 4 [pid 5223] <... chdir resumed>) = 0 [pid 5228] close(3 [pid 5223] ioctl(4, LOOP_CLR_FD [pid 5228] <... close resumed>) = 0 [pid 5223] <... ioctl resumed>) = 0 [pid 5228] symlink("/dev/binderfs", "./binderfs" [pid 5223] close(4 [pid 5228] <... symlink resumed>) = 0 [pid 5223] <... close resumed>) = 0 [pid 5228] memfd_create("syzkaller", 0 [pid 5223] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5228] <... memfd_create resumed>) = 3 [pid 5223] <... openat resumed>) = 4 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5223] unlink("./file1" [pid 5228] <... mmap resumed>) = 0x7f241a43b000 [ 84.548042][ T5229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5227] <... write resumed>) = 2097152 [pid 5223] <... unlink resumed>) = 0 [pid 5223] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5227] munmap(0x7f241a43b000, 2097152) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5227] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5227] close(3) = 0 [pid 5220] <... pwritev resumed>) = 1114112 [pid 5227] mkdir("./file0", 0777 [pid 5220] exit_group(0 [pid 5227] <... mkdir resumed>) = 0 [pid 5220] <... exit_group resumed>) = ? [pid 5227] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5228] <... write resumed>) = 2097152 [ 84.713405][ T5227] loop4: detected capacity change from 0 to 4096 [pid 5228] munmap(0x7f241a43b000, 2097152) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5228] close(3) = 0 [pid 5228] mkdir("./file0", 0777 [pid 5227] <... mount resumed>) = 0 [pid 5227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5227] chdir("./file0") = 0 [pid 5227] ioctl(4, LOOP_CLR_FD [pid 5222] <... pwritev resumed>) = 1114112 [pid 5227] <... ioctl resumed>) = 0 [pid 5222] exit_group(0 [pid 5221] <... pwritev resumed>) = 1114112 [pid 5228] <... mkdir resumed>) = 0 [pid 5227] close(4 [pid 5222] <... exit_group resumed>) = ? [pid 5221] exit_group(0 [pid 5228] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5227] <... close resumed>) = 0 [ 84.789851][ T5228] loop2: detected capacity change from 0 to 4096 [ 84.796548][ T5230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5221] <... exit_group resumed>) = ? [pid 5227] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5220] +++ exited with 0 +++ [pid 5227] <... openat resumed>) = 4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5227] unlink("./file1") = 0 [pid 5227] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./12/binderfs") = 0 [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... pwritev resumed>) = 1114112 [pid 5223] exit_group(0) = ? [pid 5228] <... mount resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5228] chdir("./file0") = 0 [pid 5228] ioctl(4, LOOP_CLR_FD) = 0 [pid 5228] close(4 [pid 5222] +++ exited with 0 +++ [pid 5228] <... close resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5068] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./12/binderfs" [pid 5228] <... openat resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 5228] unlink("./file1" [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] <... unlink resumed>) = 0 [ 84.924903][ T5231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5228] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5221] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5064] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./12/binderfs", [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./12/binderfs" [pid 5063] lstat("./12/file0", [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5068] lstat("./12/file0", [pid 5063] fstat(4, [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5068] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5223] +++ exited with 0 +++ [pid 5068] fstat(4, [pid 5063] getdents64(4, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./12/file0" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(4 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] fstat(3, [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5068] rmdir("./12/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./12/binderfs", [pid 5064] lstat("./12/file0", [pid 5063] close(3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] close(3 [pid 5066] unlink("./12/binderfs" [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./12" [pid 5068] rmdir("./12" [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] mkdir("./13", 0777 [pid 5064] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] fstat(4, [pid 5063] mkdir("./13", 0777 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5064] getdents64(4, [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5063] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] rmdir("./12/file0" [pid 5068] close(3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5232 [pid 5064] close(3 [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5233 ./strace-static-x86_64: Process 5232 attached [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./12") = 0 ./strace-static-x86_64: Process 5233 attached [pid 5064] mkdir("./13", 0777 [pid 5233] chdir("./13" [pid 5232] chdir("./13" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5233] <... chdir resumed>) = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5233] <... setpgid resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5232] <... chdir resumed>) = 0 [pid 5227] <... pwritev resumed>) = 1114112 [pid 5066] lstat("./12/file0", [pid 5064] <... openat resumed>) = 3 [pid 5233] <... openat resumed>) = 3 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5227] exit_group(0 [pid 5233] write(3, "1000", 4 [pid 5232] <... prctl resumed>) = 0 [pid 5227] <... exit_group resumed>) = ? [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5233] <... write resumed>) = 4 [pid 5232] setpgid(0, 0 [pid 5233] close(3) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5232] <... setpgid resumed>) = 0 [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5232] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5232] write(3, "1000", 4) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] fstat(4, [pid 5232] close(3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5232] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5232] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5234 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5232] <... symlink resumed>) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5066] close(4./strace-static-x86_64: Process 5234 attached [pid 5234] chdir("./13" [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 5232] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] rmdir("./12/file0" [pid 5234] <... chdir resumed>) = 0 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5234] setpgid(0, 0) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... rmdir resumed>) = 0 [pid 5234] <... openat resumed>) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 [pid 5234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5234] memfd_create("syzkaller", 0 [pid 5066] getdents64(3, [pid 5234] <... memfd_create resumed>) = 3 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5234] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] close(3) = 0 [pid 5066] rmdir("./12") = 0 [pid 5066] mkdir("./13", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5235 ./strace-static-x86_64: Process 5235 attached [pid 5235] chdir("./13") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5235] <... prctl resumed>) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5227] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5232] <... write resumed>) = 2097152 [pid 5067] unlink("./12/binderfs" [pid 5233] munmap(0x7f241a43b000, 2097152 [pid 5228] <... pwritev resumed>) = 1114112 [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] exit_group(0) = ? [pid 5233] <... munmap resumed>) = 0 [pid 5232] munmap(0x7f241a43b000, 2097152 [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5232] <... munmap resumed>) = 0 [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5232] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5234] <... write resumed>) = 2097152 [pid 5234] munmap(0x7f241a43b000, 2097152) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5233] <... ioctl resumed>) = 0 [pid 5232] <... openat resumed>) = 4 [pid 5233] close(3 [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5233] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5234] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5233] mkdir("./file0", 0777 [pid 5234] close(3) = 0 [pid 5234] mkdir("./file0", 0777 [pid 5233] <... mkdir resumed>) = 0 [pid 5233] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5234] <... mkdir resumed>) = 0 [pid 5067] rmdir("./12/file0") = 0 [pid 5234] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5232] <... ioctl resumed>) = 0 [pid 5067] getdents64(3, [pid 5232] close(3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5232] <... close resumed>) = 0 [pid 5067] close(3 [pid 5232] mkdir("./file0", 0777 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./12" [pid 5232] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5232] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] mkdir("./13", 0777 [pid 5235] <... write resumed>) = 2097152 [pid 5067] <... mkdir resumed>) = 0 [pid 5235] munmap(0x7f241a43b000, 2097152 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 85.407606][ T5233] loop0: detected capacity change from 0 to 4096 [ 85.413818][ T5234] loop1: detected capacity change from 0 to 4096 [ 85.423339][ T5232] loop5: detected capacity change from 0 to 4096 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5235] <... munmap resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5237 ./strace-static-x86_64: Process 5237 attached [pid 5237] chdir("./13" [pid 5235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5228] +++ exited with 0 +++ [pid 5237] <... chdir resumed>) = 0 [pid 5235] <... openat resumed>) = 4 [pid 5233] <... openat resumed>) = 3 [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5233] chdir("./file0" [pid 5237] <... prctl resumed>) = 0 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [pid 5234] <... mount resumed>) = 0 [pid 5233] <... chdir resumed>) = 0 [pid 5237] setpgid(0, 0 [pid 5234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5233] ioctl(4, LOOP_CLR_FD [pid 5237] <... setpgid resumed>) = 0 [pid 5234] <... openat resumed>) = 3 [pid 5233] <... ioctl resumed>) = 0 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5234] chdir("./file0" [pid 5233] close(4 [pid 5237] <... openat resumed>) = 3 [pid 5234] <... chdir resumed>) = 0 [pid 5233] <... close resumed>) = 0 [pid 5237] write(3, "1000", 4 [pid 5234] ioctl(4, LOOP_CLR_FD [pid 5233] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5237] <... write resumed>) = 4 [pid 5234] <... ioctl resumed>) = 0 [pid 5233] <... openat resumed>) = 4 [pid 5237] close(3 [pid 5234] close(4 [pid 5233] unlink("./file1" [pid 5237] <... close resumed>) = 0 [pid 5234] <... close resumed>) = 0 [pid 5237] symlink("/dev/binderfs", "./binderfs" [pid 5234] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5237] <... symlink resumed>) = 0 [pid 5234] <... openat resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5237] memfd_create("syzkaller", 0 [pid 5234] unlink("./file1" [pid 5237] <... memfd_create resumed>) = 3 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5235] <... ioctl resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5235] close(3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5235] <... close resumed>) = 0 [pid 5235] mkdir("./file0", 0777) = 0 [pid 5065] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5232] <... mount resumed>) = 0 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] getdents64(3, [pid 5234] <... unlink resumed>) = 0 [pid 5233] <... unlink resumed>) = 0 [pid 5232] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5234] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5233] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5232] chdir("./file0" [pid 5065] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 85.472204][ T5236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.491673][ T5238] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.503352][ T5235] loop3: detected capacity change from 0 to 4096 [ 85.510036][ T5239] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] unlink("./13/binderfs" [pid 5235] <... mount resumed>) = 0 [pid 5232] <... chdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5232] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] <... openat resumed>) = 3 [pid 5232] <... ioctl resumed>) = 0 [pid 5235] chdir("./file0" [pid 5232] close(4 [pid 5235] <... chdir resumed>) = 0 [pid 5232] <... close resumed>) = 0 [pid 5235] ioctl(4, LOOP_CLR_FD [pid 5232] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5235] <... ioctl resumed>) = 0 [pid 5235] close(4 [pid 5232] <... openat resumed>) = 4 [pid 5235] <... close resumed>) = 0 [pid 5232] unlink("./file1" [pid 5235] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5235] unlink("./file1" [pid 5232] <... unlink resumed>) = 0 [pid 5232] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 85.547340][ T5240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./13/file0", [pid 5235] <... unlink resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./13/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./13") = 0 [pid 5065] mkdir("./14", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5241 ./strace-static-x86_64: Process 5241 attached [pid 5241] chdir("./14") = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5241] setpgid(0, 0) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5241] write(3, "1000", 4) = 4 [pid 5241] close(3) = 0 [pid 5237] <... write resumed>) = 2097152 [pid 5241] symlink("/dev/binderfs", "./binderfs" [pid 5237] munmap(0x7f241a43b000, 2097152 [pid 5241] <... symlink resumed>) = 0 [pid 5241] memfd_create("syzkaller", 0) = 3 [pid 5241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5237] <... munmap resumed>) = 0 [pid 5241] <... mmap resumed>) = 0x7f241a43b000 [pid 5237] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5237] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5237] close(3) = 0 [pid 5241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5237] mkdir("./file0", 0777) = 0 [ 85.718464][ T5237] loop4: detected capacity change from 0 to 4096 [pid 5237] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5237] chdir("./file0") = 0 [pid 5237] ioctl(4, LOOP_CLR_FD) = 0 [pid 5237] close(4) = 0 [ 85.779619][ T5242] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5237] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5237] unlink("./file1" [pid 5241] <... write resumed>) = 2097152 [pid 5237] <... unlink resumed>) = 0 [pid 5237] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5241] munmap(0x7f241a43b000, 2097152) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5241] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5241] close(3) = 0 [pid 5241] mkdir("./file0", 0777) = 0 [pid 5241] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5233] <... pwritev resumed>) = 1114112 [pid 5233] exit_group(0) = ? [ 85.927219][ T5241] loop2: detected capacity change from 0 to 4096 [pid 5234] <... pwritev resumed>) = 1114112 [pid 5232] <... pwritev resumed>) = 1114112 [pid 5234] exit_group(0 [pid 5232] exit_group(0 [pid 5234] <... exit_group resumed>) = ? [pid 5232] <... exit_group resumed>) = ? [pid 5235] <... pwritev resumed>) = 1114112 [pid 5235] exit_group(0) = ? [pid 5241] <... mount resumed>) = 0 [pid 5241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5241] chdir("./file0") = 0 [pid 5241] ioctl(4, LOOP_CLR_FD) = 0 [pid 5241] close(4) = 0 [pid 5241] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5241] unlink("./file1") = 0 [ 86.037002][ T5243] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5241] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5234] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5233] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5068] fstat(3, [pid 5066] fstat(3, [pid 5064] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5237] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5237] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... exit_group resumed>) = ? [pid 5068] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./13/binderfs", [pid 5068] lstat("./13/binderfs", [pid 5066] lstat("./13/binderfs", [pid 5064] lstat("./13/binderfs", [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./13/binderfs" [pid 5068] unlink("./13/binderfs" [pid 5066] unlink("./13/binderfs" [pid 5064] unlink("./13/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./13/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] lstat("./13/file0", [pid 5068] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] fstat(4, [pid 5066] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5064] lstat("./13/file0", [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 4 [pid 5237] +++ exited with 0 +++ [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5068] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5068] rmdir("./13/file0" [pid 5067] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./13/file0" [pid 5064] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(3, [pid 5067] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 5064] fstat(4, [pid 5063] getdents64(4, [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] fstat(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5063] close(4 [pid 5068] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] rmdir("./13" [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] rmdir("./13" [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] mkdir("./14", 0777 [pid 5067] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4 [pid 5063] rmdir("./13/file0" [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] lstat("./13/binderfs", [pid 5066] mkdir("./14", 0777 [pid 5064] rmdir("./13/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] unlink("./13/binderfs" [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5068] close(3 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] close(3 [pid 5068] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] rmdir("./13") = 0 [pid 5064] mkdir("./14", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./13" [pid 5066] close(3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5244 [pid 5066] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5245 ./strace-static-x86_64: Process 5245 attached [pid 5245] chdir("./14" [pid 5063] mkdir("./14", 0777 [pid 5245] <... chdir resumed>) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5246 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5245] <... prctl resumed>) = 0 [pid 5245] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 5245] <... setpgid resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3 [pid 5245] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5245] write(3, "1000", 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] <... write resumed>) = 4 [pid 5245] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5247 [pid 5245] <... close resumed>) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5246 attached ./strace-static-x86_64: Process 5244 attached [pid 5245] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5247 attached ) = 3 [pid 5247] chdir("./14" [pid 5246] chdir("./14" [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] chdir("./14" [pid 5247] <... chdir resumed>) = 0 [pid 5246] <... chdir resumed>) = 0 [pid 5245] <... mmap resumed>) = 0x7f241a43b000 [pid 5244] <... chdir resumed>) = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5247] <... prctl resumed>) = 0 [pid 5246] <... prctl resumed>) = 0 [pid 5244] <... prctl resumed>) = 0 [pid 5247] setpgid(0, 0 [pid 5246] setpgid(0, 0 [pid 5244] setpgid(0, 0 [pid 5247] <... setpgid resumed>) = 0 [pid 5246] <... setpgid resumed>) = 0 [pid 5244] <... setpgid resumed>) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5247] write(3, "1000", 4 [pid 5246] <... openat resumed>) = 3 [pid 5247] <... write resumed>) = 4 [pid 5246] write(3, "1000", 4 [pid 5244] <... openat resumed>) = 3 [pid 5247] close(3 [pid 5246] <... write resumed>) = 4 [pid 5244] write(3, "1000", 4 [pid 5247] <... close resumed>) = 0 [pid 5246] close(3 [pid 5244] <... write resumed>) = 4 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5246] <... close resumed>) = 0 [pid 5244] close(3 [pid 5247] <... symlink resumed>) = 0 [pid 5246] symlink("/dev/binderfs", "./binderfs" [pid 5244] <... close resumed>) = 0 [pid 5247] memfd_create("syzkaller", 0 [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 5247] <... memfd_create resumed>) = 3 [pid 5246] <... symlink resumed>) = 0 [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] <... symlink resumed>) = 0 [pid 5246] memfd_create("syzkaller", 0 [pid 5247] <... mmap resumed>) = 0x7f241a43b000 [pid 5244] memfd_create("syzkaller", 0 [pid 5246] <... memfd_create resumed>) = 3 [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] <... memfd_create resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... mmap resumed>) = 0x7f241a43b000 [pid 5244] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] <... pwritev resumed>) = 1114112 [pid 5067] <... openat resumed>) = 4 [pid 5241] exit_group(0 [pid 5067] fstat(4, [pid 5241] <... exit_group resumed>) = ? [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./13/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./13" [pid 5247] <... write resumed>) = 2097152 [pid 5245] <... write resumed>) = 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./14", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5248 ./strace-static-x86_64: Process 5248 attached [pid 5248] chdir("./14") = 0 [pid 5245] munmap(0x7f241a43b000, 2097152 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5246] <... write resumed>) = 2097152 [pid 5245] <... munmap resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5248] <... prctl resumed>) = 0 [pid 5245] <... openat resumed>) = 4 [pid 5248] setpgid(0, 0) = 0 [pid 5245] ioctl(4, LOOP_SET_FD, 3 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... write resumed>) = 2097152 [pid 5246] munmap(0x7f241a43b000, 2097152 [pid 5248] <... openat resumed>) = 3 [pid 5244] munmap(0x7f241a43b000, 2097152 [pid 5248] write(3, "1000", 4 [pid 5247] munmap(0x7f241a43b000, 2097152 [pid 5248] <... write resumed>) = 4 [pid 5246] <... munmap resumed>) = 0 [pid 5248] close(3 [pid 5244] <... munmap resumed>) = 0 [pid 5246] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5248] <... close resumed>) = 0 [pid 5247] <... munmap resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5248] symlink("/dev/binderfs", "./binderfs" [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5246] <... openat resumed>) = 4 [pid 5248] <... symlink resumed>) = 0 [pid 5247] <... openat resumed>) = 4 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5248] memfd_create("syzkaller", 0 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... memfd_create resumed>) = 3 [pid 5246] <... ioctl resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5241] +++ exited with 0 +++ [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5246] close(3 [pid 5244] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... mmap resumed>) = 0x7f241a43b000 [pid 5246] <... close resumed>) = 0 [pid 5245] <... ioctl resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5245] close(3 [pid 5065] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] mkdir("./file0", 0777 [pid 5065] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5245] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] fstat(3, [pid 5246] mkdir("./file0", 0777 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./14/binderfs") = 0 [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] <... ioctl resumed>) = 0 [pid 5247] close(3) = 0 [pid 5246] <... mkdir resumed>) = 0 [pid 5244] <... ioctl resumed>) = 0 [pid 5246] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5244] close(3) = 0 [pid 5244] mkdir("./file0", 0777) = 0 [ 86.533530][ T5245] loop1: detected capacity change from 0 to 4096 [ 86.555420][ T5246] loop3: detected capacity change from 0 to 4096 [ 86.556118][ T5247] loop0: detected capacity change from 0 to 4096 [ 86.571041][ T5244] loop5: detected capacity change from 0 to 4096 [pid 5244] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5247] mkdir("./file0", 0777 [pid 5246] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [ 86.616185][ T5249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] <... mkdir resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5245] <... mount resumed>) = 0 [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5246] <... openat resumed>) = 3 [pid 5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] <... mount resumed>) = 0 [pid 5248] <... write resumed>) = 2097152 [pid 5246] chdir("./file0" [pid 5245] <... openat resumed>) = 3 [pid 5244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] lstat("./14/file0", [pid 5248] munmap(0x7f241a43b000, 2097152 [pid 5246] <... chdir resumed>) = 0 [pid 5245] chdir("./file0" [pid 5246] ioctl(4, LOOP_CLR_FD [pid 5245] <... chdir resumed>) = 0 [pid 5244] <... openat resumed>) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5248] <... munmap resumed>) = 0 [pid 5246] <... ioctl resumed>) = 0 [pid 5245] ioctl(4, LOOP_CLR_FD [pid 5244] chdir("./file0" [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5248] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5246] close(4 [pid 5245] <... ioctl resumed>) = 0 [pid 5244] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5248] <... openat resumed>) = 4 [pid 5246] <... close resumed>) = 0 [pid 5245] close(4) = 0 [pid 5245] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5245] unlink("./file1" [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5246] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5244] <... ioctl resumed>) = 0 [pid 5245] <... unlink resumed>) = 0 [ 86.670367][ T5250] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.687752][ T5251] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... openat resumed>) = 4 [pid 5246] <... openat resumed>) = 4 [pid 5245] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5244] close(4 [pid 5248] <... ioctl resumed>) = 0 [pid 5246] unlink("./file1" [pid 5065] fstat(4, [pid 5248] close(3 [pid 5244] <... close resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5248] <... close resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5248] mkdir("./file0", 0777 [pid 5246] <... unlink resumed>) = 0 [pid 5244] unlink("./file1" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5248] <... mkdir resumed>) = 0 [pid 5246] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] getdents64(4, [pid 5248] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [ 86.729038][ T5248] loop4: detected capacity change from 0 to 4096 [pid 5065] rmdir("./14/file0") = 0 [pid 5247] <... mount resumed>) = 0 [pid 5065] getdents64(3, [pid 5247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5247] chdir("./file0" [pid 5065] close(3 [pid 5247] <... chdir resumed>) = 0 [pid 5244] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5247] ioctl(4, LOOP_CLR_FD [pid 5244] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] rmdir("./14" [pid 5248] <... mount resumed>) = 0 [pid 5247] <... ioctl resumed>) = 0 [pid 5248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5247] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5248] <... openat resumed>) = 3 [pid 5247] <... close resumed>) = 0 [pid 5247] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5247] unlink("./file1" [pid 5065] mkdir("./15", 0777) = 0 [pid 5248] chdir("./file0" [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5248] <... chdir resumed>) = 0 [pid 5248] ioctl(4, LOOP_CLR_FD [pid 5065] <... openat resumed>) = 3 [pid 5248] <... ioctl resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5248] close(4 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5248] <... close resumed>) = 0 [pid 5065] close(3 [pid 5248] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5247] <... unlink resumed>) = 0 [pid 5247] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5248] <... openat resumed>) = 4 [pid 5248] unlink("./file1" [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5254 ./strace-static-x86_64: Process 5254 attached [pid 5254] chdir("./15" [pid 5248] <... unlink resumed>) = 0 [ 86.777168][ T5252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.803313][ T5253] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5248] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5254] <... chdir resumed>) = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5254] memfd_create("syzkaller", 0) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5254] munmap(0x7f241a43b000, 2097152) = 0 [pid 5254] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5254] close(3) = 0 [pid 5254] mkdir("./file0", 0777) = 0 [pid 5244] <... pwritev resumed>) = 1114112 [pid 5254] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5244] exit_group(0) = ? [pid 5245] <... pwritev resumed>) = 1114112 [ 87.101786][ T5254] loop2: detected capacity change from 0 to 4096 [pid 5254] <... mount resumed>) = 0 [pid 5248] <... pwritev resumed>) = 1114112 [pid 5245] exit_group(0 [pid 5248] exit_group(0 [pid 5245] <... exit_group resumed>) = ? [pid 5254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5248] <... exit_group resumed>) = ? [pid 5254] <... openat resumed>) = 3 [pid 5254] chdir("./file0") = 0 [pid 5254] ioctl(4, LOOP_CLR_FD) = 0 [pid 5247] <... pwritev resumed>) = 1114112 [pid 5254] close(4 [pid 5247] exit_group(0 [pid 5254] <... close resumed>) = 0 [pid 5254] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5247] <... exit_group resumed>) = ? [ 87.152128][ T5255] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5246] <... pwritev resumed>) = 1114112 [pid 5246] exit_group(0) = ? [pid 5254] <... openat resumed>) = 4 [pid 5254] unlink("./file1") = 0 [pid 5254] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5244] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5068] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./14/binderfs") = 0 [pid 5068] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5247] +++ exited with 0 +++ [pid 5064] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5248] +++ exited with 0 +++ [pid 5064] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5248, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./14/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5063] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5063] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5067] lstat("./14/binderfs", [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(3, [pid 5067] unlink("./14/binderfs" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... unlink resumed>) = 0 [pid 5063] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./14/binderfs", [pid 5068] <... umount2 resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./14/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./14/file0", [pid 5063] <... unlink resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5246] +++ exited with 0 +++ [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5068] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] fstat(3, [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5066] getdents64(3, [pid 5064] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./14/file0" [pid 5066] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./14/file0" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5066] lstat("./14/binderfs", [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] unlink("./14/binderfs" [pid 5068] rmdir("./14" [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./15", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] rmdir("./14") = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5256 [pid 5064] mkdir("./15", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5256 attached [pid 5064] close(3 [pid 5256] chdir("./15" [pid 5064] <... close resumed>) = 0 [pid 5256] <... chdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5257 [pid 5256] setpgid(0, 0) = 0 [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5257 attached ) = 3 [pid 5257] chdir("./15" [pid 5256] write(3, "1000", 4 [pid 5257] <... chdir resumed>) = 0 [pid 5256] <... write resumed>) = 4 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5256] close(3 [pid 5257] <... prctl resumed>) = 0 [pid 5256] <... close resumed>) = 0 [pid 5257] setpgid(0, 0 [pid 5256] symlink("/dev/binderfs", "./binderfs" [pid 5257] <... setpgid resumed>) = 0 [pid 5256] <... symlink resumed>) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5256] memfd_create("syzkaller", 0 [pid 5257] <... openat resumed>) = 3 [pid 5256] <... memfd_create resumed>) = 3 [pid 5257] write(3, "1000", 4 [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] <... write resumed>) = 4 [pid 5256] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = 0 [pid 5257] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5257] <... close resumed>) = 0 [pid 5257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] memfd_create("syzkaller", 0) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./14/file0", [pid 5063] lstat("./14/file0", [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5066] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] getdents64(4, [pid 5063] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5066] getdents64(4, [pid 5063] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, [pid 5067] close(4 [pid 5066] close(4 [pid 5067] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./14/file0" [pid 5066] rmdir("./14/file0" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] close(3 [pid 5066] close(3 [pid 5063] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./14" [pid 5066] rmdir("./14" [pid 5063] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] mkdir("./15", 0777 [pid 5066] mkdir("./15", 0777 [pid 5063] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] rmdir("./14/file0" [pid 5067] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5254] <... pwritev resumed>) = 1114112 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 5254] exit_group(0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5254] <... exit_group resumed>) = ? [pid 5067] close(3 [pid 5066] close(3 [pid 5063] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5258 ./strace-static-x86_64: Process 5258 attached [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5259 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./14" [pid 5258] chdir("./15" [pid 5063] <... rmdir resumed>) = 0 [pid 5258] <... chdir resumed>) = 0 [pid 5063] mkdir("./15", 0777 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5258] <... setpgid resumed>) = 0 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5258] write(3, "1000", 4) = 4 [pid 5258] close(3) = 0 [pid 5258] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5259 attached ) = 0 [pid 5256] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5259] chdir("./15" [pid 5258] memfd_create("syzkaller", 0) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5259] <... chdir resumed>) = 0 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5258] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5259] <... prctl resumed>) = 0 [pid 5063] close(3 [pid 5259] setpgid(0, 0) = 0 [pid 5063] <... close resumed>) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5259] <... openat resumed>) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5260 [pid 5259] close(3) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5259] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5260 attached ) = 3 [pid 5260] chdir("./15" [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] <... write resumed>) = 2097152 [pid 5260] <... chdir resumed>) = 0 [pid 5259] <... mmap resumed>) = 0x7f241a43b000 [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] munmap(0x7f241a43b000, 2097152 [pid 5260] setpgid(0, 0 [pid 5256] <... munmap resumed>) = 0 [pid 5260] <... setpgid resumed>) = 0 [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5260] write(3, "1000", 4) = 4 [pid 5256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5260] close(3 [pid 5256] <... openat resumed>) = 4 [pid 5260] <... close resumed>) = 0 [pid 5256] ioctl(4, LOOP_SET_FD, 3 [pid 5260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] munmap(0x7f241a43b000, 2097152 [pid 5260] memfd_create("syzkaller", 0 [pid 5257] <... munmap resumed>) = 0 [pid 5260] <... memfd_create resumed>) = 3 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5260] <... mmap resumed>) = 0x7f241a43b000 [pid 5257] <... openat resumed>) = 4 [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] <... ioctl resumed>) = 0 [pid 5254] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5256] close(3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5256] <... close resumed>) = 0 [pid 5256] mkdir("./file0", 0777) = 0 [pid 5256] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5257] close(3 [pid 5065] fstat(3, [pid 5257] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5257] mkdir("./file0", 0777 [pid 5065] getdents64(3, [pid 5257] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5257] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 87.666161][ T5256] loop5: detected capacity change from 0 to 4096 [ 87.700631][ T5257] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5259] <... write resumed>) = 2097152 [pid 5065] lstat("./15/binderfs", [pid 5259] munmap(0x7f241a43b000, 2097152 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5259] <... munmap resumed>) = 0 [pid 5065] unlink("./15/binderfs" [pid 5256] <... mount resumed>) = 0 [pid 5256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5256] chdir("./file0") = 0 [pid 5256] ioctl(4, LOOP_CLR_FD) = 0 [pid 5256] close(4) = 0 [pid 5256] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5256] unlink("./file1" [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... umount2 resumed>) = 0 [pid 5259] <... openat resumed>) = 4 [pid 5257] <... mount resumed>) = 0 [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5258] <... write resumed>) = 2097152 [pid 5257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5258] munmap(0x7f241a43b000, 2097152 [pid 5257] <... openat resumed>) = 3 [ 87.751829][ T5261] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.783612][ T5262] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5258] <... munmap resumed>) = 0 [pid 5257] chdir("./file0") = 0 [pid 5257] ioctl(4, LOOP_CLR_FD [pid 5258] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5257] <... ioctl resumed>) = 0 [pid 5258] <... openat resumed>) = 4 [pid 5257] close(4 [pid 5258] ioctl(4, LOOP_SET_FD, 3 [pid 5257] <... close resumed>) = 0 [pid 5257] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5259] <... ioctl resumed>) = 0 [pid 5257] unlink("./file1" [pid 5259] close(3 [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] mkdir("./file0", 0777 [pid 5258] <... ioctl resumed>) = 0 [pid 5258] close(3) = 0 [pid 5259] <... mkdir resumed>) = 0 [pid 5258] mkdir("./file0", 0777 [pid 5065] lstat("./15/file0", [pid 5259] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5258] <... mkdir resumed>) = 0 [pid 5256] <... unlink resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5256] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 87.798923][ T5259] loop4: detected capacity change from 0 to 4096 [ 87.808195][ T5258] loop3: detected capacity change from 0 to 4096 [pid 5260] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5260] munmap(0x7f241a43b000, 2097152 [pid 5065] getdents64(4, [pid 5260] <... munmap resumed>) = 0 [pid 5257] <... unlink resumed>) = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5257] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5260] <... openat resumed>) = 4 [pid 5259] <... mount resumed>) = 0 [pid 5065] close(4 [pid 5260] ioctl(4, LOOP_SET_FD, 3 [pid 5259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5259] <... openat resumed>) = 3 [pid 5065] rmdir("./15/file0") = 0 [pid 5259] chdir("./file0" [pid 5065] getdents64(3, [pid 5259] <... chdir resumed>) = 0 [pid 5259] ioctl(4, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5259] <... ioctl resumed>) = 0 [pid 5259] close(4 [pid 5065] close(3 [pid 5259] <... close resumed>) = 0 [pid 5259] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./15") = 0 [pid 5259] <... openat resumed>) = 4 [pid 5065] mkdir("./16", 0777 [pid 5259] unlink("./file1" [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5259] <... unlink resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5260] <... ioctl resumed>) = 0 [pid 5259] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5260] close(3 [pid 5065] <... close resumed>) = 0 [pid 5260] <... close resumed>) = 0 [ 87.906848][ T5263] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.920894][ T5260] loop0: detected capacity change from 0 to 4096 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5258] <... mount resumed>) = 0 [pid 5258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5258] chdir("./file0") = 0 [pid 5258] ioctl(4, LOOP_CLR_FD [pid 5260] mkdir("./file0", 0777 [pid 5258] <... ioctl resumed>) = 0 [pid 5258] close(4) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5265 [pid 5260] <... mkdir resumed>) = 0 [pid 5258] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5260] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5258] unlink("./file1"./strace-static-x86_64: Process 5265 attached [pid 5265] chdir("./16") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 87.958653][ T5264] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5265] write(3, "1000", 4 [pid 5260] <... mount resumed>) = 0 [pid 5258] <... unlink resumed>) = 0 [pid 5265] <... write resumed>) = 4 [pid 5260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5258] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5265] close(3 [pid 5260] <... openat resumed>) = 3 [pid 5265] <... close resumed>) = 0 [pid 5260] chdir("./file0" [pid 5265] symlink("/dev/binderfs", "./binderfs" [pid 5260] <... chdir resumed>) = 0 [pid 5265] <... symlink resumed>) = 0 [pid 5260] ioctl(4, LOOP_CLR_FD [pid 5265] memfd_create("syzkaller", 0) = 3 [pid 5260] <... ioctl resumed>) = 0 [pid 5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5260] close(4 [pid 5265] <... mmap resumed>) = 0x7f241a43b000 [pid 5260] <... close resumed>) = 0 [pid 5260] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 88.026651][ T5266] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5260] unlink("./file1") = 0 [pid 5260] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] <... pwritev resumed>) = 1114112 [pid 5256] exit_group(0) = ? [pid 5265] <... write resumed>) = 2097152 [pid 5265] munmap(0x7f241a43b000, 2097152) = 0 [pid 5265] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5265] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5265] close(3) = 0 [pid 5265] mkdir("./file0", 0777) = 0 [ 88.204002][ T5265] loop2: detected capacity change from 0 to 4096 [pid 5265] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5257] <... pwritev resumed>) = 1114112 [pid 5257] exit_group(0) = ? [pid 5256] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5265] <... mount resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5265] chdir("./file0" [pid 5068] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5265] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5265] ioctl(4, LOOP_CLR_FD [pid 5068] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5265] <... ioctl resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5265] close(4 [pid 5068] fstat(3, [pid 5265] <... close resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5265] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5265] <... openat resumed>) = 4 [pid 5068] lstat("./15/binderfs", [pid 5265] unlink("./file1" [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./15/binderfs") = 0 [pid 5068] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... pwritev resumed>) = 1114112 [ 88.298045][ T5267] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5260] exit_group(0 [pid 5265] <... unlink resumed>) = 0 [pid 5260] <... exit_group resumed>) = ? [pid 5265] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5259] <... pwritev resumed>) = 1114112 [pid 5259] exit_group(0) = ? [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./15/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./15") = 0 [pid 5068] mkdir("./16", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5257] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... restart_syscall resumed>) = 0 [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5268 [pid 5064] <... openat resumed>) = 3 [pid 5258] <... pwritev resumed>) = 1114112 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] exit_group(0 [pid 5064] getdents64(3, [pid 5260] +++ exited with 0 +++ [pid 5258] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5268 attached [pid 5064] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] chdir("./16" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... chdir resumed>) = 0 [pid 5064] lstat("./15/binderfs", [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5268] <... prctl resumed>) = 0 [pid 5064] unlink("./15/binderfs" [pid 5268] setpgid(0, 0 [pid 5064] <... unlink resumed>) = 0 [pid 5268] <... setpgid resumed>) = 0 [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5268] <... openat resumed>) = 3 [pid 5268] write(3, "1000", 4 [pid 5063] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] <... write resumed>) = 4 [pid 5268] close(3) = 0 [pid 5268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5268] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... memfd_create resumed>) = 3 [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5268] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5259] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] lstat("./15/file0", [pid 5063] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./15/binderfs" [pid 5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5258] +++ exited with 0 +++ [pid 5067] <... unlink resumed>) = 0 [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./15/binderfs", [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] unlink("./15/binderfs" [pid 5265] <... pwritev resumed>) = 1114112 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5265] exit_group(0 [pid 5066] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./15/file0") = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5066] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5265] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(3, [pid 5064] getdents64(4, [pid 5066] fstat(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5064] <... close resumed>) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./15") = 0 [pid 5067] mkdir("./16", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] rmdir("./15/file0" [pid 5066] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5066] lstat("./15/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(3 [pid 5066] unlink("./15/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] rmdir("./15" [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./16", 0777 [pid 5067] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5269 ./strace-static-x86_64: Process 5269 attached [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5270 [pid 5269] chdir("./16") = 0 [pid 5269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5269] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5270 attached [pid 5270] chdir("./16" [pid 5269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5270] <... chdir resumed>) = 0 [pid 5269] write(3, "1000", 4 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5269] <... write resumed>) = 4 [pid 5268] <... write resumed>) = 2097152 [pid 5270] <... prctl resumed>) = 0 [pid 5269] close(3 [pid 5270] setpgid(0, 0 [pid 5269] <... close resumed>) = 0 [pid 5269] symlink("/dev/binderfs", "./binderfs" [pid 5270] <... setpgid resumed>) = 0 [pid 5269] <... symlink resumed>) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5269] memfd_create("syzkaller", 0 [pid 5270] <... openat resumed>) = 3 [pid 5269] <... memfd_create resumed>) = 3 [pid 5270] write(3, "1000", 4 [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5270] <... write resumed>) = 4 [pid 5269] <... mmap resumed>) = 0x7f241a43b000 [pid 5270] close(3 [pid 5066] <... umount2 resumed>) = 0 [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... close resumed>) = 0 [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./15/file0", [pid 5270] <... symlink resumed>) = 0 [pid 5270] memfd_create("syzkaller", 0 [pid 5066] lstat("./15/file0", [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5270] <... memfd_create resumed>) = 3 [pid 5268] munmap(0x7f241a43b000, 2097152 [pid 5265] +++ exited with 0 +++ [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5268] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5270] <... mmap resumed>) = 0x7f241a43b000 [pid 5268] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5268] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5268] ioctl(4, LOOP_SET_FD, 3 [pid 5063] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... restart_syscall resumed>) = 0 [pid 5063] getdents64(4, [pid 5066] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] fstat(4, [pid 5063] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5063] rmdir("./15/file0" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] fstat(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5066] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./15/file0" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] close(3 [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5268] <... ioctl resumed>) = 0 [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./15" [pid 5268] close(3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./16/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5268] <... close resumed>) = 0 [pid 5066] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] mkdir("./16", 0777 [pid 5270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5268] mkdir("./file0", 0777 [pid 5066] <... close resumed>) = 0 [pid 5065] unlink("./16/binderfs" [pid 5063] <... mkdir resumed>) = 0 [pid 5268] <... mkdir resumed>) = 0 [pid 5066] rmdir("./15" [pid 5065] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5268] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5066] mkdir("./16", 0777 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5271 [ 88.739801][ T5268] loop5: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5271 attached [pid 5271] chdir("./16") = 0 [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5271] <... write resumed>) = 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5271] close(3 [pid 5066] close(3 [pid 5271] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5271] <... symlink resumed>) = 0 [pid 5271] memfd_create("syzkaller", 0) = 3 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5273 [pid 5065] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5273 attached [pid 5273] chdir("./16") = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5268] <... mount resumed>) = 0 [pid 5273] write(3, "1000", 4 [pid 5268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5273] <... write resumed>) = 4 [pid 5268] <... openat resumed>) = 3 [pid 5273] close(3 [pid 5268] chdir("./file0" [pid 5273] <... close resumed>) = 0 [pid 5268] <... chdir resumed>) = 0 [pid 5273] symlink("/dev/binderfs", "./binderfs" [pid 5268] ioctl(4, LOOP_CLR_FD [pid 5273] <... symlink resumed>) = 0 [pid 5268] <... ioctl resumed>) = 0 [pid 5273] memfd_create("syzkaller", 0 [pid 5268] close(4 [pid 5273] <... memfd_create resumed>) = 3 [pid 5268] <... close resumed>) = 0 [pid 5273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5268] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5273] <... mmap resumed>) = 0x7f241a43b000 [pid 5268] <... openat resumed>) = 4 [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] unlink("./file1" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5270] <... write resumed>) = 2097152 [pid 5269] <... write resumed>) = 2097152 [ 88.837056][ T5272] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5270] munmap(0x7f241a43b000, 2097152 [pid 5269] munmap(0x7f241a43b000, 2097152 [pid 5270] <... munmap resumed>) = 0 [pid 5269] <... munmap resumed>) = 0 [pid 5268] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5270] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5269] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5268] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] fstat(4, [pid 5270] <... openat resumed>) = 4 [pid 5269] <... openat resumed>) = 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5270] ioctl(4, LOOP_SET_FD, 3 [pid 5269] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5270] <... ioctl resumed>) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./16/file0" [pid 5270] close(3 [pid 5269] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5270] <... close resumed>) = 0 [pid 5269] close(3 [pid 5065] getdents64(3, [pid 5270] mkdir("./file0", 0777 [pid 5269] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5273] <... write resumed>) = 2097152 [pid 5271] <... write resumed>) = 2097152 [pid 5270] <... mkdir resumed>) = 0 [pid 5269] mkdir("./file0", 0777 [pid 5065] close(3 [pid 5271] munmap(0x7f241a43b000, 2097152 [pid 5273] munmap(0x7f241a43b000, 2097152 [pid 5270] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5269] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5273] <... munmap resumed>) = 0 [pid 5065] rmdir("./16" [pid 5271] <... munmap resumed>) = 0 [pid 5271] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5269] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... rmdir resumed>) = 0 [ 88.917677][ T5270] loop1: detected capacity change from 0 to 4096 [ 88.924597][ T5269] loop4: detected capacity change from 0 to 4096 [pid 5065] mkdir("./17", 0777 [pid 5273] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5273] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5273] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5271] <... openat resumed>) = 4 [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5065] close(3) = 0 [pid 5273] <... ioctl resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5270] <... mount resumed>) = 0 [pid 5270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5270] chdir("./file0") = 0 [pid 5270] ioctl(4, LOOP_CLR_FD) = 0 [pid 5270] close(4) = 0 [pid 5270] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5273] close(3 [pid 5270] <... openat resumed>) = 4 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5275 [pid 5270] unlink("./file1" [pid 5271] <... ioctl resumed>) = 0 [pid 5271] close(3) = 0 [ 88.982602][ T5273] loop3: detected capacity change from 0 to 4096 [ 88.992017][ T5271] loop0: detected capacity change from 0 to 4096 [ 89.004155][ T5274] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5271] mkdir("./file0", 0777./strace-static-x86_64: Process 5275 attached [pid 5273] <... close resumed>) = 0 [pid 5273] mkdir("./file0", 0777 [pid 5271] <... mkdir resumed>) = 0 [pid 5269] <... mount resumed>) = 0 [pid 5271] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5273] <... mkdir resumed>) = 0 [pid 5269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5273] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5269] <... openat resumed>) = 3 [pid 5275] chdir("./17" [pid 5269] chdir("./file0") = 0 [pid 5269] ioctl(4, LOOP_CLR_FD [pid 5275] <... chdir resumed>) = 0 [pid 5269] <... ioctl resumed>) = 0 [pid 5275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5269] close(4 [pid 5275] <... prctl resumed>) = 0 [pid 5275] setpgid(0, 0 [pid 5269] <... close resumed>) = 0 [pid 5275] <... setpgid resumed>) = 0 [pid 5269] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5275] write(3, "1000", 4) = 4 [pid 5275] close(3 [pid 5269] <... openat resumed>) = 4 [pid 5275] <... close resumed>) = 0 [pid 5269] unlink("./file1" [pid 5275] symlink("/dev/binderfs", "./binderfs") = 0 [ 89.026768][ T5276] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5275] memfd_create("syzkaller", 0) = 3 [pid 5273] <... mount resumed>) = 0 [pid 5270] <... unlink resumed>) = 0 [pid 5270] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5275] <... mmap resumed>) = 0x7f241a43b000 [pid 5273] <... openat resumed>) = 3 [pid 5273] chdir("./file0" [pid 5269] <... unlink resumed>) = 0 [pid 5273] <... chdir resumed>) = 0 [pid 5271] <... mount resumed>) = 0 [pid 5269] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5273] ioctl(4, LOOP_CLR_FD [pid 5271] chdir("./file0") = 0 [pid 5271] ioctl(4, LOOP_CLR_FD) = 0 [pid 5271] close(4) = 0 [pid 5271] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5271] unlink("./file1" [pid 5273] <... ioctl resumed>) = 0 [pid 5273] close(4) = 0 [pid 5273] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5273] unlink("./file1" [ 89.073353][ T5277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.091430][ T5278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5273] <... unlink resumed>) = 0 [pid 5273] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5271] <... unlink resumed>) = 0 [pid 5271] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5275] <... write resumed>) = 2097152 [pid 5275] munmap(0x7f241a43b000, 2097152) = 0 [pid 5275] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5275] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5275] close(3) = 0 [pid 5275] mkdir("./file0", 0777) = 0 [ 89.229532][ T5275] loop2: detected capacity change from 0 to 4096 [pid 5275] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5275] chdir("./file0") = 0 [pid 5275] ioctl(4, LOOP_CLR_FD) = 0 [pid 5275] close(4) = 0 [pid 5275] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5275] unlink("./file1" [pid 5268] <... pwritev resumed>) = 1114112 [pid 5268] exit_group(0) = ? [ 89.298517][ T5279] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5275] <... unlink resumed>) = 0 [pid 5275] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5273] <... pwritev resumed>) = 1114112 [pid 5273] exit_group(0 [pid 5268] +++ exited with 0 +++ [pid 5273] <... exit_group resumed>) = ? [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./16/binderfs") = 0 [pid 5068] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] <... pwritev resumed>) = 1114112 [pid 5269] exit_group(0) = ? [pid 5273] +++ exited with 0 +++ [pid 5270] <... pwritev resumed>) = 1114112 [pid 5270] exit_group(0) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5273, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5269] +++ exited with 0 +++ [pid 5066] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5269, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] fstat(3, [pid 5067] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5067] fstat(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./16/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] lstat("./16/binderfs", [pid 5066] unlink("./16/binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5067] unlink("./16/binderfs" [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5068] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] lstat("./16/file0", [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5068] rmdir("./16/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5271] <... pwritev resumed>) = 1114112 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, [pid 5271] exit_group(0 [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5271] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5270] +++ exited with 0 +++ [pid 5068] rmdir("./16" [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] rmdir("./16/file0" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5068] mkdir("./17", 0777 [pid 5275] <... pwritev resumed>) = 1114112 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5275] exit_group(0) = ? [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5067] lstat("./16/file0", [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./16" [pid 5064] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5271] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] fstat(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5063] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./17", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] fstat(4, [pid 5064] getdents64(3, [pid 5063] unlink("./16/binderfs") = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5280 attached [pid 5280] chdir("./17" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5280 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5280] <... chdir resumed>) = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] getdents64(4, [pid 5064] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5280] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] lstat("./16/binderfs", [pid 5067] close(4 [pid 5280] <... setpgid resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] unlink("./16/binderfs" [pid 5067] rmdir("./16/file0" [pid 5066] close(3 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5275] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5280] <... openat resumed>) = 3 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5280] <... write resumed>) = 4 [pid 5067] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5281 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5275, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5280] close(3 [pid 5067] <... close resumed>) = 0 [pid 5065] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] <... close resumed>) = 0 [pid 5067] rmdir("./16" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5280] <... symlink resumed>) = 0 [pid 5067] mkdir("./17", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] fstat(3, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] getdents64(3, ./strace-static-x86_64: Process 5281 attached [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5281] chdir("./17" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... chdir resumed>) = 0 [pid 5067] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... close resumed>) = 0 [pid 5065] lstat("./17/binderfs", [pid 5281] <... prctl resumed>) = 0 [pid 5280] memfd_create("syzkaller", 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5281] setpgid(0, 0 [pid 5280] <... memfd_create resumed>) = 3 [pid 5065] unlink("./17/binderfs" [pid 5281] <... setpgid resumed>) = 0 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5282 [pid 5065] <... unlink resumed>) = 0 [pid 5281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5280] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5281] write(3, "1000", 4) = 4 [pid 5281] close(3./strace-static-x86_64: Process 5282 attached ) = 0 [pid 5282] chdir("./17" [pid 5281] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... chdir resumed>) = 0 [pid 5281] <... symlink resumed>) = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5281] memfd_create("syzkaller", 0 [pid 5282] <... prctl resumed>) = 0 [pid 5281] <... memfd_create resumed>) = 3 [pid 5282] setpgid(0, 0 [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] <... setpgid resumed>) = 0 [pid 5281] <... mmap resumed>) = 0x7f241a43b000 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] write(3, "1000", 4 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... write resumed>) = 4 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] <... close resumed>) = 0 [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./16/file0", [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5064] lstat("./16/file0", [pid 5282] <... symlink resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5282] memfd_create("syzkaller", 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... memfd_create resumed>) = 3 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 5063] fstat(4, [pid 5064] fstat(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5064] close(4 [pid 5063] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./16/file0" [pid 5063] rmdir("./16/file0" [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5065] lstat("./17/file0", [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5064] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3 [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./16" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 5063] rmdir("./16" [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, [pid 5064] mkdir("./17", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5064] <... mkdir resumed>) = 0 [pid 5063] mkdir("./17", 0777 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] close(4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5280] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5280] munmap(0x7f241a43b000, 2097152 [pid 5065] rmdir("./17/file0" [pid 5064] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5280] <... munmap resumed>) = 0 [pid 5065] getdents64(3, [pid 5280] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5280] <... openat resumed>) = 4 [pid 5065] close(3 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5283 [pid 5063] close(3 [pid 5280] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./17" [pid 5063] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./18", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5284 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5283 attached [pid 5281] <... write resumed>) = 2097152 [pid 5280] <... ioctl resumed>) = 0 [pid 5283] chdir("./17" [pid 5281] munmap(0x7f241a43b000, 2097152 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5285 [pid 5280] close(3./strace-static-x86_64: Process 5284 attached [pid 5284] chdir("./17" [pid 5283] <... chdir resumed>) = 0 [pid 5281] <... munmap resumed>) = 0 [pid 5280] <... close resumed>) = 0 ./strace-static-x86_64: Process 5285 attached [pid 5284] <... chdir resumed>) = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5281] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5280] mkdir("./file0", 0777 [pid 5285] chdir("./18" [pid 5284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5283] <... prctl resumed>) = 0 [pid 5281] <... openat resumed>) = 4 [pid 5285] <... chdir resumed>) = 0 [pid 5284] <... prctl resumed>) = 0 [pid 5283] setpgid(0, 0 [pid 5281] ioctl(4, LOOP_SET_FD, 3 [pid 5280] <... mkdir resumed>) = 0 [pid 5285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5284] setpgid(0, 0 [pid 5283] <... setpgid resumed>) = 0 [pid 5285] <... prctl resumed>) = 0 [pid 5284] <... setpgid resumed>) = 0 [pid 5282] <... write resumed>) = 2097152 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5285] setpgid(0, 0 [pid 5284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5281] <... ioctl resumed>) = 0 [pid 5280] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5285] <... setpgid resumed>) = 0 [pid 5284] <... openat resumed>) = 3 [pid 5283] <... openat resumed>) = 3 [pid 5281] close(3 [pid 5285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5284] write(3, "1000", 4 [pid 5283] write(3, "1000", 4 [pid 5285] <... openat resumed>) = 3 [pid 5284] <... write resumed>) = 4 [pid 5283] <... write resumed>) = 4 [pid 5281] <... close resumed>) = 0 [pid 5285] write(3, "1000", 4 [pid 5284] close(3 [pid 5283] close(3 [pid 5281] mkdir("./file0", 0777 [pid 5285] <... write resumed>) = 4 [pid 5284] <... close resumed>) = 0 [pid 5283] <... close resumed>) = 0 [pid 5285] close(3 [ 89.964566][ T5280] loop5: detected capacity change from 0 to 4096 [ 89.997144][ T5281] loop3: detected capacity change from 0 to 4096 [pid 5284] symlink("/dev/binderfs", "./binderfs" [pid 5283] symlink("/dev/binderfs", "./binderfs" [pid 5282] munmap(0x7f241a43b000, 2097152 [pid 5281] <... mkdir resumed>) = 0 [pid 5285] <... close resumed>) = 0 [pid 5284] <... symlink resumed>) = 0 [pid 5283] <... symlink resumed>) = 0 [pid 5282] <... munmap resumed>) = 0 [pid 5281] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5285] symlink("/dev/binderfs", "./binderfs" [pid 5284] memfd_create("syzkaller", 0 [pid 5282] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5285] <... symlink resumed>) = 0 [pid 5284] <... memfd_create resumed>) = 3 [pid 5282] <... openat resumed>) = 4 [pid 5285] memfd_create("syzkaller", 0 [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] ioctl(4, LOOP_SET_FD, 3 [pid 5285] <... memfd_create resumed>) = 3 [pid 5284] <... mmap resumed>) = 0x7f241a43b000 [pid 5283] memfd_create("syzkaller", 0 [pid 5282] <... ioctl resumed>) = 0 [pid 5280] <... mount resumed>) = 0 [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5283] <... memfd_create resumed>) = 3 [pid 5282] close(3 [ 90.025550][ T5286] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.035577][ T5282] loop4: detected capacity change from 0 to 4096 [pid 5280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5285] <... mmap resumed>) = 0x7f241a43b000 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] <... close resumed>) = 0 [pid 5280] <... openat resumed>) = 3 [pid 5285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5283] <... mmap resumed>) = 0x7f241a43b000 [pid 5282] mkdir("./file0", 0777 [pid 5281] <... mount resumed>) = 0 [pid 5280] chdir("./file0" [pid 5285] <... write resumed>) = 2097152 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5282] <... mkdir resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5280] <... chdir resumed>) = 0 [pid 5285] munmap(0x7f241a43b000, 2097152 [pid 5282] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5281] <... openat resumed>) = 3 [ 90.067677][ T5287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5280] ioctl(4, LOOP_CLR_FD [pid 5285] <... munmap resumed>) = 0 [pid 5281] chdir("./file0" [pid 5280] <... ioctl resumed>) = 0 [pid 5285] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5281] <... chdir resumed>) = 0 [pid 5280] close(4 [pid 5285] <... openat resumed>) = 4 [pid 5284] <... write resumed>) = 2097152 [pid 5281] ioctl(4, LOOP_CLR_FD [pid 5280] <... close resumed>) = 0 [pid 5285] ioctl(4, LOOP_SET_FD, 3 [pid 5284] munmap(0x7f241a43b000, 2097152 [pid 5281] <... ioctl resumed>) = 0 [pid 5280] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5284] <... munmap resumed>) = 0 [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5281] close(4 [pid 5280] <... openat resumed>) = 4 [pid 5285] <... ioctl resumed>) = 0 [pid 5284] <... openat resumed>) = 4 [pid 5283] <... write resumed>) = 2097152 [pid 5281] <... close resumed>) = 0 [pid 5280] unlink("./file1" [pid 5285] close(3 [pid 5284] ioctl(4, LOOP_SET_FD, 3 [pid 5283] munmap(0x7f241a43b000, 2097152 [pid 5282] <... mount resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5280] <... unlink resumed>) = 0 [pid 5285] <... close resumed>) = 0 [pid 5282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5282] chdir("./file0") = 0 [pid 5282] ioctl(4, LOOP_CLR_FD) = 0 [pid 5285] mkdir("./file0", 0777 [pid 5282] close(4 [pid 5283] <... munmap resumed>) = 0 [pid 5282] <... close resumed>) = 0 [pid 5280] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5285] <... mkdir resumed>) = 0 [pid 5282] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5285] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5283] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5282] <... openat resumed>) = 4 [pid 5281] <... openat resumed>) = 4 [pid 5283] <... openat resumed>) = 4 [pid 5282] unlink("./file1" [pid 5281] unlink("./file1" [ 90.137266][ T5285] loop2: detected capacity change from 0 to 4096 [ 90.158111][ T5288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.172005][ T5284] loop0: detected capacity change from 0 to 4096 [pid 5283] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5281] <... unlink resumed>) = 0 [pid 5281] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5282] <... unlink resumed>) = 0 [pid 5282] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5284] <... ioctl resumed>) = 0 [pid 5284] close(3) = 0 [pid 5283] close(3 [pid 5284] mkdir("./file0", 0777 [pid 5283] <... close resumed>) = 0 [pid 5284] <... mkdir resumed>) = 0 [pid 5283] mkdir("./file0", 0777 [pid 5284] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5283] <... mkdir resumed>) = 0 [ 90.198017][ T5283] loop1: detected capacity change from 0 to 4096 [pid 5283] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5285] <... mount resumed>) = 0 [pid 5285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5285] chdir("./file0") = 0 [pid 5285] ioctl(4, LOOP_CLR_FD) = 0 [pid 5285] close(4) = 0 [pid 5285] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 90.251828][ T5289] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5285] unlink("./file1" [pid 5284] <... mount resumed>) = 0 [pid 5283] <... mount resumed>) = 0 [pid 5285] <... unlink resumed>) = 0 [pid 5284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5285] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5284] <... openat resumed>) = 3 [pid 5283] <... openat resumed>) = 3 [pid 5284] chdir("./file0" [pid 5283] chdir("./file0" [pid 5284] <... chdir resumed>) = 0 [pid 5283] <... chdir resumed>) = 0 [pid 5284] ioctl(4, LOOP_CLR_FD [pid 5283] ioctl(4, LOOP_CLR_FD [pid 5284] <... ioctl resumed>) = 0 [pid 5283] <... ioctl resumed>) = 0 [pid 5284] close(4 [pid 5283] close(4 [pid 5284] <... close resumed>) = 0 [pid 5283] <... close resumed>) = 0 [pid 5284] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [ 90.302438][ T5290] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.314815][ T5291] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5283] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5284] <... openat resumed>) = 4 [pid 5284] unlink("./file1" [pid 5283] <... openat resumed>) = 4 [pid 5283] unlink("./file1" [pid 5284] <... unlink resumed>) = 0 [pid 5284] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5283] <... unlink resumed>) = 0 [pid 5283] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5280] <... pwritev resumed>) = 1114112 [pid 5280] exit_group(0) = ? [pid 5285] <... pwritev resumed>) = 1114112 [pid 5285] exit_group(0) = ? [pid 5281] <... pwritev resumed>) = 1114112 [pid 5281] exit_group(0) = ? [pid 5282] <... pwritev resumed>) = 1114112 [pid 5282] exit_group(0) = ? [pid 5281] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5281, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./17/binderfs") = 0 [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5068] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] <... pwritev resumed>) = 1114112 [pid 5068] <... openat resumed>) = 3 [pid 5283] exit_group(0 [pid 5068] fstat(3, [pid 5283] <... exit_group resumed>) = ? [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./17/binderfs") = 0 [pid 5068] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5285] +++ exited with 0 +++ [pid 5284] <... pwritev resumed>) = 1114112 [pid 5282] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5285, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5284] exit_group(0 [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5066] lstat("./17/file0", [pid 5065] <... restart_syscall resumed>) = 0 [pid 5284] <... exit_group resumed>) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] fstat(4, [pid 5065] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(3, [pid 5066] getdents64(4, [pid 5065] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(3, [pid 5066] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] fstat(3, [pid 5067] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5067] lstat("./17/binderfs", [pid 5066] rmdir("./17/file0" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./17/binderfs" [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./18/binderfs", [pid 5064] <... openat resumed>) = 3 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] fstat(3, [pid 5066] <... close resumed>) = 0 [pid 5065] unlink("./18/binderfs" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] rmdir("./17" [pid 5064] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] mkdir("./18", 0777 [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] lstat("./17/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] unlink("./17/binderfs" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5292 ./strace-static-x86_64: Process 5292 attached [pid 5068] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5292] chdir("./18") = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5292] <... prctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... openat resumed>) = 4 [pid 5292] <... openat resumed>) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5068] fstat(4, [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5292] memfd_create("syzkaller", 0) = 3 [pid 5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./17/file0" [pid 5065] <... umount2 resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] rmdir("./17") = 0 [pid 5065] <... openat resumed>) = 4 [pid 5068] mkdir("./18", 0777 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] rmdir("./18/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./18") = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] mkdir("./19", 0777 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... mkdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5293 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5294 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5293 attached [pid 5293] chdir("./18" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5294 attached [pid 5293] <... chdir resumed>) = 0 [pid 5067] lstat("./17/file0", [pid 5294] chdir("./19" [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5294] <... chdir resumed>) = 0 [pid 5293] <... prctl resumed>) = 0 [pid 5292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5293] setpgid(0, 0 [pid 5294] <... prctl resumed>) = 0 [pid 5293] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] setpgid(0, 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5294] <... setpgid resumed>) = 0 [pid 5293] <... openat resumed>) = 3 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5293] write(3, "1000", 4 [pid 5067] <... openat resumed>) = 4 [pid 5294] <... openat resumed>) = 3 [pid 5293] <... write resumed>) = 4 [pid 5067] fstat(4, [pid 5294] write(3, "1000", 4 [pid 5293] close(3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5294] <... write resumed>) = 4 [pid 5293] <... close resumed>) = 0 [pid 5294] close(3 [pid 5293] symlink("/dev/binderfs", "./binderfs" [pid 5294] <... close resumed>) = 0 [pid 5293] <... symlink resumed>) = 0 [pid 5284] +++ exited with 0 +++ [pid 5067] getdents64(4, [pid 5294] symlink("/dev/binderfs", "./binderfs" [pid 5293] memfd_create("syzkaller", 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5284, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5294] <... symlink resumed>) = 0 [pid 5293] <... memfd_create resumed>) = 3 [pid 5067] getdents64(4, [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] memfd_create("syzkaller", 0 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... memfd_create resumed>) = 3 [pid 5293] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] close(4 [pid 5064] lstat("./17/file0", [pid 5063] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... close resumed>) = 0 [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5064] <... openat resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(4, [pid 5063] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5292] <... write resumed>) = 2097152 [pid 5067] rmdir("./17/file0" [pid 5064] getdents64(4, [pid 5063] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] munmap(0x7f241a43b000, 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] lstat("./17/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(4 [pid 5063] unlink("./17/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] rmdir("./17/file0" [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5292] <... munmap resumed>) = 0 [pid 5067] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./17" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] close(3 [pid 5064] mkdir("./18", 0777 [pid 5292] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5292] ioctl(4, LOOP_SET_FD, 3 [pid 5067] rmdir("./17" [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5295 ./strace-static-x86_64: Process 5295 attached [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./18", 0777 [pid 5295] chdir("./18" [pid 5067] <... mkdir resumed>) = 0 [pid 5295] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5292] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5295] <... prctl resumed>) = 0 [pid 5293] <... write resumed>) = 2097152 [pid 5292] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 [pid 5295] close(3) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5292] <... close resumed>) = 0 [pid 5295] memfd_create("syzkaller", 0 [pid 5292] mkdir("./file0", 0777 [pid 5067] close(3 [pid 5295] <... memfd_create resumed>) = 3 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5292] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [ 91.065329][ T5292] loop3: detected capacity change from 0 to 4096 [pid 5295] <... mmap resumed>) = 0x7f241a43b000 [pid 5292] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5296 [pid 5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5294] <... write resumed>) = 2097152 [pid 5293] munmap(0x7f241a43b000, 2097152 [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5296 attached [pid 5293] <... munmap resumed>) = 0 [pid 5296] chdir("./18" [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... chdir resumed>) = 0 [pid 5294] munmap(0x7f241a43b000, 2097152 [pid 5293] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5293] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... munmap resumed>) = 0 [pid 5296] <... prctl resumed>) = 0 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5296] setpgid(0, 0 [pid 5294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] lstat("./17/file0", [pid 5296] <... setpgid resumed>) = 0 [pid 5294] <... openat resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5296] write(3, "1000", 4 [pid 5294] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5296] <... write resumed>) = 4 [pid 5294] close(3 [pid 5293] <... ioctl resumed>) = 0 [pid 5292] <... mount resumed>) = 0 [pid 5063] rmdir("./17/file0" [pid 5296] close(3 [pid 5294] <... close resumed>) = 0 [pid 5293] close(3 [pid 5292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5296] <... close resumed>) = 0 [pid 5294] mkdir("./file0", 0777 [pid 5293] <... close resumed>) = 0 [pid 5292] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5296] symlink("/dev/binderfs", "./binderfs" [pid 5294] <... mkdir resumed>) = 0 [pid 5293] mkdir("./file0", 0777 [pid 5292] chdir("./file0" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5296] <... symlink resumed>) = 0 [pid 5063] close(3 [pid 5296] memfd_create("syzkaller", 0 [pid 5294] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5293] <... mkdir resumed>) = 0 [pid 5292] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5296] <... memfd_create resumed>) = 3 [pid 5292] ioctl(4, LOOP_CLR_FD [pid 5063] rmdir("./17" [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5293] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5292] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5292] close(4 [pid 5063] mkdir("./18", 0777 [pid 5296] <... mmap resumed>) = 0x7f241a43b000 [pid 5295] <... write resumed>) = 2097152 [pid 5292] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [ 91.155591][ T5293] loop5: detected capacity change from 0 to 4096 [ 91.167381][ T5294] loop2: detected capacity change from 0 to 4096 [ 91.175621][ T5297] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5292] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... openat resumed>) = 3 [pid 5295] munmap(0x7f241a43b000, 2097152 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5300 [pid 5295] <... munmap resumed>) = 0 [pid 5293] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5300 attached [pid 5295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5294] <... mount resumed>) = 0 [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5292] <... openat resumed>) = 4 [pid 5300] chdir("./18" [pid 5295] <... openat resumed>) = 4 [pid 5294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5293] <... openat resumed>) = 3 [pid 5292] unlink("./file1" [pid 5300] <... chdir resumed>) = 0 [pid 5295] ioctl(4, LOOP_SET_FD, 3 [pid 5294] <... openat resumed>) = 3 [pid 5293] chdir("./file0" [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] chdir("./file0" [pid 5293] <... chdir resumed>) = 0 [pid 5292] <... unlink resumed>) = 0 [ 91.238914][ T5298] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.249996][ T5299] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5300] <... prctl resumed>) = 0 [pid 5294] <... chdir resumed>) = 0 [pid 5293] ioctl(4, LOOP_CLR_FD [pid 5292] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5300] setpgid(0, 0 [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5300] <... setpgid resumed>) = 0 [pid 5294] <... ioctl resumed>) = 0 [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] close(4 [pid 5300] <... openat resumed>) = 3 [pid 5294] <... close resumed>) = 0 [pid 5300] write(3, "1000", 4 [pid 5294] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5300] <... write resumed>) = 4 [pid 5293] <... ioctl resumed>) = 0 [pid 5300] close(3) = 0 [pid 5300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5300] memfd_create("syzkaller", 0) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5293] close(4 [pid 5300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5295] <... ioctl resumed>) = 0 [pid 5294] <... openat resumed>) = 4 [pid 5293] <... close resumed>) = 0 [pid 5295] close(3 [pid 5294] unlink("./file1" [pid 5293] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5295] <... close resumed>) = 0 [pid 5295] mkdir("./file0", 0777 [pid 5293] <... openat resumed>) = 4 [pid 5295] <... mkdir resumed>) = 0 [pid 5293] unlink("./file1" [pid 5295] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5294] <... unlink resumed>) = 0 [pid 5294] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5293] <... unlink resumed>) = 0 [ 91.279316][ T5295] loop1: detected capacity change from 0 to 4096 [pid 5293] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5296] <... write resumed>) = 2097152 [pid 5296] munmap(0x7f241a43b000, 2097152 [pid 5295] <... mount resumed>) = 0 [pid 5295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5296] <... munmap resumed>) = 0 [pid 5295] <... openat resumed>) = 3 [pid 5296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5295] chdir("./file0" [pid 5296] <... openat resumed>) = 4 [pid 5295] <... chdir resumed>) = 0 [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5295] ioctl(4, LOOP_CLR_FD) = 0 [pid 5295] close(4) = 0 [pid 5295] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5296] <... ioctl resumed>) = 0 [pid 5295] <... openat resumed>) = 4 [pid 5296] close(3 [pid 5295] unlink("./file1" [pid 5296] <... close resumed>) = 0 [pid 5296] mkdir("./file0", 0777) = 0 [ 91.371289][ T5301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.404574][ T5296] loop4: detected capacity change from 0 to 4096 [pid 5296] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5300] <... write resumed>) = 2097152 [pid 5295] <... unlink resumed>) = 0 [pid 5295] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5300] munmap(0x7f241a43b000, 2097152 [pid 5296] <... mount resumed>) = 0 [pid 5300] <... munmap resumed>) = 0 [pid 5300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5300] ioctl(4, LOOP_SET_FD, 3 [pid 5296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5296] chdir("./file0") = 0 [pid 5296] ioctl(4, LOOP_CLR_FD) = 0 [pid 5296] close(4) = 0 [pid 5296] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5296] unlink("./file1" [pid 5300] <... ioctl resumed>) = 0 [ 91.482455][ T5302] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.490741][ T5300] loop0: detected capacity change from 0 to 4096 [pid 5300] close(3) = 0 [pid 5300] mkdir("./file0", 0777) = 0 [pid 5300] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5296] <... unlink resumed>) = 0 [pid 5296] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5300] <... mount resumed>) = 0 [pid 5300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5300] chdir("./file0") = 0 [pid 5300] ioctl(4, LOOP_CLR_FD) = 0 [pid 5300] close(4) = 0 [pid 5300] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 91.602081][ T5303] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5300] unlink("./file1" [pid 5292] <... pwritev resumed>) = 1114112 [pid 5292] exit_group(0) = ? [pid 5300] <... unlink resumed>) = 0 [pid 5300] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5293] <... pwritev resumed>) = 1114112 [pid 5293] exit_group(0) = ? [pid 5294] <... pwritev resumed>) = 1114112 [pid 5294] exit_group(0 [pid 5292] +++ exited with 0 +++ [pid 5294] <... exit_group resumed>) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5066] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] +++ exited with 0 +++ [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(3, [pid 5066] lstat("./18/binderfs", [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] getdents64(3, [pid 5066] unlink("./18/binderfs" [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... unlink resumed>) = 0 [pid 5068] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./18/binderfs") = 0 [pid 5068] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./19/binderfs") = 0 [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] <... pwritev resumed>) = 1114112 [pid 5295] exit_group(0) = ? [pid 5296] <... pwritev resumed>) = 1114112 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5296] exit_group(0 [pid 5068] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./18/file0", [pid 5066] lstat("./18/file0", [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, [pid 5066] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5068] getdents64(4, [pid 5066] fstat(4, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5296] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] close(4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5296, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] getdents64(4, [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./18/file0" [pid 5066] close(4 [pid 5065] lstat("./19/file0", [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] rmdir("./18/file0" [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./18" [pid 5067] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./19", 0777 [pid 5067] fstat(3, [pid 5066] close(3 [pid 5065] <... openat resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5065] fstat(4, [pid 5068] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] rmdir("./18" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] close(3 [pid 5067] lstat("./18/binderfs", [pid 5066] mkdir("./19", 0777 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./18/binderfs") = 0 [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 ./strace-static-x86_64: Process 5304 attached [pid 5304] chdir("./19") = 0 [pid 5304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5304] setpgid(0, 0) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5304 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] rmdir("./19/file0" [pid 5304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5304] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] getdents64(3, [pid 5304] write(3, "1000", 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5304] <... write resumed>) = 4 [pid 5066] close(3 [pid 5065] close(3 [pid 5066] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] rmdir("./19" [pid 5304] close(3) = 0 [pid 5304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5305 [pid 5065] <... rmdir resumed>) = 0 [pid 5304] memfd_create("syzkaller", 0 [pid 5065] mkdir("./20", 0777 [pid 5304] <... memfd_create resumed>) = 3 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... mkdir resumed>) = 0 [pid 5295] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5305 attached ) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5305] chdir("./19" [pid 5067] <... umount2 resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5305] <... chdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5064] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5305] <... prctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5305] setpgid(0, 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5305] <... setpgid resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5306 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5305] <... openat resumed>) = 3 [pid 5300] <... pwritev resumed>) = 1114112 [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5305] write(3, "1000", 4 [pid 5300] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5306 attached [pid 5305] <... write resumed>) = 4 [pid 5300] <... exit_group resumed>) = ? [pid 5067] lstat("./18/file0", [pid 5064] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] chdir("./20" [pid 5305] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] <... chdir resumed>) = 0 [pid 5305] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./18/binderfs", [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5305] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5306] <... prctl resumed>) = 0 [pid 5305] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./18/binderfs" [pid 5306] setpgid(0, 0 [pid 5305] memfd_create("syzkaller", 0 [pid 5067] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5306] <... setpgid resumed>) = 0 [pid 5305] <... memfd_create resumed>) = 3 [pid 5304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... openat resumed>) = 4 [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] fstat(4, [pid 5306] <... openat resumed>) = 3 [pid 5306] write(3, "1000", 4) = 4 [pid 5306] close(3) = 0 [pid 5306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5306] memfd_create("syzkaller", 0) = 3 [pid 5305] <... mmap resumed>) = 0x7f241a43b000 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5306] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(4 [pid 5064] <... umount2 resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./18/file0" [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] lstat("./18/file0", [pid 5067] close(3 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./18" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./19", 0777 [pid 5064] <... openat resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] fstat(4, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] getdents64(4, [pid 5067] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] close(4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./18/file0" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5307 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./18") = 0 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] mkdir("./19", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5300] +++ exited with 0 +++ [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5300, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5307 attached [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5307] chdir("./19" [pid 5063] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5307] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5308 [pid 5063] fstat(3, [pid 5307] <... prctl resumed>) = 0 [pid 5304] <... write resumed>) = 2097152 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5308 attached [pid 5307] setpgid(0, 0 [pid 5304] munmap(0x7f241a43b000, 2097152 [pid 5063] getdents64(3, [pid 5308] chdir("./19" [pid 5307] <... setpgid resumed>) = 0 [pid 5304] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5308] <... chdir resumed>) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5304] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5307] <... openat resumed>) = 3 [pid 5304] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5308] <... prctl resumed>) = 0 [pid 5307] write(3, "1000", 4 [pid 5304] ioctl(4, LOOP_SET_FD, 3 [pid 5063] lstat("./18/binderfs", [pid 5308] setpgid(0, 0 [pid 5307] <... write resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5308] <... setpgid resumed>) = 0 [pid 5307] close(3 [pid 5063] unlink("./18/binderfs" [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5307] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5308] <... openat resumed>) = 3 [pid 5307] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] write(3, "1000", 4 [pid 5307] <... symlink resumed>) = 0 [pid 5308] <... write resumed>) = 4 [pid 5307] memfd_create("syzkaller", 0 [pid 5308] close(3 [pid 5307] <... memfd_create resumed>) = 3 [pid 5308] <... close resumed>) = 0 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5308] symlink("/dev/binderfs", "./binderfs" [pid 5307] <... mmap resumed>) = 0x7f241a43b000 [pid 5305] <... write resumed>) = 2097152 [pid 5308] <... symlink resumed>) = 0 [pid 5306] <... write resumed>) = 2097152 [pid 5305] munmap(0x7f241a43b000, 2097152 [pid 5304] <... ioctl resumed>) = 0 [pid 5308] memfd_create("syzkaller", 0) = 3 [pid 5306] munmap(0x7f241a43b000, 2097152 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5305] <... munmap resumed>) = 0 [pid 5304] close(3 [pid 5308] <... mmap resumed>) = 0x7f241a43b000 [pid 5306] <... munmap resumed>) = 0 [pid 5305] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5304] <... close resumed>) = 0 [pid 5306] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5305] <... openat resumed>) = 4 [pid 5304] mkdir("./file0", 0777 [pid 5306] <... openat resumed>) = 4 [ 92.252938][ T5304] loop5: detected capacity change from 0 to 4096 [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5305] ioctl(4, LOOP_SET_FD, 3 [pid 5304] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5306] <... ioctl resumed>) = 0 [pid 5304] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5306] close(3 [pid 5305] <... ioctl resumed>) = 0 [pid 5306] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5306] mkdir("./file0", 0777 [pid 5305] close(3 [pid 5063] getdents64(4, [pid 5306] <... mkdir resumed>) = 0 [pid 5305] <... close resumed>) = 0 [pid 5306] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5305] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5305] <... mkdir resumed>) = 0 [pid 5063] rmdir("./18/file0" [pid 5305] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... rmdir resumed>) = 0 [ 92.316872][ T5306] loop2: detected capacity change from 0 to 4096 [ 92.323867][ T5305] loop3: detected capacity change from 0 to 4096 [pid 5063] getdents64(3, [pid 5304] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 5304] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5304] chdir("./file0" [pid 5063] rmdir("./18" [pid 5308] <... write resumed>) = 2097152 [pid 5307] <... write resumed>) = 2097152 [pid 5304] <... chdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5304] ioctl(4, LOOP_CLR_FD [pid 5063] mkdir("./19", 0777 [pid 5304] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5304] close(4 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5306] <... mount resumed>) = 0 [pid 5304] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5304] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5306] <... openat resumed>) = 3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5306] chdir("./file0" [pid 5063] close(3 [pid 5306] <... chdir resumed>) = 0 [pid 5304] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5306] ioctl(4, LOOP_CLR_FD [pid 5304] unlink("./file1" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5306] <... ioctl resumed>) = 0 [pid 5306] close(4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5311 [pid 5308] munmap(0x7f241a43b000, 2097152 [pid 5306] <... close resumed>) = 0 [pid 5306] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000./strace-static-x86_64: Process 5311 attached [pid 5311] chdir("./19") = 0 [pid 5306] <... openat resumed>) = 4 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5306] unlink("./file1" [pid 5311] <... prctl resumed>) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5311] write(3, "1000", 4) = 4 [pid 5311] close(3) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs" [pid 5307] munmap(0x7f241a43b000, 2097152 [pid 5311] <... symlink resumed>) = 0 [pid 5307] <... munmap resumed>) = 0 [pid 5304] <... unlink resumed>) = 0 [pid 5311] memfd_create("syzkaller", 0 [pid 5308] <... munmap resumed>) = 0 [pid 5304] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5311] <... memfd_create resumed>) = 3 [ 92.363731][ T5309] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.401040][ T5310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5307] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5307] <... openat resumed>) = 4 [pid 5311] <... mmap resumed>) = 0x7f241a43b000 [pid 5307] ioctl(4, LOOP_SET_FD, 3 [pid 5308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5307] <... ioctl resumed>) = 0 [pid 5307] close(3) = 0 [pid 5307] mkdir("./file0", 0777) = 0 [pid 5307] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5308] <... openat resumed>) = 4 [pid 5305] <... mount resumed>) = 0 [pid 5308] ioctl(4, LOOP_SET_FD, 3 [pid 5306] <... unlink resumed>) = 0 [pid 5305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5306] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5305] <... openat resumed>) = 3 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5305] chdir("./file0") = 0 [pid 5308] <... ioctl resumed>) = 0 [pid 5305] ioctl(4, LOOP_CLR_FD [pid 5308] close(3 [pid 5305] <... ioctl resumed>) = 0 [pid 5305] close(4 [pid 5308] <... close resumed>) = 0 [pid 5308] mkdir("./file0", 0777 [pid 5305] <... close resumed>) = 0 [pid 5305] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5308] <... mkdir resumed>) = 0 [pid 5305] <... openat resumed>) = 4 [pid 5308] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5305] unlink("./file1") = 0 [ 92.456714][ T5307] loop4: detected capacity change from 0 to 4096 [ 92.463798][ T5312] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.485242][ T5308] loop1: detected capacity change from 0 to 4096 [pid 5305] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5307] <... mount resumed>) = 0 [pid 5307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5307] chdir("./file0") = 0 [pid 5307] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] close(4) = 0 [pid 5307] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 92.537515][ T5313] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5307] unlink("./file1" [pid 5308] <... mount resumed>) = 0 [pid 5308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5308] chdir("./file0" [pid 5311] <... write resumed>) = 2097152 [pid 5308] <... chdir resumed>) = 0 [pid 5308] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] munmap(0x7f241a43b000, 2097152 [pid 5308] close(4) = 0 [pid 5308] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5307] <... unlink resumed>) = 0 [pid 5307] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5308] <... openat resumed>) = 4 [pid 5311] <... munmap resumed>) = 0 [pid 5308] unlink("./file1" [pid 5311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 92.581217][ T5314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5311] ioctl(4, LOOP_SET_FD, 3 [pid 5308] <... unlink resumed>) = 0 [pid 5308] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5311] <... ioctl resumed>) = 0 [pid 5311] close(3) = 0 [pid 5311] mkdir("./file0", 0777) = 0 [ 92.641767][ T5311] loop0: detected capacity change from 0 to 4096 [pid 5311] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] chdir("./file0") = 0 [pid 5311] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(4) = 0 [pid 5311] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 92.725609][ T5315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5311] unlink("./file1") = 0 [pid 5311] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5304] <... pwritev resumed>) = 1114112 [pid 5304] exit_group(0) = ? [pid 5305] <... pwritev resumed>) = 1114112 [pid 5305] exit_group(0) = ? [pid 5306] <... pwritev resumed>) = 1114112 [pid 5306] exit_group(0) = ? [pid 5305] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5306] +++ exited with 0 +++ [pid 5304] +++ exited with 0 +++ [pid 5307] <... pwritev resumed>) = 1114112 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5304, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5307] exit_group(0) = ? [pid 5066] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5068] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./19/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] fstat(3, [pid 5068] unlink("./19/binderfs" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] fstat(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] lstat("./19/binderfs", [pid 5065] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./19/binderfs" [pid 5065] lstat("./20/binderfs", [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./20/binderfs") = 0 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] <... pwritev resumed>) = 1114112 [pid 5308] exit_group(0) = ? [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5311] <... pwritev resumed>) = 1114112 [pid 5311] exit_group(0) = ? [pid 5068] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./19/file0") = 0 [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./19") = 0 [pid 5307] +++ exited with 0 +++ [pid 5068] mkdir("./20", 0777) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... openat resumed>) = 3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5067] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5316 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./19/binderfs") = 0 [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5316 attached [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] chdir("./20" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... chdir resumed>) = 0 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0 [pid 5066] lstat("./19/file0", [pid 5316] <... setpgid resumed>) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] write(3, "1000", 4 [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... write resumed>) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./20/file0", [pid 5066] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5065] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5065] fstat(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(4) = 0 [pid 5065] getdents64(4, [pid 5066] rmdir("./19/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5311] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5308] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./19/binderfs") = 0 [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5308, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] rmdir("./20/file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./19" [pid 5065] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./19/file0", [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] fstat(3, [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./20", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] close(3 [pid 5067] <... openat resumed>) = 4 [pid 5064] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5066] <... openat resumed>) = 3 [pid 5065] rmdir("./20" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5064] lstat("./19/binderfs", [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./21", 0777 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./19/binderfs" [pid 5067] getdents64(4, [pid 5065] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] lstat("./19/file0", [pid 5067] rmdir("./19/file0") = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5317 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 5317 attached [pid 5067] rmdir("./19" [pid 5063] fstat(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] mkdir("./20", 0777 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5318 [pid 5063] getdents64(4, [pid 5067] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5317] chdir("./20" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] getdents64(4, [pid 5317] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5318 attached [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5317] <... prctl resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5063] close(4 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5318] chdir("./21" [pid 5317] setpgid(0, 0 [pid 5067] close(3 [pid 5063] <... close resumed>) = 0 [pid 5318] <... chdir resumed>) = 0 [pid 5317] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5063] rmdir("./19/file0" [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5318] <... prctl resumed>) = 0 [pid 5317] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5318] setpgid(0, 0 [pid 5317] write(3, "1000", 4) = 4 [pid 5317] close(3 [pid 5318] <... setpgid resumed>) = 0 [pid 5317] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5319 [pid 5318] <... openat resumed>) = 3 [pid 5317] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5318] write(3, "1000", 4 [pid 5317] memfd_create("syzkaller", 0 [pid 5316] <... write resumed>) = 2097152 [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3./strace-static-x86_64: Process 5319 attached [pid 5318] <... write resumed>) = 4 [pid 5317] <... memfd_create resumed>) = 3 [pid 5316] munmap(0x7f241a43b000, 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5319] chdir("./20" [pid 5318] close(3 [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 5319] <... chdir resumed>) = 0 [pid 5317] <... mmap resumed>) = 0x7f241a43b000 [pid 5316] <... munmap resumed>) = 0 [pid 5064] lstat("./19/file0", [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5318] <... close resumed>) = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] rmdir("./19" [pid 5318] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5319] <... prctl resumed>) = 0 [pid 5316] <... openat resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5319] setpgid(0, 0 [pid 5318] <... symlink resumed>) = 0 [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./20", 0777 [pid 5319] <... setpgid resumed>) = 0 [pid 5318] memfd_create("syzkaller", 0 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5319] write(3, "1000", 4) = 4 [pid 5319] close(3) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5319] memfd_create("syzkaller", 0) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5064] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5318] <... memfd_create resumed>) = 3 [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5316] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5316] close(3 [pid 5064] fstat(4, [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5318] <... mmap resumed>) = 0x7f241a43b000 [pid 5316] <... close resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5316] mkdir("./file0", 0777 [pid 5064] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5316] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5316] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] getdents64(4, [pid 5063] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] close(4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./19/file0" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5320 [ 93.391312][ T5316] loop5: detected capacity change from 0 to 4096 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5320 attached [pid 5064] close(3 [pid 5320] chdir("./20" [pid 5064] <... close resumed>) = 0 [pid 5320] <... chdir resumed>) = 0 [pid 5064] rmdir("./19" [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... rmdir resumed>) = 0 [pid 5320] <... prctl resumed>) = 0 [pid 5064] mkdir("./20", 0777 [pid 5320] setpgid(0, 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5320] <... setpgid resumed>) = 0 [pid 5317] <... write resumed>) = 2097152 [pid 5064] <... openat resumed>) = 3 [pid 5319] <... write resumed>) = 2097152 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] munmap(0x7f241a43b000, 2097152 [pid 5316] <... mount resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5320] <... openat resumed>) = 3 [pid 5319] munmap(0x7f241a43b000, 2097152 [pid 5318] <... write resumed>) = 2097152 [pid 5317] <... munmap resumed>) = 0 [pid 5316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5320] write(3, "1000", 4 [pid 5319] <... munmap resumed>) = 0 [pid 5318] munmap(0x7f241a43b000, 2097152 [pid 5316] <... openat resumed>) = 3 [pid 5064] close(3 [pid 5317] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5320] <... write resumed>) = 4 [pid 5319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5318] <... munmap resumed>) = 0 [pid 5316] chdir("./file0" [pid 5064] <... close resumed>) = 0 [pid 5319] <... openat resumed>) = 4 [pid 5318] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5320] close(3 [pid 5319] ioctl(4, LOOP_SET_FD, 3 [pid 5318] <... openat resumed>) = 4 [pid 5316] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5322 attached [pid 5320] <... close resumed>) = 0 [pid 5319] <... ioctl resumed>) = 0 [pid 5318] ioctl(4, LOOP_SET_FD, 3 [pid 5317] <... openat resumed>) = 4 [pid 5316] ioctl(4, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5322 [ 93.471308][ T5321] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.497671][ T5319] loop4: detected capacity change from 0 to 4096 [ 93.506387][ T5318] loop2: detected capacity change from 0 to 4096 [pid 5322] chdir("./20" [pid 5320] symlink("/dev/binderfs", "./binderfs" [pid 5319] close(3 [pid 5318] <... ioctl resumed>) = 0 [pid 5317] ioctl(4, LOOP_SET_FD, 3 [pid 5316] <... ioctl resumed>) = 0 [pid 5322] <... chdir resumed>) = 0 [pid 5320] <... symlink resumed>) = 0 [pid 5318] close(3) = 0 [pid 5318] mkdir("./file0", 0777) = 0 [pid 5318] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5319] <... close resumed>) = 0 [pid 5322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5319] mkdir("./file0", 0777 [pid 5317] <... ioctl resumed>) = 0 [pid 5316] close(4 [pid 5322] <... prctl resumed>) = 0 [pid 5320] memfd_create("syzkaller", 0 [pid 5319] <... mkdir resumed>) = 0 [pid 5316] <... close resumed>) = 0 [pid 5322] setpgid(0, 0 [pid 5320] <... memfd_create resumed>) = 3 [pid 5319] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5316] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5322] <... setpgid resumed>) = 0 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] close(3 [pid 5316] <... openat resumed>) = 4 [pid 5320] <... mmap resumed>) = 0x7f241a43b000 [pid 5322] <... openat resumed>) = 3 [pid 5317] <... close resumed>) = 0 [pid 5316] unlink("./file1" [pid 5322] write(3, "1000", 4 [pid 5316] <... unlink resumed>) = 0 [pid 5322] <... write resumed>) = 4 [pid 5317] mkdir("./file0", 0777 [ 93.526448][ T5317] loop3: detected capacity change from 0 to 4096 [pid 5316] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5322] close(3 [pid 5318] <... mount resumed>) = 0 [pid 5317] <... mkdir resumed>) = 0 [pid 5322] <... close resumed>) = 0 [pid 5318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5317] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5322] symlink("/dev/binderfs", "./binderfs" [pid 5318] <... openat resumed>) = 3 [pid 5322] <... symlink resumed>) = 0 [pid 5318] chdir("./file0" [pid 5322] memfd_create("syzkaller", 0 [pid 5318] <... chdir resumed>) = 0 [pid 5322] <... memfd_create resumed>) = 3 [pid 5318] ioctl(4, LOOP_CLR_FD [pid 5322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] <... ioctl resumed>) = 0 [pid 5317] <... mount resumed>) = 0 [pid 5322] <... mmap resumed>) = 0x7f241a43b000 [pid 5319] <... mount resumed>) = 0 [pid 5317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5318] close(4 [pid 5317] <... openat resumed>) = 3 [pid 5319] <... openat resumed>) = 3 [pid 5317] chdir("./file0" [pid 5319] chdir("./file0" [pid 5317] <... chdir resumed>) = 0 [pid 5319] <... chdir resumed>) = 0 [pid 5317] ioctl(4, LOOP_CLR_FD [pid 5319] ioctl(4, LOOP_CLR_FD [pid 5317] <... ioctl resumed>) = 0 [pid 5319] <... ioctl resumed>) = 0 [pid 5318] <... close resumed>) = 0 [pid 5317] close(4 [pid 5319] close(4 [pid 5317] <... close resumed>) = 0 [pid 5319] <... close resumed>) = 0 [pid 5317] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5319] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5317] <... openat resumed>) = 4 [pid 5319] <... openat resumed>) = 4 [pid 5318] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5317] unlink("./file1" [pid 5319] unlink("./file1" [pid 5318] <... openat resumed>) = 4 [ 93.568179][ T5323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.601876][ T5324] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5318] unlink("./file1") = 0 [pid 5318] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5320] <... write resumed>) = 2097152 [pid 5319] <... unlink resumed>) = 0 [pid 5319] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5320] munmap(0x7f241a43b000, 2097152 [pid 5322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5320] <... munmap resumed>) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 93.644864][ T5325] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5317] <... unlink resumed>) = 0 [pid 5320] <... openat resumed>) = 4 [pid 5317] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5320] close(3) = 0 [pid 5320] mkdir("./file0", 0777) = 0 [ 93.738610][ T5320] loop0: detected capacity change from 0 to 4096 [pid 5320] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./file0") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [ 93.796442][ T5326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5320] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5320] unlink("./file1") = 0 [pid 5320] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5322] <... write resumed>) = 2097152 [pid 5322] munmap(0x7f241a43b000, 2097152) = 0 [pid 5322] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5322] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5322] close(3) = 0 [pid 5318] <... pwritev resumed>) = 1114112 [pid 5318] exit_group(0 [pid 5316] <... pwritev resumed>) = 1114112 [pid 5322] mkdir("./file0", 0777 [pid 5318] <... exit_group resumed>) = ? [pid 5316] exit_group(0) = ? [pid 5322] <... mkdir resumed>) = 0 [ 93.899290][ T5322] loop1: detected capacity change from 0 to 4096 [pid 5322] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5322] chdir("./file0") = 0 [pid 5322] ioctl(4, LOOP_CLR_FD) = 0 [pid 5316] +++ exited with 0 +++ [pid 5322] close(4) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5322] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5322] <... openat resumed>) = 4 [pid 5068] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5322] unlink("./file1" [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./20/binderfs") = 0 [ 94.022543][ T5327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5322] <... unlink resumed>) = 0 [pid 5322] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5318] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5318, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5065] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./21/binderfs" [pid 5319] <... pwritev resumed>) = 1114112 [pid 5065] <... unlink resumed>) = 0 [pid 5319] exit_group(0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] <... pwritev resumed>) = 1114112 [pid 5319] <... exit_group resumed>) = ? [pid 5317] exit_group(0 [pid 5068] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./20/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./20") = 0 [pid 5068] mkdir("./21", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5328 ./strace-static-x86_64: Process 5328 attached [pid 5328] chdir("./21") = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] setpgid(0, 0) = 0 [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5328] write(3, "1000", 4) = 4 [pid 5328] close(3) = 0 [pid 5328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5328] memfd_create("syzkaller", 0) = 3 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./21/file0" [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./21") = 0 [pid 5317] +++ exited with 0 +++ [pid 5065] mkdir("./22", 0777 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... mkdir resumed>) = 0 [pid 5320] <... pwritev resumed>) = 1114112 [pid 5319] +++ exited with 0 +++ [pid 5066] <... restart_syscall resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5320] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 5320] <... exit_group resumed>) = ? [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5329 [pid 5066] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] fstat(3, [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(3, [pid 5066] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./20/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] lstat("./20/binderfs", [pid 5067] unlink("./20/binderfs" [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] unlink("./20/binderfs" [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5329 attached [pid 5329] chdir("./22") = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] <... write resumed>) = 2097152 [pid 5328] munmap(0x7f241a43b000, 2097152 [pid 5329] setpgid(0, 0) = 0 [pid 5328] <... munmap resumed>) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5328] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5329] <... openat resumed>) = 3 [pid 5328] <... openat resumed>) = 4 [pid 5329] write(3, "1000", 4 [pid 5328] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5329] <... write resumed>) = 4 [pid 5329] close(3) = 0 [pid 5329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5329] memfd_create("syzkaller", 0 [pid 5322] <... pwritev resumed>) = 1114112 [pid 5322] exit_group(0) = ? [pid 5329] <... memfd_create resumed>) = 3 [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./20/file0", [pid 5328] <... ioctl resumed>) = 0 [pid 5067] lstat("./20/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5328] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... close resumed>) = 0 [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] mkdir("./file0", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 4 [pid 5328] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5067] fstat(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./20/file0" [pid 5067] rmdir("./20/file0" [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [ 94.396011][ T5328] loop5: detected capacity change from 0 to 4096 [pid 5066] getdents64(3, [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5320] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5067] close(3 [pid 5066] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./20" [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5067] rmdir("./20" [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] mkdir("./21", 0777 [pid 5067] mkdir("./21", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5063] fstat(3, [pid 5329] <... write resumed>) = 2097152 [pid 5067] close(3 [pid 5066] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5331 [pid 5063] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5332 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./20/binderfs") = 0 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5332 attached [pid 5329] munmap(0x7f241a43b000, 2097152 [pid 5322] +++ exited with 0 +++ [pid 5328] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5331 attached [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5322, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5331] chdir("./21") = 0 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5331] setpgid(0, 0 [pid 5332] chdir("./21" [pid 5331] <... setpgid resumed>) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5332] <... chdir resumed>) = 0 [pid 5331] <... openat resumed>) = 3 [pid 5329] <... munmap resumed>) = 0 [pid 5328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5331] write(3, "1000", 4 [pid 5329] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5328] <... openat resumed>) = 3 [pid 5332] <... prctl resumed>) = 0 [pid 5331] <... write resumed>) = 4 [pid 5328] chdir("./file0" [pid 5329] <... openat resumed>) = 4 [pid 5064] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] setpgid(0, 0 [pid 5331] close(3 [pid 5328] <... chdir resumed>) = 0 [pid 5329] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5332] <... setpgid resumed>) = 0 [pid 5331] <... close resumed>) = 0 [pid 5328] ioctl(4, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5331] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... openat resumed>) = 3 [pid 5331] <... symlink resumed>) = 0 [pid 5064] fstat(3, [pid 5331] memfd_create("syzkaller", 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5331] <... memfd_create resumed>) = 3 [pid 5328] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, [pid 5332] <... openat resumed>) = 3 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5328] close(4 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5332] write(3, "1000", 4 [pid 5331] <... mmap resumed>) = 0x7f241a43b000 [pid 5328] <... close resumed>) = 0 [pid 5064] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] <... write resumed>) = 4 [pid 5328] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5332] close(3 [pid 5064] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5332] <... close resumed>) = 0 [pid 5328] <... openat resumed>) = 4 [pid 5064] unlink("./20/binderfs" [pid 5332] symlink("/dev/binderfs", "./binderfs" [pid 5328] unlink("./file1" [pid 5064] <... unlink resumed>) = 0 [pid 5332] <... symlink resumed>) = 0 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] memfd_create("syzkaller", 0 [pid 5328] <... unlink resumed>) = 0 [pid 5332] <... memfd_create resumed>) = 3 [pid 5328] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5329] <... ioctl resumed>) = 0 [pid 5329] close(3) = 0 [pid 5329] mkdir("./file0", 0777) = 0 [ 94.510679][ T5330] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.531313][ T5329] loop2: detected capacity change from 0 to 4096 [pid 5329] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] fstat(4, [pid 5064] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5329] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5331] <... write resumed>) = 2097152 [pid 5329] chdir("./file0" [pid 5064] <... openat resumed>) = 4 [pid 5329] <... chdir resumed>) = 0 [pid 5064] fstat(4, [pid 5329] ioctl(4, LOOP_CLR_FD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5329] <... ioctl resumed>) = 0 [pid 5064] getdents64(4, [pid 5329] close(4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5329] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5329] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5329] <... openat resumed>) = 4 [pid 5064] close(4 [pid 5329] unlink("./file1" [pid 5064] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] rmdir("./20/file0") = 0 [pid 5063] getdents64(4, [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5064] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] rmdir("./20" [pid 5063] rmdir("./20/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5331] munmap(0x7f241a43b000, 2097152 [pid 5064] mkdir("./21", 0777 [pid 5331] <... munmap resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(3, [pid 5064] <... openat resumed>) = 3 [pid 5331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5331] <... openat resumed>) = 4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [ 94.638146][ T5333] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.677469][ T5331] loop3: detected capacity change from 0 to 4096 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] rmdir("./20" [pid 5331] <... ioctl resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5334 [pid 5063] <... rmdir resumed>) = 0 [pid 5331] close(3 [pid 5063] mkdir("./21", 0777 [pid 5331] <... close resumed>) = 0 ./strace-static-x86_64: Process 5334 attached [pid 5329] <... unlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5334] chdir("./21" [pid 5331] mkdir("./file0", 0777 [pid 5329] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5334] <... chdir resumed>) = 0 [pid 5331] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5331] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5334] <... prctl resumed>) = 0 [pid 5334] setpgid(0, 0 [pid 5063] close(3 [pid 5334] <... setpgid resumed>) = 0 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5334] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5334] write(3, "1000", 4) = 4 [pid 5334] close(3) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5335 [pid 5334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5334] memfd_create("syzkaller", 0) = 3 [pid 5334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 ./strace-static-x86_64: Process 5335 attached [pid 5335] chdir("./21") = 0 [pid 5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5335] setpgid(0, 0) = 0 [pid 5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5335] write(3, "1000", 4 [pid 5332] <... write resumed>) = 2097152 [pid 5331] <... mount resumed>) = 0 [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5335] <... write resumed>) = 4 [pid 5332] munmap(0x7f241a43b000, 2097152 [pid 5331] <... openat resumed>) = 3 [pid 5331] chdir("./file0" [pid 5335] close(3 [pid 5331] <... chdir resumed>) = 0 [pid 5331] ioctl(4, LOOP_CLR_FD [pid 5335] <... close resumed>) = 0 [pid 5334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5332] <... munmap resumed>) = 0 [pid 5331] <... ioctl resumed>) = 0 [pid 5335] symlink("/dev/binderfs", "./binderfs" [pid 5332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5331] close(4) = 0 [pid 5331] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5335] <... symlink resumed>) = 0 [pid 5332] <... openat resumed>) = 4 [pid 5331] <... openat resumed>) = 4 [pid 5335] memfd_create("syzkaller", 0 [pid 5332] ioctl(4, LOOP_SET_FD, 3 [pid 5331] unlink("./file1" [pid 5335] <... memfd_create resumed>) = 3 [pid 5332] <... ioctl resumed>) = 0 [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5332] close(3) = 0 [pid 5332] mkdir("./file0", 0777 [pid 5331] <... unlink resumed>) = 0 [ 94.780812][ T5336] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.816195][ T5332] loop4: detected capacity change from 0 to 4096 [pid 5331] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5332] <... mkdir resumed>) = 0 [pid 5332] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5334] <... write resumed>) = 2097152 [pid 5334] munmap(0x7f241a43b000, 2097152) = 0 [pid 5334] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5334] ioctl(4, LOOP_SET_FD, 3 [pid 5332] <... mount resumed>) = 0 [pid 5332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5332] chdir("./file0") = 0 [pid 5332] ioctl(4, LOOP_CLR_FD [pid 5335] <... write resumed>) = 2097152 [pid 5334] <... ioctl resumed>) = 0 [pid 5335] munmap(0x7f241a43b000, 2097152 [pid 5334] close(3 [pid 5332] <... ioctl resumed>) = 0 [pid 5334] <... close resumed>) = 0 [pid 5334] mkdir("./file0", 0777) = 0 [pid 5334] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5335] <... munmap resumed>) = 0 [pid 5332] close(4 [ 94.913017][ T5334] loop1: detected capacity change from 0 to 4096 [ 94.913426][ T5337] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5332] <... close resumed>) = 0 [pid 5335] ioctl(4, LOOP_SET_FD, 3 [pid 5332] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5332] unlink("./file1") = 0 [pid 5332] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5335] <... ioctl resumed>) = 0 [pid 5335] close(3 [pid 5334] <... mount resumed>) = 0 [pid 5334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 94.982482][ T5335] loop0: detected capacity change from 0 to 4096 [pid 5334] chdir("./file0" [pid 5335] <... close resumed>) = 0 [pid 5334] <... chdir resumed>) = 0 [pid 5334] ioctl(4, LOOP_CLR_FD) = 0 [pid 5334] close(4 [pid 5335] mkdir("./file0", 0777 [pid 5334] <... close resumed>) = 0 [pid 5334] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5334] unlink("./file1" [pid 5335] <... mkdir resumed>) = 0 [ 95.026589][ T5338] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5335] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5329] <... pwritev resumed>) = 1114112 [pid 5335] <... mount resumed>) = 0 [pid 5329] exit_group(0) = ? [pid 5335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5335] chdir("./file0") = 0 [pid 5334] <... unlink resumed>) = 0 [pid 5334] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5335] ioctl(4, LOOP_CLR_FD) = 0 [pid 5328] <... pwritev resumed>) = 1114112 [pid 5328] exit_group(0) = ? [ 95.094880][ T5339] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5335] close(4) = 0 [pid 5335] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5335] unlink("./file1") = 0 [pid 5335] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5329] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5328] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5328, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5065] fstat(3, [pid 5068] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./22/binderfs", [pid 5068] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] unlink("./22/binderfs" [pid 5068] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5068] lstat("./21/binderfs", [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./21/binderfs") = 0 [pid 5068] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5331] <... pwritev resumed>) = 1114112 [pid 5331] exit_group(0 [pid 5065] <... umount2 resumed>) = 0 [pid 5331] <... exit_group resumed>) = ? [pid 5332] <... pwritev resumed>) = 1114112 [pid 5332] exit_group(0) = ? [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./21/file0") = 0 [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5065] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./21" [pid 5065] fstat(4, [pid 5068] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] mkdir("./22", 0777 [pid 5065] getdents64(4, [pid 5068] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./22/file0" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5068] close(3 [pid 5065] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./22" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./23", 0777 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5340 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5340 attached [pid 5340] chdir("./22" [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5341 [pid 5340] <... chdir resumed>) = 0 [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5340] setpgid(0, 0) = 0 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5340] write(3, "1000", 4) = 4 [pid 5340] close(3) = 0 [pid 5340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5340] memfd_create("syzkaller", 0) = 3 [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 ./strace-static-x86_64: Process 5341 attached [pid 5341] chdir("./23") = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5341] memfd_create("syzkaller", 0) = 3 [pid 5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5331] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5334] <... pwritev resumed>) = 1114112 [pid 5066] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] exit_group(0 [pid 5332] +++ exited with 0 +++ [pid 5334] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] <... write resumed>) = 2097152 [pid 5066] lstat("./21/binderfs", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5332, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] munmap(0x7f241a43b000, 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./21/binderfs" [pid 5067] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./21/binderfs", [pid 5341] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5341] <... openat resumed>) = 4 [pid 5341] ioctl(4, LOOP_SET_FD, 3 [pid 5067] unlink("./21/binderfs") = 0 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... ioctl resumed>) = 0 [pid 5341] close(3) = 0 [pid 5341] mkdir("./file0", 0777) = 0 [pid 5340] <... write resumed>) = 2097152 [pid 5341] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5340] munmap(0x7f241a43b000, 2097152) = 0 [pid 5340] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5340] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = 0 [ 95.537398][ T5341] loop2: detected capacity change from 0 to 4096 [ 95.565020][ T5340] loop5: detected capacity change from 0 to 4096 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5341] <... mount resumed>) = 0 [pid 5340] <... ioctl resumed>) = 0 [pid 5335] <... pwritev resumed>) = 1114112 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5340] close(3 [pid 5335] exit_group(0 [pid 5334] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] <... openat resumed>) = 3 [pid 5340] <... close resumed>) = 0 [pid 5335] <... exit_group resumed>) = ? [pid 5067] lstat("./21/file0", [pid 5066] <... openat resumed>) = 4 [pid 5341] chdir("./file0" [pid 5340] mkdir("./file0", 0777 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5334, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5341] <... chdir resumed>) = 0 [pid 5340] <... mkdir resumed>) = 0 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] ioctl(4, LOOP_CLR_FD [pid 5340] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] fstat(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] close(4 [pid 5067] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5341] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5064] fstat(3, [pid 5341] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(3, [pid 5341] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5341] unlink("./file1" [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5064] lstat("./21/binderfs", [pid 5067] <... close resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] rmdir("./21/file0" [pid 5064] unlink("./21/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] rmdir("./21/file0" [pid 5064] <... unlink resumed>) = 0 [ 95.609468][ T5342] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5067] close(3) = 0 [pid 5067] rmdir("./21") = 0 [pid 5067] mkdir("./22", 0777) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] close(3 [pid 5340] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] rmdir("./21" [pid 5340] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5340] chdir("./file0" [pid 5067] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5340] <... chdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./22", 0777 [pid 5340] ioctl(4, LOOP_CLR_FD [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5344 [pid 5066] <... mkdir resumed>) = 0 [pid 5340] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5340] close(4) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5340] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5344 attached [pid 5344] chdir("./22" [pid 5340] <... openat resumed>) = 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5344] <... chdir resumed>) = 0 [pid 5340] unlink("./file1" [pid 5066] close(3 [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... close resumed>) = 0 [pid 5344] <... prctl resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5344] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5344] <... setpgid resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5345 [pid 5344] <... openat resumed>) = 3 [pid 5344] write(3, "1000", 4./strace-static-x86_64: Process 5345 attached ) = 4 [pid 5335] +++ exited with 0 +++ [pid 5344] close(3 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] chdir("./22" [pid 5344] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5345] <... chdir resumed>) = 0 [ 95.678284][ T5343] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5344] symlink("/dev/binderfs", "./binderfs" [pid 5340] <... unlink resumed>) = 0 [pid 5064] lstat("./21/file0", [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5344] <... symlink resumed>) = 0 [pid 5340] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5345] <... prctl resumed>) = 0 [pid 5344] memfd_create("syzkaller", 0 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] setpgid(0, 0 [pid 5344] <... memfd_create resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... setpgid resumed>) = 0 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5344] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... openat resumed>) = 3 [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] fstat(4, [pid 5063] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5345] write(3, "1000", 4 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5345] <... write resumed>) = 4 [pid 5064] getdents64(4, [pid 5063] fstat(3, [pid 5345] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5345] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] getdents64(3, [pid 5345] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5345] <... symlink resumed>) = 0 [pid 5064] close(4 [pid 5063] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] memfd_create("syzkaller", 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... memfd_create resumed>) = 3 [pid 5064] rmdir("./21/file0" [pid 5063] lstat("./21/binderfs", [pid 5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5345] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] getdents64(3, [pid 5063] unlink("./21/binderfs" [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] close(3 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./21") = 0 [pid 5064] mkdir("./22", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5346 ./strace-static-x86_64: Process 5346 attached [pid 5346] chdir("./22") = 0 [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5346] memfd_create("syzkaller", 0) = 3 [pid 5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5346] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5344] <... write resumed>) = 2097152 [pid 5063] rmdir("./21/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./21") = 0 [pid 5063] mkdir("./22", 0777 [pid 5344] munmap(0x7f241a43b000, 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 5345] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5345] munmap(0x7f241a43b000, 2097152 [pid 5344] <... munmap resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5345] <... munmap resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5345] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5344] <... openat resumed>) = 4 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5345] <... openat resumed>) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 5345] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5347 ./strace-static-x86_64: Process 5347 attached [pid 5347] chdir("./22" [pid 5345] <... ioctl resumed>) = 0 [pid 5347] <... chdir resumed>) = 0 [pid 5347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5347] setpgid(0, 0 [pid 5345] close(3 [pid 5347] <... setpgid resumed>) = 0 [pid 5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5344] <... ioctl resumed>) = 0 [pid 5347] <... openat resumed>) = 3 [pid 5345] <... close resumed>) = 0 [pid 5344] close(3 [pid 5347] write(3, "1000", 4 [pid 5345] mkdir("./file0", 0777 [pid 5344] <... close resumed>) = 0 [pid 5347] <... write resumed>) = 4 [pid 5344] mkdir("./file0", 0777 [pid 5347] close(3 [pid 5345] <... mkdir resumed>) = 0 [pid 5344] <... mkdir resumed>) = 0 [pid 5347] <... close resumed>) = 0 [pid 5344] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5345] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5347] memfd_create("syzkaller", 0) = 3 [pid 5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 95.964845][ T5344] loop4: detected capacity change from 0 to 4096 [ 95.976577][ T5345] loop3: detected capacity change from 0 to 4096 [pid 5347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5345] <... mount resumed>) = 0 [pid 5340] <... pwritev resumed>) = 1114112 [pid 5346] <... write resumed>) = 2097152 [pid 5346] munmap(0x7f241a43b000, 2097152 [pid 5345] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5340] exit_group(0 [pid 5345] <... openat resumed>) = 3 [pid 5340] <... exit_group resumed>) = ? [pid 5345] chdir("./file0") = 0 [pid 5345] ioctl(4, LOOP_CLR_FD) = 0 [pid 5345] close(4 [pid 5341] <... pwritev resumed>) = 1114112 [pid 5345] <... close resumed>) = 0 [pid 5346] <... munmap resumed>) = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5346] ioctl(4, LOOP_SET_FD, 3 [pid 5345] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5341] exit_group(0) = ? [ 96.038646][ T5348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.074792][ T5346] loop1: detected capacity change from 0 to 4096 [pid 5345] <... openat resumed>) = 4 [pid 5344] <... mount resumed>) = 0 [pid 5345] unlink("./file1" [pid 5344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./file0" [pid 5345] <... unlink resumed>) = 0 [pid 5344] <... chdir resumed>) = 0 [pid 5345] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5344] ioctl(4, LOOP_CLR_FD) = 0 [pid 5344] close(4) = 0 [pid 5344] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5344] unlink("./file1" [pid 5346] <... ioctl resumed>) = 0 [ 96.081362][ T5349] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5346] close(3) = 0 [pid 5346] mkdir("./file0", 0777) = 0 [pid 5346] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5344] <... unlink resumed>) = 0 [pid 5344] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5347] <... write resumed>) = 2097152 [pid 5346] <... mount resumed>) = 0 [pid 5346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5346] chdir("./file0") = 0 [pid 5346] ioctl(4, LOOP_CLR_FD [pid 5347] munmap(0x7f241a43b000, 2097152 [pid 5346] <... ioctl resumed>) = 0 [pid 5340] +++ exited with 0 +++ [pid 5347] <... munmap resumed>) = 0 [pid 5346] close(4) = 0 [pid 5347] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5346] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5347] <... openat resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5340, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5347] ioctl(4, LOOP_SET_FD, 3 [pid 5346] <... openat resumed>) = 4 [pid 5068] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5346] unlink("./file1" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, [pid 5346] <... unlink resumed>) = 0 [pid 5346] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5341] +++ exited with 0 +++ [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./22/binderfs", [pid 5065] <... restart_syscall resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./22/binderfs") = 0 [pid 5065] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5347] close(3 [pid 5065] <... openat resumed>) = 3 [ 96.191529][ T5350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.221696][ T5347] loop0: detected capacity change from 0 to 4096 [pid 5347] <... close resumed>) = 0 [pid 5065] fstat(3, [pid 5347] mkdir("./file0", 0777 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5347] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5347] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./23/binderfs") = 0 [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5347] <... mount resumed>) = 0 [pid 5347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5347] chdir("./file0" [pid 5068] <... umount2 resumed>) = 0 [pid 5347] <... chdir resumed>) = 0 [pid 5347] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... close resumed>) = 0 [pid 5068] lstat("./22/file0", [pid 5347] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5347] <... openat resumed>) = 4 [pid 5068] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] unlink("./file1" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 5065] lstat("./23/file0", [pid 5068] fstat(4, [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, [pid 5065] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] fstat(4, [pid 5068] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] rmdir("./22/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [ 96.338577][ T5351] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] close(3 [pid 5065] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./23/file0" [pid 5068] rmdir("./22" [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5347] <... unlink resumed>) = 0 [pid 5068] mkdir("./23", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5347] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] rmdir("./23" [pid 5345] <... pwritev resumed>) = 1114112 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5345] exit_group(0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./24", 0777 [pid 5345] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5352 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5353 ./strace-static-x86_64: Process 5353 attached ./strace-static-x86_64: Process 5352 attached [pid 5353] chdir("./24") = 0 [pid 5352] chdir("./23" [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5352] <... chdir resumed>) = 0 [pid 5353] <... prctl resumed>) = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5353] setpgid(0, 0 [pid 5352] <... prctl resumed>) = 0 [pid 5353] <... setpgid resumed>) = 0 [pid 5352] setpgid(0, 0 [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5352] <... setpgid resumed>) = 0 [pid 5353] <... openat resumed>) = 3 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5353] write(3, "1000", 4 [pid 5352] <... openat resumed>) = 3 [pid 5353] <... write resumed>) = 4 [pid 5352] write(3, "1000", 4 [pid 5353] close(3 [pid 5352] <... write resumed>) = 4 [pid 5353] <... close resumed>) = 0 [pid 5352] close(3 [pid 5353] symlink("/dev/binderfs", "./binderfs" [pid 5352] <... close resumed>) = 0 [pid 5353] <... symlink resumed>) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs" [pid 5353] memfd_create("syzkaller", 0 [pid 5352] <... symlink resumed>) = 0 [pid 5353] <... memfd_create resumed>) = 3 [pid 5352] memfd_create("syzkaller", 0 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5352] <... memfd_create resumed>) = 3 [pid 5353] <... mmap resumed>) = 0x7f241a43b000 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5344] <... pwritev resumed>) = 1114112 [pid 5344] exit_group(0) = ? [pid 5345] +++ exited with 0 +++ [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5345, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5066] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./22/binderfs") = 0 [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... write resumed>) = 2097152 [pid 5352] munmap(0x7f241a43b000, 2097152) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5344] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5353] <... write resumed>) = 2097152 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5353] munmap(0x7f241a43b000, 2097152 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5353] <... munmap resumed>) = 0 [pid 5067] lstat("./22/binderfs", [pid 5353] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5353] <... openat resumed>) = 4 [pid 5067] unlink("./22/binderfs" [ 96.629485][ T5352] loop5: detected capacity change from 0 to 4096 [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... unlink resumed>) = 0 [pid 5352] close(3 [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... close resumed>) = 0 [pid 5352] mkdir("./file0", 0777 [pid 5346] <... pwritev resumed>) = 1114112 [pid 5346] exit_group(0 [pid 5352] <... mkdir resumed>) = 0 [pid 5346] <... exit_group resumed>) = ? [pid 5352] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5353] <... ioctl resumed>) = 0 [pid 5353] close(3) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5353] mkdir("./file0", 0777) = 0 [pid 5353] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.672305][ T5353] loop2: detected capacity change from 0 to 4096 [pid 5066] lstat("./22/file0", [pid 5352] <... mount resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] chdir("./file0" [pid 5066] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5352] <... chdir resumed>) = 0 [pid 5352] ioctl(4, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5352] <... ioctl resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5352] close(4 [pid 5066] getdents64(4, [pid 5352] <... close resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5352] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5352] unlink("./file1" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./22/file0" [ 96.726954][ T5354] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5353] <... mount resumed>) = 0 [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5353] <... openat resumed>) = 3 [pid 5347] <... pwritev resumed>) = 1114112 [pid 5067] lstat("./22/file0", [pid 5066] close(3 [pid 5353] chdir("./file0" [pid 5347] exit_group(0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5353] <... chdir resumed>) = 0 [pid 5352] <... unlink resumed>) = 0 [pid 5347] <... exit_group resumed>) = ? [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5353] ioctl(4, LOOP_CLR_FD [pid 5352] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5353] <... ioctl resumed>) = 0 [pid 5353] close(4) = 0 [pid 5353] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./22") = 0 [pid 5067] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] mkdir("./23", 0777 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5353] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5353] unlink("./file1" [pid 5346] +++ exited with 0 +++ [pid 5067] getdents64(4, [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... restart_syscall resumed>) = 0 [pid 5067] rmdir("./22/file0" [pid 5064] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5356 [pid 5064] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... openat resumed>) = 3 [ 96.771017][ T5355] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] close(3 [pid 5064] fstat(3, [pid 5067] <... close resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./22" [pid 5064] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5353] <... unlink resumed>) = 0 [pid 5067] mkdir("./23", 0777 [pid 5064] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5356 attached [pid 5353] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] chdir("./23" [pid 5064] lstat("./22/binderfs", [pid 5356] <... chdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] unlink("./22/binderfs" [pid 5356] <... prctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5356] setpgid(0, 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... setpgid resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(3 [pid 5356] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5356] write(3, "1000", 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5356] <... write resumed>) = 4 [pid 5356] close(3) = 0 [pid 5356] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5357 [pid 5356] <... symlink resumed>) = 0 [pid 5356] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5357 attached [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5357] chdir("./23" [pid 5356] <... mmap resumed>) = 0x7f241a43b000 [pid 5357] <... chdir resumed>) = 0 [pid 5357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5357] setpgid(0, 0) = 0 [pid 5357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5357] write(3, "1000", 4) = 4 [pid 5357] close(3) = 0 [pid 5357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5357] memfd_create("syzkaller", 0) = 3 [pid 5357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./22/file0") = 0 [pid 5347] +++ exited with 0 +++ [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5347, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5064] close(3) = 0 [pid 5064] rmdir("./22" [pid 5063] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] mkdir("./23", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(3, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5357] <... write resumed>) = 2097152 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... write resumed>) = 2097152 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] munmap(0x7f241a43b000, 2097152 [pid 5064] close(3 [pid 5063] lstat("./22/binderfs", [pid 5356] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5356] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] unlink("./22/binderfs" [pid 5356] <... openat resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5356] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5358 attached [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5358 [pid 5358] chdir("./23") = 0 [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5357] munmap(0x7f241a43b000, 2097152 [pid 5358] <... prctl resumed>) = 0 [pid 5357] <... munmap resumed>) = 0 [pid 5358] setpgid(0, 0) = 0 [pid 5356] <... ioctl resumed>) = 0 [pid 5356] close(3) = 0 [pid 5356] mkdir("./file0", 0777 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5356] <... mkdir resumed>) = 0 [pid 5357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5358] <... openat resumed>) = 3 [pid 5358] write(3, "1000", 4 [pid 5357] ioctl(4, LOOP_SET_FD, 3 [pid 5358] <... write resumed>) = 4 [pid 5358] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5358] <... close resumed>) = 0 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5358] symlink("/dev/binderfs", "./binderfs" [pid 5352] <... pwritev resumed>) = 1114112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] <... ioctl resumed>) = 0 [pid 5358] <... symlink resumed>) = 0 [pid 5357] close(3 [pid 5063] lstat("./22/file0", [pid 5352] exit_group(0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5357] <... close resumed>) = 0 [pid 5358] memfd_create("syzkaller", 0 [pid 5357] mkdir("./file0", 0777 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... exit_group resumed>) = ? [ 97.038359][ T5356] loop3: detected capacity change from 0 to 4096 [ 97.073422][ T5357] loop4: detected capacity change from 0 to 4096 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] <... mkdir resumed>) = 0 [pid 5357] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5358] <... memfd_create resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... openat resumed>) = 4 [pid 5358] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./22/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./22") = 0 [pid 5063] mkdir("./23", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5357] <... mount resumed>) = 0 [pid 5356] <... mount resumed>) = 0 [pid 5063] close(3 [pid 5357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5357] <... openat resumed>) = 3 [pid 5356] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5357] chdir("./file0" [pid 5356] chdir("./file0" [pid 5357] <... chdir resumed>) = 0 [pid 5356] <... chdir resumed>) = 0 [pid 5357] ioctl(4, LOOP_CLR_FD [pid 5356] ioctl(4, LOOP_CLR_FD [pid 5357] <... ioctl resumed>) = 0 [pid 5356] <... ioctl resumed>) = 0 [pid 5357] close(4 [pid 5356] close(4 [pid 5357] <... close resumed>) = 0 [pid 5356] <... close resumed>) = 0 [pid 5357] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5357] <... openat resumed>) = 4 [pid 5356] <... openat resumed>) = 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5357] unlink("./file1" [pid 5356] unlink("./file1" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5361 ./strace-static-x86_64: Process 5361 attached [pid 5356] <... unlink resumed>) = 0 [pid 5361] chdir("./23" [ 97.159454][ T5359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.161901][ T5360] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5356] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5361] <... chdir resumed>) = 0 [pid 5361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5361] setpgid(0, 0 [pid 5352] +++ exited with 0 +++ [pid 5361] <... setpgid resumed>) = 0 [pid 5358] <... write resumed>) = 2097152 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5358] munmap(0x7f241a43b000, 2097152 [pid 5353] <... pwritev resumed>) = 1114112 [pid 5361] write(3, "1000", 4 [pid 5068] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] <... write resumed>) = 4 [pid 5353] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5361] close(3 [pid 5353] <... exit_group resumed>) = ? [pid 5361] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5361] symlink("/dev/binderfs", "./binderfs" [pid 5068] fstat(3, [pid 5361] <... symlink resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5361] memfd_create("syzkaller", 0 [pid 5068] getdents64(3, [pid 5361] <... memfd_create resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5361] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./23/binderfs") = 0 [pid 5068] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5358] <... munmap resumed>) = 0 [pid 5358] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5358] ioctl(4, LOOP_SET_FD, 3 [pid 5357] <... unlink resumed>) = 0 [pid 5357] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5358] <... ioctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5358] close(3) = 0 [pid 5358] mkdir("./file0", 0777) = 0 [pid 5358] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.292113][ T5358] loop1: detected capacity change from 0 to 4096 [pid 5068] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./23/file0" [pid 5358] <... mount resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5358] chdir("./file0") = 0 [pid 5068] getdents64(3, [pid 5358] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5358] close(4 [pid 5068] close(3 [pid 5358] <... close resumed>) = 0 [pid 5358] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5068] <... close resumed>) = 0 [pid 5358] unlink("./file1" [pid 5068] rmdir("./23") = 0 [pid 5353] +++ exited with 0 +++ [pid 5068] mkdir("./24", 0777 [pid 5361] <... write resumed>) = 2097152 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5361] munmap(0x7f241a43b000, 2097152 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 97.389747][ T5362] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... openat resumed>) = 3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5065] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] fstat(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5363 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./24/binderfs") = 0 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] <... munmap resumed>) = 0 [pid 5358] <... unlink resumed>) = 0 [pid 5361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5358] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5361] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5363 attached [pid 5363] chdir("./24" [pid 5361] ioctl(4, LOOP_SET_FD, 3 [pid 5363] <... chdir resumed>) = 0 [pid 5361] <... ioctl resumed>) = 0 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5363] setpgid(0, 0) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5363] write(3, "1000", 4) = 4 [pid 5361] close(3 [pid 5363] close(3 [pid 5361] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5363] <... close resumed>) = 0 [pid 5363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5361] mkdir("./file0", 0777 [pid 5363] memfd_create("syzkaller", 0) = 3 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5361] <... mkdir resumed>) = 0 [pid 5356] <... pwritev resumed>) = 1114112 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5356] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./24/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./24") = 0 [pid 5065] mkdir("./25", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5364 [ 97.488833][ T5361] loop0: detected capacity change from 0 to 4096 [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5364 attached [pid 5364] chdir("./25") = 0 [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5364] setpgid(0, 0) = 0 [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5364] write(3, "1000", 4) = 4 [pid 5364] close(3) = 0 [pid 5364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5364] memfd_create("syzkaller", 0) = 3 [pid 5364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5361] <... mount resumed>) = 0 [pid 5361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5361] chdir("./file0") = 0 [pid 5363] <... write resumed>) = 2097152 [pid 5361] ioctl(4, LOOP_CLR_FD) = 0 [pid 5361] close(4) = 0 [pid 5361] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 97.587972][ T5365] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5361] unlink("./file1") = 0 [pid 5361] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5363] munmap(0x7f241a43b000, 2097152 [pid 5364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5363] <... munmap resumed>) = 0 [pid 5363] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5356] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5356, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5363] close(3) = 0 [pid 5363] mkdir("./file0", 0777 [pid 5066] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5363] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5364] <... write resumed>) = 2097152 [pid 5066] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5364] munmap(0x7f241a43b000, 2097152 [pid 5066] unlink("./23/binderfs") = 0 [ 97.678753][ T5363] loop5: detected capacity change from 0 to 4096 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] <... munmap resumed>) = 0 [pid 5364] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5364] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5364] close(3) = 0 [pid 5364] mkdir("./file0", 0777) = 0 [pid 5364] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5363] <... mount resumed>) = 0 [pid 5363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5363] chdir("./file0") = 0 [pid 5363] ioctl(4, LOOP_CLR_FD) = 0 [pid 5363] close(4) = 0 [pid 5363] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5363] unlink("./file1" [pid 5364] <... mount resumed>) = 0 [pid 5364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5364] chdir("./file0") = 0 [pid 5364] ioctl(4, LOOP_CLR_FD) = 0 [pid 5364] close(4) = 0 [pid 5364] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 97.744124][ T5364] loop2: detected capacity change from 0 to 4096 [ 97.777360][ T5366] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5364] unlink("./file1" [pid 5363] <... unlink resumed>) = 0 [pid 5357] <... pwritev resumed>) = 1114112 [pid 5066] <... umount2 resumed>) = 0 [pid 5363] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5357] exit_group(0 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5357] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.801847][ T5367] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./23/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5364] <... unlink resumed>) = 0 [pid 5066] rmdir("./23" [pid 5364] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./24", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5368 [pid 5357] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5357, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5067] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5368 attached [pid 5067] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5358] <... pwritev resumed>) = 1114112 [pid 5067] lstat("./23/binderfs", [pid 5368] chdir("./24" [pid 5358] exit_group(0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5358] <... exit_group resumed>) = ? [pid 5067] unlink("./23/binderfs" [pid 5368] <... chdir resumed>) = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... unlink resumed>) = 0 [pid 5368] <... prctl resumed>) = 0 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] setpgid(0, 0) = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] memfd_create("syzkaller", 0) = 3 [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5358] +++ exited with 0 +++ [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5067] close(4) = 0 [pid 5067] rmdir("./23/file0") = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./23") = 0 [pid 5064] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./24", 0777) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5064] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5064] fstat(3, [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5369 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5369 attached [pid 5369] chdir("./24") = 0 [pid 5369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5369] setpgid(0, 0) = 0 [pid 5369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5368] <... write resumed>) = 2097152 [pid 5363] <... pwritev resumed>) = 1114112 [pid 5361] <... pwritev resumed>) = 1114112 [pid 5064] lstat("./23/binderfs", [pid 5369] <... openat resumed>) = 3 [pid 5368] munmap(0x7f241a43b000, 2097152 [pid 5363] exit_group(0 [pid 5361] exit_group(0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5369] write(3, "1000", 4 [pid 5368] <... munmap resumed>) = 0 [pid 5363] <... exit_group resumed>) = ? [pid 5361] <... exit_group resumed>) = ? [pid 5064] unlink("./23/binderfs" [pid 5369] <... write resumed>) = 4 [pid 5368] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5364] <... pwritev resumed>) = 1114112 [pid 5369] close(3 [pid 5364] exit_group(0 [pid 5369] <... close resumed>) = 0 [pid 5364] <... exit_group resumed>) = ? [pid 5369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] <... openat resumed>) = 4 [pid 5064] <... unlink resumed>) = 0 [pid 5369] memfd_create("syzkaller", 0) = 3 [pid 5368] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5368] <... ioctl resumed>) = 0 [pid 5368] close(3) = 0 [pid 5368] mkdir("./file0", 0777) = 0 [pid 5368] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... umount2 resumed>) = 0 [ 98.189347][ T5368] loop3: detected capacity change from 0 to 4096 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5368] <... mount resumed>) = 0 [pid 5064] fstat(4, [pid 5368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5368] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5368] chdir("./file0" [pid 5064] close(4) = 0 [pid 5064] rmdir("./23/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5368] <... chdir resumed>) = 0 [pid 5064] close(3 [pid 5368] ioctl(4, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5368] <... ioctl resumed>) = 0 [pid 5064] rmdir("./23" [pid 5368] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 5368] <... close resumed>) = 0 [pid 5064] mkdir("./24", 0777 [pid 5368] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5368] <... openat resumed>) = 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5368] unlink("./file1" [pid 5364] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5364, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5371 [pid 5065] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5371 attached [pid 5065] fstat(3, [pid 5371] chdir("./24" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5371] <... chdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5371] <... prctl resumed>) = 0 [ 98.256634][ T5370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5371] <... setpgid resumed>) = 0 [pid 5065] lstat("./25/binderfs", [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5371] <... openat resumed>) = 3 [pid 5065] unlink("./25/binderfs" [pid 5371] write(3, "1000", 4 [pid 5065] <... unlink resumed>) = 0 [pid 5371] <... write resumed>) = 4 [pid 5369] <... write resumed>) = 2097152 [pid 5363] +++ exited with 0 +++ [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] close(3 [pid 5369] munmap(0x7f241a43b000, 2097152 [pid 5371] <... close resumed>) = 0 [pid 5369] <... munmap resumed>) = 0 [pid 5368] <... unlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5371] symlink("/dev/binderfs", "./binderfs" [pid 5368] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5371] <... symlink resumed>) = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5371] memfd_create("syzkaller", 0 [pid 5369] <... openat resumed>) = 4 [pid 5371] <... memfd_create resumed>) = 3 [pid 5369] ioctl(4, LOOP_SET_FD, 3 [pid 5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5371] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5361, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5068] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./24/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] fstat(3, [pid 5068] unlink("./24/binderfs") = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5369] <... ioctl resumed>) = 0 [pid 5369] close(3) = 0 [pid 5369] mkdir("./file0", 0777 [pid 5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5369] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5369] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 98.334626][ T5369] loop4: detected capacity change from 0 to 4096 [pid 5063] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./23/binderfs") = 0 [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./24/file0", [pid 5065] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(4, [pid 5068] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5068] fstat(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5369] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5065] getdents64(4, [pid 5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5369] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5369] chdir("./file0") = 0 [pid 5369] ioctl(4, LOOP_CLR_FD [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5369] <... ioctl resumed>) = 0 [pid 5068] close(4 [pid 5065] <... close resumed>) = 0 [pid 5369] close(4) = 0 [pid 5369] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5369] unlink("./file1" [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./25/file0" [pid 5068] rmdir("./24/file0" [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] <... write resumed>) = 2097152 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5065] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3 [pid 5065] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] fstat(4, [pid 5068] rmdir("./24" [pid 5065] rmdir("./25" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./23/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5068] mkdir("./25", 0777 [pid 5065] mkdir("./26", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./23" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5371] munmap(0x7f241a43b000, 2097152 [pid 5068] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] mkdir("./24", 0777 [pid 5371] <... munmap resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5371] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5371] <... openat resumed>) = 4 [pid 5068] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... openat resumed>) = 3 [ 98.465730][ T5372] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5371] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... close resumed>) = 0 [pid 5065] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5369] <... unlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5063] close(3 [pid 5369] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 5373 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5373] chdir("./25" [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5373 [pid 5373] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5374 [pid 5373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5375 [pid 5373] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5374 attached [pid 5373] setpgid(0, 0 [pid 5374] chdir("./24" [pid 5373] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5375 attached [pid 5374] <... chdir resumed>) = 0 [ 98.509469][ T5371] loop1: detected capacity change from 0 to 4096 [pid 5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5375] chdir("./26" [pid 5374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5373] <... openat resumed>) = 3 [pid 5374] <... prctl resumed>) = 0 [pid 5373] write(3, "1000", 4 [pid 5375] <... chdir resumed>) = 0 [pid 5375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5374] setpgid(0, 0 [pid 5373] <... write resumed>) = 4 [pid 5375] <... prctl resumed>) = 0 [pid 5374] <... setpgid resumed>) = 0 [pid 5373] close(3 [pid 5375] setpgid(0, 0 [pid 5373] <... close resumed>) = 0 [pid 5375] <... setpgid resumed>) = 0 [pid 5374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5373] symlink("/dev/binderfs", "./binderfs" [pid 5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5373] <... symlink resumed>) = 0 [pid 5375] <... openat resumed>) = 3 [pid 5374] <... openat resumed>) = 3 [pid 5373] memfd_create("syzkaller", 0 [pid 5375] write(3, "1000", 4 [pid 5374] write(3, "1000", 4 [pid 5373] <... memfd_create resumed>) = 3 [pid 5371] <... ioctl resumed>) = 0 [pid 5375] <... write resumed>) = 4 [pid 5374] <... write resumed>) = 4 [pid 5373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5371] close(3 [pid 5375] close(3 [pid 5374] close(3 [pid 5373] <... mmap resumed>) = 0x7f241a43b000 [pid 5371] <... close resumed>) = 0 [pid 5375] <... close resumed>) = 0 [pid 5374] <... close resumed>) = 0 [pid 5371] mkdir("./file0", 0777) = 0 [pid 5371] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5375] symlink("/dev/binderfs", "./binderfs" [pid 5374] symlink("/dev/binderfs", "./binderfs" [pid 5373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5375] <... symlink resumed>) = 0 [pid 5374] <... symlink resumed>) = 0 [pid 5375] memfd_create("syzkaller", 0 [pid 5374] memfd_create("syzkaller", 0 [pid 5371] <... mount resumed>) = 0 [pid 5375] <... memfd_create resumed>) = 3 [pid 5374] <... memfd_create resumed>) = 3 [pid 5375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5375] <... mmap resumed>) = 0x7f241a43b000 [pid 5374] <... mmap resumed>) = 0x7f241a43b000 [pid 5371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5371] chdir("./file0") = 0 [pid 5371] ioctl(4, LOOP_CLR_FD) = 0 [pid 5371] close(4 [pid 5375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5371] <... close resumed>) = 0 [pid 5368] <... pwritev resumed>) = 1114112 [ 98.631964][ T5376] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5371] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5368] exit_group(0) = ? [pid 5371] <... openat resumed>) = 4 [pid 5371] unlink("./file1") = 0 [pid 5371] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5375] <... write resumed>) = 2097152 [pid 5374] <... write resumed>) = 2097152 [pid 5373] <... write resumed>) = 2097152 [pid 5375] munmap(0x7f241a43b000, 2097152 [pid 5374] munmap(0x7f241a43b000, 2097152 [pid 5373] munmap(0x7f241a43b000, 2097152 [pid 5375] <... munmap resumed>) = 0 [pid 5373] <... munmap resumed>) = 0 [pid 5374] <... munmap resumed>) = 0 [pid 5373] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5375] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5374] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5375] <... openat resumed>) = 4 [pid 5374] <... openat resumed>) = 4 [pid 5373] <... openat resumed>) = 4 [pid 5375] ioctl(4, LOOP_SET_FD, 3 [pid 5374] ioctl(4, LOOP_SET_FD, 3 [pid 5373] ioctl(4, LOOP_SET_FD, 3 [pid 5375] <... ioctl resumed>) = 0 [pid 5373] <... ioctl resumed>) = 0 [pid 5374] <... ioctl resumed>) = 0 [pid 5373] close(3 [pid 5375] close(3 [pid 5374] close(3 [pid 5373] <... close resumed>) = 0 [pid 5375] <... close resumed>) = 0 [pid 5374] <... close resumed>) = 0 [pid 5373] mkdir("./file0", 0777 [pid 5375] mkdir("./file0", 0777 [pid 5374] mkdir("./file0", 0777 [pid 5373] <... mkdir resumed>) = 0 [pid 5375] <... mkdir resumed>) = 0 [pid 5374] <... mkdir resumed>) = 0 [pid 5373] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5375] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5374] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5368] +++ exited with 0 +++ [ 98.757997][ T5375] loop2: detected capacity change from 0 to 4096 [ 98.764685][ T5374] loop0: detected capacity change from 0 to 4096 [ 98.771418][ T5373] loop5: detected capacity change from 0 to 4096 [pid 5375] <... mount resumed>) = 0 [pid 5375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5368, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5375] <... openat resumed>) = 3 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5375] chdir("./file0" [pid 5066] <... restart_syscall resumed>) = 0 [pid 5375] <... chdir resumed>) = 0 [pid 5375] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5375] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5375] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... openat resumed>) = 3 [pid 5375] <... openat resumed>) = 4 [pid 5374] <... mount resumed>) = 0 [pid 5066] fstat(3, [pid 5375] unlink("./file1" [pid 5374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5374] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5374] chdir("./file0" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5374] <... chdir resumed>) = 0 [pid 5066] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5374] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5374] <... ioctl resumed>) = 0 [pid 5066] lstat("./24/binderfs", [pid 5374] close(4 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5374] <... close resumed>) = 0 [pid 5066] unlink("./24/binderfs" [pid 5374] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... unlink resumed>) = 0 [pid 5374] <... openat resumed>) = 4 [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5374] unlink("./file1" [pid 5373] <... mount resumed>) = 0 [pid 5373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5373] chdir("./file0" [pid 5369] <... pwritev resumed>) = 1114112 [pid 5373] <... chdir resumed>) = 0 [pid 5369] exit_group(0 [pid 5373] ioctl(4, LOOP_CLR_FD [pid 5369] <... exit_group resumed>) = ? [pid 5373] <... ioctl resumed>) = 0 [pid 5374] <... unlink resumed>) = 0 [pid 5374] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5373] close(4) = 0 [pid 5373] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 98.816843][ T5377] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.829540][ T5378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.843103][ T5379] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5373] unlink("./file1" [pid 5375] <... unlink resumed>) = 0 [pid 5375] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5373] <... unlink resumed>) = 0 [pid 5373] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5369] +++ exited with 0 +++ [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5369, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./24/binderfs") = 0 [pid 5066] lstat("./24/file0", [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./24/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./24") = 0 [pid 5066] mkdir("./25", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5380 ./strace-static-x86_64: Process 5380 attached [pid 5380] chdir("./25") = 0 [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5371] <... pwritev resumed>) = 1114112 [pid 5067] <... umount2 resumed>) = 0 [pid 5380] <... prctl resumed>) = 0 [pid 5380] setpgid(0, 0) = 0 [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5371] exit_group(0 [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] write(3, "1000", 4 [pid 5371] <... exit_group resumed>) = ? [pid 5380] <... write resumed>) = 4 [pid 5380] close(3) = 0 [pid 5380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] memfd_create("syzkaller", 0) = 3 [pid 5380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./24/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(3) = 0 [pid 5067] rmdir("./24") = 0 [pid 5067] mkdir("./25", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5381 ./strace-static-x86_64: Process 5381 attached [pid 5381] chdir("./25") = 0 [pid 5381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5381] setpgid(0, 0) = 0 [pid 5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5381] write(3, "1000", 4) = 4 [pid 5381] close(3) = 0 [pid 5381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5381] memfd_create("syzkaller", 0) = 3 [pid 5381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5380] <... write resumed>) = 2097152 [pid 5371] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5064] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] munmap(0x7f241a43b000, 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./24/binderfs", [pid 5380] <... munmap resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5380] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5064] unlink("./24/binderfs" [pid 5380] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] <... pwritev resumed>) = 1114112 [pid 5380] <... ioctl resumed>) = 0 [pid 5380] close(3) = 0 [pid 5380] mkdir("./file0", 0777 [pid 5375] exit_group(0) = ? [pid 5380] <... mkdir resumed>) = 0 [pid 5380] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5374] <... pwritev resumed>) = 1114112 [pid 5374] exit_group(0) = ? [ 99.250876][ T5380] loop3: detected capacity change from 0 to 4096 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./24/file0", [pid 5373] <... pwritev resumed>) = 1114112 [pid 5373] exit_group(0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5373] <... exit_group resumed>) = ? [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./24/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5381] <... write resumed>) = 2097152 [pid 5064] rmdir("./24" [pid 5381] munmap(0x7f241a43b000, 2097152 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./25", 0777 [pid 5381] <... munmap resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5381] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5381] <... openat resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5381] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5380] <... mount resumed>) = 0 [pid 5064] close(3 [pid 5380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5380] chdir("./file0") = 0 [pid 5380] ioctl(4, LOOP_CLR_FD) = 0 [pid 5380] close(4) = 0 [pid 5380] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5380] unlink("./file1" [pid 5064] <... close resumed>) = 0 [pid 5375] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5383 ./strace-static-x86_64: Process 5383 attached [pid 5383] chdir("./25") = 0 [pid 5380] <... unlink resumed>) = 0 [pid 5065] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5381] <... ioctl resumed>) = 0 [pid 5373] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] <... prctl resumed>) = 0 [pid 5381] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5373, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [ 99.370067][ T5381] loop4: detected capacity change from 0 to 4096 [ 99.376867][ T5382] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5383] setpgid(0, 0 [pid 5381] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5374] +++ exited with 0 +++ [pid 5383] <... setpgid resumed>) = 0 [pid 5381] mkdir("./file0", 0777 [pid 5065] fstat(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5374, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5381] <... mkdir resumed>) = 0 [pid 5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(3, [pid 5383] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5383] write(3, "1000", 4 [pid 5068] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] lstat("./26/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] <... write resumed>) = 4 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5065] unlink("./26/binderfs" [pid 5068] fstat(3, [pid 5383] close(3 [pid 5063] fstat(3, [pid 5065] <... unlink resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5383] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5063] getdents64(3, [pid 5383] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5383] <... symlink resumed>) = 0 [pid 5068] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./24/binderfs", [pid 5068] lstat("./25/binderfs", [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./24/binderfs" [pid 5068] unlink("./25/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5383] memfd_create("syzkaller", 0 [pid 5068] <... unlink resumed>) = 0 [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] <... memfd_create resumed>) = 3 [pid 5068] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5381] <... mount resumed>) = 0 [pid 5381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5381] chdir("./file0") = 0 [pid 5381] ioctl(4, LOOP_CLR_FD) = 0 [pid 5381] close(4 [pid 5383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5381] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5381] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... openat resumed>) = 4 [pid 5065] lstat("./26/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./25/file0", [ 99.517104][ T5384] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5381] unlink("./file1" [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] lstat("./24/file0", [pid 5068] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5381] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./25/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./25") = 0 [pid 5068] mkdir("./26", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5065] fstat(4, [pid 5063] <... openat resumed>) = 4 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5068] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5385 [pid 5065] getdents64(4, [pid 5063] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] close(4 [pid 5063] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5385 attached [pid 5065] rmdir("./26/file0" [pid 5063] close(4 [pid 5385] chdir("./26") = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5383] <... write resumed>) = 2097152 [pid 5065] getdents64(3, [pid 5385] <... prctl resumed>) = 0 [pid 5063] rmdir("./24/file0" [pid 5385] setpgid(0, 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5385] <... setpgid resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] close(3 [pid 5385] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5385] write(3, "1000", 4) = 4 [pid 5385] close(3 [pid 5065] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5385] <... close resumed>) = 0 [pid 5385] symlink("/dev/binderfs", "./binderfs" [pid 5065] rmdir("./26" [pid 5063] close(3 [pid 5385] <... symlink resumed>) = 0 [pid 5385] memfd_create("syzkaller", 0) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./27", 0777 [pid 5063] <... close resumed>) = 0 [pid 5385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] rmdir("./24" [pid 5383] munmap(0x7f241a43b000, 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] mkdir("./25", 0777 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5383] <... munmap resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5383] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5383] <... openat resumed>) = 4 [pid 5383] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5386 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5387 [pid 5383] <... ioctl resumed>) = 0 [pid 5383] close(3./strace-static-x86_64: Process 5386 attached [pid 5385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5383] <... close resumed>) = 0 ./strace-static-x86_64: Process 5387 attached [pid 5386] chdir("./27" [pid 5383] mkdir("./file0", 0777 [pid 5387] chdir("./25" [pid 5386] <... chdir resumed>) = 0 [pid 5383] <... mkdir resumed>) = 0 [pid 5381] <... pwritev resumed>) = 1114112 [pid 5387] <... chdir resumed>) = 0 [pid 5386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5381] exit_group(0 [pid 5387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5386] setpgid(0, 0 [pid 5383] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5381] <... exit_group resumed>) = ? [pid 5387] <... prctl resumed>) = 0 [pid 5386] <... setpgid resumed>) = 0 [pid 5387] setpgid(0, 0) = 0 [pid 5386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5380] <... pwritev resumed>) = 1114112 [pid 5387] <... openat resumed>) = 3 [pid 5386] <... openat resumed>) = 3 [pid 5387] write(3, "1000", 4 [pid 5380] exit_group(0 [pid 5387] <... write resumed>) = 4 [pid 5386] write(3, "1000", 4 [pid 5387] close(3) = 0 [ 99.711035][ T5383] loop1: detected capacity change from 0 to 4096 [pid 5387] symlink("/dev/binderfs", "./binderfs" [pid 5380] <... exit_group resumed>) = ? [pid 5387] <... symlink resumed>) = 0 [pid 5386] <... write resumed>) = 4 [pid 5387] memfd_create("syzkaller", 0 [pid 5386] close(3 [pid 5387] <... memfd_create resumed>) = 3 [pid 5386] <... close resumed>) = 0 [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5386] symlink("/dev/binderfs", "./binderfs" [pid 5387] <... mmap resumed>) = 0x7f241a43b000 [pid 5386] <... symlink resumed>) = 0 [pid 5386] memfd_create("syzkaller", 0) = 3 [pid 5386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5385] <... write resumed>) = 2097152 [pid 5385] munmap(0x7f241a43b000, 2097152 [pid 5383] <... mount resumed>) = 0 [pid 5383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5383] chdir("./file0" [pid 5385] <... munmap resumed>) = 0 [pid 5383] <... chdir resumed>) = 0 [pid 5385] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5383] ioctl(4, LOOP_CLR_FD [pid 5386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5385] <... openat resumed>) = 4 [pid 5383] <... ioctl resumed>) = 0 [pid 5385] ioctl(4, LOOP_SET_FD, 3 [pid 5383] close(4) = 0 [pid 5383] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5383] unlink("./file1") = 0 [pid 5383] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5385] <... ioctl resumed>) = 0 [pid 5385] close(3) = 0 [ 99.808393][ T5388] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.844305][ T5385] loop5: detected capacity change from 0 to 4096 [pid 5385] mkdir("./file0", 0777) = 0 [pid 5385] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5381] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5381, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5380] +++ exited with 0 +++ [pid 5067] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5380, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... restart_syscall resumed>) = 0 [pid 5387] <... write resumed>) = 2097152 [pid 5067] <... openat resumed>) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 5067] lstat("./25/binderfs", [pid 5066] fstat(3, [pid 5387] munmap(0x7f241a43b000, 2097152 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5067] unlink("./25/binderfs" [pid 5387] <... munmap resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... unlink resumed>) = 0 [pid 5387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... openat resumed>) = 4 [pid 5386] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./25/binderfs", [pid 5387] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./25/binderfs" [pid 5385] <... mount resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5385] chdir("./file0") = 0 [pid 5385] ioctl(4, LOOP_CLR_FD) = 0 [pid 5385] close(4) = 0 [pid 5385] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5386] munmap(0x7f241a43b000, 2097152) = 0 [pid 5386] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5386] ioctl(4, LOOP_SET_FD, 3 [pid 5387] <... ioctl resumed>) = 0 [pid 5387] close(3) = 0 [pid 5387] mkdir("./file0", 0777 [pid 5385] <... openat resumed>) = 4 [pid 5385] unlink("./file1" [pid 5387] <... mkdir resumed>) = 0 [pid 5387] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5386] <... ioctl resumed>) = 0 [pid 5386] close(3) = 0 [pid 5386] mkdir("./file0", 0777) = 0 [ 99.930181][ T5389] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.943332][ T5387] loop0: detected capacity change from 0 to 4096 [ 99.963798][ T5386] loop2: detected capacity change from 0 to 4096 [pid 5386] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5385] <... unlink resumed>) = 0 [pid 5385] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5387] <... mount resumed>) = 0 [pid 5387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5387] chdir("./file0") = 0 [pid 5387] ioctl(4, LOOP_CLR_FD) = 0 [pid 5387] close(4) = 0 [pid 5387] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5387] unlink("./file1" [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5066] lstat("./25/file0", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, [ 100.017774][ T5390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5386] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5386] chdir("./file0") = 0 [pid 5386] ioctl(4, LOOP_CLR_FD) = 0 [pid 5386] close(4 [pid 5387] <... unlink resumed>) = 0 [pid 5386] <... close resumed>) = 0 [pid 5067] close(4 [pid 5066] fstat(4, [pid 5387] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5386] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... close resumed>) = 0 [pid 5386] <... openat resumed>) = 4 [pid 5067] rmdir("./25/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5386] unlink("./file1" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] close(4) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./25/file0" [pid 5067] rmdir("./25" [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] mkdir("./26", 0777 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] rmdir("./25" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./26", 0777 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5392 [pid 5066] <... openat resumed>) = 3 [ 100.062578][ T5391] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3./strace-static-x86_64: Process 5392 attached [pid 5392] chdir("./26" [pid 5066] <... close resumed>) = 0 [pid 5392] <... chdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5393 [pid 5392] setpgid(0, 0) = 0 [pid 5392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5393 attached ) = 3 [pid 5386] <... unlink resumed>) = 0 [pid 5393] chdir("./26" [pid 5392] write(3, "1000", 4 [pid 5386] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5393] <... chdir resumed>) = 0 [pid 5392] <... write resumed>) = 4 [pid 5392] close(3) = 0 [pid 5393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5392] symlink("/dev/binderfs", "./binderfs" [pid 5393] <... prctl resumed>) = 0 [pid 5392] <... symlink resumed>) = 0 [pid 5393] setpgid(0, 0 [pid 5392] memfd_create("syzkaller", 0 [pid 5393] <... setpgid resumed>) = 0 [pid 5392] <... memfd_create resumed>) = 3 [pid 5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5393] <... openat resumed>) = 3 [pid 5392] <... mmap resumed>) = 0x7f241a43b000 [pid 5393] write(3, "1000", 4) = 4 [pid 5393] close(3) = 0 [pid 5393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5393] memfd_create("syzkaller", 0) = 3 [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5383] <... pwritev resumed>) = 1114112 [pid 5383] exit_group(0) = ? [pid 5392] <... write resumed>) = 2097152 [pid 5392] munmap(0x7f241a43b000, 2097152) = 0 [pid 5393] <... write resumed>) = 2097152 [pid 5392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5393] munmap(0x7f241a43b000, 2097152 [pid 5392] <... openat resumed>) = 4 [pid 5392] ioctl(4, LOOP_SET_FD, 3 [pid 5393] <... munmap resumed>) = 0 [pid 5392] <... ioctl resumed>) = 0 [pid 5393] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5393] ioctl(4, LOOP_SET_FD, 3 [pid 5385] <... pwritev resumed>) = 1114112 [pid 5385] exit_group(0 [pid 5392] close(3) = 0 [pid 5392] mkdir("./file0", 0777 [pid 5385] <... exit_group resumed>) = ? [pid 5392] <... mkdir resumed>) = 0 [pid 5392] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5393] <... ioctl resumed>) = 0 [pid 5393] close(3) = 0 [pid 5393] mkdir("./file0", 0777) = 0 [ 100.379171][ T5392] loop4: detected capacity change from 0 to 4096 [ 100.391379][ T5393] loop3: detected capacity change from 0 to 4096 [pid 5393] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5383] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5383, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./25/binderfs") = 0 [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5392] <... mount resumed>) = 0 [pid 5392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5387] <... pwritev resumed>) = 1114112 [pid 5392] <... openat resumed>) = 3 [pid 5387] exit_group(0 [pid 5392] chdir("./file0" [pid 5387] <... exit_group resumed>) = ? [pid 5392] <... chdir resumed>) = 0 [pid 5392] ioctl(4, LOOP_CLR_FD) = 0 [pid 5392] close(4) = 0 [pid 5392] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5392] unlink("./file1" [pid 5393] <... mount resumed>) = 0 [pid 5393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5393] chdir("./file0") = 0 [pid 5393] ioctl(4, LOOP_CLR_FD) = 0 [pid 5393] close(4) = 0 [pid 5393] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 5393] unlink("./file1" [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [ 100.477082][ T5394] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.496591][ T5395] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./25/file0" [pid 5393] <... unlink resumed>) = 0 [pid 5392] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5392] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] getdents64(3, [pid 5393] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5386] <... pwritev resumed>) = 1114112 [pid 5385] +++ exited with 0 +++ [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5386] exit_group(0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5064] close(3 [pid 5386] <... exit_group resumed>) = ? [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./25") = 0 [pid 5064] mkdir("./26", 0777) = 0 [pid 5068] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] <... openat resumed>) = 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] fstat(3, [pid 5064] close(3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5396 ./strace-static-x86_64: Process 5396 attached [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5396] chdir("./26" [pid 5068] unlink("./26/binderfs" [pid 5396] <... chdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5396] setpgid(0, 0) = 0 [pid 5387] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5387, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5396] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5396] write(3, "1000", 4 [pid 5063] unlink("./25/binderfs" [pid 5396] <... write resumed>) = 4 [pid 5396] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5396] <... close resumed>) = 0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5396] memfd_create("syzkaller", 0) = 3 [pid 5396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./26/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./26") = 0 [pid 5068] mkdir("./27", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5386] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5386, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] close(3 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... close resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5397 [pid 5065] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5397 attached [pid 5397] chdir("./27" [pid 5065] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] lstat("./27/binderfs", [pid 5397] <... prctl resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5397] setpgid(0, 0 [pid 5065] unlink("./27/binderfs" [pid 5397] <... setpgid resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5397] write(3, "1000", 4) = 4 [pid 5397] close(3) = 0 [pid 5397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5397] memfd_create("syzkaller", 0) = 3 [pid 5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./25/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./25") = 0 [pid 5063] mkdir("./26", 0777) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./27/file0", [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(3 [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5398 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./27/file0") = 0 [pid 5396] <... write resumed>) = 2097152 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5396] munmap(0x7f241a43b000, 2097152./strace-static-x86_64: Process 5398 attached [pid 5065] close(3 [pid 5398] chdir("./26" [pid 5396] <... munmap resumed>) = 0 [pid 5398] <... chdir resumed>) = 0 [pid 5396] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5396] <... openat resumed>) = 4 [pid 5065] rmdir("./27" [pid 5398] <... prctl resumed>) = 0 [pid 5398] setpgid(0, 0) = 0 [pid 5398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5396] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5398] write(3, "1000", 4) = 4 [pid 5065] mkdir("./28", 0777 [pid 5398] close(3) = 0 [pid 5398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5398] memfd_create("syzkaller", 0 [pid 5397] <... write resumed>) = 2097152 [pid 5398] <... memfd_create resumed>) = 3 [pid 5398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... mkdir resumed>) = 0 [pid 5396] <... ioctl resumed>) = 0 [pid 5392] <... pwritev resumed>) = 1114112 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5397] munmap(0x7f241a43b000, 2097152 [pid 5396] close(3) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5392] exit_group(0 [pid 5396] mkdir("./file0", 0777 [pid 5392] <... exit_group resumed>) = ? [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5396] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5397] <... munmap resumed>) = 0 [pid 5397] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5397] ioctl(4, LOOP_SET_FD, 3 [pid 5396] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] close(3) = 0 [pid 5393] <... pwritev resumed>) = 1114112 [pid 5393] exit_group(0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5393] <... exit_group resumed>) = ? [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5399 ./strace-static-x86_64: Process 5399 attached [pid 5399] chdir("./28") = 0 [pid 5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5399] setpgid(0, 0) = 0 [ 100.914901][ T5396] loop1: detected capacity change from 0 to 4096 [ 100.951462][ T5397] loop5: detected capacity change from 0 to 4096 [pid 5398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5397] <... ioctl resumed>) = 0 [pid 5397] close(3) = 0 [pid 5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5397] mkdir("./file0", 0777 [pid 5399] <... openat resumed>) = 3 [pid 5397] <... mkdir resumed>) = 0 [pid 5396] <... mount resumed>) = 0 [pid 5399] write(3, "1000", 4 [pid 5396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5397] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5396] <... openat resumed>) = 3 [pid 5399] <... write resumed>) = 4 [pid 5396] chdir("./file0" [pid 5392] +++ exited with 0 +++ [pid 5399] close(3 [pid 5396] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5392, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5399] <... close resumed>) = 0 [pid 5396] ioctl(4, LOOP_CLR_FD [pid 5399] symlink("/dev/binderfs", "./binderfs" [pid 5396] <... ioctl resumed>) = 0 [pid 5399] <... symlink resumed>) = 0 [pid 5396] close(4 [pid 5399] memfd_create("syzkaller", 0 [pid 5396] <... close resumed>) = 0 [pid 5396] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5399] <... memfd_create resumed>) = 3 [pid 5396] <... openat resumed>) = 4 [pid 5396] unlink("./file1" [pid 5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./26/binderfs") = 0 [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] <... unlink resumed>) = 0 [ 101.003801][ T5400] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5396] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5397] <... mount resumed>) = 0 [pid 5397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5397] chdir("./file0") = 0 [pid 5397] ioctl(4, LOOP_CLR_FD [pid 5398] <... write resumed>) = 2097152 [pid 5397] <... ioctl resumed>) = 0 [pid 5397] close(4) = 0 [pid 5397] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5397] unlink("./file1" [pid 5398] munmap(0x7f241a43b000, 2097152 [pid 5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5398] <... munmap resumed>) = 0 [pid 5393] +++ exited with 0 +++ [pid 5398] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5393, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5398] <... openat resumed>) = 4 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [ 101.066347][ T5401] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5398] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5397] <... unlink resumed>) = 0 [pid 5397] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./26/binderfs", [pid 5067] lstat("./26/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5398] <... ioctl resumed>) = 0 [pid 5398] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] unlink("./26/binderfs" [pid 5398] <... close resumed>) = 0 [pid 5398] mkdir("./file0", 0777) = 0 [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5398] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 101.122666][ T5398] loop0: detected capacity change from 0 to 4096 [pid 5067] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5399] <... write resumed>) = 2097152 [pid 5067] <... openat resumed>) = 4 [pid 5399] munmap(0x7f241a43b000, 2097152 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5399] <... munmap resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5399] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] close(4) = 0 [pid 5067] rmdir("./26/file0" [pid 5399] <... openat resumed>) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 5399] ioctl(4, LOOP_SET_FD, 3 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./26") = 0 [pid 5067] mkdir("./27", 0777) = 0 [pid 5398] <... mount resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5398] chdir("./file0") = 0 [pid 5398] ioctl(4, LOOP_CLR_FD) = 0 [pid 5398] close(4) = 0 [pid 5398] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5398] unlink("./file1" [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] lstat("./26/file0", [pid 5067] close(3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5403 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4./strace-static-x86_64: Process 5403 attached ) = 0 [pid 5403] chdir("./27" [pid 5066] rmdir("./26/file0" [pid 5403] <... chdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] getdents64(3, [pid 5403] <... prctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5403] setpgid(0, 0 [pid 5066] close(3 [pid 5403] <... setpgid resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5399] <... ioctl resumed>) = 0 [pid 5066] rmdir("./26" [pid 5403] <... openat resumed>) = 3 [pid 5399] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 5403] write(3, "1000", 4 [pid 5399] <... close resumed>) = 0 [pid 5066] mkdir("./27", 0777 [pid 5403] <... write resumed>) = 4 [pid 5399] mkdir("./file0", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5403] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5403] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5403] symlink("/dev/binderfs", "./binderfs" [pid 5399] <... mkdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5403] <... symlink resumed>) = 0 [pid 5399] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5403] memfd_create("syzkaller", 0 [pid 5066] close(3 [pid 5403] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 101.215318][ T5399] loop2: detected capacity change from 0 to 4096 [ 101.231220][ T5402] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5403] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5404 ./strace-static-x86_64: Process 5404 attached [pid 5404] chdir("./27") = 0 [pid 5404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5404] setpgid(0, 0) = 0 [pid 5404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5404] write(3, "1000", 4) = 4 [pid 5404] close(3) = 0 [pid 5404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5404] memfd_create("syzkaller", 0) = 3 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5398] <... unlink resumed>) = 0 [pid 5398] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5399] <... mount resumed>) = 0 [pid 5399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5399] chdir("./file0") = 0 [pid 5399] ioctl(4, LOOP_CLR_FD) = 0 [pid 5399] close(4) = 0 [pid 5399] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 101.356437][ T5405] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5399] unlink("./file1" [pid 5403] <... write resumed>) = 2097152 [pid 5399] <... unlink resumed>) = 0 [pid 5399] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5396] <... pwritev resumed>) = 1114112 [pid 5396] exit_group(0) = ? [pid 5403] munmap(0x7f241a43b000, 2097152) = 0 [pid 5403] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5403] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5403] close(3) = 0 [pid 5403] mkdir("./file0", 0777 [pid 5404] <... write resumed>) = 2097152 [pid 5403] <... mkdir resumed>) = 0 [pid 5403] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5404] munmap(0x7f241a43b000, 2097152) = 0 [pid 5404] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 101.472883][ T5403] loop4: detected capacity change from 0 to 4096 [pid 5404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5404] close(3) = 0 [pid 5404] mkdir("./file0", 0777) = 0 [pid 5404] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5403] <... mount resumed>) = 0 [pid 5403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5403] chdir("./file0") = 0 [pid 5403] ioctl(4, LOOP_CLR_FD) = 0 [pid 5403] close(4) = 0 [pid 5403] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5403] unlink("./file1" [pid 5397] <... pwritev resumed>) = 1114112 [ 101.524357][ T5404] loop3: detected capacity change from 0 to 4096 [ 101.543593][ T5406] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5397] exit_group(0 [pid 5404] <... mount resumed>) = 0 [pid 5404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5397] <... exit_group resumed>) = ? [pid 5404] <... openat resumed>) = 3 [pid 5404] chdir("./file0") = 0 [pid 5403] <... unlink resumed>) = 0 [pid 5396] +++ exited with 0 +++ [pid 5404] ioctl(4, LOOP_CLR_FD [pid 5403] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5404] <... ioctl resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5396, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5404] close(4 [pid 5064] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 3 [pid 5404] unlink("./file1" [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./26/binderfs" [pid 5404] <... unlink resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [ 101.602908][ T5407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5404] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5398] <... pwritev resumed>) = 1114112 [pid 5398] exit_group(0) = ? [pid 5064] <... umount2 resumed>) = 0 [pid 5399] <... pwritev resumed>) = 1114112 [pid 5399] exit_group(0 [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5397, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5064] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(4, [pid 5068] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5399, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5068] fstat(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5068] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] fstat(3, [pid 5064] close(4 [pid 5068] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5068] lstat("./27/binderfs", [pid 5064] rmdir("./26/file0" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./27/binderfs" [pid 5065] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5068] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./28/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(3 [pid 5065] unlink("./28/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5064] rmdir("./26" [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./27", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5408 [pid 5398] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5398, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5408 attached [pid 5063] getdents64(3, [pid 5408] chdir("./27" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] lstat("./26/binderfs", [pid 5408] <... prctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./26/binderfs") = 0 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] setpgid(0, 0) = 0 [pid 5408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5408] write(3, "1000", 4) = 4 [pid 5408] close(3) = 0 [pid 5408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5408] memfd_create("syzkaller", 0) = 3 [pid 5408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] lstat("./27/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./28/file0", [pid 5068] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(4, [pid 5065] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5065] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] fstat(4, [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] close(4 [pid 5065] getdents64(4, [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./27/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5065] <... close resumed>) = 0 [pid 5408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./28/file0" [pid 5063] <... umount2 resumed>) = 0 [pid 5068] rmdir("./27" [pid 5065] <... rmdir resumed>) = 0 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5068] mkdir("./28", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5065] <... close resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] rmdir("./28" [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] mkdir("./29", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] lstat("./26/file0", [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5409 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5409 attached [pid 5065] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5409] chdir("./28" [pid 5065] <... close resumed>) = 0 [pid 5063] fstat(4, [pid 5409] <... chdir resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(4, [pid 5409] <... prctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5410 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5409] setpgid(0, 0 [pid 5063] getdents64(4, ./strace-static-x86_64: Process 5410 attached [pid 5409] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5410] chdir("./29" [pid 5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(4 [pid 5410] <... chdir resumed>) = 0 [pid 5409] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5409] write(3, "1000", 4 [pid 5063] rmdir("./26/file0" [pid 5410] <... prctl resumed>) = 0 [pid 5409] <... write resumed>) = 4 [pid 5403] <... pwritev resumed>) = 1114112 [pid 5063] <... rmdir resumed>) = 0 [pid 5410] setpgid(0, 0 [pid 5409] close(3 [pid 5408] <... write resumed>) = 2097152 [pid 5403] exit_group(0 [pid 5063] getdents64(3, [pid 5410] <... setpgid resumed>) = 0 [pid 5409] <... close resumed>) = 0 [pid 5403] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5409] symlink("/dev/binderfs", "./binderfs" [pid 5408] munmap(0x7f241a43b000, 2097152 [pid 5404] <... pwritev resumed>) = 1114112 [pid 5063] close(3 [pid 5410] <... openat resumed>) = 3 [pid 5409] <... symlink resumed>) = 0 [pid 5404] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5410] write(3, "1000", 4 [pid 5409] memfd_create("syzkaller", 0 [pid 5408] <... munmap resumed>) = 0 [pid 5404] <... exit_group resumed>) = ? [pid 5063] rmdir("./26" [pid 5410] <... write resumed>) = 4 [pid 5409] <... memfd_create resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5410] close(3 [pid 5409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] mkdir("./27", 0777 [pid 5410] <... close resumed>) = 0 [pid 5409] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... mkdir resumed>) = 0 [pid 5410] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5410] <... symlink resumed>) = 0 [pid 5408] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5410] memfd_create("syzkaller", 0 [pid 5408] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5410] <... memfd_create resumed>) = 3 [pid 5408] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3 [pid 5410] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5411 ./strace-static-x86_64: Process 5411 attached [pid 5411] chdir("./27") = 0 [pid 5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5411] setpgid(0, 0 [pid 5408] <... ioctl resumed>) = 0 [pid 5411] <... setpgid resumed>) = 0 [pid 5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5408] close(3 [pid 5411] <... openat resumed>) = 3 [pid 5408] <... close resumed>) = 0 [pid 5411] write(3, "1000", 4 [pid 5408] mkdir("./file0", 0777 [pid 5411] <... write resumed>) = 4 [pid 5411] close(3 [pid 5408] <... mkdir resumed>) = 0 [pid 5411] <... close resumed>) = 0 [pid 5408] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5411] memfd_create("syzkaller", 0) = 3 [pid 5410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 102.092756][ T5408] loop1: detected capacity change from 0 to 4096 [pid 5411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5403] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5408] <... mount resumed>) = 0 [pid 5067] lstat("./27/binderfs", [pid 5408] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5408] <... openat resumed>) = 3 [pid 5067] unlink("./27/binderfs" [pid 5408] chdir("./file0" [pid 5067] <... unlink resumed>) = 0 [pid 5408] <... chdir resumed>) = 0 [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5409] <... write resumed>) = 2097152 [pid 5408] ioctl(4, LOOP_CLR_FD) = 0 [pid 5408] close(4 [pid 5410] <... write resumed>) = 2097152 [ 102.178991][ T5412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5409] munmap(0x7f241a43b000, 2097152 [pid 5408] <... close resumed>) = 0 [pid 5404] +++ exited with 0 +++ [pid 5408] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5409] <... munmap resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5404, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5409] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5408] <... openat resumed>) = 4 [pid 5066] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5410] munmap(0x7f241a43b000, 2097152 [pid 5409] <... openat resumed>) = 4 [pid 5408] unlink("./file1" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5409] ioctl(4, LOOP_SET_FD, 3 [pid 5066] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5410] <... munmap resumed>) = 0 [pid 5409] <... ioctl resumed>) = 0 [pid 5408] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] lstat("./27/binderfs", [pid 5410] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./27/binderfs") = 0 [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./27/file0", [pid 5410] <... openat resumed>) = 4 [pid 5410] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5411] <... write resumed>) = 2097152 [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5409] close(3 [pid 5067] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5409] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5409] mkdir("./file0", 0777 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5409] <... mkdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5409] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5411] munmap(0x7f241a43b000, 2097152 [pid 5067] close(4 [pid 5410] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5410] close(3 [pid 5067] rmdir("./27/file0" [pid 5411] <... munmap resumed>) = 0 [pid 5410] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5411] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5410] mkdir("./file0", 0777 [pid 5067] getdents64(3, [pid 5411] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5410] <... mkdir resumed>) = 0 [pid 5411] ioctl(4, LOOP_SET_FD, 3 [ 102.252585][ T5409] loop5: detected capacity change from 0 to 4096 [ 102.279792][ T5410] loop2: detected capacity change from 0 to 4096 [pid 5067] close(3 [pid 5410] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./27") = 0 [pid 5067] mkdir("./28", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = 0 [pid 5411] <... ioctl resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5411] close(3 [pid 5067] close(3 [pid 5411] <... close resumed>) = 0 [pid 5409] <... mount resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5411] mkdir("./file0", 0777 [pid 5409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5411] <... mkdir resumed>) = 0 [pid 5411] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5415 [ 102.318277][ T5411] loop0: detected capacity change from 0 to 4096 [ 102.344549][ T5413] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.358027][ T5414] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] lstat("./27/file0", [pid 5409] <... openat resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5410] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5415 attached [pid 5410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5409] chdir("./file0" [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5415] chdir("./28" [pid 5410] <... openat resumed>) = 3 [pid 5409] <... chdir resumed>) = 0 [pid 5415] <... chdir resumed>) = 0 [pid 5410] chdir("./file0" [pid 5409] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5410] <... chdir resumed>) = 0 [pid 5409] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5415] <... prctl resumed>) = 0 [pid 5410] ioctl(4, LOOP_CLR_FD [pid 5409] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5415] setpgid(0, 0 [pid 5410] <... ioctl resumed>) = 0 [pid 5409] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5415] <... setpgid resumed>) = 0 [pid 5410] close(4 [pid 5409] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5410] <... close resumed>) = 0 [pid 5415] <... openat resumed>) = 3 [pid 5415] write(3, "1000", 4 [pid 5410] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5409] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5415] <... write resumed>) = 4 [pid 5410] <... openat resumed>) = 4 [pid 5409] unlink("./file1" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5415] close(3 [pid 5410] unlink("./file1" [pid 5415] <... close resumed>) = 0 [pid 5409] <... unlink resumed>) = 0 [pid 5066] getdents64(4, [pid 5415] symlink("/dev/binderfs", "./binderfs" [pid 5409] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5415] <... symlink resumed>) = 0 [pid 5410] <... unlink resumed>) = 0 [pid 5066] close(4 [pid 5415] memfd_create("syzkaller", 0 [pid 5410] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... close resumed>) = 0 [pid 5415] <... memfd_create resumed>) = 3 [pid 5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] rmdir("./27/file0") = 0 [pid 5066] getdents64(3, [pid 5411] <... mount resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] close(3 [pid 5411] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5411] chdir("./file0" [pid 5066] rmdir("./27" [pid 5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5411] <... chdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5411] ioctl(4, LOOP_CLR_FD [pid 5066] mkdir("./28", 0777 [pid 5411] <... ioctl resumed>) = 0 [pid 5411] close(4 [pid 5066] <... mkdir resumed>) = 0 [pid 5411] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5411] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5066] <... openat resumed>) = 3 [pid 5411] unlink("./file1" [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 102.438656][ T5416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5411] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5411] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5417 ./strace-static-x86_64: Process 5417 attached [pid 5417] chdir("./28") = 0 [pid 5417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5417] setpgid(0, 0) = 0 [pid 5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5417] write(3, "1000", 4) = 4 [pid 5417] close(3) = 0 [pid 5417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5417] memfd_create("syzkaller", 0) = 3 [pid 5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5415] <... write resumed>) = 2097152 [pid 5415] munmap(0x7f241a43b000, 2097152) = 0 [pid 5415] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5415] ioctl(4, LOOP_SET_FD, 3 [pid 5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5415] <... ioctl resumed>) = 0 [pid 5415] close(3) = 0 [pid 5415] mkdir("./file0", 0777) = 0 [ 102.602033][ T5415] loop4: detected capacity change from 0 to 4096 [pid 5415] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5415] chdir("./file0") = 0 [pid 5415] ioctl(4, LOOP_CLR_FD) = 0 [pid 5415] close(4) = 0 [pid 5415] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5415] unlink("./file1" [pid 5408] <... pwritev resumed>) = 1114112 [pid 5408] exit_group(0) = ? [pid 5415] <... unlink resumed>) = 0 [ 102.700636][ T5418] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5415] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5417] <... write resumed>) = 2097152 [pid 5417] munmap(0x7f241a43b000, 2097152) = 0 [pid 5417] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5417] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5417] close(3) = 0 [pid 5417] mkdir("./file0", 0777) = 0 [pid 5410] <... pwritev resumed>) = 1114112 [pid 5417] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5410] exit_group(0) = ? [ 102.775501][ T5417] loop3: detected capacity change from 0 to 4096 [pid 5409] <... pwritev resumed>) = 1114112 [pid 5409] exit_group(0 [pid 5417] <... mount resumed>) = 0 [pid 5409] <... exit_group resumed>) = ? [pid 5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5417] chdir("./file0") = 0 [pid 5417] ioctl(4, LOOP_CLR_FD) = 0 [pid 5417] close(4 [pid 5411] <... pwritev resumed>) = 1114112 [pid 5417] <... close resumed>) = 0 [pid 5411] exit_group(0 [pid 5410] +++ exited with 0 +++ [pid 5417] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5411] <... exit_group resumed>) = ? [pid 5417] <... openat resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5410, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5417] unlink("./file1" [pid 5065] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 102.863164][ T5419] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5417] <... unlink resumed>) = 0 [pid 5408] +++ exited with 0 +++ [pid 5065] <... openat resumed>) = 3 [pid 5417] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] fstat(3, [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5408, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./29/binderfs", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] unlink("./29/binderfs" [pid 5064] <... openat resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5064] fstat(3, [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./27/binderfs") = 0 [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5409] +++ exited with 0 +++ [pid 5411] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./29/file0", [pid 5068] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(3, [pid 5065] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5065] fstat(4, [pid 5063] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./28/binderfs", [pid 5065] getdents64(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5068] unlink("./28/binderfs" [pid 5065] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5063] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] rmdir("./29/file0" [pid 5063] unlink("./27/binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] rmdir("./29" [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./27/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5065] mkdir("./30", 0777 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./27" [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] mkdir("./28", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5415] <... pwritev resumed>) = 1114112 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... umount2 resumed>) = 0 [pid 5064] close(3 [pid 5415] exit_group(0 [pid 5068] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5415] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5420 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5421 [pid 5068] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./27/file0", [pid 5068] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] fstat(4, [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5421 attached ./strace-static-x86_64: Process 5420 attached [pid 5068] getdents64(4, [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5421] chdir("./30" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5420] chdir("./28" [pid 5063] getdents64(4, [pid 5421] <... chdir resumed>) = 0 [pid 5420] <... chdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(4, [pid 5063] close(4 [pid 5421] <... prctl resumed>) = 0 [pid 5420] <... prctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5421] setpgid(0, 0 [pid 5420] setpgid(0, 0 [pid 5068] close(4 [pid 5063] rmdir("./27/file0" [pid 5421] <... setpgid resumed>) = 0 [pid 5420] <... setpgid resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./27") = 0 [pid 5063] mkdir("./28", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5421] <... openat resumed>) = 3 [pid 5420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] rmdir("./28/file0" [pid 5063] <... close resumed>) = 0 [pid 5421] write(3, "1000", 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5420] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5421] <... write resumed>) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5422 [pid 5421] close(3 [pid 5420] write(3, "1000", 4 [pid 5068] getdents64(3, [pid 5421] <... close resumed>) = 0 [pid 5420] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5421] symlink("/dev/binderfs", "./binderfs" [pid 5420] close(3 [pid 5068] close(3 [pid 5421] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5422 attached [pid 5420] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5422] chdir("./28" [pid 5421] memfd_create("syzkaller", 0 [pid 5420] symlink("/dev/binderfs", "./binderfs" [pid 5068] rmdir("./28" [pid 5422] <... chdir resumed>) = 0 [pid 5422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5420] <... symlink resumed>) = 0 [pid 5422] <... prctl resumed>) = 0 [pid 5422] setpgid(0, 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5422] <... setpgid resumed>) = 0 [pid 5420] memfd_create("syzkaller", 0 [pid 5068] mkdir("./29", 0777 [pid 5422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5421] <... memfd_create resumed>) = 3 [pid 5420] <... memfd_create resumed>) = 3 [pid 5422] <... openat resumed>) = 3 [pid 5421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5422] write(3, "1000", 4 [pid 5421] <... mmap resumed>) = 0x7f241a43b000 [pid 5420] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5422] <... write resumed>) = 4 [pid 5422] close(3) = 0 [pid 5422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5422] memfd_create("syzkaller", 0) = 3 [pid 5422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5423 [pid 5421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5423 attached [pid 5423] chdir("./29") = 0 [pid 5423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5423] setpgid(0, 0) = 0 [pid 5422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5423] write(3, "1000", 4) = 4 [pid 5423] close(3) = 0 [pid 5423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5415] +++ exited with 0 +++ [pid 5423] memfd_create("syzkaller", 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5423] <... memfd_create resumed>) = 3 [pid 5423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./28/binderfs") = 0 [pid 5067] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... pwritev resumed>) = 1114112 [pid 5417] exit_group(0) = ? [pid 5420] <... write resumed>) = 2097152 [pid 5423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5421] <... write resumed>) = 2097152 [pid 5420] munmap(0x7f241a43b000, 2097152 [pid 5421] munmap(0x7f241a43b000, 2097152) = 0 [pid 5420] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5421] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5421] <... openat resumed>) = 4 [pid 5420] <... openat resumed>) = 4 [pid 5067] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5421] ioctl(4, LOOP_SET_FD, 3 [pid 5420] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5420] <... ioctl resumed>) = 0 [pid 5067] rmdir("./28/file0") = 0 [pid 5067] getdents64(3, [pid 5422] <... write resumed>) = 2097152 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5422] munmap(0x7f241a43b000, 2097152 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./28") = 0 [pid 5067] mkdir("./29", 0777 [pid 5422] <... munmap resumed>) = 0 [pid 5421] <... ioctl resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5422] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... openat resumed>) = 3 [pid 5422] <... openat resumed>) = 4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5422] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5422] <... ioctl resumed>) = 0 [pid 5067] close(3 [pid 5421] close(3 [pid 5420] close(3 [pid 5417] +++ exited with 0 +++ [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5424 [pid 5421] <... close resumed>) = 0 [pid 5420] <... close resumed>) = 0 [pid 5420] mkdir("./file0", 0777 [pid 5421] mkdir("./file0", 0777) = 0 [pid 5420] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5417, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5421] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5420] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5422] close(3) = 0 [pid 5422] mkdir("./file0", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, [pid 5422] <... mkdir resumed>) = 0 [pid 5422] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 103.389424][ T5420] loop1: detected capacity change from 0 to 4096 [ 103.396345][ T5421] loop2: detected capacity change from 0 to 4096 [ 103.406577][ T5422] loop0: detected capacity change from 0 to 4096 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5423] <... write resumed>) = 2097152 [pid 5066] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5423] munmap(0x7f241a43b000, 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5424 attached [pid 5066] lstat("./28/binderfs", [pid 5424] chdir("./29" [pid 5423] <... munmap resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5424] <... chdir resumed>) = 0 [pid 5423] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5423] ioctl(4, LOOP_SET_FD, 3 [pid 5424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5421] <... mount resumed>) = 0 [pid 5066] unlink("./28/binderfs" [pid 5424] <... prctl resumed>) = 0 [pid 5421] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 5424] setpgid(0, 0 [pid 5423] <... ioctl resumed>) = 0 [pid 5421] <... openat resumed>) = 3 [pid 5420] <... mount resumed>) = 0 [pid 5066] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] <... setpgid resumed>) = 0 [pid 5421] chdir("./file0") = 0 [pid 5424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5421] ioctl(4, LOOP_CLR_FD [pid 5424] <... openat resumed>) = 3 [pid 5422] <... mount resumed>) = 0 [pid 5421] <... ioctl resumed>) = 0 [pid 5420] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5421] close(4 [pid 5424] write(3, "1000", 4 [pid 5422] <... openat resumed>) = 3 [pid 5420] <... openat resumed>) = 3 [pid 5421] <... close resumed>) = 0 [pid 5422] chdir("./file0") = 0 [pid 5422] ioctl(4, LOOP_CLR_FD) = 0 [pid 5422] close(4) = 0 [pid 5422] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5424] <... write resumed>) = 4 [pid 5422] <... openat resumed>) = 4 [pid 5421] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5420] chdir("./file0" [pid 5424] close(3 [pid 5422] unlink("./file1" [pid 5420] <... chdir resumed>) = 0 [pid 5424] <... close resumed>) = 0 [pid 5420] ioctl(4, LOOP_CLR_FD [pid 5424] symlink("/dev/binderfs", "./binderfs" [pid 5421] <... openat resumed>) = 4 [pid 5420] <... ioctl resumed>) = 0 [pid 5423] close(3 [pid 5424] <... symlink resumed>) = 0 [pid 5420] close(4 [pid 5421] unlink("./file1" [pid 5420] <... close resumed>) = 0 [pid 5423] <... close resumed>) = 0 [pid 5423] mkdir("./file0", 0777 [pid 5420] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5424] memfd_create("syzkaller", 0 [pid 5421] <... unlink resumed>) = 0 [pid 5421] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5424] <... memfd_create resumed>) = 3 [pid 5420] <... openat resumed>) = 4 [pid 5423] <... mkdir resumed>) = 0 [pid 5423] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5422] <... unlink resumed>) = 0 [pid 5424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5422] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 103.462091][ T5426] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.465147][ T5423] loop5: detected capacity change from 0 to 4096 [ 103.483501][ T5425] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.499915][ T5427] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5420] unlink("./file1" [pid 5424] <... mmap resumed>) = 0x7f241a43b000 [pid 5420] <... unlink resumed>) = 0 [pid 5420] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5423] <... mount resumed>) = 0 [pid 5423] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5423] chdir("./file0") = 0 [pid 5423] ioctl(4, LOOP_CLR_FD) = 0 [pid 5423] close(4) = 0 [pid 5423] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5423] unlink("./file1" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [ 103.607761][ T5428] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./28/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./28") = 0 [pid 5066] mkdir("./29", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5423] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5423] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5424] <... write resumed>) = 2097152 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5424] munmap(0x7f241a43b000, 2097152 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5429 [pid 5424] <... munmap resumed>) = 0 [pid 5424] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5424] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5429 attached [pid 5429] chdir("./29") = 0 [pid 5429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5429] setpgid(0, 0 [pid 5424] <... ioctl resumed>) = 0 [pid 5429] <... setpgid resumed>) = 0 [pid 5424] close(3 [pid 5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5424] <... close resumed>) = 0 [pid 5429] <... openat resumed>) = 3 [pid 5424] mkdir("./file0", 0777 [pid 5429] write(3, "1000", 4) = 4 [pid 5424] <... mkdir resumed>) = 0 [pid 5429] close(3 [pid 5424] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5429] <... close resumed>) = 0 [pid 5429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5429] memfd_create("syzkaller", 0) = 3 [pid 5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 103.728855][ T5424] loop4: detected capacity change from 0 to 4096 [pid 5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5424] <... mount resumed>) = 0 [ 103.806439][ T5430] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5424] chdir("./file0") = 0 [pid 5424] ioctl(4, LOOP_CLR_FD) = 0 [pid 5424] close(4) = 0 [pid 5424] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5424] unlink("./file1") = 0 [pid 5424] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5422] <... pwritev resumed>) = 1114112 [pid 5422] exit_group(0) = ? [pid 5420] <... pwritev resumed>) = 1114112 [pid 5420] exit_group(0) = ? [pid 5429] <... write resumed>) = 2097152 [pid 5429] munmap(0x7f241a43b000, 2097152) = 0 [pid 5429] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5429] ioctl(4, LOOP_SET_FD, 3 [pid 5421] <... pwritev resumed>) = 1114112 [pid 5421] exit_group(0) = ? [pid 5429] <... ioctl resumed>) = 0 [pid 5429] close(3) = 0 [pid 5429] mkdir("./file0", 0777) = 0 [ 104.004303][ T5429] loop3: detected capacity change from 0 to 4096 [pid 5429] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5423] <... pwritev resumed>) = 1114112 [pid 5423] exit_group(0) = ? [pid 5429] <... mount resumed>) = 0 [pid 5429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5429] chdir("./file0") = 0 [pid 5429] ioctl(4, LOOP_CLR_FD) = 0 [pid 5429] close(4) = 0 [pid 5429] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5429] unlink("./file1" [pid 5420] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5420, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5429] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5429] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 104.076036][ T5431] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./28/binderfs") = 0 [pid 5064] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5422] +++ exited with 0 +++ [pid 5064] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5422, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5423] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5423, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5068] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] lstat("./28/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5421] +++ exited with 0 +++ [pid 5068] lstat("./29/binderfs", [pid 5064] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5421, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5068] unlink("./29/binderfs" [pid 5064] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] getdents64(3, [pid 5068] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] lstat("./28/binderfs", [pid 5065] fstat(3, [pid 5064] getdents64(4, [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] unlink("./28/binderfs" [pid 5065] getdents64(3, [pid 5064] close(4 [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./28/file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5065] lstat("./30/binderfs", [pid 5064] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] unlink("./30/binderfs" [pid 5064] close(3 [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./28") = 0 [pid 5064] mkdir("./29", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5068] <... umount2 resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5432 ./strace-static-x86_64: Process 5432 attached [pid 5068] lstat("./29/file0", [pid 5432] chdir("./29") = 0 [pid 5432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5432] setpgid(0, 0) = 0 [pid 5432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5432] <... openat resumed>) = 3 [pid 5068] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5432] write(3, "1000", 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5432] <... write resumed>) = 4 [pid 5432] close(3 [pid 5068] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5432] <... close resumed>) = 0 [pid 5432] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 4 [pid 5432] <... symlink resumed>) = 0 [pid 5068] fstat(4, [pid 5432] memfd_create("syzkaller", 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5432] <... memfd_create resumed>) = 3 [pid 5063] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5432] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 5063] lstat("./28/file0", [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5063] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./29/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] close(3 [pid 5063] getdents64(4, [pid 5068] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] rmdir("./29" [pid 5063] getdents64(4, [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] mkdir("./30", 0777 [pid 5063] close(4 [pid 5068] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] rmdir("./28/file0" [pid 5068] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(3, [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5063] close(3 [pid 5068] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5424] <... pwritev resumed>) = 1114112 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = 0 [pid 5063] rmdir("./28" [pid 5432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5424] exit_group(0 [pid 5063] <... rmdir resumed>) = 0 [pid 5424] <... exit_group resumed>) = ? [pid 5063] mkdir("./29", 0777 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5433 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5433 attached [pid 5065] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5433] chdir("./30" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5433] <... chdir resumed>) = 0 [pid 5065] lstat("./30/file0", [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5433] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(3 [pid 5433] <... prctl resumed>) = 0 [pid 5065] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5433] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5433] <... setpgid resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... openat resumed>) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5434 [pid 5433] <... openat resumed>) = 3 [pid 5065] fstat(4, [pid 5433] write(3, "1000", 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5434 attached [pid 5433] <... write resumed>) = 4 [pid 5065] getdents64(4, [pid 5434] chdir("./29" [pid 5433] close(3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5434] <... chdir resumed>) = 0 [pid 5433] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5433] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5434] <... prctl resumed>) = 0 [pid 5433] <... symlink resumed>) = 0 [pid 5065] close(4 [pid 5434] setpgid(0, 0 [pid 5433] memfd_create("syzkaller", 0 [pid 5065] <... close resumed>) = 0 [pid 5434] <... setpgid resumed>) = 0 [pid 5433] <... memfd_create resumed>) = 3 [pid 5065] rmdir("./30/file0" [pid 5434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5434] <... openat resumed>) = 3 [pid 5433] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] <... rmdir resumed>) = 0 [pid 5434] write(3, "1000", 4 [pid 5065] getdents64(3, [pid 5434] <... write resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5434] close(3 [pid 5065] close(3 [pid 5434] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5434] symlink("/dev/binderfs", "./binderfs" [pid 5065] rmdir("./30" [pid 5434] <... symlink resumed>) = 0 [pid 5434] memfd_create("syzkaller", 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5434] <... memfd_create resumed>) = 3 [pid 5065] mkdir("./31", 0777 [pid 5434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5429] <... pwritev resumed>) = 1114112 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5429] exit_group(0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5429] <... exit_group resumed>) = ? [pid 5065] close(3) = 0 [pid 5432] <... write resumed>) = 2097152 [pid 5432] munmap(0x7f241a43b000, 2097152 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5435 [pid 5432] <... munmap resumed>) = 0 [pid 5432] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5424] +++ exited with 0 +++ ./strace-static-x86_64: Process 5435 attached [pid 5432] ioctl(4, LOOP_SET_FD, 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5424, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5435] chdir("./31" [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5435] <... chdir resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5435] setpgid(0, 0 [pid 5067] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5435] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5435] write(3, "1000", 4 [pid 5067] fstat(3, [pid 5435] <... write resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5435] close(3 [pid 5067] getdents64(3, [pid 5435] <... close resumed>) = 0 [pid 5432] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5435] symlink("/dev/binderfs", "./binderfs" [pid 5432] close(3 [pid 5067] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5433] <... write resumed>) = 2097152 [pid 5435] <... symlink resumed>) = 0 [pid 5432] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] memfd_create("syzkaller", 0 [pid 5433] munmap(0x7f241a43b000, 2097152 [pid 5432] mkdir("./file0", 0777 [pid 5429] +++ exited with 0 +++ [pid 5067] lstat("./29/binderfs", [pid 5435] <... memfd_create resumed>) = 3 [pid 5433] <... munmap resumed>) = 0 [pid 5432] <... mkdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5429, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5433] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5432] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] unlink("./29/binderfs" [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5435] <... mmap resumed>) = 0x7f241a43b000 [pid 5433] <... openat resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5067] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5433] ioctl(4, LOOP_SET_FD, 3 [ 104.524017][ T5432] loop1: detected capacity change from 0 to 4096 [pid 5066] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5434] <... write resumed>) = 2097152 [pid 5066] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5434] munmap(0x7f241a43b000, 2097152 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5434] <... munmap resumed>) = 0 [pid 5433] <... ioctl resumed>) = 0 [pid 5066] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5434] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] unlink("./29/binderfs" [pid 5434] <... openat resumed>) = 4 [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] ioctl(4, LOOP_SET_FD, 3 [pid 5433] close(3) = 0 [pid 5433] mkdir("./file0", 0777) = 0 [pid 5433] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5432] <... mount resumed>) = 0 [ 104.578370][ T5433] loop5: detected capacity change from 0 to 4096 [ 104.610431][ T5434] loop0: detected capacity change from 0 to 4096 [pid 5432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5432] chdir("./file0" [pid 5434] <... ioctl resumed>) = 0 [pid 5432] <... chdir resumed>) = 0 [pid 5434] close(3 [pid 5432] ioctl(4, LOOP_CLR_FD [pid 5434] <... close resumed>) = 0 [pid 5432] <... ioctl resumed>) = 0 [pid 5434] mkdir("./file0", 0777 [pid 5432] close(4 [pid 5434] <... mkdir resumed>) = 0 [pid 5432] <... close resumed>) = 0 [pid 5434] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5432] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 104.630346][ T5436] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5432] unlink("./file1" [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5433] <... mount resumed>) = 0 [pid 5433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5433] <... openat resumed>) = 3 [pid 5067] lstat("./29/file0", [pid 5066] <... umount2 resumed>) = 0 [pid 5433] chdir("./file0" [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] <... mount resumed>) = 0 [pid 5433] <... chdir resumed>) = 0 [pid 5067] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5433] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5434] <... openat resumed>) = 3 [pid 5433] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] lstat("./29/file0", [pid 5434] chdir("./file0" [pid 5433] close(4 [pid 5432] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5434] <... chdir resumed>) = 0 [pid 5433] <... close resumed>) = 0 [pid 5432] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] fstat(4, [pid 5066] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5434] ioctl(4, LOOP_CLR_FD [pid 5433] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5434] <... ioctl resumed>) = 0 [pid 5434] close(4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5434] <... close resumed>) = 0 [pid 5434] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5433] <... openat resumed>) = 4 [pid 5067] getdents64(4, [pid 5066] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5434] <... openat resumed>) = 4 [pid 5433] unlink("./file1" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... openat resumed>) = 4 [pid 5434] unlink("./file1" [pid 5067] getdents64(4, [pid 5066] fstat(4, [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5433] <... unlink resumed>) = 0 [pid 5067] close(4 [pid 5066] getdents64(4, [pid 5433] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] rmdir("./29/file0" [pid 5066] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5066] close(4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 5435] <... write resumed>) = 2097152 [pid 5067] close(3 [pid 5066] rmdir("./29/file0" [pid 5435] munmap(0x7f241a43b000, 2097152 [pid 5067] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [ 104.689357][ T5437] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.714638][ T5438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5435] <... munmap resumed>) = 0 [pid 5067] rmdir("./29" [pid 5066] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./30", 0777 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5435] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5435] ioctl(4, LOOP_SET_FD, 3 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] rmdir("./29" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] mkdir("./30", 0777 [pid 5067] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5434] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5434] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 5435] <... ioctl resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5439 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 ./strace-static-x86_64: Process 5439 attached [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5435] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5440 [pid 5439] chdir("./30") = 0 [pid 5439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5435] <... close resumed>) = 0 ./strace-static-x86_64: Process 5440 attached [pid 5439] <... prctl resumed>) = 0 [pid 5435] mkdir("./file0", 0777 [pid 5440] chdir("./30" [pid 5439] setpgid(0, 0 [pid 5435] <... mkdir resumed>) = 0 [pid 5440] <... chdir resumed>) = 0 [pid 5439] <... setpgid resumed>) = 0 [pid 5435] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5440] <... prctl resumed>) = 0 [pid 5439] <... openat resumed>) = 3 [ 104.777351][ T5435] loop2: detected capacity change from 0 to 4096 [pid 5440] setpgid(0, 0 [pid 5439] write(3, "1000", 4 [pid 5440] <... setpgid resumed>) = 0 [pid 5439] <... write resumed>) = 4 [pid 5440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5439] close(3 [pid 5440] <... openat resumed>) = 3 [pid 5439] <... close resumed>) = 0 [pid 5440] write(3, "1000", 4 [pid 5439] symlink("/dev/binderfs", "./binderfs" [pid 5440] <... write resumed>) = 4 [pid 5440] close(3 [pid 5439] <... symlink resumed>) = 0 [pid 5440] <... close resumed>) = 0 [pid 5440] symlink("/dev/binderfs", "./binderfs" [pid 5439] memfd_create("syzkaller", 0 [pid 5440] <... symlink resumed>) = 0 [pid 5440] memfd_create("syzkaller", 0 [pid 5439] <... memfd_create resumed>) = 3 [pid 5440] <... memfd_create resumed>) = 3 [pid 5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5439] <... mmap resumed>) = 0x7f241a43b000 [pid 5440] <... mmap resumed>) = 0x7f241a43b000 [pid 5435] <... mount resumed>) = 0 [pid 5435] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5435] chdir("./file0") = 0 [pid 5435] ioctl(4, LOOP_CLR_FD) = 0 [pid 5435] close(4) = 0 [pid 5435] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5435] unlink("./file1" [pid 5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 104.897086][ T5441] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5435] <... unlink resumed>) = 0 [pid 5435] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5440] <... write resumed>) = 2097152 [pid 5439] <... write resumed>) = 2097152 [pid 5440] munmap(0x7f241a43b000, 2097152 [pid 5439] munmap(0x7f241a43b000, 2097152 [pid 5440] <... munmap resumed>) = 0 [pid 5439] <... munmap resumed>) = 0 [pid 5440] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5439] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5440] <... openat resumed>) = 4 [pid 5439] <... openat resumed>) = 4 [pid 5440] ioctl(4, LOOP_SET_FD, 3 [pid 5439] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5439] close(3) = 0 [pid 5439] mkdir("./file0", 0777 [pid 5440] <... ioctl resumed>) = 0 [pid 5439] <... mkdir resumed>) = 0 [pid 5440] close(3) = 0 [pid 5439] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5440] mkdir("./file0", 0777) = 0 [ 105.080206][ T5440] loop3: detected capacity change from 0 to 4096 [ 105.087083][ T5439] loop4: detected capacity change from 0 to 4096 [pid 5440] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5440] chdir("./file0") = 0 [pid 5440] ioctl(4, LOOP_CLR_FD) = 0 [pid 5440] close(4) = 0 [pid 5439] <... mount resumed>) = 0 [pid 5440] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5440] <... openat resumed>) = 4 [pid 5439] <... openat resumed>) = 3 [pid 5433] <... pwritev resumed>) = 1114112 [pid 5432] <... pwritev resumed>) = 1114112 [pid 5440] unlink("./file1" [pid 5439] chdir("./file0" [pid 5434] <... pwritev resumed>) = 1114112 [pid 5433] exit_group(0 [pid 5432] exit_group(0 [pid 5440] <... unlink resumed>) = 0 [pid 5439] <... chdir resumed>) = 0 [ 105.153880][ T5444] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.154892][ T5443] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5434] exit_group(0 [pid 5433] <... exit_group resumed>) = ? [pid 5432] <... exit_group resumed>) = ? [pid 5440] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5439] ioctl(4, LOOP_CLR_FD [pid 5434] <... exit_group resumed>) = ? [pid 5439] <... ioctl resumed>) = 0 [pid 5439] close(4) = 0 [pid 5439] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5439] unlink("./file1") = 0 [pid 5439] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5432] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5432, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, [pid 5433] +++ exited with 0 +++ [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5433, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./29/binderfs", [pid 5434] +++ exited with 0 +++ [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./29/binderfs" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5434, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5064] <... unlink resumed>) = 0 [pid 5068] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, [pid 5063] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5068] lstat("./30/binderfs", [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(3, [pid 5068] unlink("./30/binderfs") = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./29/binderfs", [pid 5435] <... pwritev resumed>) = 1114112 [pid 5435] exit_group(0) = ? [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./29/binderfs" [pid 5068] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./29/file0" [pid 5068] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5068] getdents64(4, [pid 5064] rmdir("./29" [pid 5063] <... umount2 resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... rmdir resumed>) = 0 [pid 5068] getdents64(4, [pid 5064] mkdir("./30", 0777 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5068] close(4 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./30/file0" [pid 5064] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] lstat("./29/file0", [pid 5068] getdents64(3, [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] close(3 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./30" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./31", 0777) = 0 [pid 5063] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5445 ./strace-static-x86_64: Process 5445 attached [pid 5068] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5445] chdir("./30" [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5063] fstat(4, [pid 5445] <... chdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] close(3 [pid 5063] getdents64(4, [pid 5445] <... prctl resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5445] setpgid(0, 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5445] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 5445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5446 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5445] <... openat resumed>) = 3 [pid 5063] close(4 [pid 5445] write(3, "1000", 4) = 4 [pid 5435] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 5446 attached [pid 5445] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5435, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] rmdir("./29/file0" [pid 5446] chdir("./31" [pid 5445] <... close resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... rmdir resumed>) = 0 [pid 5446] <... chdir resumed>) = 0 [pid 5445] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... restart_syscall resumed>) = 0 [pid 5063] getdents64(3, [pid 5446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5445] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5446] <... prctl resumed>) = 0 [pid 5445] memfd_create("syzkaller", 0 [pid 5063] close(3 [pid 5446] setpgid(0, 0 [pid 5445] <... memfd_create resumed>) = 3 [pid 5065] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5446] <... setpgid resumed>) = 0 [pid 5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5445] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] rmdir("./29" [pid 5446] <... openat resumed>) = 3 [pid 5446] write(3, "1000", 4) = 4 [pid 5446] close(3) = 0 [pid 5446] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5446] memfd_create("syzkaller", 0) = 3 [pid 5446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5439] <... pwritev resumed>) = 1114112 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5439] exit_group(0 [pid 5065] fstat(3, [pid 5063] mkdir("./30", 0777 [pid 5439] <... exit_group resumed>) = ? [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] getdents64(3, [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./31/binderfs" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5447 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5447 attached [pid 5440] <... pwritev resumed>) = 1114112 [pid 5447] chdir("./30" [pid 5440] exit_group(0) = ? [pid 5447] <... chdir resumed>) = 0 [pid 5447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5447] setpgid(0, 0) = 0 [pid 5447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5447] write(3, "1000", 4) = 4 [pid 5447] close(3) = 0 [pid 5447] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5447] memfd_create("syzkaller", 0) = 3 [pid 5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5445] <... write resumed>) = 2097152 [pid 5447] <... mmap resumed>) = 0x7f241a43b000 [pid 5445] munmap(0x7f241a43b000, 2097152) = 0 [pid 5439] +++ exited with 0 +++ [pid 5445] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... umount2 resumed>) = 0 [pid 5445] <... openat resumed>) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5439, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5445] ioctl(4, LOOP_SET_FD, 3 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5065] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... restart_syscall resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5445] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5445] close(3) = 0 [pid 5067] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5445] mkdir("./file0", 0777 [pid 5440] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(4, [pid 5446] <... write resumed>) = 2097152 [pid 5445] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5440, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5445] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] fstat(3, [pid 5065] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5065] close(4) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] rmdir("./31/file0" [pid 5067] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5446] munmap(0x7f241a43b000, 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5446] <... munmap resumed>) = 0 [pid 5067] lstat("./30/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(3 [pid 5446] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] unlink("./30/binderfs" [pid 5066] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5446] <... openat resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 5066] fstat(3, [pid 5065] rmdir("./31" [ 105.715507][ T5445] loop1: detected capacity change from 0 to 4096 [pid 5446] ioctl(4, LOOP_SET_FD, 3 [pid 5067] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5447] <... write resumed>) = 2097152 [pid 5445] <... mount resumed>) = 0 [pid 5065] mkdir("./32", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5447] munmap(0x7f241a43b000, 2097152 [pid 5445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = 0 [pid 5066] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 5447] <... munmap resumed>) = 0 [pid 5445] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5449 attached [pid 5447] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5445] chdir("./file0" [pid 5066] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5449] chdir("./32" [pid 5447] <... openat resumed>) = 4 [pid 5445] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5449 [pid 5449] <... chdir resumed>) = 0 [pid 5447] ioctl(4, LOOP_SET_FD, 3 [pid 5445] ioctl(4, LOOP_CLR_FD [ 105.761076][ T5446] loop5: detected capacity change from 0 to 4096 [ 105.764723][ T5448] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] lstat("./30/binderfs", [pid 5449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5446] <... ioctl resumed>) = 0 [pid 5446] close(3) = 0 [pid 5067] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5449] <... prctl resumed>) = 0 [pid 5447] <... ioctl resumed>) = 0 [pid 5446] mkdir("./file0", 0777 [pid 5445] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5449] setpgid(0, 0 [pid 5447] close(3 [pid 5446] <... mkdir resumed>) = 0 [pid 5445] close(4 [pid 5067] lstat("./30/file0", [pid 5066] unlink("./30/binderfs" [pid 5449] <... setpgid resumed>) = 0 [pid 5447] <... close resumed>) = 0 [pid 5446] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5445] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5447] mkdir("./file0", 0777 [pid 5445] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5449] <... openat resumed>) = 3 [pid 5447] <... mkdir resumed>) = 0 [pid 5445] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5449] write(3, "1000", 4 [pid 5447] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5445] unlink("./file1" [pid 5067] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5449] <... write resumed>) = 4 [pid 5067] <... openat resumed>) = 4 [pid 5449] close(3 [pid 5445] <... unlink resumed>) = 0 [pid 5067] fstat(4, [pid 5449] <... close resumed>) = 0 [ 105.808647][ T5447] loop0: detected capacity change from 0 to 4096 [pid 5445] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5449] symlink("/dev/binderfs", "./binderfs" [pid 5447] <... mount resumed>) = 0 [pid 5449] <... symlink resumed>) = 0 [pid 5449] memfd_create("syzkaller", 0) = 3 [pid 5449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] getdents64(4, [pid 5449] <... mmap resumed>) = 0x7f241a43b000 [pid 5447] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5447] chdir("./file0" [pid 5067] getdents64(4, [pid 5447] <... chdir resumed>) = 0 [pid 5446] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5447] ioctl(4, LOOP_CLR_FD [pid 5446] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] close(4 [pid 5447] <... ioctl resumed>) = 0 [pid 5446] <... openat resumed>) = 3 [pid 5447] close(4 [pid 5446] chdir("./file0" [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5447] <... close resumed>) = 0 [pid 5446] <... chdir resumed>) = 0 [pid 5067] rmdir("./30/file0" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5447] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] lstat("./30/file0", [pid 5446] ioctl(4, LOOP_CLR_FD [pid 5067] getdents64(3, [pid 5447] <... openat resumed>) = 4 [pid 5446] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5447] unlink("./file1" [pid 5446] close(4 [pid 5067] close(3 [pid 5066] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5446] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5446] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] rmdir("./30" [pid 5066] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5447] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5447] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... rmdir resumed>) = 0 [ 105.870033][ T5450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.897966][ T5451] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] fstat(4, [pid 5449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5446] <... openat resumed>) = 4 [pid 5067] mkdir("./31", 0777 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5446] unlink("./file1" [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] close(4 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] <... close resumed>) = 0 [pid 5067] close(3 [pid 5066] rmdir("./30/file0" [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5452 attached [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5452 [pid 5066] close(3 [pid 5446] <... unlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5446] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] rmdir("./30") = 0 [pid 5452] chdir("./31" [pid 5066] mkdir("./31", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5452] <... chdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5452] setpgid(0, 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5452] <... setpgid resumed>) = 0 [pid 5066] close(3 [pid 5452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... close resumed>) = 0 [pid 5452] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5452] write(3, "1000", 4) = 4 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5453 [pid 5452] close(3) = 0 [pid 5452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5452] memfd_create("syzkaller", 0) = 3 [pid 5449] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5453 attached [pid 5452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5453] chdir("./31" [pid 5452] <... mmap resumed>) = 0x7f241a43b000 [pid 5449] munmap(0x7f241a43b000, 2097152 [pid 5453] <... chdir resumed>) = 0 [pid 5452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5449] <... munmap resumed>) = 0 [pid 5453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5449] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5453] setpgid(0, 0 [pid 5449] <... openat resumed>) = 4 [pid 5453] <... setpgid resumed>) = 0 [pid 5449] ioctl(4, LOOP_SET_FD, 3 [pid 5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5453] write(3, "1000", 4) = 4 [pid 5453] close(3) = 0 [pid 5453] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5453] memfd_create("syzkaller", 0) = 3 [pid 5453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5452] <... write resumed>) = 2097152 [pid 5449] <... ioctl resumed>) = 0 [pid 5449] close(3) = 0 [pid 5449] mkdir("./file0", 0777) = 0 [pid 5452] munmap(0x7f241a43b000, 2097152 [pid 5449] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5452] <... munmap resumed>) = 0 [pid 5452] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 106.067534][ T5449] loop2: detected capacity change from 0 to 4096 [pid 5452] ioctl(4, LOOP_SET_FD, 3 [pid 5453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5452] <... ioctl resumed>) = 0 [pid 5449] <... mount resumed>) = 0 [pid 5452] close(3 [pid 5449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5452] <... close resumed>) = 0 [pid 5449] <... openat resumed>) = 3 [pid 5452] mkdir("./file0", 0777 [pid 5449] chdir("./file0" [pid 5452] <... mkdir resumed>) = 0 [pid 5449] <... chdir resumed>) = 0 [pid 5449] ioctl(4, LOOP_CLR_FD [pid 5452] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5449] <... ioctl resumed>) = 0 [pid 5449] close(4) = 0 [ 106.118496][ T5452] loop4: detected capacity change from 0 to 4096 [ 106.146712][ T5454] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5449] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5449] unlink("./file1" [pid 5445] <... pwritev resumed>) = 1114112 [pid 5445] exit_group(0) = ? [pid 5453] <... write resumed>) = 2097152 [pid 5453] munmap(0x7f241a43b000, 2097152) = 0 [pid 5453] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5449] <... unlink resumed>) = 0 [pid 5449] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5453] ioctl(4, LOOP_SET_FD, 3 [pid 5452] <... mount resumed>) = 0 [pid 5452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5453] <... ioctl resumed>) = 0 [pid 5452] <... openat resumed>) = 3 [pid 5452] chdir("./file0") = 0 [pid 5452] ioctl(4, LOOP_CLR_FD) = 0 [pid 5452] close(4) = 0 [pid 5452] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5452] unlink("./file1" [pid 5446] <... pwritev resumed>) = 1114112 [pid 5446] exit_group(0) = ? [ 106.243164][ T5455] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.257246][ T5453] loop3: detected capacity change from 0 to 4096 [pid 5452] <... unlink resumed>) = 0 [pid 5452] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5453] close(3) = 0 [pid 5453] mkdir("./file0", 0777 [pid 5445] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5445, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5453] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5453] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./30/binderfs") = 0 [pid 5064] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5453] <... mount resumed>) = 0 [pid 5453] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5453] chdir("./file0") = 0 [pid 5453] ioctl(4, LOOP_CLR_FD) = 0 [pid 5453] close(4) = 0 [pid 5447] <... pwritev resumed>) = 1114112 [pid 5453] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5447] exit_group(0 [pid 5453] <... openat resumed>) = 4 [pid 5447] <... exit_group resumed>) = ? [pid 5453] unlink("./file1" [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5446] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5446, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 106.396451][ T5456] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./30/file0" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./30") = 0 [pid 5064] mkdir("./31", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5457 [pid 5453] <... unlink resumed>) = 0 [pid 5068] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5453] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5457 attached [pid 5068] unlink("./31/binderfs" [pid 5457] chdir("./31" [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] <... chdir resumed>) = 0 [pid 5457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5457] setpgid(0, 0) = 0 [pid 5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5457] write(3, "1000", 4) = 4 [pid 5457] close(3) = 0 [pid 5457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5457] memfd_create("syzkaller", 0 [pid 5447] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = 0 [pid 5457] <... memfd_create resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5447, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./30/binderfs") = 0 [pid 5063] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./31/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./31") = 0 [pid 5068] mkdir("./32", 0777 [pid 5457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] lstat("./30/file0", [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5458 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, [pid 5452] <... pwritev resumed>) = 1114112 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5458 attached [pid 5063] getdents64(4, [pid 5458] chdir("./32" [pid 5452] exit_group(0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5458] <... chdir resumed>) = 0 [pid 5452] <... exit_group resumed>) = ? [pid 5063] getdents64(4, [pid 5458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5458] <... prctl resumed>) = 0 [pid 5063] close(4 [pid 5458] setpgid(0, 0 [pid 5063] <... close resumed>) = 0 [pid 5458] <... setpgid resumed>) = 0 [pid 5063] rmdir("./30/file0" [pid 5458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... rmdir resumed>) = 0 [pid 5458] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5458] write(3, "1000", 4 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5458] <... write resumed>) = 4 [pid 5063] close(3 [pid 5458] close(3 [pid 5063] <... close resumed>) = 0 [pid 5458] <... close resumed>) = 0 [pid 5063] rmdir("./30" [pid 5458] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... rmdir resumed>) = 0 [pid 5458] <... symlink resumed>) = 0 [pid 5063] mkdir("./31", 0777 [pid 5458] memfd_create("syzkaller", 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5458] <... memfd_create resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... openat resumed>) = 3 [pid 5458] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5459 ./strace-static-x86_64: Process 5459 attached [pid 5459] chdir("./31") = 0 [pid 5459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5459] setpgid(0, 0) = 0 [pid 5459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5457] <... write resumed>) = 2097152 [pid 5449] <... pwritev resumed>) = 1114112 [pid 5459] <... openat resumed>) = 3 [pid 5457] munmap(0x7f241a43b000, 2097152 [pid 5449] exit_group(0 [pid 5459] write(3, "1000", 4 [pid 5449] <... exit_group resumed>) = ? [pid 5459] <... write resumed>) = 4 [pid 5458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5457] <... munmap resumed>) = 0 [pid 5459] close(3) = 0 [pid 5459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5457] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5459] memfd_create("syzkaller", 0) = 3 [pid 5457] <... openat resumed>) = 4 [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5457] ioctl(4, LOOP_SET_FD, 3 [pid 5452] +++ exited with 0 +++ [pid 5457] <... ioctl resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5452, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5457] close(3) = 0 [pid 5457] mkdir("./file0", 0777 [pid 5067] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./31/binderfs", [pid 5457] <... mkdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./31/binderfs") = 0 [pid 5067] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5458] <... write resumed>) = 2097152 [pid 5453] <... pwritev resumed>) = 1114112 [pid 5453] exit_group(0) = ? [ 106.797704][ T5457] loop1: detected capacity change from 0 to 4096 [pid 5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5458] munmap(0x7f241a43b000, 2097152 [pid 5067] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5458] <... munmap resumed>) = 0 [pid 5067] lstat("./31/file0", [pid 5458] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5458] <... openat resumed>) = 4 [pid 5067] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5458] ioctl(4, LOOP_SET_FD, 3 [pid 5457] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5449] +++ exited with 0 +++ [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5449, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5458] <... ioctl resumed>) = 0 [pid 5067] close(4 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5458] close(3 [pid 5067] <... close resumed>) = 0 [pid 5458] <... close resumed>) = 0 [pid 5067] rmdir("./31/file0" [pid 5458] mkdir("./file0", 0777 [pid 5457] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5458] <... mkdir resumed>) = 0 [pid 5457] chdir("./file0" [pid 5067] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5458] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5457] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5457] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5457] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] fstat(3, [pid 5457] close(4 [pid 5067] rmdir("./31" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5457] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [ 106.876440][ T5460] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.884551][ T5458] loop5: detected capacity change from 0 to 4096 [pid 5457] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] mkdir("./32", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5459] <... write resumed>) = 2097152 [pid 5457] <... openat resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] unlink("./file1" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5459] munmap(0x7f241a43b000, 2097152 [pid 5067] <... openat resumed>) = 3 [pid 5065] lstat("./32/binderfs", [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5457] <... unlink resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] unlink("./32/binderfs" [pid 5459] <... munmap resumed>) = 0 [pid 5457] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5453] +++ exited with 0 +++ [pid 5067] close(3 [pid 5065] <... unlink resumed>) = 0 [pid 5459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5453, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5459] <... openat resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] ioctl(4, LOOP_SET_FD, 3 [pid 5458] <... mount resumed>) = 0 [pid 5458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5462 [pid 5458] <... openat resumed>) = 3 [pid 5458] chdir("./file0") = 0 [pid 5458] ioctl(4, LOOP_CLR_FD) = 0 [pid 5458] close(4) = 0 [pid 5458] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5458] unlink("./file1"./strace-static-x86_64: Process 5462 attached [pid 5462] chdir("./32") = 0 [pid 5462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5462] setpgid(0, 0) = 0 [pid 5462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5459] <... ioctl resumed>) = 0 [pid 5462] write(3, "1000", 4 [pid 5459] close(3 [pid 5462] <... write resumed>) = 4 [pid 5462] close(3) = 0 [pid 5462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5459] <... close resumed>) = 0 [pid 5066] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5462] memfd_create("syzkaller", 0 [pid 5459] mkdir("./file0", 0777 [pid 5462] <... memfd_create resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5459] <... mkdir resumed>) = 0 [pid 5459] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... openat resumed>) = 3 [pid 5458] <... unlink resumed>) = 0 [ 106.974174][ T5461] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.986433][ T5459] loop0: detected capacity change from 0 to 4096 [pid 5458] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./31/binderfs") = 0 [pid 5066] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] <... mount resumed>) = 0 [pid 5459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5459] chdir("./file0") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5459] <... ioctl resumed>) = 0 [pid 5065] lstat("./32/file0", [pid 5459] close(4) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5459] <... openat resumed>) = 4 [pid 5065] rmdir("./32/file0" [pid 5459] unlink("./file1" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./32") = 0 [ 107.069555][ T5464] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./33", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5465 [pid 5066] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5465 attached [pid 5465] chdir("./33") = 0 [pid 5465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5465] setpgid(0, 0 [pid 5066] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5465] <... setpgid resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] lstat("./31/file0", [pid 5465] <... openat resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5465] write(3, "1000", 4 [pid 5066] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5465] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5465] close(3) = 0 [pid 5066] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5465] symlink("/dev/binderfs", "./binderfs" [pid 5462] <... write resumed>) = 2097152 [pid 5459] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5465] <... symlink resumed>) = 0 [pid 5459] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] fstat(4, [pid 5465] memfd_create("syzkaller", 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5465] <... memfd_create resumed>) = 3 [pid 5066] getdents64(4, [pid 5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5465] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./31/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./31" [pid 5462] munmap(0x7f241a43b000, 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5462] <... munmap resumed>) = 0 [pid 5066] mkdir("./32", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5462] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... openat resumed>) = 3 [pid 5462] <... openat resumed>) = 4 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5462] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5466 [pid 5465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5466 attached [pid 5466] chdir("./32") = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5466] setpgid(0, 0) = 0 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5466] write(3, "1000", 4 [pid 5462] <... ioctl resumed>) = 0 [pid 5466] <... write resumed>) = 4 [pid 5462] close(3 [pid 5466] close(3 [pid 5462] <... close resumed>) = 0 [pid 5466] <... close resumed>) = 0 [pid 5462] mkdir("./file0", 0777 [pid 5466] symlink("/dev/binderfs", "./binderfs" [pid 5462] <... mkdir resumed>) = 0 [pid 5466] <... symlink resumed>) = 0 [pid 5462] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5466] memfd_create("syzkaller", 0) = 3 [pid 5466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 107.219375][ T5462] loop4: detected capacity change from 0 to 4096 [pid 5466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5462] <... mount resumed>) = 0 [pid 5462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5462] chdir("./file0") = 0 [pid 5462] ioctl(4, LOOP_CLR_FD) = 0 [pid 5462] close(4 [pid 5457] <... pwritev resumed>) = 1114112 [pid 5465] <... write resumed>) = 2097152 [pid 5462] <... close resumed>) = 0 [pid 5457] exit_group(0 [pid 5462] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5457] <... exit_group resumed>) = ? [ 107.325383][ T5467] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5465] munmap(0x7f241a43b000, 2097152) = 0 [pid 5465] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5465] ioctl(4, LOOP_SET_FD, 3 [pid 5462] <... openat resumed>) = 4 [pid 5462] unlink("./file1") = 0 [pid 5462] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5465] <... ioctl resumed>) = 0 [pid 5465] close(3) = 0 [pid 5465] mkdir("./file0", 0777 [pid 5458] <... pwritev resumed>) = 1114112 [pid 5465] <... mkdir resumed>) = 0 [pid 5458] exit_group(0 [pid 5465] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5458] <... exit_group resumed>) = ? [pid 5466] <... write resumed>) = 2097152 [ 107.375084][ T5465] loop2: detected capacity change from 0 to 4096 [pid 5466] munmap(0x7f241a43b000, 2097152) = 0 [pid 5466] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5466] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5466] close(3 [pid 5465] <... mount resumed>) = 0 [pid 5465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5465] chdir("./file0") = 0 [pid 5465] ioctl(4, LOOP_CLR_FD) = 0 [pid 5465] close(4) = 0 [pid 5465] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5466] <... close resumed>) = 0 [pid 5466] mkdir("./file0", 0777) = 0 [pid 5465] <... openat resumed>) = 4 [pid 5466] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 107.453184][ T5466] loop3: detected capacity change from 0 to 4096 [ 107.460826][ T5468] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5465] unlink("./file1") = 0 [pid 5465] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5458] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5458, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5457] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5068] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5466] <... mount resumed>) = 0 [pid 5068] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5466] <... openat resumed>) = 3 [pid 5068] lstat("./32/binderfs", [pid 5064] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5466] chdir("./file0" [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5466] <... chdir resumed>) = 0 [pid 5068] unlink("./32/binderfs" [pid 5064] fstat(3, [pid 5466] ioctl(4, LOOP_CLR_FD [pid 5068] <... unlink resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5466] <... ioctl resumed>) = 0 [pid 5068] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5466] close(4 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5466] <... close resumed>) = 0 [pid 5064] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5466] <... openat resumed>) = 4 [pid 5064] lstat("./31/binderfs", [pid 5466] unlink("./file1" [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./31/binderfs") = 0 [pid 5064] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] <... unlink resumed>) = 0 [ 107.543407][ T5469] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5466] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5459] <... pwritev resumed>) = 1114112 [pid 5459] exit_group(0) = ? [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./32/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./32") = 0 [pid 5068] mkdir("./33", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] <... umount2 resumed>) = 0 [pid 5068] close(3 [pid 5064] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5470 [pid 5064] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] +++ exited with 0 +++ ./strace-static-x86_64: Process 5470 attached [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5459, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5470] chdir("./33" [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5470] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... restart_syscall resumed>) = 0 [pid 5470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5470] setpgid(0, 0 [pid 5064] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5470] <... setpgid resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5470] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5470] write(3, "1000", 4 [pid 5063] fstat(3, [pid 5470] <... write resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5470] close(3 [pid 5064] fstat(4, [pid 5063] getdents64(3, [pid 5470] <... close resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5470] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5470] <... symlink resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5470] memfd_create("syzkaller", 0 [pid 5063] lstat("./31/binderfs", [pid 5470] <... memfd_create resumed>) = 3 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] unlink("./31/binderfs" [pid 5470] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] close(4 [pid 5063] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./31/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./31") = 0 [pid 5064] mkdir("./32", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5462] <... pwritev resumed>) = 1114112 [pid 5064] <... openat resumed>) = 3 [pid 5462] exit_group(0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5462] <... exit_group resumed>) = ? [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5471 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5471 attached [pid 5063] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5471] chdir("./32" [pid 5063] <... openat resumed>) = 4 [pid 5471] <... chdir resumed>) = 0 [pid 5063] fstat(4, [pid 5471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5471] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5471] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 5471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5471] write(3, "1000", 4 [pid 5063] close(4 [pid 5471] <... write resumed>) = 4 [pid 5471] close(3 [pid 5063] <... close resumed>) = 0 [pid 5471] <... close resumed>) = 0 [pid 5063] rmdir("./31/file0" [pid 5471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5471] memfd_create("syzkaller", 0 [pid 5063] getdents64(3, [pid 5471] <... memfd_create resumed>) = 3 [pid 5471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5471] <... mmap resumed>) = 0x7f241a43b000 [pid 5466] <... pwritev resumed>) = 1114112 [pid 5465] <... pwritev resumed>) = 1114112 [pid 5063] close(3 [pid 5466] exit_group(0 [pid 5471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5470] <... write resumed>) = 2097152 [pid 5466] <... exit_group resumed>) = ? [pid 5465] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5470] munmap(0x7f241a43b000, 2097152 [pid 5465] <... exit_group resumed>) = ? [pid 5063] rmdir("./31" [pid 5470] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5470] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] mkdir("./32", 0777 [pid 5470] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5470] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5472 [pid 5470] <... ioctl resumed>) = 0 [pid 5470] close(3) = 0 ./strace-static-x86_64: Process 5472 attached [pid 5470] mkdir("./file0", 0777 [pid 5472] chdir("./32" [pid 5470] <... mkdir resumed>) = 0 [pid 5470] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5472] <... chdir resumed>) = 0 [pid 5462] +++ exited with 0 +++ [pid 5472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5462, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5472] <... prctl resumed>) = 0 [pid 5466] +++ exited with 0 +++ [pid 5472] setpgid(0, 0 [pid 5471] <... write resumed>) = 2097152 [pid 5472] <... setpgid resumed>) = 0 [pid 5471] munmap(0x7f241a43b000, 2097152 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5471] <... munmap resumed>) = 0 [pid 5067] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] <... openat resumed>) = 3 [pid 5471] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5472] write(3, "1000", 4 [pid 5471] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5472] <... write resumed>) = 4 [ 107.950992][ T5470] loop5: detected capacity change from 0 to 4096 [pid 5471] ioctl(4, LOOP_SET_FD, 3 [pid 5067] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5472] close(3) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] fstat(3, [pid 5472] memfd_create("syzkaller", 0) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5471] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5471] close(3) = 0 [pid 5471] mkdir("./file0", 0777 [pid 5067] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5470] <... mount resumed>) = 0 [pid 5470] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] fstat(3, [pid 5472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5471] <... mkdir resumed>) = 0 [pid 5470] <... openat resumed>) = 3 [pid 5465] +++ exited with 0 +++ [pid 5067] lstat("./32/binderfs", [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5470] chdir("./file0" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] getdents64(3, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5470] <... chdir resumed>) = 0 [pid 5067] unlink("./32/binderfs" [pid 5470] ioctl(4, LOOP_CLR_FD [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5470] <... ioctl resumed>) = 0 [pid 5067] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5470] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5470] <... close resumed>) = 0 [pid 5066] lstat("./32/binderfs", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5470] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5470] <... openat resumed>) = 4 [pid 5066] unlink("./32/binderfs" [pid 5065] <... openat resumed>) = 3 [pid 5470] unlink("./file1" [pid 5066] <... unlink resumed>) = 0 [pid 5065] fstat(3, [pid 5470] <... unlink resumed>) = 0 [ 108.005316][ T5471] loop1: detected capacity change from 0 to 4096 [ 108.020819][ T5473] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5470] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./33/binderfs") = 0 [pid 5065] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] <... write resumed>) = 2097152 [pid 5471] <... mount resumed>) = 0 [pid 5067] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5471] <... openat resumed>) = 3 [pid 5067] lstat("./32/file0", [pid 5471] chdir("./file0") = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] ioctl(4, LOOP_CLR_FD [pid 5067] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5471] close(4 [pid 5067] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5471] <... close resumed>) = 0 [pid 5471] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5471] <... openat resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] unlink("./file1" [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5472] munmap(0x7f241a43b000, 2097152 [pid 5471] <... unlink resumed>) = 0 [pid 5067] rmdir("./32/file0" [pid 5066] lstat("./32/file0", [pid 5065] <... umount2 resumed>) = 0 [pid 5472] <... munmap resumed>) = 0 [pid 5471] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] getdents64(3, [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5472] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 108.135470][ T5474] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] lstat("./33/file0", [pid 5472] ioctl(4, LOOP_SET_FD, 3 [pid 5067] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5472] <... ioctl resumed>) = 0 [pid 5067] rmdir("./32" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5472] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5472] <... close resumed>) = 0 [pid 5067] mkdir("./33", 0777 [pid 5066] fstat(4, [pid 5065] <... openat resumed>) = 4 [pid 5472] mkdir("./file0", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] fstat(4, [pid 5472] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5472] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5067] close(3 [pid 5066] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] close(4 [pid 5065] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] rmdir("./33/file0" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5475 [pid 5066] rmdir("./32/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5065] close(3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 ./strace-static-x86_64: Process 5475 attached [pid 5066] close(3 [pid 5065] rmdir("./33" [pid 5475] chdir("./33" [pid 5066] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5475] <... chdir resumed>) = 0 [pid 5066] rmdir("./32" [pid 5065] mkdir("./34", 0777 [pid 5475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5475] <... prctl resumed>) = 0 [pid 5066] mkdir("./33", 0777 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5475] setpgid(0, 0 [pid 5065] <... openat resumed>) = 3 [pid 5475] <... setpgid resumed>) = 0 [ 108.190435][ T5472] loop0: detected capacity change from 0 to 4096 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5475] <... openat resumed>) = 3 [pid 5472] <... mount resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5475] write(3, "1000", 4 [pid 5472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... close resumed>) = 0 [pid 5475] <... write resumed>) = 4 [pid 5472] <... openat resumed>) = 3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5475] close(3 [pid 5472] chdir("./file0" [pid 5066] close(3 [pid 5475] <... close resumed>) = 0 [pid 5472] <... chdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5477 [pid 5475] symlink("/dev/binderfs", "./binderfs" [pid 5472] ioctl(4, LOOP_CLR_FD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5475] <... symlink resumed>) = 0 [pid 5472] <... ioctl resumed>) = 0 [pid 5475] memfd_create("syzkaller", 0 [pid 5472] close(4 [pid 5475] <... memfd_create resumed>) = 3 [pid 5472] <... close resumed>) = 0 [pid 5475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5472] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5478 ./strace-static-x86_64: Process 5477 attached [pid 5475] <... mmap resumed>) = 0x7f241a43b000 [pid 5472] <... openat resumed>) = 4 [pid 5477] chdir("./34" [pid 5472] unlink("./file1"./strace-static-x86_64: Process 5478 attached [pid 5477] <... chdir resumed>) = 0 [pid 5477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5478] chdir("./33" [pid 5477] <... prctl resumed>) = 0 [pid 5478] <... chdir resumed>) = 0 [pid 5477] setpgid(0, 0 [pid 5478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5477] <... setpgid resumed>) = 0 [pid 5478] <... prctl resumed>) = 0 [pid 5477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5478] setpgid(0, 0 [pid 5477] <... openat resumed>) = 3 [pid 5478] <... setpgid resumed>) = 0 [pid 5477] write(3, "1000", 4) = 4 [pid 5478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5477] close(3) = 0 [pid 5477] symlink("/dev/binderfs", "./binderfs" [pid 5478] <... openat resumed>) = 3 [pid 5477] <... symlink resumed>) = 0 [pid 5477] memfd_create("syzkaller", 0) = 3 [pid 5477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5478] write(3, "1000", 4) = 4 [ 108.238550][ T5476] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5478] close(3) = 0 [pid 5475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5478] symlink("/dev/binderfs", "./binderfs" [pid 5472] <... unlink resumed>) = 0 [pid 5478] <... symlink resumed>) = 0 [pid 5472] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5478] memfd_create("syzkaller", 0 [pid 5477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5478] <... memfd_create resumed>) = 3 [pid 5478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5475] <... write resumed>) = 2097152 [pid 5475] munmap(0x7f241a43b000, 2097152) = 0 [pid 5475] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5475] ioctl(4, LOOP_SET_FD, 3 [pid 5477] <... write resumed>) = 2097152 [pid 5477] munmap(0x7f241a43b000, 2097152 [pid 5478] <... write resumed>) = 2097152 [pid 5475] <... ioctl resumed>) = 0 [pid 5475] close(3) = 0 [pid 5475] mkdir("./file0", 0777 [pid 5470] <... pwritev resumed>) = 1114112 [pid 5477] <... munmap resumed>) = 0 [pid 5475] <... mkdir resumed>) = 0 [pid 5470] exit_group(0 [pid 5477] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5475] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5470] <... exit_group resumed>) = ? [pid 5477] <... openat resumed>) = 4 [ 108.425588][ T5475] loop4: detected capacity change from 0 to 4096 [pid 5477] ioctl(4, LOOP_SET_FD, 3 [pid 5478] munmap(0x7f241a43b000, 2097152) = 0 [pid 5478] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5478] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5478] close(3) = 0 [pid 5477] <... ioctl resumed>) = 0 [pid 5478] mkdir("./file0", 0777 [pid 5477] close(3 [pid 5478] <... mkdir resumed>) = 0 [pid 5477] <... close resumed>) = 0 [pid 5477] mkdir("./file0", 0777 [pid 5478] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5477] <... mkdir resumed>) = 0 [ 108.484573][ T5477] loop2: detected capacity change from 0 to 4096 [ 108.499440][ T5478] loop3: detected capacity change from 0 to 4096 [pid 5477] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5475] <... mount resumed>) = 0 [pid 5475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5475] chdir("./file0") = 0 [pid 5475] ioctl(4, LOOP_CLR_FD) = 0 [pid 5475] close(4) = 0 [pid 5475] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 108.526042][ T5479] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5475] unlink("./file1" [pid 5477] <... mount resumed>) = 0 [pid 5477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5477] chdir("./file0") = 0 [pid 5477] ioctl(4, LOOP_CLR_FD) = 0 [pid 5477] close(4) = 0 [pid 5477] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5478] <... mount resumed>) = 0 [pid 5477] <... openat resumed>) = 4 [pid 5475] <... unlink resumed>) = 0 [pid 5478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5477] unlink("./file1" [pid 5475] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5470] +++ exited with 0 +++ [pid 5478] <... openat resumed>) = 3 [pid 5478] chdir("./file0" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5470, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5478] <... chdir resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5478] ioctl(4, LOOP_CLR_FD [pid 5068] <... restart_syscall resumed>) = 0 [pid 5478] <... ioctl resumed>) = 0 [pid 5478] close(4) = 0 [pid 5068] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5478] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5478] <... openat resumed>) = 4 [pid 5471] <... pwritev resumed>) = 1114112 [pid 5068] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5478] unlink("./file1" [pid 5471] exit_group(0 [pid 5068] <... openat resumed>) = 3 [pid 5471] <... exit_group resumed>) = ? [ 108.574949][ T5480] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.587671][ T5481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5477] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5478] <... unlink resumed>) = 0 [pid 5477] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5478] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./33/binderfs") = 0 [pid 5068] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] <... pwritev resumed>) = 1114112 [pid 5472] exit_group(0) = ? [pid 5471] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5471, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./32/binderfs") = 0 [pid 5064] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./33/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./33") = 0 [pid 5472] +++ exited with 0 +++ [pid 5068] mkdir("./34", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5472, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5068] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5064] lstat("./32/file0", [pid 5063] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5482 [pid 5064] getdents64(4, [pid 5063] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4./strace-static-x86_64: Process 5482 attached ) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./32/file0" [pid 5482] chdir("./34" [pid 5064] <... rmdir resumed>) = 0 [pid 5063] lstat("./32/binderfs", [pid 5482] <... chdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5482] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./32") = 0 [pid 5064] mkdir("./33", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5482] <... prctl resumed>) = 0 [pid 5475] <... pwritev resumed>) = 1114112 [pid 5064] <... close resumed>) = 0 [pid 5063] unlink("./32/binderfs" [pid 5482] setpgid(0, 0 [pid 5475] exit_group(0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5484 attached [pid 5482] <... setpgid resumed>) = 0 [pid 5475] <... exit_group resumed>) = ? [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5484 [pid 5482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5482] <... openat resumed>) = 3 [pid 5482] write(3, "1000", 4) = 4 [pid 5484] chdir("./33" [pid 5482] close(3 [pid 5484] <... chdir resumed>) = 0 [pid 5482] <... close resumed>) = 0 [pid 5482] symlink("/dev/binderfs", "./binderfs" [pid 5484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5482] <... symlink resumed>) = 0 [pid 5484] <... prctl resumed>) = 0 [pid 5482] memfd_create("syzkaller", 0 [pid 5484] setpgid(0, 0 [pid 5482] <... memfd_create resumed>) = 3 [pid 5482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5484] <... setpgid resumed>) = 0 [pid 5482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5478] <... pwritev resumed>) = 1114112 [pid 5484] write(3, "1000", 4 [pid 5478] exit_group(0) = ? [pid 5484] <... write resumed>) = 4 [pid 5484] close(3) = 0 [pid 5484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5484] memfd_create("syzkaller", 0) = 3 [pid 5484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5477] <... pwritev resumed>) = 1114112 [pid 5477] exit_group(0) = ? [pid 5484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5475] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... umount2 resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./32/file0", [pid 5067] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./33/binderfs") = 0 [pid 5067] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./32/file0" [pid 5482] <... write resumed>) = 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5482] munmap(0x7f241a43b000, 2097152 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./32" [pid 5482] <... munmap resumed>) = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5482] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./33", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5478] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5478, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... restart_syscall resumed>) = 0 [pid 5063] close(3) = 0 [pid 5067] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, [pid 5066] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5485 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5482] <... ioctl resumed>) = 0 [pid 5067] close(4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5482] close(3 [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5482] <... close resumed>) = 0 [pid 5477] +++ exited with 0 +++ [pid 5067] rmdir("./33/file0" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5482] mkdir("./file0", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5477, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- ./strace-static-x86_64: Process 5485 attached [pid 5482] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5482] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] lstat("./33/binderfs", [pid 5485] chdir("./33" [pid 5067] close(3 [pid 5485] <... chdir resumed>) = 0 [pid 5484] <... write resumed>) = 2097152 [pid 5067] <... close resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5484] munmap(0x7f241a43b000, 2097152 [pid 5067] rmdir("./33" [pid 5066] unlink("./33/binderfs" [pid 5485] <... prctl resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5485] setpgid(0, 0 [pid 5484] <... munmap resumed>) = 0 [pid 5067] mkdir("./34", 0777 [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5485] <... setpgid resumed>) = 0 [pid 5484] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... mkdir resumed>) = 0 [pid 5066] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [ 109.143836][ T5482] loop5: detected capacity change from 0 to 4096 [pid 5065] fstat(3, [pid 5485] <... openat resumed>) = 3 [pid 5484] <... openat resumed>) = 4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5485] write(3, "1000", 4 [pid 5484] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(3, [pid 5485] <... write resumed>) = 4 [pid 5067] close(3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... close resumed>) = 0 [pid 5065] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./34/binderfs", [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5486 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./34/binderfs") = 0 [pid 5065] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5485] close(3) = 0 [pid 5485] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5486 attached [pid 5485] memfd_create("syzkaller", 0 [pid 5486] chdir("./34" [pid 5485] <... memfd_create resumed>) = 3 [pid 5486] <... chdir resumed>) = 0 [pid 5485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5482] <... mount resumed>) = 0 [pid 5486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5482] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5486] <... prctl resumed>) = 0 [pid 5485] <... mmap resumed>) = 0x7f241a43b000 [pid 5482] <... openat resumed>) = 3 [pid 5486] setpgid(0, 0 [pid 5482] chdir("./file0" [pid 5486] <... setpgid resumed>) = 0 [pid 5482] <... chdir resumed>) = 0 [pid 5486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5482] ioctl(4, LOOP_CLR_FD [pid 5486] <... openat resumed>) = 3 [pid 5482] <... ioctl resumed>) = 0 [pid 5486] write(3, "1000", 4 [pid 5482] close(4 [pid 5486] <... write resumed>) = 4 [pid 5482] <... close resumed>) = 0 [pid 5486] close(3 [pid 5484] <... ioctl resumed>) = 0 [pid 5482] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5486] <... close resumed>) = 0 [pid 5484] close(3 [pid 5482] <... openat resumed>) = 4 [pid 5486] symlink("/dev/binderfs", "./binderfs" [pid 5482] unlink("./file1" [pid 5066] <... umount2 resumed>) = 0 [pid 5486] <... symlink resumed>) = 0 [pid 5484] <... close resumed>) = 0 [pid 5486] memfd_create("syzkaller", 0 [pid 5484] mkdir("./file0", 0777 [pid 5486] <... memfd_create resumed>) = 3 [pid 5486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5484] <... mkdir resumed>) = 0 [pid 5066] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 109.214663][ T5484] loop1: detected capacity change from 0 to 4096 [ 109.235667][ T5487] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./33/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./33") = 0 [pid 5066] mkdir("./34", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] <... umount2 resumed>) = 0 [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5488 [pid 5065] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5488 attached ) = -1 EINVAL (Invalid argument) [pid 5488] chdir("./34" [pid 5065] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5488] <... chdir resumed>) = 0 [pid 5482] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5484] <... mount resumed>) = 0 [pid 5482] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] fstat(4, [pid 5488] <... prctl resumed>) = 0 [pid 5484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5488] setpgid(0, 0 [pid 5484] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5488] <... setpgid resumed>) = 0 [pid 5484] chdir("./file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5484] <... chdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5488] <... openat resumed>) = 3 [pid 5484] ioctl(4, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5488] write(3, "1000", 4 [pid 5484] <... ioctl resumed>) = 0 [pid 5065] close(4 [pid 5488] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5488] close(3 [pid 5484] close(4 [pid 5065] rmdir("./34/file0" [pid 5488] <... close resumed>) = 0 [pid 5484] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5488] symlink("/dev/binderfs", "./binderfs" [pid 5484] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] getdents64(3, [pid 5488] <... symlink resumed>) = 0 [pid 5484] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5488] memfd_create("syzkaller", 0 [pid 5484] unlink("./file1" [pid 5065] close(3 [pid 5488] <... memfd_create resumed>) = 3 [pid 5065] <... close resumed>) = 0 [ 109.322171][ T5489] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] rmdir("./34" [pid 5488] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] <... rmdir resumed>) = 0 [pid 5485] <... write resumed>) = 2097152 [pid 5484] <... unlink resumed>) = 0 [pid 5065] mkdir("./35", 0777 [pid 5485] munmap(0x7f241a43b000, 2097152 [pid 5484] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5485] <... munmap resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5490 ./strace-static-x86_64: Process 5490 attached [pid 5490] chdir("./35") = 0 [pid 5485] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5485] <... openat resumed>) = 4 [pid 5490] setpgid(0, 0 [pid 5486] <... write resumed>) = 2097152 [pid 5485] ioctl(4, LOOP_SET_FD, 3 [pid 5490] <... setpgid resumed>) = 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5485] <... ioctl resumed>) = 0 [pid 5490] write(3, "1000", 4) = 4 [pid 5485] close(3 [pid 5490] close(3) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs" [pid 5485] <... close resumed>) = 0 [pid 5490] <... symlink resumed>) = 0 [pid 5486] munmap(0x7f241a43b000, 2097152 [pid 5485] mkdir("./file0", 0777 [pid 5490] memfd_create("syzkaller", 0 [pid 5486] <... munmap resumed>) = 0 [pid 5490] <... memfd_create resumed>) = 3 [pid 5490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5486] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5485] <... mkdir resumed>) = 0 [pid 5490] <... mmap resumed>) = 0x7f241a43b000 [pid 5486] <... openat resumed>) = 4 [pid 5485] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5486] ioctl(4, LOOP_SET_FD, 3 [ 109.443001][ T5485] loop0: detected capacity change from 0 to 4096 [ 109.477909][ T5486] loop4: detected capacity change from 0 to 4096 [pid 5490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5486] <... ioctl resumed>) = 0 [pid 5486] close(3) = 0 [pid 5486] mkdir("./file0", 0777) = 0 [pid 5486] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5485] <... mount resumed>) = 0 [pid 5485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5488] <... write resumed>) = 2097152 [pid 5485] <... openat resumed>) = 3 [pid 5485] chdir("./file0") = 0 [pid 5485] ioctl(4, LOOP_CLR_FD) = 0 [pid 5485] close(4) = 0 [pid 5485] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5485] unlink("./file1" [pid 5488] munmap(0x7f241a43b000, 2097152) = 0 [pid 5488] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5485] <... unlink resumed>) = 0 [ 109.503273][ T5491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5488] ioctl(4, LOOP_SET_FD, 3 [pid 5485] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5486] <... mount resumed>) = 0 [pid 5486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5486] chdir("./file0") = 0 [pid 5486] ioctl(4, LOOP_CLR_FD) = 0 [pid 5486] close(4) = 0 [pid 5486] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5488] <... ioctl resumed>) = 0 [pid 5488] close(3 [pid 5486] <... openat resumed>) = 4 [pid 5488] <... close resumed>) = 0 [pid 5486] unlink("./file1" [pid 5488] mkdir("./file0", 0777) = 0 [pid 5488] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5490] <... write resumed>) = 2097152 [ 109.558500][ T5488] loop3: detected capacity change from 0 to 4096 [ 109.580848][ T5492] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5490] munmap(0x7f241a43b000, 2097152) = 0 [pid 5490] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5486] <... unlink resumed>) = 0 [pid 5490] ioctl(4, LOOP_SET_FD, 3 [pid 5486] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5490] <... ioctl resumed>) = 0 [pid 5488] <... mount resumed>) = 0 [pid 5488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5488] chdir("./file0") = 0 [pid 5488] ioctl(4, LOOP_CLR_FD) = 0 [pid 5488] close(4) = 0 [pid 5488] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5488] unlink("./file1" [pid 5490] close(3) = 0 [pid 5490] mkdir("./file0", 0777) = 0 [ 109.656691][ T5490] loop2: detected capacity change from 0 to 4096 [ 109.663527][ T5493] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5490] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5488] <... unlink resumed>) = 0 [pid 5488] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5490] <... mount resumed>) = 0 [pid 5490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5490] chdir("./file0") = 0 [pid 5490] ioctl(4, LOOP_CLR_FD) = 0 [pid 5490] close(4) = 0 [pid 5490] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5490] unlink("./file1" [pid 5484] <... pwritev resumed>) = 1114112 [pid 5484] exit_group(0) = ? [pid 5490] <... unlink resumed>) = 0 [pid 5482] <... pwritev resumed>) = 1114112 [ 109.749115][ T5494] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5490] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5482] exit_group(0) = ? [pid 5484] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5484, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5064] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5485] <... pwritev resumed>) = 1114112 [pid 5064] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5485] exit_group(0 [pid 5064] <... openat resumed>) = 3 [pid 5485] <... exit_group resumed>) = ? [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./33/binderfs") = 0 [pid 5064] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5482] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5482, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5064] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] lstat("./33/file0", [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5485] +++ exited with 0 +++ [pid 5068] lstat("./34/binderfs", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./34/binderfs" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5485, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5068] <... unlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, [pid 5063] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5063] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5063] fstat(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(4) = 0 [pid 5063] getdents64(3, [pid 5064] rmdir("./33/file0" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5063] lstat("./33/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(3 [pid 5063] unlink("./33/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./33" [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] mkdir("./34", 0777) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5498 [pid 5068] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5498 attached [pid 5068] getdents64(4, [pid 5498] chdir("./34" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5498] <... chdir resumed>) = 0 [pid 5068] getdents64(4, [pid 5498] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5498] <... prctl resumed>) = 0 [pid 5068] close(4 [pid 5498] setpgid(0, 0 [pid 5488] <... pwritev resumed>) = 1114112 [pid 5068] <... close resumed>) = 0 [pid 5498] <... setpgid resumed>) = 0 [pid 5488] exit_group(0 [pid 5068] rmdir("./34/file0" [pid 5498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5488] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 5498] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5498] write(3, "1000", 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5498] <... write resumed>) = 4 [pid 5068] close(3 [pid 5498] close(3 [pid 5068] <... close resumed>) = 0 [pid 5498] <... close resumed>) = 0 [pid 5068] rmdir("./34" [pid 5498] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... rmdir resumed>) = 0 [pid 5498] <... symlink resumed>) = 0 [pid 5068] mkdir("./35", 0777 [pid 5498] memfd_create("syzkaller", 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5498] <... memfd_create resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... openat resumed>) = 3 [pid 5498] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5499 ./strace-static-x86_64: Process 5499 attached [pid 5499] chdir("./35") = 0 [pid 5499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5499] setpgid(0, 0) = 0 [pid 5499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5499] write(3, "1000", 4) = 4 [pid 5486] <... pwritev resumed>) = 1114112 [pid 5499] close(3 [pid 5486] exit_group(0 [pid 5499] <... close resumed>) = 0 [pid 5486] <... exit_group resumed>) = ? [pid 5499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5499] memfd_create("syzkaller", 0) = 3 [pid 5499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./33/file0", [pid 5499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./33/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./33" [pid 5498] <... write resumed>) = 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./34", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5490] <... pwritev resumed>) = 1114112 [pid 5063] <... close resumed>) = 0 [pid 5490] exit_group(0 [pid 5488] +++ exited with 0 +++ [pid 5499] <... write resumed>) = 2097152 [pid 5490] <... exit_group resumed>) = ? [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5499] munmap(0x7f241a43b000, 2097152 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5488, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5500 [pid 5066] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5498] munmap(0x7f241a43b000, 2097152 [pid 5486] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5500 attached [pid 5499] <... munmap resumed>) = 0 [pid 5498] <... munmap resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5486, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] lstat("./34/binderfs", [pid 5499] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5500] chdir("./34" [pid 5498] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] unlink("./34/binderfs" [pid 5500] <... chdir resumed>) = 0 [pid 5499] <... openat resumed>) = 4 [pid 5498] <... openat resumed>) = 4 [pid 5066] <... unlink resumed>) = 0 [pid 5499] ioctl(4, LOOP_SET_FD, 3 [pid 5498] ioctl(4, LOOP_SET_FD, 3 [pid 5066] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5499] <... ioctl resumed>) = 0 [pid 5500] <... prctl resumed>) = 0 [pid 5499] close(3 [pid 5067] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5500] setpgid(0, 0 [pid 5067] fstat(3, [pid 5500] <... setpgid resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5498] <... ioctl resumed>) = 0 [pid 5498] close(3) = 0 [pid 5498] mkdir("./file0", 0777 [pid 5067] lstat("./34/binderfs", [pid 5500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./34/binderfs") = 0 [pid 5067] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5490] +++ exited with 0 +++ [pid 5500] <... openat resumed>) = 3 [pid 5498] <... mkdir resumed>) = 0 [pid 5500] write(3, "1000", 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5500] <... write resumed>) = 4 [pid 5500] close(3 [pid 5065] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] <... close resumed>) = 0 [pid 5498] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5500] symlink("/dev/binderfs", "./binderfs" [pid 5065] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5500] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5500] memfd_create("syzkaller", 0 [pid 5499] <... close resumed>) = 0 [ 110.289719][ T5499] loop5: detected capacity change from 0 to 4096 [ 110.289774][ T5498] loop1: detected capacity change from 0 to 4096 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5500] <... memfd_create resumed>) = 3 [pid 5499] mkdir("./file0", 0777 [pid 5065] getdents64(3, [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5499] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5500] <... mmap resumed>) = 0x7f241a43b000 [pid 5499] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./35/binderfs") = 0 [pid 5065] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5498] <... mount resumed>) = 0 [pid 5498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5498] chdir("./file0") = 0 [pid 5498] ioctl(4, LOOP_CLR_FD) = 0 [pid 5498] close(4) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5499] <... mount resumed>) = 0 [pid 5498] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = 0 [pid 5498] <... openat resumed>) = 4 [pid 5499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5498] unlink("./file1" [pid 5067] <... umount2 resumed>) = 0 [pid 5066] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5499] <... openat resumed>) = 3 [pid 5067] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5499] chdir("./file0" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5499] <... chdir resumed>) = 0 [pid 5499] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5499] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5499] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5499] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5499] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5499] <... openat resumed>) = 4 [pid 5067] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5499] unlink("./file1" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5065] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./34/file0" [pid 5067] close(4) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] rmdir("./34/file0" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] lstat("./35/file0", [pid 5066] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] rmdir("./34" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./34" [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./35", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 110.394423][ T5501] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.424512][ T5502] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] mkdir("./35", 0777 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... mkdir resumed>) = 0 [pid 5065] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5065] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5498] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 4 [pid 5498] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5503 attached ) = -1 ENXIO (No such device or address) [pid 5065] fstat(4, [pid 5067] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5503 [pid 5067] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5503] chdir("./35" [pid 5499] <... unlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5503] <... chdir resumed>) = 0 [pid 5499] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] getdents64(4, ./strace-static-x86_64: Process 5504 attached [pid 5503] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5500] <... write resumed>) = 2097152 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5504 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5503] <... prctl resumed>) = 0 [pid 5500] munmap(0x7f241a43b000, 2097152 [pid 5504] chdir("./35" [pid 5503] setpgid(0, 0 [pid 5500] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5503] <... setpgid resumed>) = 0 [pid 5500] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5504] <... chdir resumed>) = 0 [pid 5503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] close(4 [pid 5504] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5503] <... openat resumed>) = 3 [pid 5500] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5504] <... prctl resumed>) = 0 [pid 5503] write(3, "1000", 4 [pid 5500] ioctl(4, LOOP_SET_FD, 3 [pid 5065] rmdir("./35/file0" [pid 5503] <... write resumed>) = 4 [pid 5504] setpgid(0, 0 [pid 5503] close(3 [pid 5500] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5504] <... setpgid resumed>) = 0 [pid 5503] <... close resumed>) = 0 [pid 5500] close(3 [pid 5504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5503] symlink("/dev/binderfs", "./binderfs" [pid 5500] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5503] <... symlink resumed>) = 0 [pid 5500] mkdir("./file0", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5504] <... openat resumed>) = 3 [pid 5503] memfd_create("syzkaller", 0 [pid 5500] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5504] write(3, "1000", 4 [pid 5065] <... close resumed>) = 0 [pid 5500] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5503] <... memfd_create resumed>) = 3 [pid 5065] rmdir("./35" [pid 5504] <... write resumed>) = 4 [pid 5504] close(3 [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5504] <... close resumed>) = 0 [pid 5504] symlink("/dev/binderfs", "./binderfs" [pid 5503] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] mkdir("./36", 0777 [pid 5504] <... symlink resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5504] memfd_create("syzkaller", 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5504] <... memfd_create resumed>) = 3 [pid 5504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... openat resumed>) = 3 [pid 5504] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 110.527772][ T5500] loop0: detected capacity change from 0 to 4096 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5505 ./strace-static-x86_64: Process 5505 attached [pid 5505] chdir("./36") = 0 [pid 5505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5505] setpgid(0, 0 [pid 5500] <... mount resumed>) = 0 [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5505] <... setpgid resumed>) = 0 [pid 5500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5500] <... openat resumed>) = 3 [pid 5505] <... openat resumed>) = 3 [pid 5500] chdir("./file0") = 0 [pid 5505] write(3, "1000", 4) = 4 [pid 5500] ioctl(4, LOOP_CLR_FD [pid 5505] close(3 [pid 5500] <... ioctl resumed>) = 0 [pid 5505] <... close resumed>) = 0 [pid 5500] close(4 [pid 5505] symlink("/dev/binderfs", "./binderfs" [pid 5500] <... close resumed>) = 0 [pid 5505] <... symlink resumed>) = 0 [pid 5500] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5505] memfd_create("syzkaller", 0) = 3 [pid 5500] <... openat resumed>) = 4 [pid 5505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5500] unlink("./file1" [pid 5505] <... mmap resumed>) = 0x7f241a43b000 [pid 5500] <... unlink resumed>) = 0 [ 110.634351][ T5506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5500] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5504] <... write resumed>) = 2097152 [pid 5504] munmap(0x7f241a43b000, 2097152) = 0 [pid 5504] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5504] ioctl(4, LOOP_SET_FD, 3 [pid 5503] <... write resumed>) = 2097152 [pid 5503] munmap(0x7f241a43b000, 2097152) = 0 [pid 5503] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5503] ioctl(4, LOOP_SET_FD, 3 [pid 5504] <... ioctl resumed>) = 0 [pid 5504] close(3) = 0 [pid 5504] mkdir("./file0", 0777) = 0 [pid 5504] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5503] <... ioctl resumed>) = 0 [pid 5503] close(3) = 0 [pid 5503] mkdir("./file0", 0777) = 0 [pid 5503] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5505] <... write resumed>) = 2097152 [ 110.757422][ T5504] loop4: detected capacity change from 0 to 4096 [ 110.776168][ T5503] loop3: detected capacity change from 0 to 4096 [pid 5505] munmap(0x7f241a43b000, 2097152 [pid 5499] <... pwritev resumed>) = 1114112 [pid 5505] <... munmap resumed>) = 0 [pid 5499] exit_group(0 [pid 5505] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5499] <... exit_group resumed>) = ? [pid 5505] <... openat resumed>) = 4 [pid 5505] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5505] close(3) = 0 [pid 5504] <... mount resumed>) = 0 [pid 5505] mkdir("./file0", 0777 [pid 5504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5498] <... pwritev resumed>) = 1114112 [pid 5504] <... openat resumed>) = 3 [pid 5498] exit_group(0 [pid 5504] chdir("./file0" [pid 5498] <... exit_group resumed>) = ? [pid 5505] <... mkdir resumed>) = 0 [pid 5504] <... chdir resumed>) = 0 [pid 5503] <... mount resumed>) = 0 [pid 5504] ioctl(4, LOOP_CLR_FD [pid 5503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5505] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5504] <... ioctl resumed>) = 0 [pid 5503] <... openat resumed>) = 3 [pid 5504] close(4 [pid 5503] chdir("./file0" [pid 5504] <... close resumed>) = 0 [pid 5503] <... chdir resumed>) = 0 [pid 5504] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5503] ioctl(4, LOOP_CLR_FD [pid 5504] <... openat resumed>) = 4 [pid 5503] <... ioctl resumed>) = 0 [pid 5504] unlink("./file1" [pid 5503] close(4) = 0 [pid 5503] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 110.839819][ T5505] loop2: detected capacity change from 0 to 4096 [ 110.850691][ T5507] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.869325][ T5508] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5503] unlink("./file1" [pid 5505] <... mount resumed>) = 0 [pid 5505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5504] <... unlink resumed>) = 0 [pid 5505] chdir("./file0" [pid 5504] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5505] <... chdir resumed>) = 0 [pid 5503] <... unlink resumed>) = 0 [pid 5505] ioctl(4, LOOP_CLR_FD [pid 5503] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5505] <... ioctl resumed>) = 0 [ 110.923165][ T5509] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5500] <... pwritev resumed>) = 1114112 [pid 5499] +++ exited with 0 +++ [pid 5498] +++ exited with 0 +++ [pid 5505] close(4 [pid 5500] exit_group(0 [pid 5505] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5499, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5505] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5500] <... exit_group resumed>) = ? [pid 5068] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5498, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5505] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] unlink("./file1" [pid 5068] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, [pid 5064] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5505] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5064] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5505] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5068] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./35/binderfs", [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] getdents64(3, [pid 5068] unlink("./35/binderfs") = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./34/binderfs") = 0 [pid 5064] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5068] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] +++ exited with 0 +++ [pid 5068] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] lstat("./34/file0", [pid 5068] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5500, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./34/binderfs") = 0 [pid 5068] close(4 [pid 5064] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./35/file0") = 0 [pid 5064] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, [pid 5064] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] fstat(4, [pid 5068] close(3) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] rmdir("./35" [pid 5064] getdents64(4, [pid 5068] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] mkdir("./36", 0777 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] close(4 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./34/file0" [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] getdents64(3, [pid 5068] close(3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./34" [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5510 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./35", 0777./strace-static-x86_64: Process 5510 attached ) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5510] chdir("./36" [pid 5064] <... openat resumed>) = 3 [pid 5510] <... chdir resumed>) = 0 [pid 5510] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5510] <... prctl resumed>) = 0 [pid 5064] close(3 [pid 5063] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5510] setpgid(0, 0 [pid 5063] lstat("./34/file0", [pid 5510] <... setpgid resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5511 [pid 5063] close(4) = 0 [pid 5510] <... openat resumed>) = 3 [pid 5063] rmdir("./34/file0" [pid 5510] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5510] <... write resumed>) = 4 [pid 5063] getdents64(3, [pid 5510] close(3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5510] <... close resumed>) = 0 [pid 5063] close(3 [pid 5510] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 5511 attached [pid 5510] <... symlink resumed>) = 0 [pid 5063] rmdir("./34" [pid 5510] memfd_create("syzkaller", 0 [pid 5511] chdir("./35" [pid 5063] <... rmdir resumed>) = 0 [pid 5510] <... memfd_create resumed>) = 3 [pid 5063] mkdir("./35", 0777 [pid 5511] <... chdir resumed>) = 0 [pid 5510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5510] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5511] <... prctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5512 ./strace-static-x86_64: Process 5512 attached [pid 5512] chdir("./35" [pid 5511] setpgid(0, 0 [pid 5504] <... pwritev resumed>) = 1114112 [pid 5511] <... setpgid resumed>) = 0 [pid 5504] exit_group(0) = ? [pid 5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5512] <... chdir resumed>) = 0 [pid 5511] <... openat resumed>) = 3 [pid 5512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5511] write(3, "1000", 4 [pid 5512] setpgid(0, 0) = 0 [pid 5511] <... write resumed>) = 4 [pid 5512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5511] close(3 [pid 5512] <... openat resumed>) = 3 [pid 5511] <... close resumed>) = 0 [pid 5512] write(3, "1000", 4 [pid 5511] symlink("/dev/binderfs", "./binderfs" [pid 5512] <... write resumed>) = 4 [pid 5511] <... symlink resumed>) = 0 [pid 5510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5503] <... pwritev resumed>) = 1114112 [pid 5512] close(3) = 0 [pid 5511] memfd_create("syzkaller", 0 [pid 5512] symlink("/dev/binderfs", "./binderfs" [pid 5503] exit_group(0 [pid 5512] <... symlink resumed>) = 0 [pid 5512] memfd_create("syzkaller", 0) = 3 [pid 5512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5511] <... memfd_create resumed>) = 3 [pid 5503] <... exit_group resumed>) = ? [pid 5511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5505] <... pwritev resumed>) = 1114112 [pid 5505] exit_group(0) = ? [pid 5511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5510] <... write resumed>) = 2097152 [pid 5510] munmap(0x7f241a43b000, 2097152 [pid 5504] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5504, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5510] <... munmap resumed>) = 0 [pid 5510] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5067] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5510] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5512] <... write resumed>) = 2097152 [pid 5511] <... write resumed>) = 2097152 [pid 5067] lstat("./35/binderfs", [pid 5510] <... ioctl resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./35/binderfs" [pid 5510] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5510] <... close resumed>) = 0 [pid 5512] munmap(0x7f241a43b000, 2097152 [pid 5511] munmap(0x7f241a43b000, 2097152 [pid 5510] mkdir("./file0", 0777 [pid 5503] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5503, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5066] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5511] <... munmap resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5510] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5512] <... munmap resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5512] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5511] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5510] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5512] <... openat resumed>) = 4 [pid 5511] <... openat resumed>) = 4 [pid 5066] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 111.445518][ T5510] loop5: detected capacity change from 0 to 4096 [pid 5512] ioctl(4, LOOP_SET_FD, 3 [pid 5511] ioctl(4, LOOP_SET_FD, 3 [pid 5505] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./35/binderfs", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5505, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5512] <... ioctl resumed>) = 0 [pid 5511] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./35/binderfs") = 0 [pid 5512] close(3 [pid 5511] close(3 [pid 5510] <... mount resumed>) = 0 [pid 5067] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./36/binderfs") = 0 [pid 5065] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5512] <... close resumed>) = 0 [pid 5512] mkdir("./file0", 0777) = 0 [pid 5512] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5511] <... close resumed>) = 0 [pid 5510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5511] mkdir("./file0", 0777 [pid 5510] <... openat resumed>) = 3 [pid 5067] lstat("./35/file0", [pid 5511] <... mkdir resumed>) = 0 [pid 5510] chdir("./file0" [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5511] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5510] <... chdir resumed>) = 0 [pid 5067] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5510] ioctl(4, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5510] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5510] close(4 [pid 5067] <... openat resumed>) = 4 [pid 5510] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5510] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5510] <... openat resumed>) = 4 [pid 5067] getdents64(4, [pid 5510] unlink("./file1" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5510] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5510] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./35/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [ 111.502701][ T5512] loop0: detected capacity change from 0 to 4096 [ 111.510330][ T5511] loop1: detected capacity change from 0 to 4096 [ 111.521651][ T5513] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] rmdir("./35") = 0 [pid 5067] mkdir("./36", 0777 [pid 5511] <... mount resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5511] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5511] chdir("./file0" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5511] <... chdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5511] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 5511] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5511] close(4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5511] <... close resumed>) = 0 [pid 5511] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5515 [pid 5511] <... openat resumed>) = 4 [pid 5511] unlink("./file1"./strace-static-x86_64: Process 5515 attached [pid 5515] chdir("./36") = 0 [pid 5515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5515] setpgid(0, 0) = 0 [pid 5515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5515] write(3, "1000", 4) = 4 [pid 5515] close(3) = 0 [pid 5515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5515] memfd_create("syzkaller", 0) = 3 [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 111.580500][ T5514] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5511] <... unlink resumed>) = 0 [pid 5511] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5512] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5512] chdir("./file0") = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5512] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] lstat("./35/file0", [pid 5065] lstat("./36/file0", [pid 5512] close(4) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5512] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5512] <... openat resumed>) = 4 [pid 5512] unlink("./file1" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5065] fstat(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5065] getdents64(4, [ 111.631410][ T5516] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(4, [pid 5066] close(4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] close(4 [pid 5512] <... unlink resumed>) = 0 [pid 5512] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] rmdir("./35/file0" [pid 5065] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] rmdir("./36/file0" [pid 5066] getdents64(3, [pid 5065] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(3, [pid 5066] close(3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] close(3 [pid 5066] rmdir("./35" [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./36" [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5066] mkdir("./36", 0777 [pid 5065] mkdir("./37", 0777) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5066] close(3) = 0 [pid 5065] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5517 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5518 ./strace-static-x86_64: Process 5518 attached [pid 5518] chdir("./37") = 0 [pid 5518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5515] <... write resumed>) = 2097152 [pid 5518] setpgid(0, 0./strace-static-x86_64: Process 5517 attached ) = 0 [pid 5518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5517] chdir("./36" [pid 5518] <... openat resumed>) = 3 [pid 5517] <... chdir resumed>) = 0 [pid 5518] write(3, "1000", 4) = 4 [pid 5518] close(3 [pid 5517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5518] <... close resumed>) = 0 [pid 5518] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5517] <... prctl resumed>) = 0 [pid 5518] memfd_create("syzkaller", 0) = 3 [pid 5517] setpgid(0, 0 [pid 5518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5517] <... setpgid resumed>) = 0 [pid 5518] <... mmap resumed>) = 0x7f241a43b000 [pid 5517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5515] munmap(0x7f241a43b000, 2097152 [pid 5517] <... openat resumed>) = 3 [pid 5517] write(3, "1000", 4) = 4 [pid 5515] <... munmap resumed>) = 0 [pid 5517] close(3 [pid 5515] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5517] <... close resumed>) = 0 [pid 5517] symlink("/dev/binderfs", "./binderfs" [pid 5515] <... openat resumed>) = 4 [pid 5515] ioctl(4, LOOP_SET_FD, 3 [pid 5517] <... symlink resumed>) = 0 [pid 5517] memfd_create("syzkaller", 0) = 3 [pid 5517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5515] <... ioctl resumed>) = 0 [pid 5515] close(3) = 0 [pid 5515] mkdir("./file0", 0777) = 0 [pid 5515] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 111.823241][ T5515] loop4: detected capacity change from 0 to 4096 [pid 5518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5518] munmap(0x7f241a43b000, 2097152) = 0 [pid 5518] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5518] ioctl(4, LOOP_SET_FD, 3 [pid 5515] <... mount resumed>) = 0 [pid 5515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5515] chdir("./file0") = 0 [pid 5515] ioctl(4, LOOP_CLR_FD) = 0 [pid 5515] close(4) = 0 [pid 5515] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5515] unlink("./file1" [pid 5518] <... ioctl resumed>) = 0 [pid 5518] close(3) = 0 [pid 5518] mkdir("./file0", 0777) = 0 [ 111.915169][ T5518] loop2: detected capacity change from 0 to 4096 [ 111.931522][ T5519] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5518] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5517] <... write resumed>) = 2097152 [pid 5517] munmap(0x7f241a43b000, 2097152) = 0 [pid 5517] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5511] <... pwritev resumed>) = 1114112 [pid 5517] <... openat resumed>) = 4 [pid 5511] exit_group(0 [pid 5510] <... pwritev resumed>) = 1114112 [pid 5511] <... exit_group resumed>) = ? [pid 5510] exit_group(0 [pid 5518] <... mount resumed>) = 0 [pid 5517] ioctl(4, LOOP_SET_FD, 3 [pid 5515] <... unlink resumed>) = 0 [pid 5510] <... exit_group resumed>) = ? [pid 5518] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5517] <... ioctl resumed>) = 0 [pid 5515] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5512] <... pwritev resumed>) = 1114112 [pid 5518] <... openat resumed>) = 3 [pid 5517] close(3 [pid 5512] exit_group(0 [pid 5511] +++ exited with 0 +++ [pid 5518] chdir("./file0" [pid 5517] <... close resumed>) = 0 [pid 5512] <... exit_group resumed>) = ? [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5518] <... chdir resumed>) = 0 [pid 5517] mkdir("./file0", 0777 [pid 5510] +++ exited with 0 +++ [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5518] ioctl(4, LOOP_CLR_FD [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5510, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5518] <... ioctl resumed>) = 0 [pid 5517] <... mkdir resumed>) = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5518] close(4 [pid 5517] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5518] <... close resumed>) = 0 [ 112.019098][ T5520] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.039076][ T5517] loop3: detected capacity change from 0 to 4096 [pid 5518] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5064] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5518] unlink("./file1" [pid 5068] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5518] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5518] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5064] <... openat resumed>) = 3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(3, [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./36/binderfs") = 0 [pid 5068] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5517] <... mount resumed>) = 0 [pid 5064] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./35/binderfs", [pid 5517] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5517] <... openat resumed>) = 3 [pid 5064] unlink("./35/binderfs") = 0 [pid 5517] chdir("./file0" [pid 5064] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5517] <... chdir resumed>) = 0 [pid 5517] ioctl(4, LOOP_CLR_FD) = 0 [pid 5517] close(4) = 0 [pid 5517] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 112.128708][ T5521] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5517] unlink("./file1" [pid 5068] <... umount2 resumed>) = 0 [pid 5517] <... unlink resumed>) = 0 [pid 5068] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5517] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, [pid 5512] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5512, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] unlink("./35/binderfs" [pid 5068] getdents64(4, [pid 5063] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./36/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./36") = 0 [pid 5068] mkdir("./37", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5064] lstat("./35/file0", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5064] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5522 [pid 5063] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./35/file0", [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./35/file0" [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5063] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./35" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./36", 0777 [pid 5063] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5522 attached [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 5522] chdir("./37" [pid 5064] <... openat resumed>) = 3 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5522] <... chdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./35/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./35") = 0 [pid 5063] mkdir("./36", 0777 [pid 5522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... mkdir resumed>) = 0 [pid 5522] <... prctl resumed>) = 0 [pid 5064] close(3 [pid 5522] setpgid(0, 0) = 0 [pid 5064] <... close resumed>) = 0 [pid 5522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5522] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5522] write(3, "1000", 4 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5522] <... write resumed>) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5523 [pid 5063] close(3 [pid 5522] close(3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5522] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5524 ./strace-static-x86_64: Process 5523 attached [pid 5522] symlink("/dev/binderfs", "./binderfs" [pid 5523] chdir("./36" [pid 5522] <... symlink resumed>) = 0 [pid 5523] <... chdir resumed>) = 0 [pid 5522] memfd_create("syzkaller", 0 [pid 5523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5522] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5524 attached [pid 5523] <... prctl resumed>) = 0 [pid 5522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5524] chdir("./36" [pid 5523] setpgid(0, 0 [pid 5522] <... mmap resumed>) = 0x7f241a43b000 [pid 5524] <... chdir resumed>) = 0 [pid 5523] <... setpgid resumed>) = 0 [pid 5524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5524] <... prctl resumed>) = 0 [pid 5523] <... openat resumed>) = 3 [pid 5524] setpgid(0, 0 [pid 5523] write(3, "1000", 4 [pid 5524] <... setpgid resumed>) = 0 [pid 5523] <... write resumed>) = 4 [pid 5524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5523] close(3 [pid 5524] <... openat resumed>) = 3 [pid 5523] <... close resumed>) = 0 [pid 5524] write(3, "1000", 4 [pid 5523] symlink("/dev/binderfs", "./binderfs" [pid 5524] <... write resumed>) = 4 [pid 5523] <... symlink resumed>) = 0 [pid 5524] close(3 [pid 5523] memfd_create("syzkaller", 0 [pid 5524] <... close resumed>) = 0 [pid 5523] <... memfd_create resumed>) = 3 [pid 5524] symlink("/dev/binderfs", "./binderfs" [pid 5523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5524] <... symlink resumed>) = 0 [pid 5523] <... mmap resumed>) = 0x7f241a43b000 [pid 5524] memfd_create("syzkaller", 0) = 3 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5524] <... mmap resumed>) = 0x7f241a43b000 [pid 5522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5515] <... pwritev resumed>) = 1114112 [pid 5522] <... write resumed>) = 2097152 [pid 5515] exit_group(0 [pid 5524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5515] <... exit_group resumed>) = ? [pid 5523] <... write resumed>) = 2097152 [pid 5522] munmap(0x7f241a43b000, 2097152 [pid 5518] <... pwritev resumed>) = 1114112 [pid 5523] munmap(0x7f241a43b000, 2097152 [pid 5522] <... munmap resumed>) = 0 [pid 5518] exit_group(0 [pid 5523] <... munmap resumed>) = 0 [pid 5522] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5518] <... exit_group resumed>) = ? [pid 5524] <... write resumed>) = 2097152 [pid 5523] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5522] <... openat resumed>) = 4 [pid 5524] munmap(0x7f241a43b000, 2097152 [pid 5523] <... openat resumed>) = 4 [pid 5522] ioctl(4, LOOP_SET_FD, 3 [pid 5524] <... munmap resumed>) = 0 [pid 5523] ioctl(4, LOOP_SET_FD, 3 [pid 5522] <... ioctl resumed>) = 0 [pid 5524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5523] <... ioctl resumed>) = 0 [pid 5522] close(3 [pid 5524] ioctl(4, LOOP_SET_FD, 3 [pid 5523] close(3) = 0 [pid 5523] mkdir("./file0", 0777) = 0 [pid 5523] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5524] <... ioctl resumed>) = 0 [pid 5522] <... close resumed>) = 0 [pid 5524] close(3 [pid 5522] mkdir("./file0", 0777 [pid 5524] <... close resumed>) = 0 [pid 5524] mkdir("./file0", 0777 [pid 5522] <... mkdir resumed>) = 0 [pid 5515] +++ exited with 0 +++ [pid 5524] <... mkdir resumed>) = 0 [pid 5522] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5524] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5515, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 112.537437][ T5522] loop5: detected capacity change from 0 to 4096 [ 112.544257][ T5523] loop1: detected capacity change from 0 to 4096 [ 112.554735][ T5524] loop0: detected capacity change from 0 to 4096 [pid 5067] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./36/binderfs", [pid 5522] <... mount resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./36/binderfs") = 0 [pid 5067] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] <... mount resumed>) = 0 [pid 5522] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5518] +++ exited with 0 +++ [pid 5517] <... pwritev resumed>) = 1114112 [pid 5524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5522] <... openat resumed>) = 3 [pid 5517] exit_group(0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5518, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5524] <... openat resumed>) = 3 [pid 5522] chdir("./file0" [pid 5517] <... exit_group resumed>) = ? [pid 5522] <... chdir resumed>) = 0 [pid 5523] <... mount resumed>) = 0 [pid 5524] chdir("./file0") = 0 [pid 5523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5522] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] ioctl(4, LOOP_CLR_FD [pid 5523] <... openat resumed>) = 3 [pid 5522] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5524] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5524] close(4 [pid 5523] chdir("./file0" [pid 5522] close(4 [pid 5065] <... openat resumed>) = 3 [pid 5522] <... close resumed>) = 0 [pid 5524] <... close resumed>) = 0 [pid 5523] <... chdir resumed>) = 0 [pid 5524] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5522] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5523] ioctl(4, LOOP_CLR_FD [pid 5065] fstat(3, [pid 5523] <... ioctl resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5523] close(4 [pid 5065] getdents64(3, [pid 5523] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5523] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5522] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./37/binderfs", [pid 5524] <... openat resumed>) = 4 [pid 5522] unlink("./file1" [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5524] unlink("./file1" [pid 5523] <... openat resumed>) = 4 [pid 5065] unlink("./37/binderfs" [pid 5524] <... unlink resumed>) = 0 [pid 5522] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [ 112.613904][ T5525] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.624858][ T5526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.635898][ T5527] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5524] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5523] unlink("./file1" [pid 5522] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./36/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./36") = 0 [pid 5067] mkdir("./37", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5523] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5523] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5528 ./strace-static-x86_64: Process 5528 attached [pid 5528] chdir("./37") = 0 [pid 5517] +++ exited with 0 +++ [pid 5528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5517, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5528] <... prctl resumed>) = 0 [pid 5528] setpgid(0, 0) = 0 [pid 5528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5528] <... openat resumed>) = 3 [pid 5528] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5528] <... write resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5528] close(3) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5528] symlink("/dev/binderfs", "./binderfs" [pid 5066] fstat(3, [pid 5528] <... symlink resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5528] memfd_create("syzkaller", 0 [pid 5066] getdents64(3, [pid 5528] <... memfd_create resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5528] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5066] lstat("./36/binderfs", [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] getdents64(4, [pid 5066] unlink("./36/binderfs" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5066] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./37/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./37") = 0 [pid 5065] mkdir("./38", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5529 ./strace-static-x86_64: Process 5529 attached [pid 5529] chdir("./38") = 0 [pid 5529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5529] setpgid(0, 0 [pid 5528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5529] <... setpgid resumed>) = 0 [pid 5529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5529] write(3, "1000", 4) = 4 [pid 5529] close(3) = 0 [pid 5529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5529] memfd_create("syzkaller", 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5529] <... memfd_create resumed>) = 3 [pid 5066] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5529] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5528] <... write resumed>) = 2097152 [pid 5066] rmdir("./36/file0" [pid 5528] munmap(0x7f241a43b000, 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5528] <... munmap resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5528] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] rmdir("./36" [pid 5528] <... openat resumed>) = 4 [pid 5528] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5528] <... ioctl resumed>) = 0 [pid 5066] mkdir("./37", 0777 [pid 5528] close(3) = 0 [pid 5528] mkdir("./file0", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5528] <... mkdir resumed>) = 0 [pid 5528] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 112.987198][ T5528] loop4: detected capacity change from 0 to 4096 [pid 5066] close(3) = 0 [pid 5528] <... mount resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5528] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5531 attached ) = 3 [pid 5531] chdir("./37" [pid 5528] chdir("./file0" [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5531 [pid 5531] <... chdir resumed>) = 0 [pid 5528] <... chdir resumed>) = 0 [pid 5528] ioctl(4, LOOP_CLR_FD [pid 5531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5528] <... ioctl resumed>) = 0 [pid 5531] setpgid(0, 0 [pid 5528] close(4 [pid 5531] <... setpgid resumed>) = 0 [pid 5528] <... close resumed>) = 0 [pid 5524] <... pwritev resumed>) = 1114112 [pid 5531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5528] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5524] exit_group(0 [pid 5531] <... openat resumed>) = 3 [pid 5531] write(3, "1000", 4 [pid 5528] <... openat resumed>) = 4 [pid 5524] <... exit_group resumed>) = ? [pid 5523] <... pwritev resumed>) = 1114112 [pid 5531] <... write resumed>) = 4 [pid 5529] <... write resumed>) = 2097152 [pid 5528] unlink("./file1" [ 113.031169][ T5530] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5523] exit_group(0) = ? [pid 5531] close(3 [pid 5529] munmap(0x7f241a43b000, 2097152 [pid 5531] <... close resumed>) = 0 [pid 5529] <... munmap resumed>) = 0 [pid 5528] <... unlink resumed>) = 0 [pid 5531] symlink("/dev/binderfs", "./binderfs" [pid 5529] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5528] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5531] <... symlink resumed>) = 0 [pid 5529] <... openat resumed>) = 4 [pid 5531] memfd_create("syzkaller", 0 [pid 5529] ioctl(4, LOOP_SET_FD, 3 [pid 5531] <... memfd_create resumed>) = 3 [pid 5531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5529] <... ioctl resumed>) = 0 [pid 5531] <... mmap resumed>) = 0x7f241a43b000 [pid 5529] close(3) = 0 [pid 5524] +++ exited with 0 +++ [pid 5529] mkdir("./file0", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5524, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5529] <... mkdir resumed>) = 0 [pid 5063] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5529] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, [pid 5522] <... pwritev resumed>) = 1114112 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5522] exit_group(0 [pid 5063] getdents64(3, [pid 5522] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./36/binderfs") = 0 [ 113.137645][ T5529] loop2: detected capacity change from 0 to 4096 [pid 5063] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5529] <... mount resumed>) = 0 [pid 5523] +++ exited with 0 +++ [pid 5063] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5529] <... openat resumed>) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5523, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5063] lstat("./36/file0", [pid 5529] chdir("./file0" [pid 5064] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5529] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5529] ioctl(4, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5529] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5529] close(4 [pid 5064] fstat(3, [pid 5063] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5531] <... write resumed>) = 2097152 [pid 5529] <... close resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5531] munmap(0x7f241a43b000, 2097152 [pid 5529] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5531] <... munmap resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5531] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5529] <... openat resumed>) = 4 [pid 5522] +++ exited with 0 +++ [pid 5064] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(4, [pid 5531] <... openat resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5522, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5529] unlink("./file1" [pid 5064] lstat("./36/binderfs", [pid 5531] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 113.251734][ T5532] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] unlink("./36/binderfs" [pid 5531] <... ioctl resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] getdents64(4, [pid 5531] close(3 [pid 5529] <... unlink resumed>) = 0 [pid 5068] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] <... close resumed>) = 0 [pid 5529] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5531] mkdir("./file0", 0777 [pid 5068] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, [pid 5531] <... mkdir resumed>) = 0 [pid 5068] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] close(4 [pid 5068] unlink("./37/binderfs") = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 113.307669][ T5531] loop3: detected capacity change from 0 to 4096 [pid 5063] rmdir("./36/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./36") = 0 [pid 5063] mkdir("./37", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5531] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 5531] <... openat resumed>) = 3 [pid 5528] <... pwritev resumed>) = 1114112 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5531] chdir("./file0" [pid 5528] exit_group(0 [pid 5531] <... chdir resumed>) = 0 [pid 5528] <... exit_group resumed>) = ? [pid 5064] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5531] ioctl(4, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5531] <... ioctl resumed>) = 0 [ 113.378483][ T5533] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] lstat("./36/file0", [pid 5531] close(4) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5534 ./strace-static-x86_64: Process 5534 attached [pid 5531] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5534] chdir("./37" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5531] <... openat resumed>) = 4 [pid 5534] <... chdir resumed>) = 0 [pid 5531] unlink("./file1" [pid 5064] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... openat resumed>) = 4 [pid 5534] <... prctl resumed>) = 0 [pid 5064] fstat(4, [pid 5534] setpgid(0, 0 [pid 5531] <... unlink resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5534] <... setpgid resumed>) = 0 [pid 5531] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] getdents64(4, [pid 5534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5534] write(3, "1000", 4 [pid 5064] getdents64(4, [pid 5534] <... write resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5534] close(3 [pid 5064] close(4 [pid 5534] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5534] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = 0 [pid 5064] rmdir("./36/file0" [pid 5534] <... symlink resumed>) = 0 [pid 5068] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5534] memfd_create("syzkaller", 0 [pid 5064] getdents64(3, [pid 5534] <... memfd_create resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] lstat("./37/file0", [pid 5534] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(3 [pid 5068] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 5534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] close(4 [pid 5064] rmdir("./36" [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./37/file0") = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] mkdir("./37", 0777 [pid 5068] close(3) = 0 [pid 5068] rmdir("./37" [pid 5064] <... mkdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] mkdir("./38", 0777) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5068] close(3) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5535 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5536 ./strace-static-x86_64: Process 5536 attached ./strace-static-x86_64: Process 5535 attached [pid 5536] chdir("./37" [pid 5535] chdir("./38") = 0 [pid 5536] <... chdir resumed>) = 0 [pid 5535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5535] setpgid(0, 0) = 0 [pid 5536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5528] +++ exited with 0 +++ [pid 5535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5528, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5536] <... prctl resumed>) = 0 [pid 5535] <... openat resumed>) = 3 [pid 5535] write(3, "1000", 4 [pid 5536] setpgid(0, 0) = 0 [pid 5535] <... write resumed>) = 4 [pid 5067] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5535] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... openat resumed>) = 3 [pid 5535] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5536] write(3, "1000", 4 [pid 5535] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... openat resumed>) = 3 [pid 5536] <... write resumed>) = 4 [pid 5535] <... symlink resumed>) = 0 [pid 5067] fstat(3, [pid 5536] close(3 [pid 5535] memfd_create("syzkaller", 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5536] <... close resumed>) = 0 [pid 5535] <... memfd_create resumed>) = 3 [pid 5067] getdents64(3, [pid 5536] symlink("/dev/binderfs", "./binderfs" [pid 5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5536] <... symlink resumed>) = 0 [pid 5535] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] memfd_create("syzkaller", 0 [pid 5534] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... memfd_create resumed>) = 3 [pid 5067] lstat("./37/binderfs", [pid 5536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5536] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] unlink("./37/binderfs") = 0 [pid 5067] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5529] <... pwritev resumed>) = 1114112 [pid 5529] exit_group(0) = ? [pid 5534] munmap(0x7f241a43b000, 2097152) = 0 [pid 5534] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5534] ioctl(4, LOOP_SET_FD, 3 [pid 5536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5534] <... ioctl resumed>) = 0 [pid 5534] close(3) = 0 [pid 5534] mkdir("./file0", 0777) = 0 [pid 5534] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5535] <... write resumed>) = 2097152 [ 113.657401][ T5534] loop0: detected capacity change from 0 to 4096 [pid 5535] munmap(0x7f241a43b000, 2097152) = 0 [pid 5535] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5535] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5535] close(3 [pid 5536] <... write resumed>) = 2097152 [pid 5534] <... mount resumed>) = 0 [pid 5529] +++ exited with 0 +++ [pid 5067] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] munmap(0x7f241a43b000, 2097152 [pid 5535] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5529, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5536] <... munmap resumed>) = 0 [pid 5535] mkdir("./file0", 0777 [pid 5067] lstat("./37/file0", [pid 5536] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5535] <... mkdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5536] <... openat resumed>) = 4 [pid 5535] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... ioctl resumed>) = 0 [pid 5534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5534] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5534] chdir("./file0" [pid 5067] fstat(4, [pid 5065] fstat(3, [pid 5534] <... chdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5534] ioctl(4, LOOP_CLR_FD [pid 5067] getdents64(4, [pid 5065] getdents64(3, [pid 5534] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5534] close(4 [pid 5067] getdents64(4, [pid 5065] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] close(3 [pid 5534] <... close resumed>) = 0 [pid 5536] <... close resumed>) = 0 [pid 5534] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] mkdir("./file0", 0777 [pid 5534] <... openat resumed>) = 4 [pid 5067] close(4 [pid 5065] lstat("./38/binderfs", [pid 5536] <... mkdir resumed>) = 0 [pid 5534] unlink("./file1" [pid 5067] <... close resumed>) = 0 [ 113.728655][ T5535] loop5: detected capacity change from 0 to 4096 [ 113.747074][ T5537] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.758691][ T5536] loop1: detected capacity change from 0 to 4096 [pid 5536] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5535] <... mount resumed>) = 0 [pid 5534] <... unlink resumed>) = 0 [pid 5067] rmdir("./37/file0" [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5534] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5535] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] unlink("./38/binderfs" [pid 5535] chdir("./file0" [pid 5067] getdents64(3, [pid 5065] <... unlink resumed>) = 0 [pid 5535] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5535] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 5535] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5535] close(4 [pid 5067] rmdir("./37" [pid 5535] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5535] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] mkdir("./38", 0777) = 0 [pid 5535] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5535] unlink("./file1" [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5535] <... unlink resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5540 [ 113.786764][ T5538] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5535] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5540 attached [pid 5540] chdir("./38") = 0 [pid 5540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5540] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5540] <... setpgid resumed>) = 0 [pid 5540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5540] write(3, "1000", 4) = 4 [pid 5540] close(3) = 0 [pid 5540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5540] memfd_create("syzkaller", 0) = 3 [pid 5540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5536] <... mount resumed>) = 0 [pid 5536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5536] chdir("./file0") = 0 [pid 5536] ioctl(4, LOOP_CLR_FD) = 0 [pid 5531] <... pwritev resumed>) = 1114112 [pid 5536] close(4 [pid 5531] exit_group(0 [pid 5536] <... close resumed>) = 0 [pid 5531] <... exit_group resumed>) = ? [pid 5536] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5536] <... openat resumed>) = 4 [pid 5065] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] unlink("./file1" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./38/file0", [pid 5536] <... unlink resumed>) = 0 [ 113.874232][ T5539] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5536] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5531] +++ exited with 0 +++ [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5531, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5066] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] close(4 [pid 5066] fstat(3, [pid 5065] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] rmdir("./38/file0" [pid 5066] getdents64(3, [pid 5065] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(3, [pid 5066] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 5066] lstat("./37/binderfs", [pid 5065] <... close resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./37/binderfs" [pid 5065] rmdir("./38" [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./39", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5541 [pid 5066] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5541 attached [pid 5541] chdir("./39") = 0 [pid 5541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5541] setpgid(0, 0) = 0 [pid 5541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5541] write(3, "1000", 4) = 4 [pid 5066] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5541] close(3) = 0 [pid 5541] symlink("/dev/binderfs", "./binderfs" [pid 5540] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5541] <... symlink resumed>) = 0 [pid 5541] memfd_create("syzkaller", 0 [pid 5066] lstat("./37/file0", [pid 5541] <... memfd_create resumed>) = 3 [pid 5540] munmap(0x7f241a43b000, 2097152 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5540] <... munmap resumed>) = 0 [pid 5066] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5540] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5540] <... openat resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, [pid 5540] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./37/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5540] <... ioctl resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5540] close(3 [pid 5066] rmdir("./37" [pid 5540] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./38", 0777 [pid 5540] mkdir("./file0", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5540] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5540] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5534] <... pwritev resumed>) = 1114112 [pid 5066] <... openat resumed>) = 3 [pid 5534] exit_group(0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5534] <... exit_group resumed>) = ? [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [ 114.109795][ T5540] loop4: detected capacity change from 0 to 4096 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5542 attached , child_tidptr=0x5555559b05d0) = 5542 [pid 5542] chdir("./38") = 0 [pid 5542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5542] setpgid(0, 0) = 0 [pid 5542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5540] <... mount resumed>) = 0 [pid 5540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5540] chdir("./file0") = 0 [pid 5542] <... openat resumed>) = 3 [pid 5542] write(3, "1000", 4 [pid 5540] ioctl(4, LOOP_CLR_FD) = 0 [pid 5542] <... write resumed>) = 4 [pid 5540] close(4 [pid 5542] close(3 [pid 5540] <... close resumed>) = 0 [pid 5535] <... pwritev resumed>) = 1114112 [pid 5542] <... close resumed>) = 0 [pid 5540] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5535] exit_group(0 [pid 5542] symlink("/dev/binderfs", "./binderfs" [pid 5540] <... openat resumed>) = 4 [pid 5536] <... pwritev resumed>) = 1114112 [pid 5535] <... exit_group resumed>) = ? [ 114.188747][ T5543] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5542] <... symlink resumed>) = 0 [pid 5541] <... write resumed>) = 2097152 [pid 5540] unlink("./file1" [pid 5536] exit_group(0 [pid 5542] memfd_create("syzkaller", 0 [pid 5541] munmap(0x7f241a43b000, 2097152 [pid 5536] <... exit_group resumed>) = ? [pid 5541] <... munmap resumed>) = 0 [pid 5542] <... memfd_create resumed>) = 3 [pid 5542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5541] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5540] <... unlink resumed>) = 0 [pid 5540] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5542] <... mmap resumed>) = 0x7f241a43b000 [pid 5541] <... openat resumed>) = 4 [pid 5541] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5534] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5534, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5541] close(3) = 0 [pid 5063] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5541] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5541] <... mkdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5541] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5536] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./37/binderfs", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5536, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./37/binderfs") = 0 [ 114.297189][ T5541] loop2: detected capacity change from 0 to 4096 [pid 5063] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5541] <... mount resumed>) = 0 [pid 5541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5535] +++ exited with 0 +++ [pid 5064] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5541] <... openat resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5535, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5541] chdir("./file0" [pid 5064] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5541] <... chdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5541] ioctl(4, LOOP_CLR_FD [pid 5068] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(3, [pid 5541] <... ioctl resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5541] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5541] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(3, [pid 5542] <... write resumed>) = 2097152 [pid 5541] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = 0 [pid 5542] munmap(0x7f241a43b000, 2097152 [pid 5541] <... openat resumed>) = 4 [pid 5068] fstat(3, [pid 5064] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5541] unlink("./file1" [pid 5542] <... munmap resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5542] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5541] <... unlink resumed>) = 0 [ 114.343942][ T5544] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] getdents64(3, [pid 5542] <... openat resumed>) = 4 [pid 5541] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] lstat("./37/binderfs", [pid 5063] lstat("./37/file0", [pid 5542] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5542] <... ioctl resumed>) = 0 [pid 5068] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./37/binderfs" [pid 5542] close(3 [pid 5063] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] lstat("./38/binderfs", [pid 5542] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5542] mkdir("./file0", 0777 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] unlink("./38/binderfs" [pid 5063] <... openat resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 5063] fstat(4, [pid 5068] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5542] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5542] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./37/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./37") = 0 [pid 5063] mkdir("./38", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [ 114.417917][ T5542] loop3: detected capacity change from 0 to 4096 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5545 ./strace-static-x86_64: Process 5545 attached [pid 5545] chdir("./38" [pid 5068] <... umount2 resumed>) = 0 [pid 5545] <... chdir resumed>) = 0 [pid 5542] <... mount resumed>) = 0 [pid 5545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5545] setpgid(0, 0 [pid 5542] chdir("./file0" [pid 5545] <... setpgid resumed>) = 0 [pid 5542] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5542] ioctl(4, LOOP_CLR_FD) = 0 [pid 5064] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5542] close(4) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./37/file0", [pid 5542] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5545] <... openat resumed>) = 3 [pid 5068] lstat("./38/file0", [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5545] write(3, "1000", 4 [pid 5542] <... openat resumed>) = 4 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5545] <... write resumed>) = 4 [pid 5542] unlink("./file1" [pid 5068] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5545] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 4 [pid 5545] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5064] fstat(4, [pid 5545] symlink("/dev/binderfs", "./binderfs" [pid 5068] fstat(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5545] <... symlink resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5545] memfd_create("syzkaller", 0 [pid 5068] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5545] <... memfd_create resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 114.497732][ T5546] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5545] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5068] close(4 [pid 5064] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] rmdir("./37/file0" [pid 5068] rmdir("./38/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5068] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5068] close(3 [pid 5064] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] rmdir("./37" [pid 5068] rmdir("./38" [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] mkdir("./38", 0777 [pid 5068] mkdir("./39", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5542] <... unlink resumed>) = 0 [pid 5068] close(3 [pid 5064] <... close resumed>) = 0 [pid 5542] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5547 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5548 ./strace-static-x86_64: Process 5547 attached [pid 5547] chdir("./38"./strace-static-x86_64: Process 5548 attached [pid 5548] chdir("./39" [pid 5547] <... chdir resumed>) = 0 [pid 5548] <... chdir resumed>) = 0 [pid 5547] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5547] <... prctl resumed>) = 0 [pid 5548] <... prctl resumed>) = 0 [pid 5547] setpgid(0, 0 [pid 5548] setpgid(0, 0 [pid 5547] <... setpgid resumed>) = 0 [pid 5548] <... setpgid resumed>) = 0 [pid 5547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5547] <... openat resumed>) = 3 [pid 5548] <... openat resumed>) = 3 [pid 5547] write(3, "1000", 4 [pid 5548] write(3, "1000", 4 [pid 5547] <... write resumed>) = 4 [pid 5548] <... write resumed>) = 4 [pid 5547] close(3 [pid 5548] close(3 [pid 5547] <... close resumed>) = 0 [pid 5548] <... close resumed>) = 0 [pid 5547] symlink("/dev/binderfs", "./binderfs" [pid 5548] symlink("/dev/binderfs", "./binderfs" [pid 5547] <... symlink resumed>) = 0 [pid 5548] <... symlink resumed>) = 0 [pid 5547] memfd_create("syzkaller", 0 [pid 5548] memfd_create("syzkaller", 0 [pid 5547] <... memfd_create resumed>) = 3 [pid 5548] <... memfd_create resumed>) = 3 [pid 5547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5547] <... mmap resumed>) = 0x7f241a43b000 [pid 5548] <... mmap resumed>) = 0x7f241a43b000 [pid 5545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5540] <... pwritev resumed>) = 1114112 [pid 5540] exit_group(0) = ? [pid 5545] <... write resumed>) = 2097152 [pid 5545] munmap(0x7f241a43b000, 2097152) = 0 [pid 5545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5545] ioctl(4, LOOP_SET_FD, 3 [pid 5541] <... pwritev resumed>) = 1114112 [pid 5541] exit_group(0) = ? [pid 5545] <... ioctl resumed>) = 0 [pid 5545] close(3 [pid 5548] <... write resumed>) = 2097152 [pid 5545] <... close resumed>) = 0 [pid 5545] mkdir("./file0", 0777) = 0 [pid 5545] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5547] <... write resumed>) = 2097152 [pid 5547] munmap(0x7f241a43b000, 2097152) = 0 [pid 5548] munmap(0x7f241a43b000, 2097152) = 0 [ 114.745248][ T5545] loop0: detected capacity change from 0 to 4096 [pid 5547] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5548] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5547] <... openat resumed>) = 4 [pid 5548] <... openat resumed>) = 4 [pid 5547] ioctl(4, LOOP_SET_FD, 3 [pid 5548] ioctl(4, LOOP_SET_FD, 3 [pid 5547] <... ioctl resumed>) = 0 [pid 5545] <... mount resumed>) = 0 [pid 5545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5545] chdir("./file0") = 0 [pid 5545] ioctl(4, LOOP_CLR_FD [pid 5548] <... ioctl resumed>) = 0 [pid 5547] close(3 [pid 5545] <... ioctl resumed>) = 0 [pid 5542] <... pwritev resumed>) = 1114112 [pid 5548] close(3 [pid 5547] <... close resumed>) = 0 [pid 5545] close(4 [pid 5542] exit_group(0 [pid 5548] <... close resumed>) = 0 [pid 5547] mkdir("./file0", 0777 [pid 5545] <... close resumed>) = 0 [pid 5542] <... exit_group resumed>) = ? [pid 5541] +++ exited with 0 +++ [pid 5540] +++ exited with 0 +++ [pid 5548] mkdir("./file0", 0777 [pid 5547] <... mkdir resumed>) = 0 [pid 5545] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5540, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5541, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 114.809177][ T5547] loop1: detected capacity change from 0 to 4096 [ 114.810712][ T5549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.817252][ T5548] loop5: detected capacity change from 0 to 4096 [pid 5548] <... mkdir resumed>) = 0 [pid 5547] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5545] <... openat resumed>) = 4 [pid 5548] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5545] unlink("./file1" [pid 5067] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5067] fstat(3, [pid 5065] fstat(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5545] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] getdents64(3, [pid 5545] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./38/binderfs", [pid 5065] lstat("./39/binderfs", [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./38/binderfs" [pid 5065] unlink("./39/binderfs" [pid 5548] <... mount resumed>) = 0 [pid 5547] <... mount resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5067] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 114.923769][ T5550] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.934251][ T5551] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5547] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5542] +++ exited with 0 +++ [pid 5548] <... openat resumed>) = 3 [pid 5547] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5542, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5548] chdir("./file0" [pid 5547] chdir("./file0" [pid 5066] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] <... chdir resumed>) = 0 [pid 5547] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5548] ioctl(4, LOOP_CLR_FD [pid 5547] ioctl(4, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5548] <... ioctl resumed>) = 0 [pid 5547] <... ioctl resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5548] close(4 [pid 5547] close(4 [pid 5066] fstat(3, [pid 5548] <... close resumed>) = 0 [pid 5547] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5547] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./38/binderfs" [pid 5547] <... openat resumed>) = 4 [pid 5066] <... unlink resumed>) = 0 [pid 5548] <... openat resumed>) = 4 [pid 5547] unlink("./file1" [pid 5066] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] unlink("./file1" [pid 5547] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5548] <... unlink resumed>) = 0 [pid 5547] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5548] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./39/file0", [pid 5067] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./38/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(4, [pid 5067] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5067] fstat(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5067] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] close(4 [pid 5067] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./39/file0" [pid 5067] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5067] rmdir("./38/file0" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] close(3 [pid 5067] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./39" [pid 5067] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] mkdir("./40", 0777 [pid 5067] rmdir("./38" [pid 5065] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] mkdir("./39", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5552 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5553 ./strace-static-x86_64: Process 5552 attached [pid 5552] chdir("./40") = 0 ./strace-static-x86_64: Process 5553 attached [pid 5552] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5553] chdir("./39" [pid 5552] <... prctl resumed>) = 0 [pid 5553] <... chdir resumed>) = 0 [pid 5552] setpgid(0, 0 [pid 5066] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5553] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5552] <... setpgid resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5553] <... prctl resumed>) = 0 [pid 5552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] lstat("./38/file0", [pid 5553] setpgid(0, 0 [pid 5552] <... openat resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5553] <... setpgid resumed>) = 0 [pid 5552] write(3, "1000", 4 [pid 5066] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5552] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5553] <... openat resumed>) = 3 [pid 5552] close(3 [pid 5066] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5553] write(3, "1000", 4 [pid 5552] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5553] <... write resumed>) = 4 [pid 5552] symlink("/dev/binderfs", "./binderfs" [pid 5066] fstat(4, [pid 5553] close(3 [pid 5552] <... symlink resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5553] <... close resumed>) = 0 [pid 5552] memfd_create("syzkaller", 0 [pid 5066] getdents64(4, [pid 5553] symlink("/dev/binderfs", "./binderfs" [pid 5552] <... memfd_create resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5553] <... symlink resumed>) = 0 [pid 5552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] getdents64(4, [pid 5553] memfd_create("syzkaller", 0 [pid 5552] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5553] <... memfd_create resumed>) = 3 [pid 5552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] close(4 [pid 5545] <... pwritev resumed>) = 1114112 [pid 5553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 5553] <... mmap resumed>) = 0x7f241a43b000 [pid 5545] exit_group(0 [pid 5066] rmdir("./38/file0" [pid 5545] <... exit_group resumed>) = ? [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./38") = 0 [pid 5066] mkdir("./39", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5554 ./strace-static-x86_64: Process 5554 attached [pid 5554] chdir("./39") = 0 [pid 5554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5554] setpgid(0, 0) = 0 [pid 5554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5554] write(3, "1000", 4) = 4 [pid 5554] close(3) = 0 [pid 5554] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5554] memfd_create("syzkaller", 0) = 3 [pid 5554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5552] <... write resumed>) = 2097152 [pid 5545] +++ exited with 0 +++ [pid 5552] munmap(0x7f241a43b000, 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5545, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5553] <... write resumed>) = 2097152 [pid 5552] <... munmap resumed>) = 0 [pid 5553] munmap(0x7f241a43b000, 2097152 [pid 5552] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5553] <... munmap resumed>) = 0 [pid 5552] <... openat resumed>) = 4 [pid 5552] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5553] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5552] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5553] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5553] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./38/binderfs") = 0 [pid 5063] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5552] close(3) = 0 [pid 5552] mkdir("./file0", 0777) = 0 [pid 5552] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5553] <... ioctl resumed>) = 0 [ 115.309644][ T5552] loop2: detected capacity change from 0 to 4096 [ 115.323420][ T5553] loop4: detected capacity change from 0 to 4096 [pid 5553] close(3) = 0 [pid 5553] mkdir("./file0", 0777) = 0 [pid 5553] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5554] <... write resumed>) = 2097152 [pid 5554] munmap(0x7f241a43b000, 2097152) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5554] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5063] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5554] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5553] <... mount resumed>) = 0 [pid 5552] <... mount resumed>) = 0 [pid 5063] lstat("./38/file0", [pid 5553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5552] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5553] <... openat resumed>) = 3 [pid 5552] <... openat resumed>) = 3 [pid 5547] <... pwritev resumed>) = 1114112 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5553] chdir("./file0" [pid 5552] chdir("./file0" [pid 5547] exit_group(0 [pid 5063] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5553] <... chdir resumed>) = 0 [pid 5552] <... chdir resumed>) = 0 [pid 5547] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5553] ioctl(4, LOOP_CLR_FD [pid 5552] ioctl(4, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5553] <... ioctl resumed>) = 0 [pid 5552] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5553] close(4 [pid 5552] close(4 [pid 5063] fstat(4, [pid 5553] <... close resumed>) = 0 [pid 5552] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5553] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5552] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] getdents64(4, [pid 5554] <... ioctl resumed>) = 0 [pid 5553] <... openat resumed>) = 4 [pid 5552] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5554] close(3 [pid 5553] unlink("./file1" [pid 5552] unlink("./file1" [pid 5063] getdents64(4, [pid 5554] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5554] mkdir("./file0", 0777 [pid 5063] close(4 [pid 5554] <... mkdir resumed>) = 0 [pid 5548] <... pwritev resumed>) = 1114112 [pid 5063] <... close resumed>) = 0 [pid 5554] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5548] exit_group(0 [pid 5063] rmdir("./38/file0" [pid 5553] <... unlink resumed>) = 0 [pid 5548] <... exit_group resumed>) = ? [pid 5063] <... rmdir resumed>) = 0 [ 115.413518][ T5554] loop3: detected capacity change from 0 to 4096 [ 115.420535][ T5556] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.421913][ T5555] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5553] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./38") = 0 [pid 5063] mkdir("./39", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5557 ./strace-static-x86_64: Process 5557 attached [pid 5557] chdir("./39") = 0 [pid 5557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5557] setpgid(0, 0) = 0 [pid 5557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5557] write(3, "1000", 4) = 4 [pid 5557] close(3) = 0 [pid 5557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5557] memfd_create("syzkaller", 0) = 3 [pid 5554] <... mount resumed>) = 0 [pid 5557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5557] <... mmap resumed>) = 0x7f241a43b000 [pid 5554] <... openat resumed>) = 3 [pid 5554] chdir("./file0" [pid 5552] <... unlink resumed>) = 0 [pid 5554] <... chdir resumed>) = 0 [pid 5552] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5554] ioctl(4, LOOP_CLR_FD) = 0 [ 115.525746][ T5558] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5554] close(4) = 0 [pid 5554] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5554] unlink("./file1") = 0 [pid 5554] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5547] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5547, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5548, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] fstat(3, [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5064] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] unlink("./39/binderfs" [pid 5064] lstat("./38/binderfs", [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./38/binderfs") = 0 [pid 5064] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5557] <... write resumed>) = 2097152 [pid 5557] munmap(0x7f241a43b000, 2097152 [pid 5068] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5557] <... munmap resumed>) = 0 [pid 5068] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5557] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5557] <... openat resumed>) = 4 [pid 5068] lstat("./39/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5557] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./38/file0", [pid 5068] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] fstat(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] fstat(4, [pid 5068] getdents64(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5068] close(4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5557] <... ioctl resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5557] close(3 [pid 5068] rmdir("./39/file0" [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5557] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5557] mkdir("./file0", 0777 [pid 5068] getdents64(3, [pid 5064] close(4 [pid 5557] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5557] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] close(3 [pid 5064] rmdir("./38/file0" [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./39" [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5068] mkdir("./40", 0777 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] close(3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] rmdir("./38" [ 115.780055][ T5557] loop0: detected capacity change from 0 to 4096 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] <... rmdir resumed>) = 0 [pid 5068] close(3 [pid 5064] mkdir("./39", 0777 [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5557] <... mount resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5560 [pid 5064] <... openat resumed>) = 3 [pid 5557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5557] <... openat resumed>) = 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5557] chdir("./file0" [pid 5064] close(3 [pid 5557] <... chdir resumed>) = 0 [pid 5557] ioctl(4, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5557] <... ioctl resumed>) = 0 [pid 5553] <... pwritev resumed>) = 1114112 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5557] close(4 [pid 5553] exit_group(0 [pid 5557] <... close resumed>) = 0 [pid 5553] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5560 attached [pid 5557] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5561 [pid 5560] chdir("./40" [pid 5557] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5561 attached [pid 5560] <... chdir resumed>) = 0 [pid 5557] unlink("./file1" [pid 5561] chdir("./39" [pid 5560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5561] <... chdir resumed>) = 0 [pid 5560] <... prctl resumed>) = 0 [pid 5560] setpgid(0, 0 [pid 5561] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5560] <... setpgid resumed>) = 0 [pid 5561] <... prctl resumed>) = 0 [pid 5561] setpgid(0, 0 [pid 5560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5561] <... setpgid resumed>) = 0 [pid 5561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5560] <... openat resumed>) = 3 [pid 5561] <... openat resumed>) = 3 [pid 5560] write(3, "1000", 4 [pid 5561] write(3, "1000", 4 [pid 5560] <... write resumed>) = 4 [pid 5561] <... write resumed>) = 4 [pid 5560] close(3 [pid 5561] close(3 [pid 5560] <... close resumed>) = 0 [pid 5561] <... close resumed>) = 0 [pid 5560] symlink("/dev/binderfs", "./binderfs" [pid 5561] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5560] <... symlink resumed>) = 0 [pid 5561] memfd_create("syzkaller", 0 [pid 5560] memfd_create("syzkaller", 0 [pid 5561] <... memfd_create resumed>) = 3 [pid 5560] <... memfd_create resumed>) = 3 [pid 5561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 115.856883][ T5559] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5557] <... unlink resumed>) = 0 [pid 5557] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5554] <... pwritev resumed>) = 1114112 [pid 5554] exit_group(0) = ? [pid 5553] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5553, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./39/binderfs") = 0 [pid 5067] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5552] <... pwritev resumed>) = 1114112 [pid 5067] <... umount2 resumed>) = 0 [pid 5552] exit_group(0) = ? [pid 5067] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5561] <... write resumed>) = 2097152 [pid 5560] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5560] munmap(0x7f241a43b000, 2097152 [pid 5067] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5560] <... munmap resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5561] munmap(0x7f241a43b000, 2097152 [pid 5560] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] fstat(4, [pid 5561] <... munmap resumed>) = 0 [pid 5560] <... openat resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5560] ioctl(4, LOOP_SET_FD, 3 [pid 5561] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] getdents64(4, [pid 5561] <... openat resumed>) = 4 [pid 5561] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5560] <... ioctl resumed>) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5560] close(3 [pid 5067] rmdir("./39/file0" [pid 5560] <... close resumed>) = 0 [pid 5560] mkdir("./file0", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5561] <... ioctl resumed>) = 0 [pid 5560] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5561] close(3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5560] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5561] <... close resumed>) = 0 [pid 5561] mkdir("./file0", 0777 [pid 5067] close(3 [pid 5561] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5561] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] rmdir("./39") = 0 [pid 5067] mkdir("./40", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5554] +++ exited with 0 +++ [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5554, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 116.092742][ T5560] loop5: detected capacity change from 0 to 4096 [ 116.093551][ T5561] loop1: detected capacity change from 0 to 4096 [pid 5067] close(3 [pid 5066] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./39/binderfs" [pid 5067] <... close resumed>) = 0 [pid 5560] <... mount resumed>) = 0 [pid 5552] +++ exited with 0 +++ [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5552, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./40/binderfs") = 0 [pid 5065] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5560] <... openat resumed>) = 3 [pid 5560] chdir("./file0" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5563 [pid 5560] <... chdir resumed>) = 0 [pid 5560] ioctl(4, LOOP_CLR_FD) = 0 [pid 5560] close(4) = 0 [pid 5560] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5560] unlink("./file1" [pid 5561] <... mount resumed>) = 0 [pid 5561] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5561] chdir("./file0") = 0 [pid 5561] ioctl(4, LOOP_CLR_FD) = 0 [pid 5560] <... unlink resumed>) = 0 [pid 5561] close(4 [pid 5560] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5561] <... close resumed>) = 0 [pid 5561] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000./strace-static-x86_64: Process 5563 attached ) = 4 [pid 5563] chdir("./40" [pid 5561] unlink("./file1" [pid 5563] <... chdir resumed>) = 0 [pid 5563] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5563] setpgid(0, 0) = 0 [pid 5563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 116.164536][ T5562] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.198441][ T5564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5563] write(3, "1000", 4) = 4 [pid 5563] close(3) = 0 [pid 5563] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5563] memfd_create("syzkaller", 0) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5561] <... unlink resumed>) = 0 [pid 5561] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./40/file0", [pid 5066] lstat("./39/file0", [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5065] fstat(4, [pid 5066] fstat(4, [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5066] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5066] close(4 [pid 5065] <... close resumed>) = 0 [pid 5557] <... pwritev resumed>) = 1114112 [pid 5066] <... close resumed>) = 0 [pid 5065] rmdir("./40/file0" [pid 5557] exit_group(0 [pid 5066] rmdir("./39/file0" [pid 5557] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5066] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5066] close(3 [pid 5065] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] rmdir("./40" [pid 5066] rmdir("./39" [pid 5065] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] mkdir("./41", 0777 [pid 5066] mkdir("./40", 0777) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5065] close(3 [pid 5066] <... close resumed>) = 0 [pid 5563] <... write resumed>) = 2097152 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5563] munmap(0x7f241a43b000, 2097152 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5565 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5566 ./strace-static-x86_64: Process 5565 attached [pid 5563] <... munmap resumed>) = 0 [pid 5563] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5566 attached ) = 4 [pid 5565] chdir("./40" [pid 5566] chdir("./41" [pid 5563] ioctl(4, LOOP_SET_FD, 3 [pid 5565] <... chdir resumed>) = 0 [pid 5566] <... chdir resumed>) = 0 [pid 5566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5566] setpgid(0, 0) = 0 [pid 5566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5566] write(3, "1000", 4 [pid 5565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5566] <... write resumed>) = 4 [pid 5565] <... prctl resumed>) = 0 [pid 5566] close(3 [pid 5565] setpgid(0, 0 [pid 5566] <... close resumed>) = 0 [pid 5565] <... setpgid resumed>) = 0 [pid 5566] symlink("/dev/binderfs", "./binderfs" [pid 5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5566] <... symlink resumed>) = 0 [pid 5565] <... openat resumed>) = 3 [pid 5566] memfd_create("syzkaller", 0 [pid 5565] write(3, "1000", 4 [pid 5563] <... ioctl resumed>) = 0 [pid 5566] <... memfd_create resumed>) = 3 [pid 5565] <... write resumed>) = 4 [pid 5563] close(3 [pid 5566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5565] close(3 [pid 5563] <... close resumed>) = 0 [pid 5565] <... close resumed>) = 0 [pid 5563] mkdir("./file0", 0777 [pid 5565] symlink("/dev/binderfs", "./binderfs" [pid 5563] <... mkdir resumed>) = 0 [pid 5565] <... symlink resumed>) = 0 [pid 5563] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5565] memfd_create("syzkaller", 0) = 3 [pid 5565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 116.433168][ T5563] loop4: detected capacity change from 0 to 4096 [pid 5566] <... mmap resumed>) = 0x7f241a43b000 [pid 5557] +++ exited with 0 +++ [pid 5565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5557, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./39/binderfs") = 0 [pid 5063] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5563] <... mount resumed>) = 0 [pid 5563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5563] chdir("./file0") = 0 [pid 5563] ioctl(4, LOOP_CLR_FD) = 0 [pid 5563] close(4) = 0 [pid 5563] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 116.523489][ T5567] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5563] unlink("./file1" [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5563] <... unlink resumed>) = 0 [pid 5063] lstat("./39/file0", [pid 5563] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5565] <... write resumed>) = 2097152 [pid 5063] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] munmap(0x7f241a43b000, 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5565] <... munmap resumed>) = 0 [pid 5565] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 5565] <... openat resumed>) = 4 [pid 5565] ioctl(4, LOOP_SET_FD, 3 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5565] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5565] close(3 [pid 5566] <... write resumed>) = 2097152 [pid 5561] <... pwritev resumed>) = 1114112 [pid 5560] <... pwritev resumed>) = 1114112 [pid 5063] <... close resumed>) = 0 [pid 5565] <... close resumed>) = 0 [pid 5561] exit_group(0 [pid 5560] exit_group(0 [pid 5063] rmdir("./39/file0" [pid 5565] mkdir("./file0", 0777 [pid 5561] <... exit_group resumed>) = ? [pid 5560] <... exit_group resumed>) = ? [pid 5566] munmap(0x7f241a43b000, 2097152 [pid 5565] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5565] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5566] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5566] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5566] <... openat resumed>) = 4 [pid 5063] close(3 [ 116.625950][ T5565] loop3: detected capacity change from 0 to 4096 [pid 5566] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5566] <... ioctl resumed>) = 0 [pid 5063] rmdir("./39" [pid 5566] close(3) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5566] mkdir("./file0", 0777 [pid 5063] mkdir("./40", 0777 [pid 5566] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5566] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5565] <... mount resumed>) = 0 [pid 5561] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5561, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5565] <... openat resumed>) = 3 [pid 5064] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5565] chdir("./file0" [ 116.685135][ T5566] loop2: detected capacity change from 0 to 4096 [ 116.716634][ T5568] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5566] <... mount resumed>) = 0 [pid 5565] <... chdir resumed>) = 0 [pid 5064] fstat(3, [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5570 [pid 5566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5565] ioctl(4, LOOP_CLR_FD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5566] <... openat resumed>) = 3 [pid 5565] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, ./strace-static-x86_64: Process 5570 attached 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5570] chdir("./40" [pid 5566] chdir("./file0" [pid 5565] close(4 [pid 5064] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] lstat("./39/binderfs", [pid 5570] <... prctl resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5570] setpgid(0, 0 [pid 5064] unlink("./39/binderfs" [pid 5570] <... setpgid resumed>) = 0 [pid 5566] <... chdir resumed>) = 0 [pid 5565] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] <... openat resumed>) = 3 [pid 5566] ioctl(4, LOOP_CLR_FD [pid 5565] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5560] +++ exited with 0 +++ [pid 5570] write(3, "1000", 4 [pid 5566] <... ioctl resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5560, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5570] <... write resumed>) = 4 [pid 5570] close(3 [pid 5566] close(4 [pid 5565] <... openat resumed>) = 4 [pid 5570] <... close resumed>) = 0 [pid 5566] <... close resumed>) = 0 [pid 5565] unlink("./file1" [pid 5570] symlink("/dev/binderfs", "./binderfs" [pid 5566] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5570] <... symlink resumed>) = 0 [pid 5570] memfd_create("syzkaller", 0) = 3 [pid 5068] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5565] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5570] <... mmap resumed>) = 0x7f241a43b000 [ 116.746781][ T5569] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5566] <... openat resumed>) = 4 [pid 5565] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5566] unlink("./file1" [pid 5563] <... pwritev resumed>) = 1114112 [pid 5068] <... openat resumed>) = 3 [pid 5563] exit_group(0) = ? [pid 5566] <... unlink resumed>) = 0 [pid 5068] fstat(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5566] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./39/file0", [pid 5068] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./40/binderfs" [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./39/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./39") = 0 [pid 5064] mkdir("./40", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5571 ./strace-static-x86_64: Process 5571 attached [pid 5571] chdir("./40") = 0 [pid 5571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5571] setpgid(0, 0) = 0 [pid 5571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5571] write(3, "1000", 4) = 4 [pid 5571] close(3) = 0 [pid 5571] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5571] memfd_create("syzkaller", 0) = 3 [pid 5571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5570] <... write resumed>) = 2097152 [pid 5068] <... openat resumed>) = 4 [pid 5563] +++ exited with 0 +++ [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5563, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5067] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5570] munmap(0x7f241a43b000, 2097152 [pid 5068] close(4) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5570] <... munmap resumed>) = 0 [pid 5068] rmdir("./40/file0" [pid 5067] fstat(3, [pid 5570] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5570] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] close(3 [pid 5067] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./40" [pid 5067] lstat("./40/binderfs", [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./41", 0777 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] unlink("./40/binderfs" [pid 5570] <... ioctl resumed>) = 0 [pid 5570] close(3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5570] <... close resumed>) = 0 [pid 5570] mkdir("./file0", 0777 [pid 5067] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5570] <... mkdir resumed>) = 0 [pid 5570] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5572 ./strace-static-x86_64: Process 5572 attached [pid 5572] chdir("./41") = 0 [pid 5572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 116.991695][ T5570] loop0: detected capacity change from 0 to 4096 [pid 5572] setpgid(0, 0 [pid 5571] <... write resumed>) = 2097152 [pid 5572] <... setpgid resumed>) = 0 [pid 5572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5572] write(3, "1000", 4) = 4 [pid 5572] close(3) = 0 [pid 5572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5572] memfd_create("syzkaller", 0) = 3 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5570] <... mount resumed>) = 0 [pid 5570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5570] chdir("./file0") = 0 [pid 5570] ioctl(4, LOOP_CLR_FD) = 0 [pid 5570] close(4) = 0 [pid 5570] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5571] munmap(0x7f241a43b000, 2097152 [pid 5570] unlink("./file1" [pid 5571] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5571] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5571] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5067] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(4) = 0 [pid 5067] rmdir("./40/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./40") = 0 [pid 5067] mkdir("./41", 0777 [pid 5571] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5571] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5571] mkdir("./file0", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5571] <... mkdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5571] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5570] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [ 117.081031][ T5573] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.107056][ T5571] loop1: detected capacity change from 0 to 4096 [pid 5570] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5574 ./strace-static-x86_64: Process 5574 attached [pid 5574] chdir("./41") = 0 [pid 5574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5574] setpgid(0, 0) = 0 [pid 5574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5574] write(3, "1000", 4) = 4 [pid 5574] close(3) = 0 [pid 5574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5574] memfd_create("syzkaller", 0) = 3 [pid 5572] <... write resumed>) = 2097152 [pid 5574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5571] <... mount resumed>) = 0 [pid 5571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5571] chdir("./file0") = 0 [pid 5571] ioctl(4, LOOP_CLR_FD) = 0 [pid 5571] close(4) = 0 [pid 5571] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5571] unlink("./file1" [pid 5572] munmap(0x7f241a43b000, 2097152 [pid 5574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5572] <... munmap resumed>) = 0 [pid 5572] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 117.204373][ T5575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5572] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5571] <... unlink resumed>) = 0 [pid 5571] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5566] <... pwritev resumed>) = 1114112 [pid 5566] exit_group(0) = ? [ 117.248623][ T5572] loop5: detected capacity change from 0 to 4096 [pid 5572] close(3) = 0 [pid 5565] <... pwritev resumed>) = 1114112 [pid 5572] mkdir("./file0", 0777 [pid 5565] exit_group(0) = ? [pid 5572] <... mkdir resumed>) = 0 [pid 5572] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5574] <... write resumed>) = 2097152 [pid 5574] munmap(0x7f241a43b000, 2097152) = 0 [pid 5574] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5574] ioctl(4, LOOP_SET_FD, 3 [pid 5572] <... mount resumed>) = 0 [pid 5566] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5566, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5572] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5572] chdir("./file0" [pid 5065] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5572] ioctl(4, LOOP_CLR_FD [pid 5065] lstat("./41/binderfs", [pid 5572] <... ioctl resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5572] close(4 [pid 5065] unlink("./41/binderfs" [pid 5572] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] <... ioctl resumed>) = 0 [pid 5572] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5574] close(3) = 0 [pid 5574] mkdir("./file0", 0777) = 0 [pid 5572] <... openat resumed>) = 4 [pid 5574] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5572] unlink("./file1" [pid 5565] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5565, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 117.390222][ T5574] loop4: detected capacity change from 0 to 4096 [ 117.397337][ T5576] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./40/binderfs") = 0 [pid 5066] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... unlink resumed>) = 0 [pid 5572] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5574] <... mount resumed>) = 0 [pid 5574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5574] chdir("./file0" [pid 5065] <... umount2 resumed>) = 0 [pid 5574] <... chdir resumed>) = 0 [pid 5570] <... pwritev resumed>) = 1114112 [pid 5574] ioctl(4, LOOP_CLR_FD [pid 5570] exit_group(0 [pid 5574] <... ioctl resumed>) = 0 [pid 5570] <... exit_group resumed>) = ? [pid 5574] close(4 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] <... close resumed>) = 0 [ 117.487670][ T5577] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5574] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] unlink("./file1" [pid 5065] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./41/file0") = 0 [pid 5066] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5066] lstat("./40/file0", [pid 5065] rmdir("./41") = 0 [pid 5065] mkdir("./42", 0777 [pid 5574] <... unlink resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5574] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... openat resumed>) = 4 [pid 5065] close(3 [pid 5066] fstat(4, [pid 5065] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5578 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5578 attached [pid 5578] chdir("./42" [pid 5066] close(4 [pid 5578] <... chdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5578] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] rmdir("./40/file0" [pid 5578] <... prctl resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5578] setpgid(0, 0 [pid 5066] getdents64(3, [pid 5578] <... setpgid resumed>) = 0 [pid 5571] <... pwritev resumed>) = 1114112 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5571] exit_group(0 [pid 5066] close(3 [pid 5578] <... openat resumed>) = 3 [pid 5571] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 5578] write(3, "1000", 4 [pid 5066] rmdir("./40" [pid 5578] <... write resumed>) = 4 [pid 5578] close(3) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5578] symlink("/dev/binderfs", "./binderfs" [pid 5570] +++ exited with 0 +++ [pid 5578] <... symlink resumed>) = 0 [pid 5066] mkdir("./41", 0777 [pid 5578] memfd_create("syzkaller", 0) = 3 [pid 5578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... mkdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5570, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5063] fstat(3, [pid 5066] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5579 [pid 5063] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./40/binderfs") = 0 ./strace-static-x86_64: Process 5579 attached [pid 5579] chdir("./41") = 0 [pid 5579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5579] setpgid(0, 0) = 0 [pid 5579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5579] write(3, "1000", 4) = 4 [pid 5579] close(3) = 0 [pid 5579] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] memfd_create("syzkaller", 0) = 3 [pid 5579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5571] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5571, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5063] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5578] <... write resumed>) = 2097152 [pid 5578] munmap(0x7f241a43b000, 2097152 [pid 5064] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5578] <... munmap resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5064] fstat(3, [pid 5063] fstat(4, [pid 5578] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5578] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5578] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, [pid 5578] close(3) = 0 [pid 5064] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5578] mkdir("./file0", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5578] <... mkdir resumed>) = 0 [pid 5064] lstat("./40/binderfs", [pid 5578] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... close resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./40/binderfs" [pid 5063] rmdir("./40/file0" [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./40") = 0 [pid 5063] mkdir("./41", 0777 [pid 5579] <... write resumed>) = 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 5579] munmap(0x7f241a43b000, 2097152 [ 117.820084][ T5578] loop2: detected capacity change from 0 to 4096 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5579] <... munmap resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5579] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5578] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5579] <... openat resumed>) = 4 [pid 5578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5579] ioctl(4, LOOP_SET_FD, 3 [pid 5578] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5579] <... ioctl resumed>) = 0 [pid 5578] chdir("./file0" [pid 5574] <... pwritev resumed>) = 1114112 [pid 5572] <... pwritev resumed>) = 1114112 [pid 5064] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5579] close(3 [pid 5578] <... chdir resumed>) = 0 [pid 5574] exit_group(0 [pid 5572] exit_group(0 [pid 5579] <... close resumed>) = 0 [pid 5578] ioctl(4, LOOP_CLR_FD [pid 5574] <... exit_group resumed>) = ? [pid 5572] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5579] mkdir("./file0", 0777 [pid 5578] <... ioctl resumed>) = 0 [pid 5579] <... mkdir resumed>) = 0 [ 117.882395][ T5580] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.899313][ T5579] loop3: detected capacity change from 0 to 4096 [pid 5579] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5581 attached [pid 5578] close(4 [pid 5064] lstat("./40/file0", [pid 5581] chdir("./41" [pid 5578] <... close resumed>) = 0 [pid 5581] <... chdir resumed>) = 0 [pid 5578] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5581 [pid 5581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5578] <... openat resumed>) = 4 [pid 5064] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5581] setpgid(0, 0 [pid 5578] unlink("./file1" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5581] <... setpgid resumed>) = 0 [pid 5578] <... unlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5578] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5574] +++ exited with 0 +++ [pid 5581] <... openat resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5574, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5064] <... openat resumed>) = 4 [pid 5581] write(3, "1000", 4 [pid 5064] fstat(4, [pid 5581] <... write resumed>) = 4 [pid 5581] close(3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5581] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5581] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5581] memfd_create("syzkaller", 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5581] <... memfd_create resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5581] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(4 [pid 5067] getdents64(3, [pid 5579] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./40/file0" [pid 5579] chdir("./file0" [pid 5067] lstat("./41/binderfs", [pid 5579] <... chdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5579] ioctl(4, LOOP_CLR_FD [pid 5067] unlink("./41/binderfs" [pid 5579] <... ioctl resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 5579] close(4 [pid 5067] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5579] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] close(3) = 0 [pid 5064] rmdir("./40" [pid 5579] <... openat resumed>) = 4 [pid 5064] <... rmdir resumed>) = 0 [pid 5579] unlink("./file1" [pid 5064] mkdir("./41", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5583 [pid 5579] <... unlink resumed>) = 0 [pid 5579] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5583 attached [pid 5583] chdir("./41" [pid 5572] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5572, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5583] <... chdir resumed>) = 0 [pid 5583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... prctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] setpgid(0, 0 [pid 5068] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5583] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [ 118.006424][ T5582] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] fstat(3, [pid 5583] <... openat resumed>) = 3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5583] write(3, "1000", 4 [pid 5068] getdents64(3, [pid 5583] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5583] close(3 [pid 5068] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... close resumed>) = 0 [pid 5581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] symlink("/dev/binderfs", "./binderfs" [pid 5068] lstat("./41/binderfs", [pid 5583] <... symlink resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5583] memfd_create("syzkaller", 0 [pid 5068] unlink("./41/binderfs" [pid 5583] <... memfd_create resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./41/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./41") = 0 [pid 5067] mkdir("./42", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5068] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5068] lstat("./41/file0", [pid 5067] <... close resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5584 [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5584 attached [pid 5068] getdents64(4, [pid 5584] chdir("./42" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5584] <... chdir resumed>) = 0 [pid 5581] <... write resumed>) = 2097152 [pid 5068] close(4 [pid 5584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... close resumed>) = 0 [pid 5584] <... prctl resumed>) = 0 [pid 5068] rmdir("./41/file0" [pid 5584] setpgid(0, 0 [pid 5581] munmap(0x7f241a43b000, 2097152 [pid 5068] <... rmdir resumed>) = 0 [pid 5584] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, [pid 5584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5584] <... openat resumed>) = 3 [pid 5581] <... munmap resumed>) = 0 [pid 5068] close(3 [pid 5584] write(3, "1000", 4 [pid 5068] <... close resumed>) = 0 [pid 5584] <... write resumed>) = 4 [pid 5581] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] rmdir("./41" [pid 5584] close(3 [pid 5581] <... openat resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5584] <... close resumed>) = 0 [pid 5581] ioctl(4, LOOP_SET_FD, 3 [pid 5068] mkdir("./42", 0777 [pid 5584] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 5584] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5584] memfd_create("syzkaller", 0 [pid 5068] <... openat resumed>) = 3 [pid 5584] <... memfd_create resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5584] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5581] <... ioctl resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5585 ./strace-static-x86_64: Process 5585 attached [pid 5585] chdir("./42") = 0 [pid 5585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5585] setpgid(0, 0) = 0 [pid 5583] <... write resumed>) = 2097152 [pid 5581] close(3 [pid 5585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5581] <... close resumed>) = 0 [pid 5585] <... openat resumed>) = 3 [pid 5581] mkdir("./file0", 0777 [pid 5585] write(3, "1000", 4) = 4 [pid 5581] <... mkdir resumed>) = 0 [pid 5585] close(3 [pid 5581] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5585] <... close resumed>) = 0 [pid 5585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5585] memfd_create("syzkaller", 0) = 3 [ 118.199478][ T5581] loop0: detected capacity change from 0 to 4096 [pid 5585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5583] munmap(0x7f241a43b000, 2097152 [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5583] <... munmap resumed>) = 0 [pid 5583] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5583] ioctl(4, LOOP_SET_FD, 3 [pid 5581] <... mount resumed>) = 0 [pid 5581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5581] chdir("./file0") = 0 [pid 5585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5581] ioctl(4, LOOP_CLR_FD [pid 5583] <... ioctl resumed>) = 0 [pid 5581] <... ioctl resumed>) = 0 [pid 5578] <... pwritev resumed>) = 1114112 [pid 5583] close(3 [pid 5581] close(4 [pid 5578] exit_group(0 [ 118.286143][ T5583] loop1: detected capacity change from 0 to 4096 [ 118.294826][ T5586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5583] <... close resumed>) = 0 [pid 5581] <... close resumed>) = 0 [pid 5578] <... exit_group resumed>) = ? [pid 5583] mkdir("./file0", 0777 [pid 5581] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5583] <... mkdir resumed>) = 0 [pid 5583] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5581] <... openat resumed>) = 4 [pid 5581] unlink("./file1") = 0 [pid 5581] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5584] <... write resumed>) = 2097152 [pid 5583] <... mount resumed>) = 0 [pid 5584] munmap(0x7f241a43b000, 2097152 [pid 5583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5584] <... munmap resumed>) = 0 [pid 5583] <... openat resumed>) = 3 [pid 5583] chdir("./file0" [pid 5584] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5583] <... chdir resumed>) = 0 [pid 5584] <... openat resumed>) = 4 [pid 5583] ioctl(4, LOOP_CLR_FD [pid 5584] ioctl(4, LOOP_SET_FD, 3 [pid 5583] <... ioctl resumed>) = 0 [pid 5584] <... ioctl resumed>) = 0 [pid 5583] close(4) = 0 [pid 5583] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5579] <... pwritev resumed>) = 1114112 [pid 5585] <... write resumed>) = 2097152 [pid 5583] <... openat resumed>) = 4 [pid 5579] exit_group(0 [pid 5583] unlink("./file1" [pid 5579] <... exit_group resumed>) = ? [pid 5584] close(3 [pid 5585] munmap(0x7f241a43b000, 2097152 [pid 5584] <... close resumed>) = 0 [pid 5585] <... munmap resumed>) = 0 [pid 5584] mkdir("./file0", 0777) = 0 [pid 5584] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5585] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5583] <... unlink resumed>) = 0 [pid 5585] <... openat resumed>) = 4 [pid 5583] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 118.405241][ T5587] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.436981][ T5584] loop4: detected capacity change from 0 to 4096 [pid 5585] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5585] close(3) = 0 [pid 5585] mkdir("./file0", 0777) = 0 [pid 5585] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5584] <... mount resumed>) = 0 [pid 5584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5584] chdir("./file0") = 0 [pid 5578] +++ exited with 0 +++ [pid 5584] ioctl(4, LOOP_CLR_FD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5578, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5584] <... ioctl resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5584] close(4 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5584] <... close resumed>) = 0 [ 118.475083][ T5585] loop5: detected capacity change from 0 to 4096 [ 118.513394][ T5588] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5584] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5584] unlink("./file1" [pid 5065] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] lstat("./42/binderfs", [pid 5585] <... openat resumed>) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5585] chdir("./file0" [pid 5065] unlink("./42/binderfs" [pid 5585] <... chdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5585] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] <... ioctl resumed>) = 0 [pid 5585] close(4) = 0 [pid 5585] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5585] unlink("./file1" [pid 5584] <... unlink resumed>) = 0 [pid 5584] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... umount2 resumed>) = 0 [ 118.569658][ T5589] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5585] <... unlink resumed>) = 0 [pid 5585] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5579] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5579, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./41/binderfs") = 0 [pid 5066] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5581] <... pwritev resumed>) = 1114112 [pid 5065] <... openat resumed>) = 4 [pid 5581] exit_group(0 [pid 5065] fstat(4, [pid 5581] <... exit_group resumed>) = ? [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./42/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./42") = 0 [pid 5065] mkdir("./43", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5590 ./strace-static-x86_64: Process 5590 attached [pid 5590] chdir("./43") = 0 [pid 5590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5590] setpgid(0, 0) = 0 [pid 5590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5590] write(3, "1000", 4) = 4 [pid 5590] close(3) = 0 [pid 5590] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5590] memfd_create("syzkaller", 0) = 3 [pid 5590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5583] <... pwritev resumed>) = 1114112 [pid 5066] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5583] exit_group(0 [pid 5590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5583] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./41/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./41") = 0 [pid 5066] mkdir("./42", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5590] <... write resumed>) = 2097152 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5590] munmap(0x7f241a43b000, 2097152 [pid 5066] close(3 [pid 5590] <... munmap resumed>) = 0 [pid 5581] +++ exited with 0 +++ [pid 5066] <... close resumed>) = 0 [pid 5590] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5590] <... openat resumed>) = 4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5581, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5590] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5591 [pid 5063] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5591 attached ) = -1 EINVAL (Invalid argument) [pid 5591] chdir("./42") = 0 [pid 5063] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5590] <... ioctl resumed>) = 0 [pid 5591] <... prctl resumed>) = 0 [pid 5590] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5591] setpgid(0, 0 [pid 5590] <... close resumed>) = 0 [pid 5063] fstat(3, [pid 5591] <... setpgid resumed>) = 0 [pid 5590] mkdir("./file0", 0777 [pid 5591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5591] <... openat resumed>) = 3 [pid 5590] <... mkdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5591] write(3, "1000", 4 [pid 5590] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5591] <... write resumed>) = 4 [pid 5591] close(3 [pid 5063] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5591] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5591] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5583] +++ exited with 0 +++ [pid 5063] lstat("./41/binderfs", [pid 5591] memfd_create("syzkaller", 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5583, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5591] <... memfd_create resumed>) = 3 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 118.913027][ T5590] loop2: detected capacity change from 0 to 4096 [pid 5591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] unlink("./41/binderfs" [pid 5591] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, [pid 5590] <... mount resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] getdents64(3, [pid 5063] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5590] <... openat resumed>) = 3 [pid 5584] <... pwritev resumed>) = 1114112 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5590] chdir("./file0" [pid 5584] exit_group(0 [pid 5064] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5590] <... chdir resumed>) = 0 [pid 5584] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5590] ioctl(4, LOOP_CLR_FD [pid 5585] <... pwritev resumed>) = 1114112 [pid 5064] lstat("./41/binderfs", [pid 5063] <... umount2 resumed>) = 0 [pid 5590] <... ioctl resumed>) = 0 [pid 5585] exit_group(0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5590] close(4 [pid 5585] <... exit_group resumed>) = ? [pid 5064] unlink("./41/binderfs" [pid 5590] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [ 118.958346][ T5592] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5590] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5590] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5590] unlink("./file1" [pid 5063] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5590] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5590] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] rmdir("./41/file0" [pid 5064] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5585] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5585, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5068] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./41" [pid 5068] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5063] mkdir("./42", 0777 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5064] lstat("./41/file0", [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5068] lstat("./42/binderfs", [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] unlink("./42/binderfs" [pid 5063] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5593 [pid 5064] rmdir("./41/file0") = 0 [pid 5064] getdents64(3, ./strace-static-x86_64: Process 5593 attached 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5593] chdir("./42" [pid 5064] close(3 [pid 5593] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] rmdir("./41" [pid 5593] <... prctl resumed>) = 0 [pid 5591] <... write resumed>) = 2097152 [pid 5064] <... rmdir resumed>) = 0 [pid 5593] setpgid(0, 0 [pid 5064] mkdir("./42", 0777 [pid 5593] <... setpgid resumed>) = 0 [pid 5591] munmap(0x7f241a43b000, 2097152 [pid 5064] <... mkdir resumed>) = 0 [pid 5593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5593] <... openat resumed>) = 3 [pid 5591] <... munmap resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5593] write(3, "1000", 4 [pid 5591] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5593] <... write resumed>) = 4 [pid 5591] <... openat resumed>) = 4 [pid 5584] +++ exited with 0 +++ [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5593] close(3 [pid 5591] ioctl(4, LOOP_SET_FD, 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5584, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5064] close(3 [pid 5593] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5593] symlink("/dev/binderfs", "./binderfs" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5593] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5593] memfd_create("syzkaller", 0 [pid 5591] <... ioctl resumed>) = 0 [pid 5068] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5594 [pid 5593] <... memfd_create resumed>) = 3 [pid 5591] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5591] <... close resumed>) = 0 [pid 5068] lstat("./42/file0", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5594 attached [pid 5593] <... mmap resumed>) = 0x7f241a43b000 [pid 5591] mkdir("./file0", 0777 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5594] chdir("./42" [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5591] <... mkdir resumed>) = 0 [pid 5594] <... chdir resumed>) = 0 [pid 5591] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(3, [pid 5594] setpgid(0, 0 [pid 5068] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5594] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5067] getdents64(3, [pid 5594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] fstat(4, [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5594] <... openat resumed>) = 3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5594] write(3, "1000", 4 [pid 5068] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5594] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] lstat("./42/binderfs", [pid 5594] close(3) = 0 [pid 5594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5594] memfd_create("syzkaller", 0) = 3 [ 119.164666][ T5591] loop3: detected capacity change from 0 to 4096 [pid 5594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] getdents64(4, [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./42/binderfs" [pid 5068] close(4) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5068] rmdir("./42/file0" [pid 5067] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./42") = 0 [pid 5068] mkdir("./43", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5591] <... mount resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5591] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5591] <... openat resumed>) = 3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5591] chdir("./file0" [pid 5068] close(3 [pid 5591] <... chdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5591] ioctl(4, LOOP_CLR_FD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5596 [pid 5591] <... ioctl resumed>) = 0 [pid 5591] close(4) = 0 ./strace-static-x86_64: Process 5596 attached [pid 5591] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5591] <... openat resumed>) = 4 [pid 5596] chdir("./43" [pid 5591] unlink("./file1" [pid 5596] <... chdir resumed>) = 0 [pid 5596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5596] setpgid(0, 0) = 0 [pid 5596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5596] write(3, "1000", 4) = 4 [ 119.242140][ T5595] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5596] close(3) = 0 [pid 5596] symlink("/dev/binderfs", "./binderfs" [pid 5591] <... unlink resumed>) = 0 [pid 5596] <... symlink resumed>) = 0 [pid 5591] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5596] memfd_create("syzkaller", 0) = 3 [pid 5596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5594] <... write resumed>) = 2097152 [pid 5596] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./42/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./42") = 0 [pid 5067] mkdir("./43", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5594] munmap(0x7f241a43b000, 2097152 [pid 5067] close(3 [pid 5596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5594] <... munmap resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5593] <... write resumed>) = 2097152 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5594] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5593] munmap(0x7f241a43b000, 2097152 [pid 5594] <... openat resumed>) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5597 [pid 5594] ioctl(4, LOOP_SET_FD, 3 [pid 5593] <... munmap resumed>) = 0 [pid 5594] <... ioctl resumed>) = 0 [pid 5593] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5597 attached ) = 4 [pid 5593] ioctl(4, LOOP_SET_FD, 3 [pid 5597] chdir("./43") = 0 [pid 5593] <... ioctl resumed>) = 0 [pid 5597] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5593] close(3 [pid 5597] <... prctl resumed>) = 0 [pid 5593] <... close resumed>) = 0 [pid 5597] setpgid(0, 0 [pid 5593] mkdir("./file0", 0777 [pid 5597] <... setpgid resumed>) = 0 [pid 5594] close(3) = 0 [pid 5594] mkdir("./file0", 0777 [pid 5593] <... mkdir resumed>) = 0 [pid 5597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5594] <... mkdir resumed>) = 0 [pid 5593] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5597] <... openat resumed>) = 3 [pid 5594] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5590] <... pwritev resumed>) = 1114112 [pid 5597] write(3, "1000", 4 [pid 5590] exit_group(0 [pid 5597] <... write resumed>) = 4 [pid 5590] <... exit_group resumed>) = ? [pid 5597] close(3) = 0 [ 119.387536][ T5594] loop1: detected capacity change from 0 to 4096 [ 119.398857][ T5593] loop0: detected capacity change from 0 to 4096 [pid 5597] symlink("/dev/binderfs", "./binderfs" [pid 5596] <... write resumed>) = 2097152 [pid 5597] <... symlink resumed>) = 0 [pid 5596] munmap(0x7f241a43b000, 2097152 [pid 5597] memfd_create("syzkaller", 0 [pid 5596] <... munmap resumed>) = 0 [pid 5597] <... memfd_create resumed>) = 3 [pid 5597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5596] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5594] <... mount resumed>) = 0 [pid 5593] <... mount resumed>) = 0 [pid 5597] <... mmap resumed>) = 0x7f241a43b000 [pid 5594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5596] <... openat resumed>) = 4 [pid 5594] <... openat resumed>) = 3 [pid 5593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5590] +++ exited with 0 +++ [pid 5596] ioctl(4, LOOP_SET_FD, 3 [pid 5594] chdir("./file0" [pid 5593] <... openat resumed>) = 3 [pid 5594] <... chdir resumed>) = 0 [pid 5594] ioctl(4, LOOP_CLR_FD) = 0 [pid 5594] close(4 [pid 5597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5596] <... ioctl resumed>) = 0 [pid 5594] <... close resumed>) = 0 [pid 5593] chdir("./file0" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5590, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5596] close(3 [pid 5594] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5593] <... chdir resumed>) = 0 [pid 5065] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5596] <... close resumed>) = 0 [pid 5594] <... openat resumed>) = 4 [pid 5593] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5596] mkdir("./file0", 0777 [pid 5594] unlink("./file1" [pid 5593] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5596] <... mkdir resumed>) = 0 [pid 5593] close(4 [pid 5596] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5593] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [ 119.459231][ T5598] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.477730][ T5599] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.497992][ T5596] loop5: detected capacity change from 0 to 4096 [pid 5593] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5593] <... openat resumed>) = 4 [pid 5065] getdents64(3, [pid 5593] unlink("./file1" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./43/binderfs", [pid 5593] <... unlink resumed>) = 0 [pid 5593] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./43/binderfs") = 0 [pid 5594] <... unlink resumed>) = 0 [pid 5594] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5597] <... write resumed>) = 2097152 [pid 5597] munmap(0x7f241a43b000, 2097152 [pid 5596] <... mount resumed>) = 0 [pid 5597] <... munmap resumed>) = 0 [pid 5596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5597] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5596] <... openat resumed>) = 3 [pid 5597] <... openat resumed>) = 4 [pid 5596] chdir("./file0" [pid 5597] ioctl(4, LOOP_SET_FD, 3 [pid 5596] <... chdir resumed>) = 0 [pid 5596] ioctl(4, LOOP_CLR_FD [pid 5597] <... ioctl resumed>) = 0 [pid 5596] <... ioctl resumed>) = 0 [pid 5597] close(3 [pid 5596] close(4 [ 119.592456][ T5600] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.625183][ T5597] loop4: detected capacity change from 0 to 4096 [pid 5597] <... close resumed>) = 0 [pid 5596] <... close resumed>) = 0 [pid 5597] mkdir("./file0", 0777 [pid 5596] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5597] <... mkdir resumed>) = 0 [pid 5597] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5596] <... openat resumed>) = 4 [pid 5596] unlink("./file1") = 0 [pid 5596] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5597] <... mount resumed>) = 0 [pid 5065] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5591] <... pwritev resumed>) = 1114112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5597] <... openat resumed>) = 3 [pid 5591] exit_group(0 [pid 5065] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5597] chdir("./file0" [pid 5591] <... exit_group resumed>) = ? [pid 5065] <... openat resumed>) = 4 [pid 5597] <... chdir resumed>) = 0 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5597] ioctl(4, LOOP_CLR_FD [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5597] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5597] close(4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5597] <... close resumed>) = 0 [pid 5065] close(4 [pid 5597] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./43/file0" [pid 5597] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5597] unlink("./file1" [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [ 119.726633][ T5601] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] rmdir("./43") = 0 [pid 5065] mkdir("./44", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5602 [pid 5597] <... unlink resumed>) = 0 [pid 5597] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5602 attached [pid 5602] chdir("./44") = 0 [pid 5602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5602] setpgid(0, 0) = 0 [pid 5602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5602] write(3, "1000", 4) = 4 [pid 5602] close(3) = 0 [pid 5602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5602] memfd_create("syzkaller", 0) = 3 [pid 5602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5593] <... pwritev resumed>) = 1114112 [pid 5593] exit_group(0) = ? [pid 5591] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5591, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, [pid 5602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./42/binderfs") = 0 [pid 5066] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5602] <... write resumed>) = 2097152 [pid 5602] munmap(0x7f241a43b000, 2097152) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5602] ioctl(4, LOOP_SET_FD, 3 [pid 5594] <... pwritev resumed>) = 1114112 [pid 5594] exit_group(0) = ? [pid 5593] +++ exited with 0 +++ [pid 5602] <... ioctl resumed>) = 0 [pid 5596] <... pwritev resumed>) = 1114112 [pid 5066] <... umount2 resumed>) = 0 [pid 5602] close(3 [pid 5596] exit_group(0 [pid 5066] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5593, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5602] <... close resumed>) = 0 [pid 5596] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] mkdir("./file0", 0777 [pid 5066] lstat("./42/file0", [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5602] <... mkdir resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5602] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 120.003330][ T5602] loop2: detected capacity change from 0 to 4096 [pid 5066] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] fstat(4, [pid 5063] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(3, [pid 5066] getdents64(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5066] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5063] lstat("./42/binderfs", [pid 5066] rmdir("./42/file0" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5063] unlink("./42/binderfs" [pid 5066] getdents64(3, [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5602] <... mount resumed>) = 0 [pid 5596] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5602] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5597] <... pwritev resumed>) = 1114112 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5596, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5066] close(3 [pid 5602] <... openat resumed>) = 3 [pid 5597] exit_group(0 [pid 5066] <... close resumed>) = 0 [pid 5602] chdir("./file0" [pid 5597] <... exit_group resumed>) = ? [pid 5066] rmdir("./42" [pid 5602] <... chdir resumed>) = 0 [pid 5602] ioctl(4, LOOP_CLR_FD [pid 5068] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5602] <... ioctl resumed>) = 0 [pid 5066] mkdir("./43", 0777 [pid 5602] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [ 120.083387][ T5603] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./43/binderfs" [pid 5602] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... unlink resumed>) = 0 [pid 5602] <... openat resumed>) = 4 [pid 5068] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5602] unlink("./file1" [pid 5594] +++ exited with 0 +++ [pid 5066] <... openat resumed>) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5594, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5602] <... unlink resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5602] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... openat resumed>) = 3 [pid 5063] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5604 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] lstat("./42/file0", [pid 5064] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5604 attached ) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] chdir("./43" [pid 5064] lstat("./42/binderfs", [pid 5063] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5604] <... chdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] unlink("./42/binderfs" [pid 5063] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] <... prctl resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5604] setpgid(0, 0 [pid 5064] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(4, [pid 5604] <... setpgid resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 5604] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5604] write(3, "1000", 4 [pid 5063] getdents64(4, [pid 5604] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5604] close(3 [pid 5063] close(4 [pid 5604] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5604] symlink("/dev/binderfs", "./binderfs" [pid 5063] rmdir("./42/file0" [pid 5604] <... symlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5604] memfd_create("syzkaller", 0 [pid 5063] getdents64(3, [pid 5604] <... memfd_create resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3 [pid 5604] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./42") = 0 [pid 5063] mkdir("./43", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 5068] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5605 [pid 5068] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, ./strace-static-x86_64: Process 5605 attached 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5605] chdir("./43" [pid 5068] close(4 [pid 5605] <... chdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5605] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] rmdir("./43/file0" [pid 5605] <... prctl resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5605] setpgid(0, 0 [pid 5068] getdents64(3, [pid 5605] <... setpgid resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] close(3 [pid 5605] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5605] write(3, "1000", 4 [pid 5068] rmdir("./43" [pid 5605] <... write resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5605] close(3 [pid 5068] mkdir("./44", 0777 [pid 5605] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5605] symlink("/dev/binderfs", "./binderfs" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5605] <... symlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5605] memfd_create("syzkaller", 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5605] <... memfd_create resumed>) = 3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5606 [pid 5064] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5606 attached ) = -1 EINVAL (Invalid argument) [pid 5606] chdir("./44" [pid 5597] +++ exited with 0 +++ [pid 5064] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5606] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5597, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5064] <... openat resumed>) = 4 [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] fstat(4, [pid 5606] <... prctl resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] setpgid(0, 0 [pid 5064] getdents64(4, [pid 5606] <... setpgid resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] getdents64(4, [pid 5606] <... openat resumed>) = 3 [pid 5067] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5606] write(3, "1000", 4 [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(4 [pid 5606] <... write resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5606] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5064] rmdir("./42/file0" [pid 5606] <... close resumed>) = 0 [pid 5067] fstat(3, [pid 5606] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5606] <... symlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5064] getdents64(3, [pid 5606] memfd_create("syzkaller", 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5606] <... memfd_create resumed>) = 3 [pid 5067] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 5606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5606] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] lstat("./43/binderfs", [pid 5064] rmdir("./42" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./43/binderfs" [pid 5604] <... write resumed>) = 2097152 [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5604] munmap(0x7f241a43b000, 2097152 [pid 5067] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] mkdir("./43", 0777) = 0 [pid 5604] <... munmap resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5604] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5064] <... openat resumed>) = 3 [pid 5604] ioctl(4, LOOP_SET_FD, 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5607 [pid 5606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5604] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5607 attached [pid 5605] <... write resumed>) = 2097152 [pid 5607] chdir("./43" [pid 5604] close(3) = 0 [pid 5604] mkdir("./file0", 0777 [pid 5607] <... chdir resumed>) = 0 [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5604] <... mkdir resumed>) = 0 [pid 5607] <... prctl resumed>) = 0 [pid 5604] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5607] setpgid(0, 0) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5607] write(3, "1000", 4) = 4 [ 120.373899][ T5604] loop3: detected capacity change from 0 to 4096 [pid 5607] close(3 [pid 5605] munmap(0x7f241a43b000, 2097152 [pid 5607] <... close resumed>) = 0 [pid 5607] symlink("/dev/binderfs", "./binderfs" [pid 5605] <... munmap resumed>) = 0 [pid 5607] <... symlink resumed>) = 0 [pid 5607] memfd_create("syzkaller", 0 [pid 5605] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5607] <... memfd_create resumed>) = 3 [pid 5605] <... openat resumed>) = 4 [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5605] ioctl(4, LOOP_SET_FD, 3 [pid 5607] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... umount2 resumed>) = 0 [pid 5604] <... mount resumed>) = 0 [pid 5067] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5605] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] close(3 [pid 5067] lstat("./43/file0", [pid 5605] <... close resumed>) = 0 [pid 5604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] mkdir("./file0", 0777 [pid 5604] <... openat resumed>) = 3 [pid 5067] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5605] <... mkdir resumed>) = 0 [pid 5604] chdir("./file0" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5605] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5604] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5604] ioctl(4, LOOP_CLR_FD [pid 5602] <... pwritev resumed>) = 1114112 [pid 5604] <... ioctl resumed>) = 0 [pid 5602] exit_group(0 [pid 5067] <... openat resumed>) = 4 [pid 5604] close(4 [pid 5602] <... exit_group resumed>) = ? [pid 5067] fstat(4, [pid 5604] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./43/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./43") = 0 [ 120.447303][ T5605] loop0: detected capacity change from 0 to 4096 [ 120.459987][ T5608] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5604] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] mkdir("./44", 0777 [pid 5606] <... write resumed>) = 2097152 [pid 5604] <... openat resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5604] unlink("./file1" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5604] <... unlink resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5604] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5610 [pid 5606] munmap(0x7f241a43b000, 2097152 [pid 5605] <... mount resumed>) = 0 [pid 5605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5606] <... munmap resumed>) = 0 [pid 5605] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5610 attached [pid 5605] chdir("./file0" [pid 5610] chdir("./44" [pid 5606] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5605] <... chdir resumed>) = 0 [pid 5610] <... chdir resumed>) = 0 [pid 5606] <... openat resumed>) = 4 [pid 5605] ioctl(4, LOOP_CLR_FD [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5606] ioctl(4, LOOP_SET_FD, 3 [pid 5605] <... ioctl resumed>) = 0 [pid 5610] <... prctl resumed>) = 0 [pid 5605] close(4 [pid 5610] setpgid(0, 0 [pid 5605] <... close resumed>) = 0 [pid 5610] <... setpgid resumed>) = 0 [pid 5605] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5605] <... openat resumed>) = 4 [pid 5610] <... openat resumed>) = 3 [pid 5605] unlink("./file1" [pid 5610] write(3, "1000", 4) = 4 [pid 5610] close(3) = 0 [pid 5610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5610] memfd_create("syzkaller", 0) = 3 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5606] <... ioctl resumed>) = 0 [pid 5606] close(3) = 0 [pid 5606] mkdir("./file0", 0777) = 0 [pid 5606] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5607] <... write resumed>) = 2097152 [pid 5605] <... unlink resumed>) = 0 [pid 5607] munmap(0x7f241a43b000, 2097152 [ 120.529553][ T5609] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.548776][ T5606] loop5: detected capacity change from 0 to 4096 [pid 5605] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5607] <... munmap resumed>) = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5607] ioctl(4, LOOP_SET_FD, 3 [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5602] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5602, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5607] <... ioctl resumed>) = 0 [pid 5607] close(3 [pid 5606] <... mount resumed>) = 0 [pid 5607] <... close resumed>) = 0 [pid 5606] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5607] mkdir("./file0", 0777 [pid 5606] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] chdir("./file0" [pid 5065] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5607] <... mkdir resumed>) = 0 [pid 5606] <... chdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5607] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5606] ioctl(4, LOOP_CLR_FD [pid 5065] fstat(3, [pid 5606] <... ioctl resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] close(4 [pid 5065] getdents64(3, [pid 5606] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5606] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] unlink("./44/binderfs") = 0 [pid 5065] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5606] <... openat resumed>) = 4 [ 120.622366][ T5607] loop1: detected capacity change from 0 to 4096 [ 120.641935][ T5611] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5606] unlink("./file1" [pid 5610] <... write resumed>) = 2097152 [pid 5606] <... unlink resumed>) = 0 [pid 5606] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5610] munmap(0x7f241a43b000, 2097152) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5610] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5610] close(3) = 0 [pid 5607] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5610] mkdir("./file0", 0777) = 0 [pid 5607] <... openat resumed>) = 3 [pid 5607] chdir("./file0") = 0 [pid 5607] ioctl(4, LOOP_CLR_FD [pid 5610] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5607] <... ioctl resumed>) = 0 [pid 5607] close(4) = 0 [pid 5607] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 120.746670][ T5610] loop4: detected capacity change from 0 to 4096 [ 120.757480][ T5612] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5607] unlink("./file1" [pid 5065] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5607] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5607] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./44/file0") = 0 [pid 5065] getdents64(3, [pid 5610] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3 [pid 5610] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5610] chdir("./file0" [pid 5065] rmdir("./44" [pid 5610] <... chdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5610] ioctl(4, LOOP_CLR_FD [pid 5065] mkdir("./45", 0777 [pid 5610] <... ioctl resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5610] close(4 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5610] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5610] <... openat resumed>) = 4 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5610] unlink("./file1" [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5614 [ 120.844573][ T5613] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5614 attached [pid 5614] chdir("./45") = 0 [pid 5614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5614] setpgid(0, 0) = 0 [pid 5614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "1000", 4) = 4 [pid 5614] close(3 [pid 5610] <... unlink resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5610] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5614] memfd_create("syzkaller", 0) = 3 [pid 5614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5604] <... pwritev resumed>) = 1114112 [pid 5604] exit_group(0) = ? [pid 5605] <... pwritev resumed>) = 1114112 [pid 5605] exit_group(0) = ? [pid 5604] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5605] +++ exited with 0 +++ [pid 5607] <... pwritev resumed>) = 1114112 [pid 5066] getdents64(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5605, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5607] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5607] <... exit_group resumed>) = ? [pid 5066] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5614] <... write resumed>) = 2097152 [pid 5614] munmap(0x7f241a43b000, 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./43/binderfs" [pid 5063] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5614] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5614] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... openat resumed>) = 4 [pid 5063] lstat("./43/binderfs", [pid 5614] ioctl(4, LOOP_SET_FD, 3 [pid 5606] <... pwritev resumed>) = 1114112 [pid 5606] exit_group(0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5606] <... exit_group resumed>) = ? [pid 5063] unlink("./43/binderfs" [pid 5614] <... ioctl resumed>) = 0 [pid 5614] close(3) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5614] mkdir("./file0", 0777) = 0 [ 121.164104][ T5614] loop2: detected capacity change from 0 to 4096 [pid 5614] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... pwritev resumed>) = 1114112 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5614] <... mount resumed>) = 0 [pid 5610] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5614] <... openat resumed>) = 3 [pid 5610] <... exit_group resumed>) = ? [pid 5607] +++ exited with 0 +++ [pid 5066] getdents64(4, [pid 5063] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] chdir("./file0" [pid 5063] <... openat resumed>) = 4 [pid 5614] <... chdir resumed>) = 0 [pid 5063] fstat(4, [pid 5614] ioctl(4, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5614] <... ioctl resumed>) = 0 [pid 5066] close(4 [pid 5063] getdents64(4, [pid 5614] close(4 [pid 5066] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5614] <... close resumed>) = 0 [pid 5066] rmdir("./43/file0" [pid 5063] getdents64(4, [pid 5614] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5614] <... openat resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 5063] close(4 [pid 5614] unlink("./file1" [pid 5606] +++ exited with 0 +++ [pid 5066] getdents64(3, [pid 5064] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5606, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./43/file0" [pid 5614] <... unlink resumed>) = 0 [pid 5066] close(3 [ 121.263126][ T5615] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5614] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5068] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5064] fstat(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./43" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(3 [pid 5068] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./43" [pid 5068] fstat(3, [pid 5066] mkdir("./44", 0777 [pid 5064] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./44", 0777 [pid 5068] getdents64(3, [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] lstat("./43/binderfs", [pid 5063] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./43/binderfs" [pid 5063] <... openat resumed>) = 3 [pid 5610] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] <... unlink resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] lstat("./44/binderfs", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] close(3 [pid 5063] close(3 [pid 5068] unlink("./44/binderfs" [pid 5066] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5616 [pid 5067] <... openat resumed>) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./44/binderfs", [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5617 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5616 attached [pid 5067] unlink("./44/binderfs" [pid 5616] chdir("./44" [pid 5067] <... unlink resumed>) = 0 [pid 5616] <... chdir resumed>) = 0 [pid 5067] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5616] setpgid(0, 0) = 0 [pid 5616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5616] write(3, "1000", 4) = 4 [pid 5616] close(3) = 0 [pid 5616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5616] memfd_create("syzkaller", 0) = 3 [pid 5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 ./strace-static-x86_64: Process 5617 attached [pid 5617] chdir("./44") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5617] memfd_create("syzkaller", 0) = 3 [pid 5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./43/file0", [pid 5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./44/file0", [pid 5067] lstat("./44/file0", [pid 5064] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5068] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5068] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] fstat(4, [pid 5067] fstat(4, [pid 5064] getdents64(4, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5067] getdents64(4, [pid 5064] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5067] getdents64(4, [pid 5064] rmdir("./43/file0" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5068] close(4 [pid 5067] close(4 [pid 5064] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] rmdir("./44/file0" [pid 5067] rmdir("./44/file0" [pid 5064] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] rmdir("./43" [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] mkdir("./44", 0777 [pid 5068] close(3 [pid 5067] close(3 [pid 5064] <... mkdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] rmdir("./44" [pid 5067] rmdir("./44" [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] <... rmdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] mkdir("./45", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5616] <... write resumed>) = 2097152 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] mkdir("./45", 0777 [pid 5064] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5618 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3./strace-static-x86_64: Process 5618 attached ) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5619 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5618] chdir("./44") = 0 [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5620 [pid 5618] <... prctl resumed>) = 0 [pid 5618] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5620 attached ./strace-static-x86_64: Process 5619 attached [pid 5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5620] chdir("./45" [pid 5619] chdir("./45" [pid 5618] <... openat resumed>) = 3 [pid 5620] <... chdir resumed>) = 0 [pid 5619] <... chdir resumed>) = 0 [pid 5618] write(3, "1000", 4 [pid 5617] <... write resumed>) = 2097152 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5618] <... write resumed>) = 4 [pid 5618] close(3) = 0 [pid 5618] symlink("/dev/binderfs", "./binderfs" [pid 5620] <... prctl resumed>) = 0 [pid 5619] <... prctl resumed>) = 0 [pid 5618] <... symlink resumed>) = 0 [pid 5617] munmap(0x7f241a43b000, 2097152 [pid 5620] setpgid(0, 0 [pid 5619] setpgid(0, 0 [pid 5618] memfd_create("syzkaller", 0) = 3 [pid 5617] <... munmap resumed>) = 0 [pid 5616] munmap(0x7f241a43b000, 2097152 [pid 5620] <... setpgid resumed>) = 0 [pid 5619] <... setpgid resumed>) = 0 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5617] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5616] <... munmap resumed>) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5618] <... mmap resumed>) = 0x7f241a43b000 [pid 5617] <... openat resumed>) = 4 [pid 5616] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5620] <... openat resumed>) = 3 [pid 5619] <... openat resumed>) = 3 [pid 5617] ioctl(4, LOOP_SET_FD, 3 [pid 5616] <... openat resumed>) = 4 [pid 5620] write(3, "1000", 4 [pid 5619] write(3, "1000", 4 [pid 5616] ioctl(4, LOOP_SET_FD, 3 [pid 5620] <... write resumed>) = 4 [pid 5619] <... write resumed>) = 4 [pid 5617] <... ioctl resumed>) = 0 [pid 5620] close(3 [pid 5619] close(3 [pid 5617] close(3 [pid 5620] <... close resumed>) = 0 [pid 5619] <... close resumed>) = 0 [pid 5620] symlink("/dev/binderfs", "./binderfs" [pid 5619] symlink("/dev/binderfs", "./binderfs" [pid 5617] <... close resumed>) = 0 [pid 5620] <... symlink resumed>) = 0 [pid 5619] <... symlink resumed>) = 0 [pid 5620] memfd_create("syzkaller", 0) = 3 [pid 5619] memfd_create("syzkaller", 0 [pid 5617] mkdir("./file0", 0777 [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5617] <... mkdir resumed>) = 0 [pid 5620] <... mmap resumed>) = 0x7f241a43b000 [pid 5619] <... memfd_create resumed>) = 3 [pid 5617] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5616] <... ioctl resumed>) = 0 [pid 5616] close(3) = 0 [ 121.588270][ T5617] loop3: detected capacity change from 0 to 4096 [ 121.589550][ T5616] loop0: detected capacity change from 0 to 4096 [pid 5616] mkdir("./file0", 0777) = 0 [pid 5616] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5614] <... pwritev resumed>) = 1114112 [pid 5614] exit_group(0) = ? [pid 5618] <... write resumed>) = 2097152 [pid 5618] munmap(0x7f241a43b000, 2097152) = 0 [pid 5617] <... mount resumed>) = 0 [pid 5617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5618] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5617] <... openat resumed>) = 3 [pid 5618] <... openat resumed>) = 4 [pid 5617] chdir("./file0" [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5617] <... chdir resumed>) = 0 [pid 5617] ioctl(4, LOOP_CLR_FD [pid 5616] <... mount resumed>) = 0 [pid 5617] <... ioctl resumed>) = 0 [pid 5616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5617] close(4 [pid 5616] <... openat resumed>) = 3 [pid 5617] <... close resumed>) = 0 [pid 5616] chdir("./file0" [pid 5617] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5616] <... chdir resumed>) = 0 [pid 5617] <... openat resumed>) = 4 [pid 5616] ioctl(4, LOOP_CLR_FD [pid 5617] unlink("./file1" [pid 5616] <... ioctl resumed>) = 0 [pid 5616] close(4) = 0 [pid 5616] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5616] unlink("./file1" [pid 5617] <... unlink resumed>) = 0 [ 121.696909][ T5621] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.711458][ T5622] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.715732][ T5618] loop1: detected capacity change from 0 to 4096 [pid 5617] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5620] <... write resumed>) = 2097152 [pid 5619] <... write resumed>) = 2097152 [pid 5616] <... unlink resumed>) = 0 [pid 5620] munmap(0x7f241a43b000, 2097152 [pid 5619] munmap(0x7f241a43b000, 2097152 [pid 5616] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5620] <... munmap resumed>) = 0 [pid 5619] <... munmap resumed>) = 0 [pid 5620] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5619] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5618] <... ioctl resumed>) = 0 [pid 5620] <... openat resumed>) = 4 [pid 5619] <... openat resumed>) = 4 [pid 5620] ioctl(4, LOOP_SET_FD, 3 [pid 5619] ioctl(4, LOOP_SET_FD, 3 [pid 5618] close(3) = 0 [pid 5618] mkdir("./file0", 0777) = 0 [pid 5618] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5620] <... ioctl resumed>) = 0 [pid 5619] <... ioctl resumed>) = 0 [pid 5614] +++ exited with 0 +++ [pid 5620] close(3 [pid 5619] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5614, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5620] <... close resumed>) = 0 [pid 5619] <... close resumed>) = 0 [pid 5620] mkdir("./file0", 0777 [pid 5619] mkdir("./file0", 0777 [pid 5620] <... mkdir resumed>) = 0 [pid 5065] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5620] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5619] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5619] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [ 121.802524][ T5620] loop4: detected capacity change from 0 to 4096 [ 121.810093][ T5619] loop5: detected capacity change from 0 to 4096 [pid 5065] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./45/binderfs", [pid 5620] <... mount resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] unlink("./45/binderfs" [pid 5620] <... openat resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5620] chdir("./file0" [pid 5619] <... mount resumed>) = 0 [pid 5065] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5620] <... chdir resumed>) = 0 [pid 5620] ioctl(4, LOOP_CLR_FD) = 0 [pid 5620] close(4) = 0 [pid 5620] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5618] <... mount resumed>) = 0 [pid 5619] chdir("./file0") = 0 [pid 5619] ioctl(4, LOOP_CLR_FD [pid 5620] <... openat resumed>) = 4 [pid 5619] <... ioctl resumed>) = 0 [pid 5618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5619] close(4) = 0 [pid 5619] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5620] unlink("./file1" [pid 5619] <... openat resumed>) = 4 [pid 5618] <... openat resumed>) = 3 [pid 5619] unlink("./file1" [pid 5618] chdir("./file0") = 0 [pid 5618] ioctl(4, LOOP_CLR_FD) = 0 [pid 5618] close(4) = 0 [pid 5618] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 121.867095][ T5623] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.884098][ T5624] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.902731][ T5625] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5618] unlink("./file1" [pid 5619] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5620] <... unlink resumed>) = 0 [pid 5619] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5620] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5618] <... unlink resumed>) = 0 [pid 5618] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./45/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5616] <... pwritev resumed>) = 1114112 [pid 5065] rmdir("./45" [pid 5616] exit_group(0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./46", 0777) = 0 [pid 5616] <... exit_group resumed>) = ? [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5626 ./strace-static-x86_64: Process 5626 attached [pid 5626] chdir("./46") = 0 [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5626] setpgid(0, 0) = 0 [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5626] write(3, "1000", 4) = 4 [pid 5626] close(3) = 0 [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5626] memfd_create("syzkaller", 0) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5616] +++ exited with 0 +++ [pid 5617] <... pwritev resumed>) = 1114112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5616, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5617] exit_group(0 [pid 5063] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5617] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./44/binderfs") = 0 [pid 5063] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5626] <... write resumed>) = 2097152 [pid 5626] munmap(0x7f241a43b000, 2097152) = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5619] <... pwritev resumed>) = 1114112 [pid 5626] close(3 [pid 5620] <... pwritev resumed>) = 1114112 [pid 5626] <... close resumed>) = 0 [pid 5619] exit_group(0 [pid 5626] mkdir("./file0", 0777 [pid 5620] exit_group(0 [pid 5619] <... exit_group resumed>) = ? [pid 5626] <... mkdir resumed>) = 0 [pid 5620] <... exit_group resumed>) = ? [pid 5626] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5618] <... pwritev resumed>) = 1114112 [ 122.303008][ T5626] loop2: detected capacity change from 0 to 4096 [pid 5618] exit_group(0 [pid 5063] <... umount2 resumed>) = 0 [pid 5618] <... exit_group resumed>) = ? [pid 5063] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5617] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 5063] fstat(4, [pid 5066] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5066] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5626] <... mount resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5626] chdir("./file0") = 0 [pid 5626] ioctl(4, LOOP_CLR_FD [pid 5066] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5626] <... ioctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5626] close(4 [pid 5066] lstat("./44/binderfs", [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5626] <... close resumed>) = 0 [pid 5626] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5626] <... openat resumed>) = 4 [pid 5066] unlink("./44/binderfs" [pid 5063] close(4 [pid 5626] unlink("./file1" [pid 5066] <... unlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5066] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./44/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [ 122.404941][ T5627] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] close(3) = 0 [pid 5063] rmdir("./44" [pid 5619] +++ exited with 0 +++ [pid 5620] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./45", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5068] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5626] <... unlink resumed>) = 0 [pid 5068] fstat(3, [pid 5063] <... openat resumed>) = 3 [pid 5626] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] getdents64(3, [pid 5066] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5618] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./44/file0", [pid 5063] <... close resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./44/binderfs") = 0 [pid 5064] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] lstat("./45/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] lstat("./45/binderfs", [pid 5066] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] unlink("./45/binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] unlink("./45/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5628 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, ./strace-static-x86_64: Process 5628 attached [pid 5628] chdir("./45" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5628] <... chdir resumed>) = 0 [pid 5066] close(4 [pid 5628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] <... close resumed>) = 0 [pid 5628] setpgid(0, 0 [pid 5066] rmdir("./44/file0" [pid 5628] <... setpgid resumed>) = 0 [pid 5628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... rmdir resumed>) = 0 [pid 5628] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5628] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5628] <... write resumed>) = 4 [pid 5066] close(3 [pid 5628] close(3 [pid 5066] <... close resumed>) = 0 [pid 5628] <... close resumed>) = 0 [pid 5066] rmdir("./44" [pid 5628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5628] memfd_create("syzkaller", 0 [pid 5066] mkdir("./45", 0777 [pid 5628] <... memfd_create resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 5628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5628] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... umount2 resumed>) = 0 [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5629 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5629 attached [pid 5629] chdir("./45" [pid 5628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(4, [pid 5064] <... openat resumed>) = 4 [pid 5629] <... chdir resumed>) = 0 [pid 5068] lstat("./45/file0", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(4, [pid 5629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5629] <... prctl resumed>) = 0 [pid 5068] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5629] setpgid(0, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5629] <... setpgid resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... openat resumed>) = 4 [pid 5067] close(4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5629] <... openat resumed>) = 3 [pid 5068] fstat(4, [pid 5067] <... close resumed>) = 0 [pid 5064] close(4 [pid 5629] write(3, "1000", 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./45/file0" [pid 5064] <... close resumed>) = 0 [pid 5629] <... write resumed>) = 4 [pid 5068] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5064] rmdir("./44/file0" [pid 5629] close(3 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5629] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5629] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5629] <... symlink resumed>) = 0 [pid 5068] close(4 [pid 5067] <... close resumed>) = 0 [pid 5064] close(3 [pid 5629] memfd_create("syzkaller", 0 [pid 5068] <... close resumed>) = 0 [pid 5067] rmdir("./45" [pid 5064] <... close resumed>) = 0 [pid 5629] <... memfd_create resumed>) = 3 [pid 5068] rmdir("./45/file0" [pid 5067] <... rmdir resumed>) = 0 [pid 5064] rmdir("./44" [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5628] <... write resumed>) = 2097152 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] mkdir("./46", 0777 [pid 5629] <... mmap resumed>) = 0x7f241a43b000 [pid 5628] munmap(0x7f241a43b000, 2097152 [pid 5068] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5628] <... munmap resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] close(3 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] mkdir("./45", 0777 [pid 5628] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5628] ioctl(4, LOOP_SET_FD, 3 [pid 5068] rmdir("./45") = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5068] mkdir("./46", 0777) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] close(3 [pid 5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] close(3./strace-static-x86_64: Process 5631 attached ./strace-static-x86_64: Process 5630 attached [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5630 [pid 5064] <... close resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5631 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5628] <... ioctl resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5632 [pid 5628] close(3) = 0 [pid 5628] mkdir("./file0", 0777 [pid 5631] chdir("./46" [pid 5630] chdir("./46" [pid 5628] <... mkdir resumed>) = 0 [pid 5631] <... chdir resumed>) = 0 [pid 5630] <... chdir resumed>) = 0 [pid 5628] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5630] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5632 attached [pid 5631] <... prctl resumed>) = 0 [pid 5632] chdir("./45" [pid 5631] setpgid(0, 0 [pid 5630] <... prctl resumed>) = 0 [pid 5632] <... chdir resumed>) = 0 [pid 5631] <... setpgid resumed>) = 0 [ 122.683640][ T5628] loop0: detected capacity change from 0 to 4096 [pid 5630] setpgid(0, 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5630] <... setpgid resumed>) = 0 [pid 5632] <... prctl resumed>) = 0 [pid 5632] setpgid(0, 0 [pid 5631] <... openat resumed>) = 3 [pid 5632] <... setpgid resumed>) = 0 [pid 5631] write(3, "1000", 4 [pid 5630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5630] <... openat resumed>) = 3 [pid 5632] write(3, "1000", 4 [pid 5631] <... write resumed>) = 4 [pid 5632] <... write resumed>) = 4 [pid 5631] close(3 [pid 5630] write(3, "1000", 4 [pid 5632] close(3 [pid 5631] <... close resumed>) = 0 [pid 5630] <... write resumed>) = 4 [pid 5632] <... close resumed>) = 0 [pid 5631] symlink("/dev/binderfs", "./binderfs" [pid 5630] close(3 [pid 5632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5631] <... symlink resumed>) = 0 [pid 5630] <... close resumed>) = 0 [pid 5632] memfd_create("syzkaller", 0 [pid 5631] memfd_create("syzkaller", 0 [pid 5630] symlink("/dev/binderfs", "./binderfs" [pid 5632] <... memfd_create resumed>) = 3 [pid 5631] <... memfd_create resumed>) = 3 [pid 5630] <... symlink resumed>) = 0 [pid 5629] <... write resumed>) = 2097152 [pid 5626] <... pwritev resumed>) = 1114112 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5630] memfd_create("syzkaller", 0 [pid 5626] exit_group(0 [pid 5632] <... mmap resumed>) = 0x7f241a43b000 [pid 5631] <... mmap resumed>) = 0x7f241a43b000 [pid 5630] <... memfd_create resumed>) = 3 [pid 5629] munmap(0x7f241a43b000, 2097152 [pid 5626] <... exit_group resumed>) = ? [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5629] <... munmap resumed>) = 0 [pid 5628] <... mount resumed>) = 0 [pid 5630] <... mmap resumed>) = 0x7f241a43b000 [pid 5629] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5629] <... openat resumed>) = 4 [pid 5628] <... openat resumed>) = 3 [pid 5629] ioctl(4, LOOP_SET_FD, 3 [pid 5628] chdir("./file0" [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5628] <... chdir resumed>) = 0 [pid 5629] <... ioctl resumed>) = 0 [pid 5629] close(3 [pid 5628] ioctl(4, LOOP_CLR_FD) = 0 [pid 5628] close(4) = 0 [pid 5628] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5629] <... close resumed>) = 0 [pid 5629] mkdir("./file0", 0777) = 0 [pid 5628] <... openat resumed>) = 4 [pid 5628] unlink("./file1" [pid 5629] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5628] <... unlink resumed>) = 0 [ 122.786394][ T5633] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.816581][ T5629] loop3: detected capacity change from 0 to 4096 [pid 5628] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5632] <... write resumed>) = 2097152 [pid 5629] <... mount resumed>) = 0 [pid 5629] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5629] chdir("./file0") = 0 [pid 5629] ioctl(4, LOOP_CLR_FD) = 0 [pid 5629] close(4) = 0 [pid 5629] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5630] <... write resumed>) = 2097152 [pid 5629] unlink("./file1" [pid 5632] munmap(0x7f241a43b000, 2097152) = 0 [pid 5631] <... write resumed>) = 2097152 [pid 5632] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5632] ioctl(4, LOOP_SET_FD, 3 [pid 5631] munmap(0x7f241a43b000, 2097152) = 0 [pid 5626] +++ exited with 0 +++ [pid 5631] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5626, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5632] <... ioctl resumed>) = 0 [pid 5631] <... openat resumed>) = 4 [pid 5630] munmap(0x7f241a43b000, 2097152 [pid 5631] ioctl(4, LOOP_SET_FD, 3 [ 122.902592][ T5634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.940299][ T5632] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./46/binderfs") = 0 [pid 5632] close(3 [pid 5065] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... close resumed>) = 0 [pid 5632] mkdir("./file0", 0777) = 0 [pid 5630] <... munmap resumed>) = 0 [pid 5629] <... unlink resumed>) = 0 [pid 5632] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5630] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5629] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5630] <... openat resumed>) = 4 [ 122.956514][ T5631] loop4: detected capacity change from 0 to 4096 [pid 5630] ioctl(4, LOOP_SET_FD, 3 [pid 5631] <... ioctl resumed>) = 0 [pid 5631] close(3) = 0 [pid 5631] mkdir("./file0", 0777 [pid 5630] <... ioctl resumed>) = 0 [pid 5631] <... mkdir resumed>) = 0 [pid 5631] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5630] close(3) = 0 [pid 5630] mkdir("./file0", 0777) = 0 [pid 5632] <... mount resumed>) = 0 [pid 5630] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = 0 [pid 5632] <... openat resumed>) = 3 [pid 5632] chdir("./file0") = 0 [pid 5065] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] <... ioctl resumed>) = 0 [pid 5632] close(4 [pid 5065] lstat("./46/file0", [pid 5632] <... close resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 123.003869][ T5630] loop5: detected capacity change from 0 to 4096 [ 123.022987][ T5635] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5632] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... openat resumed>) = 4 [pid 5630] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] unlink("./file1" [pid 5630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5630] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5630] chdir("./file0" [pid 5065] fstat(4, [pid 5630] <... chdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] <... unlink resumed>) = 0 [pid 5630] ioctl(4, LOOP_CLR_FD [pid 5065] getdents64(4, [pid 5632] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5631] <... mount resumed>) = 0 [pid 5630] <... ioctl resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] getdents64(4, [pid 5631] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5631] chdir("./file0" [pid 5065] close(4 [pid 5631] <... chdir resumed>) = 0 [pid 5630] close(4 [pid 5065] <... close resumed>) = 0 [pid 5631] ioctl(4, LOOP_CLR_FD [pid 5630] <... close resumed>) = 0 [pid 5065] rmdir("./46/file0" [pid 5631] <... ioctl resumed>) = 0 [pid 5630] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... rmdir resumed>) = 0 [pid 5631] close(4 [pid 5065] getdents64(3, [pid 5630] <... openat resumed>) = 4 [pid 5631] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5630] unlink("./file1" [pid 5631] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] close(3 [pid 5631] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5631] unlink("./file1" [pid 5065] rmdir("./46") = 0 [pid 5065] mkdir("./47", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [ 123.070859][ T5636] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.096980][ T5637] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5630] <... unlink resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5638 [pid 5630] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0./strace-static-x86_64: Process 5638 attached [pid 5638] chdir("./47") = 0 [pid 5638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5638] setpgid(0, 0) = 0 [pid 5638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1000", 4 [pid 5631] <... unlink resumed>) = 0 [pid 5638] <... write resumed>) = 4 [pid 5631] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5638] close(3) = 0 [pid 5638] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5638] memfd_create("syzkaller", 0) = 3 [pid 5628] <... pwritev resumed>) = 1114112 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5628] exit_group(0 [pid 5638] <... mmap resumed>) = 0x7f241a43b000 [pid 5628] <... exit_group resumed>) = ? [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5638] munmap(0x7f241a43b000, 2097152) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5638] ioctl(4, LOOP_SET_FD, 3 [pid 5628] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5628, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5638] <... ioctl resumed>) = 0 [pid 5638] close(3 [pid 5063] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5638] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5638] <... mkdir resumed>) = 0 [pid 5638] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [ 123.355096][ T5638] loop2: detected capacity change from 0 to 4096 [pid 5063] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./45/binderfs") = 0 [pid 5063] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5629] <... pwritev resumed>) = 1114112 [pid 5629] exit_group(0) = ? [pid 5632] <... pwritev resumed>) = 1114112 [pid 5063] <... umount2 resumed>) = 0 [pid 5638] <... mount resumed>) = 0 [pid 5632] exit_group(0 [pid 5631] <... pwritev resumed>) = 1114112 [pid 5063] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5632] <... exit_group resumed>) = ? [pid 5631] exit_group(0 [pid 5638] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5638] chdir("./file0") = 0 [pid 5638] ioctl(4, LOOP_CLR_FD) = 0 [pid 5638] close(4) = 0 [pid 5631] <... exit_group resumed>) = ? [pid 5063] lstat("./45/file0", [pid 5638] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5638] unlink("./file1" [pid 5063] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 123.483502][ T5639] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5630] <... pwritev resumed>) = 1114112 [pid 5063] fstat(4, [pid 5630] exit_group(0) = ? [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5638] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5638] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./45/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./45") = 0 [pid 5063] mkdir("./46", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5640 attached [pid 5631] +++ exited with 0 +++ [pid 5629] +++ exited with 0 +++ [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5640 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5629, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5640] chdir("./46" [pid 5066] <... restart_syscall resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5067] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5640] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./46/binderfs") = 0 [pid 5067] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5630] +++ exited with 0 +++ [pid 5066] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5640] <... prctl resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5630, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5640] setpgid(0, 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5640] <... setpgid resumed>) = 0 [pid 5632] +++ exited with 0 +++ [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] fstat(3, [pid 5640] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5640] write(3, "1000", 4 [pid 5068] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5066] getdents64(3, [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5640] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5640] close(3 [pid 5068] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5640] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] lstat("./46/file0", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5640] symlink("/dev/binderfs", "./binderfs" [pid 5068] fstat(3, [pid 5064] <... restart_syscall resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./45/binderfs", [pid 5640] <... symlink resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5640] memfd_create("syzkaller", 0 [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./45/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5640] <... memfd_create resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5640] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] fstat(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 5066] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] lstat("./46/binderfs", [pid 5067] fstat(4, [pid 5064] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] unlink("./46/binderfs" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./45/binderfs", [pid 5068] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] unlink("./45/binderfs" [pid 5067] getdents64(4, [pid 5064] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(4) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] rmdir("./46/file0" [pid 5066] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./45/file0", [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./46" [pid 5066] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./47", 0777 [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] getdents64(4, [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5641 ./strace-static-x86_64: Process 5641 attached [pid 5641] chdir("./47") = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5641] <... prctl resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5641] setpgid(0, 0 [pid 5066] rmdir("./45/file0" [pid 5064] <... umount2 resumed>) = 0 [pid 5641] <... setpgid resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./45") = 0 [pid 5066] mkdir("./46", 0777 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... mkdir resumed>) = 0 [pid 5641] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5641] write(3, "1000", 4 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5642 [pid 5641] <... write resumed>) = 4 ./strace-static-x86_64: Process 5642 attached [pid 5642] chdir("./46") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] close(3 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] <... close resumed>) = 0 [pid 5642] write(3, "1000", 4 [pid 5641] symlink("/dev/binderfs", "./binderfs" [pid 5642] <... write resumed>) = 4 [pid 5642] close(3) = 0 [pid 5641] <... symlink resumed>) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5641] memfd_create("syzkaller", 0 [pid 5642] memfd_create("syzkaller", 0 [pid 5641] <... memfd_create resumed>) = 3 [pid 5068] <... umount2 resumed>) = 0 [pid 5064] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5642] <... memfd_create resumed>) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5641] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5642] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./45/file0", [pid 5068] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] fstat(4, [pid 5064] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(4, [pid 5068] getdents64(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5068] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5068] close(4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] close(4 [pid 5068] rmdir("./46/file0" [pid 5064] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] rmdir("./45/file0" [pid 5068] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5068] close(3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] close(3 [pid 5068] rmdir("./46" [pid 5064] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] rmdir("./45" [pid 5068] mkdir("./47", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] mkdir("./46", 0777 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] close(3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... close resumed>) = 0 [pid 5064] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5643 [pid 5638] <... pwritev resumed>) = 1114112 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5644 ./strace-static-x86_64: Process 5644 attached [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5638] exit_group(0 [pid 5644] chdir("./46" [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5638] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5643 attached [pid 5643] chdir("./47") = 0 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] <... chdir resumed>) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5644] <... prctl resumed>) = 0 [pid 5643] <... openat resumed>) = 3 [pid 5644] setpgid(0, 0 [pid 5643] write(3, "1000", 4 [pid 5644] <... setpgid resumed>) = 0 [pid 5643] <... write resumed>) = 4 [pid 5643] close(3 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5643] <... close resumed>) = 0 [pid 5643] symlink("/dev/binderfs", "./binderfs" [pid 5644] <... openat resumed>) = 3 [pid 5643] <... symlink resumed>) = 0 [pid 5644] write(3, "1000", 4 [pid 5643] memfd_create("syzkaller", 0 [pid 5644] <... write resumed>) = 4 [pid 5643] <... memfd_create resumed>) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5644] close(3 [pid 5643] <... mmap resumed>) = 0x7f241a43b000 [pid 5644] <... close resumed>) = 0 [pid 5640] <... write resumed>) = 2097152 [pid 5644] symlink("/dev/binderfs", "./binderfs" [pid 5640] munmap(0x7f241a43b000, 2097152 [pid 5644] <... symlink resumed>) = 0 [pid 5644] memfd_create("syzkaller", 0) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5640] <... munmap resumed>) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5640] <... openat resumed>) = 4 [pid 5640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5642] <... write resumed>) = 2097152 [pid 5640] close(3 [pid 5642] munmap(0x7f241a43b000, 2097152 [pid 5640] <... close resumed>) = 0 [pid 5640] mkdir("./file0", 0777) = 0 [pid 5640] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5642] <... munmap resumed>) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5642] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5641] <... write resumed>) = 2097152 [ 123.936369][ T5640] loop0: detected capacity change from 0 to 4096 [ 123.967759][ T5642] loop3: detected capacity change from 0 to 4096 [pid 5641] munmap(0x7f241a43b000, 2097152 [pid 5642] close(3 [pid 5640] <... mount resumed>) = 0 [pid 5642] <... close resumed>) = 0 [pid 5642] mkdir("./file0", 0777 [pid 5641] <... munmap resumed>) = 0 [pid 5642] <... mkdir resumed>) = 0 [pid 5642] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5641] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5641] ioctl(4, LOOP_SET_FD, 3 [pid 5640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5638] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5638, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5640] <... openat resumed>) = 3 [pid 5640] chdir("./file0" [pid 5065] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5640] <... chdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5640] ioctl(4, LOOP_CLR_FD [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5640] <... ioctl resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5640] close(4 [pid 5065] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] <... write resumed>) = 2097152 [pid 5643] <... write resumed>) = 2097152 [pid 5641] <... ioctl resumed>) = 0 [pid 5640] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5644] munmap(0x7f241a43b000, 2097152 [pid 5643] munmap(0x7f241a43b000, 2097152 [pid 5641] close(3 [pid 5640] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] lstat("./47/binderfs", [pid 5644] <... munmap resumed>) = 0 [pid 5643] <... munmap resumed>) = 0 [pid 5641] <... close resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5643] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 123.999138][ T5645] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.005419][ T5641] loop4: detected capacity change from 0 to 4096 [pid 5641] mkdir("./file0", 0777 [pid 5640] <... openat resumed>) = 4 [pid 5065] unlink("./47/binderfs" [pid 5644] <... openat resumed>) = 4 [pid 5643] <... openat resumed>) = 4 [pid 5642] <... mount resumed>) = 0 [pid 5641] <... mkdir resumed>) = 0 [pid 5644] ioctl(4, LOOP_SET_FD, 3 [pid 5643] ioctl(4, LOOP_SET_FD, 3 [pid 5641] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5640] unlink("./file1" [pid 5065] <... unlink resumed>) = 0 [pid 5642] <... openat resumed>) = 3 [pid 5065] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5642] chdir("./file0") = 0 [pid 5642] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] close(4) = 0 [pid 5642] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5642] unlink("./file1") = 0 [pid 5642] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5640] <... unlink resumed>) = 0 [pid 5640] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5644] <... ioctl resumed>) = 0 [pid 5643] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [ 124.057478][ T5646] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.063760][ T5644] loop1: detected capacity change from 0 to 4096 [ 124.075863][ T5643] loop5: detected capacity change from 0 to 4096 [pid 5644] close(3 [pid 5643] close(3 [pid 5065] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] <... close resumed>) = 0 [pid 5643] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5644] mkdir("./file0", 0777 [pid 5643] mkdir("./file0", 0777 [pid 5065] lstat("./47/file0", [pid 5644] <... mkdir resumed>) = 0 [pid 5643] <... mkdir resumed>) = 0 [pid 5641] <... mount resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5644] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5643] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5641] chdir("./file0") = 0 [pid 5065] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5641] close(4 [pid 5065] fstat(4, [pid 5641] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5641] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5641] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5641] unlink("./file1" [pid 5065] close(4) = 0 [pid 5065] rmdir("./47/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./47") = 0 [pid 5065] mkdir("./48", 0777) = 0 [ 124.129038][ T5647] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5641] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5650 attached [pid 5644] <... mount resumed>) = 0 [pid 5641] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5650] chdir("./48" [pid 5644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5643] <... mount resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5650 [pid 5650] <... chdir resumed>) = 0 [pid 5644] <... openat resumed>) = 3 [pid 5643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5644] chdir("./file0" [pid 5643] <... openat resumed>) = 3 [pid 5650] <... prctl resumed>) = 0 [pid 5644] <... chdir resumed>) = 0 [pid 5643] chdir("./file0" [pid 5650] setpgid(0, 0 [pid 5644] ioctl(4, LOOP_CLR_FD [pid 5643] <... chdir resumed>) = 0 [pid 5650] <... setpgid resumed>) = 0 [pid 5644] <... ioctl resumed>) = 0 [pid 5643] ioctl(4, LOOP_CLR_FD [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5644] close(4 [pid 5643] <... ioctl resumed>) = 0 [pid 5650] <... openat resumed>) = 3 [pid 5643] close(4 [pid 5644] <... close resumed>) = 0 [pid 5644] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5643] <... close resumed>) = 0 [pid 5650] write(3, "1000", 4 [pid 5643] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5650] <... write resumed>) = 4 [pid 5644] <... openat resumed>) = 4 [pid 5643] <... openat resumed>) = 4 [ 124.207976][ T5649] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.226672][ T5648] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5650] close(3) = 0 [pid 5644] unlink("./file1" [pid 5643] unlink("./file1" [pid 5650] symlink("/dev/binderfs", "./binderfs" [pid 5643] <... unlink resumed>) = 0 [pid 5650] <... symlink resumed>) = 0 [pid 5644] <... unlink resumed>) = 0 [pid 5643] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5644] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5650] memfd_create("syzkaller", 0) = 3 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5642] <... pwritev resumed>) = 1114112 [pid 5642] exit_group(0) = ? [pid 5650] <... write resumed>) = 2097152 [pid 5650] munmap(0x7f241a43b000, 2097152) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5650] close(3) = 0 [pid 5650] mkdir("./file0", 0777) = 0 [pid 5650] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5640] <... pwritev resumed>) = 1114112 [pid 5640] exit_group(0) = ? [pid 5642] +++ exited with 0 +++ [ 124.500531][ T5650] loop2: detected capacity change from 0 to 4096 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./46/binderfs") = 0 [pid 5066] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] <... pwritev resumed>) = 1114112 [pid 5641] exit_group(0) = ? [pid 5650] <... mount resumed>) = 0 [pid 5650] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5650] chdir("./file0") = 0 [pid 5650] ioctl(4, LOOP_CLR_FD) = 0 [pid 5650] close(4) = 0 [pid 5650] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... umount2 resumed>) = 0 [pid 5650] <... openat resumed>) = 4 [pid 5066] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5650] unlink("./file1" [pid 5643] <... pwritev resumed>) = 1114112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5644] <... pwritev resumed>) = 1114112 [pid 5643] exit_group(0 [pid 5066] lstat("./46/file0", [pid 5644] exit_group(0 [pid 5643] <... exit_group resumed>) = ? [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5644] <... exit_group resumed>) = ? [pid 5066] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5650] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 124.628242][ T5651] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] fstat(4, [pid 5650] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./46/file0") = 0 [pid 5641] +++ exited with 0 +++ [pid 5066] getdents64(3, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5640] +++ exited with 0 +++ [pid 5066] close(3) = 0 [pid 5066] rmdir("./46") = 0 [pid 5066] mkdir("./47", 0777 [pid 5067] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5640, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5066] close(3 [pid 5067] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5063] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5652 [pid 5067] fstat(3, [pid 5063] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5063] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5652 attached [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] fstat(3, [pid 5652] chdir("./47" [pid 5067] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5652] <... chdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] lstat("./47/binderfs", [pid 5652] <... prctl resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5652] setpgid(0, 0 [pid 5067] unlink("./47/binderfs" [pid 5063] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] <... setpgid resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./46/binderfs", [pid 5652] <... openat resumed>) = 3 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5652] write(3, "1000", 4 [pid 5063] unlink("./46/binderfs" [pid 5652] <... write resumed>) = 4 [pid 5652] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5652] <... close resumed>) = 0 [pid 5652] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] <... symlink resumed>) = 0 [pid 5652] memfd_create("syzkaller", 0) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5644] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5652] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./46/binderfs") = 0 [pid 5064] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5068] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./47/binderfs") = 0 [pid 5068] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5067] close(4) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5067] rmdir("./47/file0") = 0 [pid 5063] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5063] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] lstat("./46/file0", [pid 5063] <... openat resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5067] <... close resumed>) = 0 [pid 5064] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./47" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5064] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5067] mkdir("./48", 0777 [pid 5064] fstat(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(4 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./46/file0" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] getdents64(4, [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5650] <... pwritev resumed>) = 1114112 [pid 5067] close(3 [pid 5064] close(4 [pid 5063] getdents64(3, [pid 5650] exit_group(0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5650] <... exit_group resumed>) = ? [pid 5067] <... close resumed>) = 0 [pid 5064] rmdir("./46/file0" [pid 5063] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] rmdir("./46" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5653 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5063] mkdir("./47", 0777 [pid 5064] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] rmdir("./46" [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5653 attached [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5653] chdir("./48" [pid 5064] mkdir("./47", 0777 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5653] <... chdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] close(3 [pid 5653] <... prctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5653] setpgid(0, 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5653] <... setpgid resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5654 [pid 5653] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5653] write(3, "1000", 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5653] <... write resumed>) = 4 [pid 5653] close(3 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5655 [pid 5653] <... close resumed>) = 0 [pid 5653] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5654 attached ) = 0 [pid 5654] chdir("./47" [pid 5653] memfd_create("syzkaller", 0 [pid 5654] <... chdir resumed>) = 0 [pid 5653] <... memfd_create resumed>) = 3 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5655 attached [pid 5654] <... prctl resumed>) = 0 [pid 5653] <... mmap resumed>) = 0x7f241a43b000 [pid 5655] chdir("./47" [pid 5654] setpgid(0, 0 [pid 5652] <... write resumed>) = 2097152 [pid 5068] <... umount2 resumed>) = 0 [pid 5655] <... chdir resumed>) = 0 [pid 5654] <... setpgid resumed>) = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] <... prctl resumed>) = 0 [pid 5654] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5655] setpgid(0, 0 [pid 5654] write(3, "1000", 4 [pid 5068] lstat("./47/file0", [pid 5655] <... setpgid resumed>) = 0 [pid 5654] <... write resumed>) = 4 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5654] close(3 [pid 5652] munmap(0x7f241a43b000, 2097152 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5655] <... openat resumed>) = 3 [pid 5654] <... close resumed>) = 0 [pid 5068] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] write(3, "1000", 4 [pid 5654] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5655] <... write resumed>) = 4 [pid 5654] <... symlink resumed>) = 0 [pid 5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5652] <... munmap resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5655] close(3 [pid 5654] memfd_create("syzkaller", 0 [pid 5652] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... openat resumed>) = 4 [pid 5655] <... close resumed>) = 0 [pid 5654] <... memfd_create resumed>) = 3 [pid 5068] fstat(4, [pid 5655] symlink("/dev/binderfs", "./binderfs" [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5652] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5655] <... symlink resumed>) = 0 [pid 5654] <... mmap resumed>) = 0x7f241a43b000 [pid 5652] ioctl(4, LOOP_SET_FD, 3 [pid 5068] getdents64(4, [pid 5655] memfd_create("syzkaller", 0) = 3 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5652] <... ioctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5652] close(3 [pid 5650] +++ exited with 0 +++ [pid 5068] getdents64(4, [pid 5652] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5650, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5652] mkdir("./file0", 0777 [pid 5068] close(4 [pid 5652] <... mkdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5652] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] rmdir("./47/file0" [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5065] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5068] rmdir("./47" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5068] mkdir("./48", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... mkdir resumed>) = 0 [ 125.026626][ T5652] loop3: detected capacity change from 0 to 4096 [pid 5065] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5065] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] unlink("./48/binderfs" [pid 5068] close(3) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5657 ./strace-static-x86_64: Process 5657 attached [pid 5654] <... write resumed>) = 2097152 [pid 5653] <... write resumed>) = 2097152 [pid 5652] <... mount resumed>) = 0 [pid 5653] munmap(0x7f241a43b000, 2097152 [pid 5657] chdir("./48" [pid 5652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5655] <... write resumed>) = 2097152 [pid 5654] munmap(0x7f241a43b000, 2097152 [pid 5653] <... munmap resumed>) = 0 [pid 5657] <... chdir resumed>) = 0 [pid 5652] <... openat resumed>) = 3 [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5654] <... munmap resumed>) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5652] chdir("./file0" [pid 5657] <... prctl resumed>) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5653] <... openat resumed>) = 4 [pid 5652] <... chdir resumed>) = 0 [pid 5657] setpgid(0, 0 [pid 5654] <... openat resumed>) = 4 [pid 5653] ioctl(4, LOOP_SET_FD, 3 [pid 5652] ioctl(4, LOOP_CLR_FD [pid 5657] <... setpgid resumed>) = 0 [pid 5655] munmap(0x7f241a43b000, 2097152 [pid 5654] ioctl(4, LOOP_SET_FD, 3 [pid 5652] <... ioctl resumed>) = 0 [pid 5655] <... munmap resumed>) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5655] ioctl(4, LOOP_SET_FD, 3 [ 125.117468][ T5656] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.154555][ T5653] loop4: detected capacity change from 0 to 4096 [ 125.159972][ T5655] loop1: detected capacity change from 0 to 4096 [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5652] close(4) = 0 [pid 5652] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5652] unlink("./file1" [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5657] <... openat resumed>) = 3 [pid 5657] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5657] <... write resumed>) = 4 [pid 5653] <... ioctl resumed>) = 0 [pid 5654] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5657] close(3 [pid 5654] close(3 [pid 5653] close(3 [pid 5065] fstat(4, [pid 5657] <... close resumed>) = 0 [pid 5655] <... ioctl resumed>) = 0 [pid 5654] <... close resumed>) = 0 [pid 5653] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5657] symlink("/dev/binderfs", "./binderfs" [pid 5655] close(3 [pid 5654] mkdir("./file0", 0777 [pid 5653] mkdir("./file0", 0777 [pid 5652] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5657] <... symlink resumed>) = 0 [pid 5655] <... close resumed>) = 0 [pid 5652] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5657] memfd_create("syzkaller", 0 [pid 5655] mkdir("./file0", 0777 [pid 5654] <... mkdir resumed>) = 0 [pid 5653] <... mkdir resumed>) = 0 [pid 5657] <... memfd_create resumed>) = 3 [ 125.162497][ T5654] loop0: detected capacity change from 0 to 4096 [pid 5654] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5653] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] getdents64(4, [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5655] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5657] <... mmap resumed>) = 0x7f241a43b000 [pid 5655] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] close(4) = 0 [pid 5065] rmdir("./48/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./48") = 0 [pid 5065] mkdir("./49", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5661 [pid 5655] <... mount resumed>) = 0 [pid 5654] <... mount resumed>) = 0 [pid 5655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5654] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5661 attached [pid 5655] <... openat resumed>) = 3 [pid 5653] <... mount resumed>) = 0 [pid 5661] chdir("./49" [pid 5655] chdir("./file0" [pid 5653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5661] <... chdir resumed>) = 0 [pid 5655] <... chdir resumed>) = 0 [pid 5654] <... openat resumed>) = 3 [pid 5653] <... openat resumed>) = 3 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5655] ioctl(4, LOOP_CLR_FD [pid 5654] chdir("./file0" [pid 5653] chdir("./file0" [pid 5661] <... prctl resumed>) = 0 [pid 5655] <... ioctl resumed>) = 0 [pid 5654] <... chdir resumed>) = 0 [pid 5653] <... chdir resumed>) = 0 [pid 5661] setpgid(0, 0 [pid 5655] close(4 [pid 5654] ioctl(4, LOOP_CLR_FD [pid 5653] ioctl(4, LOOP_CLR_FD [pid 5661] <... setpgid resumed>) = 0 [pid 5655] <... close resumed>) = 0 [pid 5654] <... ioctl resumed>) = 0 [pid 5653] <... ioctl resumed>) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5655] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5654] close(4 [pid 5653] close(4 [pid 5661] <... openat resumed>) = 3 [pid 5655] <... openat resumed>) = 4 [pid 5654] <... close resumed>) = 0 [pid 5653] <... close resumed>) = 0 [pid 5661] write(3, "1000", 4 [pid 5655] unlink("./file1" [pid 5654] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5653] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5661] <... write resumed>) = 4 [pid 5654] <... openat resumed>) = 4 [pid 5653] <... openat resumed>) = 4 [pid 5661] close(3 [pid 5654] unlink("./file1" [pid 5653] unlink("./file1" [pid 5661] <... close resumed>) = 0 [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5654] <... unlink resumed>) = 0 [pid 5661] memfd_create("syzkaller", 0 [pid 5654] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5661] <... memfd_create resumed>) = 3 [ 125.256893][ T5658] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.270443][ T5659] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.285443][ T5660] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5655] <... unlink resumed>) = 0 [pid 5655] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5653] <... unlink resumed>) = 0 [pid 5653] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5657] <... write resumed>) = 2097152 [pid 5657] munmap(0x7f241a43b000, 2097152) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5657] close(3) = 0 [pid 5657] mkdir("./file0", 0777 [pid 5661] <... write resumed>) = 2097152 [pid 5657] <... mkdir resumed>) = 0 [ 125.444476][ T5657] loop5: detected capacity change from 0 to 4096 [pid 5657] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5661] munmap(0x7f241a43b000, 2097152) = 0 [pid 5657] <... mount resumed>) = 0 [pid 5657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5661] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5657] <... openat resumed>) = 3 [pid 5661] <... openat resumed>) = 4 [pid 5657] chdir("./file0" [pid 5661] ioctl(4, LOOP_SET_FD, 3 [pid 5657] <... chdir resumed>) = 0 [pid 5657] ioctl(4, LOOP_CLR_FD [pid 5652] <... pwritev resumed>) = 1114112 [pid 5657] <... ioctl resumed>) = 0 [pid 5657] close(4 [pid 5652] exit_group(0 [pid 5657] <... close resumed>) = 0 [pid 5657] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5652] <... exit_group resumed>) = ? [pid 5661] <... ioctl resumed>) = 0 [pid 5661] close(3) = 0 [pid 5661] mkdir("./file0", 0777 [pid 5657] <... openat resumed>) = 4 [pid 5661] <... mkdir resumed>) = 0 [ 125.516391][ T5662] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.530389][ T5661] loop2: detected capacity change from 0 to 4096 [pid 5657] unlink("./file1" [pid 5661] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5657] <... unlink resumed>) = 0 [pid 5657] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5661] <... mount resumed>) = 0 [pid 5661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5661] chdir("./file0") = 0 [pid 5661] ioctl(4, LOOP_CLR_FD) = 0 [pid 5661] close(4 [pid 5654] <... pwritev resumed>) = 1114112 [pid 5661] <... close resumed>) = 0 [pid 5654] exit_group(0 [pid 5661] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5654] <... exit_group resumed>) = ? [pid 5661] <... openat resumed>) = 4 [pid 5652] +++ exited with 0 +++ [pid 5661] unlink("./file1" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5652, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 125.647632][ T5663] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./47/binderfs" [pid 5661] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5661] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5653] <... pwritev resumed>) = 1114112 [pid 5653] exit_group(0) = ? [pid 5655] <... pwritev resumed>) = 1114112 [pid 5655] exit_group(0) = ? [pid 5066] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./47/file0", [pid 5654] +++ exited with 0 +++ [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5654, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, [pid 5063] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5063] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5066] getdents64(4, [pid 5063] fstat(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(4 [pid 5063] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] rmdir("./47/file0" [pid 5063] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5063] lstat("./47/binderfs", [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] close(3 [pid 5063] unlink("./47/binderfs" [pid 5066] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5066] rmdir("./47" [pid 5063] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./48", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5655] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5655, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... restart_syscall resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5664 [pid 5064] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./47/binderfs") = 0 [pid 5064] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5664 attached [pid 5664] chdir("./48") = 0 [pid 5664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5664] setpgid(0, 0) = 0 [pid 5664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5664] write(3, "1000", 4) = 4 [pid 5664] close(3) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5664] memfd_create("syzkaller", 0) = 3 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5653] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5653, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5067] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./48/binderfs") = 0 [pid 5067] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5657] <... pwritev resumed>) = 1114112 [pid 5063] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5657] exit_group(0 [pid 5063] <... openat resumed>) = 4 [pid 5657] <... exit_group resumed>) = ? [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./47/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./47") = 0 [pid 5063] mkdir("./48", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5064] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5665 [pid 5064] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5664] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5665 attached [pid 5067] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5665] chdir("./48" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5665] <... chdir resumed>) = 0 [pid 5067] lstat("./48/file0", [pid 5064] getdents64(4, [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5665] <... prctl resumed>) = 0 [pid 5064] getdents64(4, [pid 5665] setpgid(0, 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5665] <... setpgid resumed>) = 0 [pid 5064] close(4 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... close resumed>) = 0 [pid 5665] <... openat resumed>) = 3 [pid 5064] rmdir("./47/file0" [pid 5665] write(3, "1000", 4 [pid 5067] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5665] <... write resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5665] close(3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5665] <... close resumed>) = 0 [pid 5064] close(3 [pid 5665] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... close resumed>) = 0 [pid 5665] <... symlink resumed>) = 0 [pid 5064] rmdir("./47" [pid 5665] memfd_create("syzkaller", 0 [pid 5664] munmap(0x7f241a43b000, 2097152 [pid 5067] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 5665] <... memfd_create resumed>) = 3 [pid 5664] <... munmap resumed>) = 0 [pid 5661] <... pwritev resumed>) = 1114112 [pid 5067] <... openat resumed>) = 4 [pid 5064] mkdir("./48", 0777 [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5664] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5661] exit_group(0 [pid 5067] fstat(4, [pid 5064] <... mkdir resumed>) = 0 [pid 5665] <... mmap resumed>) = 0x7f241a43b000 [pid 5664] <... openat resumed>) = 4 [pid 5661] <... exit_group resumed>) = ? [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5664] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... openat resumed>) = 3 [pid 5664] <... ioctl resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] getdents64(4, [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5666 [pid 5067] getdents64(4, [pid 5657] +++ exited with 0 +++ [pid 5665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5666 attached [pid 5664] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5657, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5067] close(4 [pid 5664] <... close resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... close resumed>) = 0 [pid 5666] chdir("./48" [pid 5664] mkdir("./file0", 0777 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] rmdir("./48/file0" [pid 5666] <... chdir resumed>) = 0 [pid 5664] <... mkdir resumed>) = 0 [pid 5666] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5664] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... rmdir resumed>) = 0 [pid 5666] <... prctl resumed>) = 0 [pid 5068] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5666] setpgid(0, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5666] <... setpgid resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5666] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5067] rmdir("./48" [pid 5666] write(3, "1000", 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5666] <... write resumed>) = 4 [pid 5068] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5666] close(3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] mkdir("./49", 0777 [pid 5666] <... close resumed>) = 0 [pid 5068] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5666] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5666] <... symlink resumed>) = 0 [pid 5068] lstat("./48/binderfs", [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5666] memfd_create("syzkaller", 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [ 126.118238][ T5664] loop3: detected capacity change from 0 to 4096 [pid 5666] <... memfd_create resumed>) = 3 [pid 5068] unlink("./48/binderfs" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5666] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... unlink resumed>) = 0 [pid 5067] close(3 [pid 5665] <... write resumed>) = 2097152 [pid 5661] +++ exited with 0 +++ [pid 5068] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5665] munmap(0x7f241a43b000, 2097152 [pid 5067] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5665] <... munmap resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5665] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5668 [pid 5065] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5664] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5668 attached [pid 5664] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5668] chdir("./49" [pid 5664] chdir("./file0" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5668] <... chdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5668] <... prctl resumed>) = 0 [pid 5065] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5668] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5668] <... setpgid resumed>) = 0 [pid 5065] lstat("./49/binderfs", [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5668] <... openat resumed>) = 3 [pid 5065] unlink("./49/binderfs" [pid 5668] write(3, "1000", 4 [pid 5664] <... chdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5668] <... write resumed>) = 4 [pid 5664] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5668] close(3 [pid 5664] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5668] <... close resumed>) = 0 [pid 5665] <... ioctl resumed>) = 0 [pid 5664] close(4 [pid 5668] symlink("/dev/binderfs", "./binderfs" [pid 5665] close(3 [pid 5664] <... close resumed>) = 0 [pid 5668] <... symlink resumed>) = 0 [pid 5665] <... close resumed>) = 0 [pid 5664] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5668] memfd_create("syzkaller", 0 [ 126.204212][ T5665] loop0: detected capacity change from 0 to 4096 [ 126.212920][ T5667] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5665] mkdir("./file0", 0777 [pid 5668] <... memfd_create resumed>) = 3 [pid 5665] <... mkdir resumed>) = 0 [pid 5664] <... openat resumed>) = 4 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5665] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5664] unlink("./file1" [pid 5668] <... mmap resumed>) = 0x7f241a43b000 [pid 5664] <... unlink resumed>) = 0 [pid 5664] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./49/file0", [pid 5068] lstat("./48/file0", [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5665] <... mount resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 5665] <... openat resumed>) = 3 [pid 5065] fstat(4, [pid 5665] chdir("./file0" [pid 5068] <... openat resumed>) = 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5665] <... chdir resumed>) = 0 [pid 5068] fstat(4, [pid 5065] getdents64(4, [pid 5665] ioctl(4, LOOP_CLR_FD [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5665] <... ioctl resumed>) = 0 [pid 5068] getdents64(4, [pid 5065] getdents64(4, [pid 5665] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5665] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5065] close(4 [pid 5665] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5665] <... openat resumed>) = 4 [pid 5068] close(4 [pid 5065] rmdir("./49/file0" [pid 5665] unlink("./file1" [pid 5068] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5666] <... write resumed>) = 2097152 [pid 5068] rmdir("./48/file0" [pid 5065] getdents64(3, [pid 5666] munmap(0x7f241a43b000, 2097152 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] close(3 [pid 5068] getdents64(3, [pid 5065] <... close resumed>) = 0 [ 126.313045][ T5669] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./49" [pid 5068] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] mkdir("./50", 0777 [pid 5666] <... munmap resumed>) = 0 [pid 5068] rmdir("./48" [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5666] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... rmdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5666] <... openat resumed>) = 4 [pid 5068] mkdir("./49", 0777 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5666] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5670 [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5666] <... ioctl resumed>) = 0 [pid 5665] <... unlink resumed>) = 0 [pid 5666] close(3 [pid 5665] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5670 attached [pid 5666] <... close resumed>) = 0 [pid 5068] close(3 [pid 5666] mkdir("./file0", 0777 [pid 5068] <... close resumed>) = 0 [pid 5670] chdir("./50" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5666] <... mkdir resumed>) = 0 [pid 5670] <... chdir resumed>) = 0 [pid 5666] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5670] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5671 [pid 5670] <... prctl resumed>) = 0 [pid 5670] setpgid(0, 0./strace-static-x86_64: Process 5671 attached ) = 0 [pid 5668] <... write resumed>) = 2097152 [pid 5671] chdir("./49" [pid 5670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] <... chdir resumed>) = 0 [pid 5670] write(3, "1000", 4 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5670] <... write resumed>) = 4 [pid 5671] <... prctl resumed>) = 0 [pid 5670] close(3 [pid 5668] munmap(0x7f241a43b000, 2097152 [pid 5671] setpgid(0, 0 [pid 5670] <... close resumed>) = 0 [pid 5668] <... munmap resumed>) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 126.387268][ T5666] loop1: detected capacity change from 0 to 4096 [pid 5668] ioctl(4, LOOP_SET_FD, 3 [pid 5671] <... setpgid resumed>) = 0 [pid 5670] symlink("/dev/binderfs", "./binderfs" [pid 5666] <... mount resumed>) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5670] <... symlink resumed>) = 0 [pid 5666] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5671] write(3, "1000", 4 [pid 5670] memfd_create("syzkaller", 0 [pid 5671] <... write resumed>) = 4 [pid 5670] <... memfd_create resumed>) = 3 [pid 5666] <... openat resumed>) = 3 [pid 5671] close(3 [pid 5670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5666] chdir("./file0" [pid 5671] <... close resumed>) = 0 [pid 5670] <... mmap resumed>) = 0x7f241a43b000 [pid 5666] <... chdir resumed>) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs" [pid 5668] <... ioctl resumed>) = 0 [pid 5668] close(3) = 0 [pid 5668] mkdir("./file0", 0777) = 0 [pid 5668] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5666] ioctl(4, LOOP_CLR_FD [pid 5671] <... symlink resumed>) = 0 [pid 5666] <... ioctl resumed>) = 0 [pid 5671] memfd_create("syzkaller", 0 [pid 5666] close(4 [pid 5671] <... memfd_create resumed>) = 3 [pid 5666] <... close resumed>) = 0 [ 126.446046][ T5668] loop4: detected capacity change from 0 to 4096 [ 126.452619][ T5672] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5666] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5671] <... mmap resumed>) = 0x7f241a43b000 [pid 5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5666] <... openat resumed>) = 4 [pid 5668] <... mount resumed>) = 0 [pid 5666] unlink("./file1" [pid 5668] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5666] <... unlink resumed>) = 0 [pid 5668] <... openat resumed>) = 3 [pid 5666] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5668] chdir("./file0") = 0 [pid 5668] ioctl(4, LOOP_CLR_FD) = 0 [pid 5668] close(4) = 0 [pid 5668] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 126.546372][ T5673] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5668] unlink("./file1") = 0 [pid 5668] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5671] <... write resumed>) = 2097152 [pid 5670] <... write resumed>) = 2097152 [pid 5671] munmap(0x7f241a43b000, 2097152 [pid 5670] munmap(0x7f241a43b000, 2097152 [pid 5671] <... munmap resumed>) = 0 [pid 5670] <... munmap resumed>) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5670] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5671] <... openat resumed>) = 4 [pid 5670] <... openat resumed>) = 4 [pid 5671] ioctl(4, LOOP_SET_FD, 3 [pid 5670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5671] <... ioctl resumed>) = 0 [pid 5670] close(3 [pid 5671] close(3 [pid 5670] <... close resumed>) = 0 [pid 5671] <... close resumed>) = 0 [pid 5670] mkdir("./file0", 0777 [pid 5671] mkdir("./file0", 0777 [pid 5670] <... mkdir resumed>) = 0 [pid 5664] <... pwritev resumed>) = 1114112 [pid 5671] <... mkdir resumed>) = 0 [pid 5670] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5664] exit_group(0 [ 126.670058][ T5671] loop5: detected capacity change from 0 to 4096 [ 126.676946][ T5670] loop2: detected capacity change from 0 to 4096 [pid 5671] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5664] <... exit_group resumed>) = ? [pid 5665] <... pwritev resumed>) = 1114112 [pid 5665] exit_group(0) = ? [pid 5670] <... mount resumed>) = 0 [pid 5670] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5670] chdir("./file0") = 0 [pid 5670] ioctl(4, LOOP_CLR_FD) = 0 [pid 5670] close(4) = 0 [pid 5670] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5671] <... mount resumed>) = 0 [pid 5671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5670] <... openat resumed>) = 4 [pid 5671] <... openat resumed>) = 3 [pid 5670] unlink("./file1" [pid 5671] chdir("./file0") = 0 [pid 5671] ioctl(4, LOOP_CLR_FD) = 0 [pid 5671] close(4) = 0 [pid 5671] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 126.746960][ T5674] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.776536][ T5675] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5671] unlink("./file1" [pid 5670] <... unlink resumed>) = 0 [pid 5670] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5671] <... unlink resumed>) = 0 [pid 5671] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5666] <... pwritev resumed>) = 1114112 [pid 5666] exit_group(0) = ? [pid 5664] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5664, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5665] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5665, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5063] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5063] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 3 [pid 5066] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./48/binderfs", [pid 5063] getdents64(3, [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] unlink("./48/binderfs" [pid 5063] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5666] +++ exited with 0 +++ [pid 5066] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5666, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5063] lstat("./48/binderfs", [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] unlink("./48/binderfs") = 0 [pid 5063] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./48/binderfs") = 0 [pid 5064] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5668] <... pwritev resumed>) = 1114112 [pid 5063] <... umount2 resumed>) = 0 [pid 5668] exit_group(0) = ? [pid 5066] <... umount2 resumed>) = 0 [pid 5063] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./48/file0", [pid 5063] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5063] <... openat resumed>) = 4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5063] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./48/file0" [pid 5063] getdents64(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5066] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5066] rmdir("./48" [pid 5063] rmdir("./48/file0" [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] mkdir("./49", 0777 [pid 5064] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5064] lstat("./48/file0", [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./48" [pid 5066] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] close(4 [pid 5063] mkdir("./49", 0777 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5676 [pid 5064] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] rmdir("./48/file0" [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] getdents64(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5676 attached [pid 5064] close(3 [pid 5063] close(3 [pid 5676] chdir("./49" [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5676] <... chdir resumed>) = 0 [pid 5064] rmdir("./48" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5676] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... rmdir resumed>) = 0 [pid 5676] <... prctl resumed>) = 0 [pid 5064] mkdir("./49", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5677 [pid 5676] setpgid(0, 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5676] <... setpgid resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5677 attached [pid 5676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... openat resumed>) = 3 [pid 5677] chdir("./49" [pid 5676] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5677] <... chdir resumed>) = 0 [pid 5676] write(3, "1000", 4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5676] <... write resumed>) = 4 [pid 5064] close(3 [pid 5677] <... prctl resumed>) = 0 [pid 5676] close(3 [pid 5064] <... close resumed>) = 0 [pid 5677] setpgid(0, 0 [pid 5676] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5677] <... setpgid resumed>) = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5678 ./strace-static-x86_64: Process 5678 attached [pid 5677] <... openat resumed>) = 3 [pid 5676] symlink("/dev/binderfs", "./binderfs" [pid 5670] <... pwritev resumed>) = 1114112 [pid 5677] write(3, "1000", 4 [pid 5678] chdir("./49" [pid 5676] <... symlink resumed>) = 0 [pid 5670] exit_group(0 [pid 5678] <... chdir resumed>) = 0 [pid 5677] <... write resumed>) = 4 [pid 5676] memfd_create("syzkaller", 0 [pid 5670] <... exit_group resumed>) = ? [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5676] <... memfd_create resumed>) = 3 [pid 5676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5676] <... mmap resumed>) = 0x7f241a43b000 [pid 5668] +++ exited with 0 +++ [pid 5678] <... prctl resumed>) = 0 [pid 5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5668, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5678] setpgid(0, 0) = 0 [pid 5678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5678] write(3, "1000", 4 [pid 5067] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5678] <... write resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5678] close(3 [pid 5067] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5678] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5678] symlink("/dev/binderfs", "./binderfs" [pid 5067] fstat(3, [pid 5678] <... symlink resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5678] memfd_create("syzkaller", 0 [pid 5067] getdents64(3, [pid 5678] <... memfd_create resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5678] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./49/binderfs") = 0 [pid 5067] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5670] +++ exited with 0 +++ [pid 5671] <... pwritev resumed>) = 1114112 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5670, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5671] exit_group(0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5671] <... exit_group resumed>) = ? [pid 5065] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./50/binderfs") = 0 [pid 5065] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5676] <... write resumed>) = 2097152 [pid 5067] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5677] <... write resumed>) = 2097152 [pid 5067] fstat(4, [pid 5677] munmap(0x7f241a43b000, 2097152 [pid 5676] munmap(0x7f241a43b000, 2097152 [pid 5677] <... munmap resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5067] getdents64(4, [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5676] <... munmap resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5677] <... openat resumed>) = 4 [pid 5676] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5677] ioctl(4, LOOP_SET_FD, 3 [pid 5676] <... openat resumed>) = 4 [pid 5067] getdents64(4, [pid 5678] <... write resumed>) = 2097152 [pid 5676] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5678] munmap(0x7f241a43b000, 2097152 [pid 5677] <... ioctl resumed>) = 0 [pid 5067] close(4 [pid 5065] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5678] <... munmap resumed>) = 0 [pid 5677] close(3 [pid 5676] <... ioctl resumed>) = 0 [pid 5671] +++ exited with 0 +++ [pid 5067] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5678] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5677] <... close resumed>) = 0 [pid 5678] <... openat resumed>) = 4 [pid 5067] rmdir("./49/file0" [pid 5678] ioctl(4, LOOP_SET_FD, 3 [pid 5065] lstat("./50/file0", [pid 5676] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5676] <... close resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5676] mkdir("./file0", 0777) = 0 [pid 5676] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5677] mkdir("./file0", 0777 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5065] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5678] <... ioctl resumed>) = 0 [pid 5677] <... mkdir resumed>) = 0 [pid 5068] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5678] close(3) = 0 [pid 5677] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5065] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5678] mkdir("./file0", 0777 [pid 5068] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5678] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] rmdir("./49" [pid 5065] fstat(4, [pid 5678] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] fstat(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] mkdir("./50", 0777 [pid 5065] getdents64(4, [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(4, [pid 5068] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] close(4 [pid 5068] lstat("./49/binderfs", [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... close resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] close(3 [pid 5065] rmdir("./50/file0" [pid 5068] unlink("./49/binderfs" [pid 5067] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(3, [pid 5068] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5680 [pid 5065] close(3) = 0 [pid 5065] rmdir("./50") = 0 [ 127.372525][ T5677] loop0: detected capacity change from 0 to 4096 [ 127.381658][ T5676] loop3: detected capacity change from 0 to 4096 [ 127.393263][ T5678] loop1: detected capacity change from 0 to 4096 [pid 5065] mkdir("./51", 0777 [pid 5677] <... mount resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5680 attached ) = -1 ENXIO (No such device or address) [pid 5677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3 [pid 5680] chdir("./50" [pid 5677] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5680] <... chdir resumed>) = 0 [pid 5678] <... mount resumed>) = 0 [pid 5677] chdir("./file0" [pid 5676] <... mount resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5683 attached [pid 5680] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5678] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5677] <... chdir resumed>) = 0 [pid 5676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5683] chdir("./51" [pid 5678] <... openat resumed>) = 3 [pid 5677] ioctl(4, LOOP_CLR_FD [pid 5676] <... openat resumed>) = 3 [pid 5683] <... chdir resumed>) = 0 [pid 5678] chdir("./file0" [pid 5677] <... ioctl resumed>) = 0 [pid 5676] chdir("./file0" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5678] <... chdir resumed>) = 0 [pid 5677] close(4 [pid 5676] <... chdir resumed>) = 0 [pid 5683] <... prctl resumed>) = 0 [pid 5680] <... prctl resumed>) = 0 [pid 5678] ioctl(4, LOOP_CLR_FD [pid 5677] <... close resumed>) = 0 [pid 5676] ioctl(4, LOOP_CLR_FD [pid 5068] lstat("./49/file0", [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5683 [pid 5683] setpgid(0, 0 [pid 5678] <... ioctl resumed>) = 0 [pid 5677] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5676] <... ioctl resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5683] <... setpgid resumed>) = 0 [pid 5680] setpgid(0, 0 [pid 5678] close(4 [pid 5676] close(4 [pid 5068] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5677] <... openat resumed>) = 4 [pid 5683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5678] <... close resumed>) = 0 [pid 5676] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5680] <... setpgid resumed>) = 0 [pid 5683] <... openat resumed>) = 3 [pid 5678] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5677] unlink("./file1" [pid 5676] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5683] write(3, "1000", 4 [pid 5680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... openat resumed>) = 4 [pid 5683] <... write resumed>) = 4 [pid 5678] <... openat resumed>) = 4 [pid 5677] <... unlink resumed>) = 0 [pid 5676] <... openat resumed>) = 4 [pid 5068] fstat(4, [pid 5683] close(3 [pid 5680] <... openat resumed>) = 3 [pid 5678] unlink("./file1" [pid 5677] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5676] unlink("./file1" [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5683] <... close resumed>) = 0 [pid 5680] write(3, "1000", 4 [pid 5068] getdents64(4, [pid 5683] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5683] <... symlink resumed>) = 0 [pid 5068] getdents64(4, [pid 5683] memfd_create("syzkaller", 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5683] <... memfd_create resumed>) = 3 [pid 5068] close(4 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... close resumed>) = 0 [pid 5683] <... mmap resumed>) = 0x7f241a43b000 [ 127.436939][ T5679] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.455849][ T5682] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.468602][ T5681] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] rmdir("./49/file0" [pid 5680] <... write resumed>) = 4 [pid 5678] <... unlink resumed>) = 0 [pid 5676] <... unlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5680] close(3 [pid 5678] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5676] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] getdents64(3, [pid 5680] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5680] symlink("/dev/binderfs", "./binderfs" [pid 5068] close(3) = 0 [pid 5068] rmdir("./49" [pid 5680] <... symlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./50", 0777 [pid 5680] memfd_create("syzkaller", 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5680] <... memfd_create resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5680] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5684 ./strace-static-x86_64: Process 5684 attached [pid 5684] chdir("./50" [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5684] <... chdir resumed>) = 0 [pid 5684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5684] setpgid(0, 0) = 0 [pid 5684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5684] write(3, "1000", 4) = 4 [pid 5684] close(3) = 0 [pid 5684] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5684] memfd_create("syzkaller", 0) = 3 [pid 5684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5683] <... write resumed>) = 2097152 [pid 5683] munmap(0x7f241a43b000, 2097152) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5680] <... write resumed>) = 2097152 [pid 5683] close(3) = 0 [pid 5683] mkdir("./file0", 0777) = 0 [pid 5683] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5680] munmap(0x7f241a43b000, 2097152) = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 127.660379][ T5683] loop2: detected capacity change from 0 to 4096 [pid 5680] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5680] close(3) = 0 [pid 5680] mkdir("./file0", 0777 [pid 5684] <... write resumed>) = 2097152 [pid 5680] <... mkdir resumed>) = 0 [ 127.721276][ T5680] loop4: detected capacity change from 0 to 4096 [pid 5680] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5683] <... mount resumed>) = 0 [pid 5683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5683] chdir("./file0" [pid 5684] munmap(0x7f241a43b000, 2097152 [pid 5683] <... chdir resumed>) = 0 [pid 5683] ioctl(4, LOOP_CLR_FD) = 0 [pid 5684] <... munmap resumed>) = 0 [pid 5683] close(4 [pid 5684] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5683] <... close resumed>) = 0 [pid 5680] <... mount resumed>) = 0 [pid 5684] <... openat resumed>) = 4 [pid 5683] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5680] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5684] ioctl(4, LOOP_SET_FD, 3 [pid 5680] <... openat resumed>) = 3 [ 127.777309][ T5685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.806399][ T5686] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5683] <... openat resumed>) = 4 [pid 5684] <... ioctl resumed>) = 0 [pid 5683] unlink("./file1" [pid 5680] chdir("./file0" [pid 5684] close(3 [pid 5680] <... chdir resumed>) = 0 [pid 5680] ioctl(4, LOOP_CLR_FD [pid 5684] <... close resumed>) = 0 [pid 5684] mkdir("./file0", 0777 [pid 5680] <... ioctl resumed>) = 0 [pid 5680] close(4 [pid 5684] <... mkdir resumed>) = 0 [pid 5680] <... close resumed>) = 0 [pid 5684] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5680] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5683] <... unlink resumed>) = 0 [pid 5683] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5680] <... openat resumed>) = 4 [pid 5680] unlink("./file1") = 0 [ 127.829787][ T5684] loop5: detected capacity change from 0 to 4096 [pid 5680] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5678] <... pwritev resumed>) = 1114112 [pid 5678] exit_group(0) = ? [pid 5684] <... mount resumed>) = 0 [pid 5684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5677] <... pwritev resumed>) = 1114112 [pid 5684] <... openat resumed>) = 3 [pid 5677] exit_group(0 [pid 5676] <... pwritev resumed>) = 1114112 [pid 5684] chdir("./file0" [pid 5677] <... exit_group resumed>) = ? [pid 5676] exit_group(0 [pid 5684] <... chdir resumed>) = 0 [pid 5676] <... exit_group resumed>) = ? [pid 5684] ioctl(4, LOOP_CLR_FD) = 0 [pid 5684] close(4) = 0 [ 127.940090][ T5687] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5684] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5684] unlink("./file1") = 0 [pid 5684] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5678] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5678, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5677] +++ exited with 0 +++ [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5676] +++ exited with 0 +++ [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5064] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... restart_syscall resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5676, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] lstat("./49/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] unlink("./49/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5683] <... pwritev resumed>) = 1114112 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5683] exit_group(0 [pid 5066] fstat(3, [pid 5064] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5683] <... exit_group resumed>) = ? [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(3, [pid 5066] getdents64(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 5066] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./49/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] lstat("./49/binderfs", [pid 5066] unlink("./49/binderfs" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5063] unlink("./49/binderfs" [pid 5066] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5680] <... pwritev resumed>) = 1114112 [pid 5684] <... pwritev resumed>) = 1114112 [pid 5064] getdents64(4, [pid 5680] exit_group(0 [pid 5684] exit_group(0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5680] <... exit_group resumed>) = ? [pid 5064] getdents64(4, [pid 5684] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./49/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./49") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5064] mkdir("./50", 0777 [pid 5063] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] lstat("./49/file0", [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./49/file0", [pid 5064] close(3 [pid 5063] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5688 [pid 5063] fstat(4, [pid 5066] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] fstat(4, [pid 5063] getdents64(4, ./strace-static-x86_64: Process 5688 attached [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5688] chdir("./50" [pid 5066] getdents64(4, [pid 5063] close(4 [pid 5688] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5688] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] getdents64(4, [pid 5063] rmdir("./49/file0" [pid 5688] <... prctl resumed>) = 0 [pid 5683] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5688] setpgid(0, 0 [pid 5066] close(4 [pid 5063] getdents64(3, [pid 5688] <... setpgid resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5683, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] rmdir("./49/file0" [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5063] close(3 [pid 5688] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5688] write(3, "1000", 4 [pid 5066] getdents64(3, [pid 5063] rmdir("./49" [pid 5688] <... write resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5688] close(3 [pid 5066] close(3 [pid 5065] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./50", 0777 [pid 5688] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5688] symlink("/dev/binderfs", "./binderfs" [pid 5066] rmdir("./49" [pid 5065] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5688] <... symlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5688] memfd_create("syzkaller", 0 [pid 5066] mkdir("./50", 0777 [pid 5065] fstat(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5688] <... memfd_create resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] getdents64(3, [pid 5063] close(3 [pid 5688] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5689 [pid 5065] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5684] +++ exited with 0 +++ [pid 5680] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5684, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5065] lstat("./51/binderfs", ./strace-static-x86_64: Process 5690 attached ./strace-static-x86_64: Process 5689 attached [pid 5068] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5680, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5690] chdir("./50" [pid 5689] chdir("./50" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5690 [pid 5690] <... chdir resumed>) = 0 [pid 5689] <... chdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] unlink("./51/binderfs" [pid 5690] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5689] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... openat resumed>) = 3 [pid 5067] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5690] <... prctl resumed>) = 0 [pid 5689] <... prctl resumed>) = 0 [pid 5068] fstat(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5690] setpgid(0, 0 [pid 5689] setpgid(0, 0 [pid 5688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5690] <... setpgid resumed>) = 0 [pid 5689] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./50/binderfs") = 0 [pid 5067] <... openat resumed>) = 3 [pid 5690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] fstat(3, [pid 5690] <... openat resumed>) = 3 [pid 5688] <... write resumed>) = 2097152 [pid 5689] <... openat resumed>) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5690] write(3, "1000", 4 [pid 5689] write(3, "1000", 4 [pid 5688] munmap(0x7f241a43b000, 2097152 [pid 5690] <... write resumed>) = 4 [pid 5689] <... write resumed>) = 4 [pid 5067] getdents64(3, [pid 5688] <... munmap resumed>) = 0 [pid 5690] close(3 [pid 5689] close(3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5690] <... close resumed>) = 0 [pid 5689] <... close resumed>) = 0 [pid 5690] symlink("/dev/binderfs", "./binderfs" [pid 5689] symlink("/dev/binderfs", "./binderfs" [pid 5688] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5690] <... symlink resumed>) = 0 [pid 5689] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5689] memfd_create("syzkaller", 0 [pid 5067] lstat("./50/binderfs", [pid 5690] memfd_create("syzkaller", 0 [pid 5689] <... memfd_create resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5690] <... memfd_create resumed>) = 3 [pid 5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5688] <... openat resumed>) = 4 [pid 5067] unlink("./50/binderfs") = 0 [pid 5690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5689] <... mmap resumed>) = 0x7f241a43b000 [pid 5688] ioctl(4, LOOP_SET_FD, 3 [pid 5067] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5688] <... ioctl resumed>) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./50/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./50") = 0 [pid 5068] mkdir("./51", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5691 [ 128.446666][ T5688] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5691 attached [pid 5688] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./51/file0", [pid 5691] chdir("./51" [pid 5688] <... close resumed>) = 0 [pid 5691] <... chdir resumed>) = 0 [pid 5688] mkdir("./file0", 0777 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5688] <... mkdir resumed>) = 0 [pid 5691] <... prctl resumed>) = 0 [pid 5688] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5691] setpgid(0, 0) = 0 [pid 5065] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5691] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5691] write(3, "1000", 4) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5691] close(3 [pid 5065] fstat(4, [pid 5691] <... close resumed>) = 0 [pid 5691] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5691] <... symlink resumed>) = 0 [pid 5691] memfd_create("syzkaller", 0 [pid 5065] getdents64(4, [pid 5691] <... memfd_create resumed>) = 3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5691] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5067] lstat("./50/file0", [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] close(4 [pid 5067] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./51/file0" [pid 5067] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] fstat(4, [pid 5065] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] close(3 [pid 5067] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./51" [pid 5067] close(4) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5690] <... write resumed>) = 2097152 [pid 5689] <... write resumed>) = 2097152 [pid 5067] rmdir("./50/file0" [pid 5065] mkdir("./52", 0777 [pid 5690] munmap(0x7f241a43b000, 2097152 [pid 5689] munmap(0x7f241a43b000, 2097152 [pid 5688] <... mount resumed>) = 0 [pid 5688] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5690] <... munmap resumed>) = 0 [pid 5688] <... openat resumed>) = 3 [pid 5688] chdir("./file0" [pid 5689] <... munmap resumed>) = 0 [pid 5690] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5688] <... chdir resumed>) = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] getdents64(3, [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5690] <... openat resumed>) = 4 [pid 5689] <... openat resumed>) = 4 [pid 5688] ioctl(4, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5690] ioctl(4, LOOP_SET_FD, 3 [pid 5689] ioctl(4, LOOP_SET_FD, 3 [pid 5688] <... ioctl resumed>) = 0 [pid 5067] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5688] close(4) = 0 [pid 5688] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5688] unlink("./file1" [pid 5689] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5688] <... unlink resumed>) = 0 [pid 5688] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] rmdir("./50" [pid 5065] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./51", 0777 [pid 5065] <... close resumed>) = 0 [pid 5690] <... ioctl resumed>) = 0 [pid 5690] close(3 [pid 5689] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5690] <... close resumed>) = 0 [pid 5689] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5690] mkdir("./file0", 0777 [pid 5689] mkdir("./file0", 0777 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5693 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5690] <... mkdir resumed>) = 0 [pid 5690] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5689] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5693 attached [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5694 [pid 5689] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5693] chdir("./52") = 0 ./strace-static-x86_64: Process 5694 attached [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5694] chdir("./51" [pid 5693] <... prctl resumed>) = 0 [pid 5694] <... chdir resumed>) = 0 [pid 5693] setpgid(0, 0 [pid 5694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5693] <... setpgid resumed>) = 0 [pid 5694] <... prctl resumed>) = 0 [ 128.567104][ T5692] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.592229][ T5690] loop0: detected capacity change from 0 to 4096 [ 128.599082][ T5689] loop3: detected capacity change from 0 to 4096 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5694] setpgid(0, 0 [pid 5693] <... openat resumed>) = 3 [pid 5694] <... setpgid resumed>) = 0 [pid 5693] write(3, "1000", 4 [pid 5694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5693] <... write resumed>) = 4 [pid 5694] <... openat resumed>) = 3 [pid 5693] close(3 [pid 5694] write(3, "1000", 4 [pid 5693] <... close resumed>) = 0 [pid 5694] <... write resumed>) = 4 [pid 5693] symlink("/dev/binderfs", "./binderfs" [pid 5694] close(3 [pid 5693] <... symlink resumed>) = 0 [pid 5694] <... close resumed>) = 0 [pid 5693] memfd_create("syzkaller", 0 [pid 5691] <... write resumed>) = 2097152 [pid 5694] symlink("/dev/binderfs", "./binderfs" [pid 5693] <... memfd_create resumed>) = 3 [pid 5691] munmap(0x7f241a43b000, 2097152 [pid 5694] <... symlink resumed>) = 0 [pid 5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5694] memfd_create("syzkaller", 0 [pid 5693] <... mmap resumed>) = 0x7f241a43b000 [pid 5691] <... munmap resumed>) = 0 [pid 5694] <... memfd_create resumed>) = 3 [pid 5691] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5691] <... openat resumed>) = 4 [pid 5690] <... mount resumed>) = 0 [pid 5691] ioctl(4, LOOP_SET_FD, 3 [pid 5690] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5689] <... mount resumed>) = 0 [pid 5690] <... openat resumed>) = 3 [pid 5689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5691] <... ioctl resumed>) = 0 [pid 5690] chdir("./file0" [pid 5689] <... openat resumed>) = 3 [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5691] close(3 [pid 5690] <... chdir resumed>) = 0 [pid 5689] chdir("./file0" [pid 5691] <... close resumed>) = 0 [pid 5690] ioctl(4, LOOP_CLR_FD [pid 5689] <... chdir resumed>) = 0 [pid 5691] mkdir("./file0", 0777 [pid 5690] <... ioctl resumed>) = 0 [pid 5691] <... mkdir resumed>) = 0 [pid 5690] close(4 [pid 5689] ioctl(4, LOOP_CLR_FD [pid 5691] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5690] <... close resumed>) = 0 [pid 5689] <... ioctl resumed>) = 0 [pid 5689] close(4 [pid 5690] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5689] <... close resumed>) = 0 [pid 5689] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5690] <... openat resumed>) = 4 [pid 5689] <... openat resumed>) = 4 [pid 5690] unlink("./file1" [ 128.698404][ T5695] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.709164][ T5696] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.727401][ T5691] loop5: detected capacity change from 0 to 4096 [pid 5689] unlink("./file1" [pid 5690] <... unlink resumed>) = 0 [pid 5689] <... unlink resumed>) = 0 [pid 5690] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5689] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5693] <... write resumed>) = 2097152 [pid 5691] <... mount resumed>) = 0 [pid 5691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5691] chdir("./file0") = 0 [pid 5691] ioctl(4, LOOP_CLR_FD [pid 5693] munmap(0x7f241a43b000, 2097152 [pid 5691] <... ioctl resumed>) = 0 [pid 5691] close(4 [pid 5694] <... write resumed>) = 2097152 [pid 5693] <... munmap resumed>) = 0 [pid 5691] <... close resumed>) = 0 [pid 5691] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5694] munmap(0x7f241a43b000, 2097152 [pid 5693] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5694] <... munmap resumed>) = 0 [pid 5693] <... openat resumed>) = 4 [pid 5691] <... openat resumed>) = 4 [pid 5693] ioctl(4, LOOP_SET_FD, 3 [ 128.817037][ T5697] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5691] unlink("./file1" [pid 5694] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5693] <... ioctl resumed>) = 0 [pid 5693] close(3) = 0 [pid 5693] mkdir("./file0", 0777 [pid 5691] <... unlink resumed>) = 0 [pid 5694] close(3 [pid 5693] <... mkdir resumed>) = 0 [pid 5691] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5694] <... close resumed>) = 0 [pid 5693] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5694] mkdir("./file0", 0777) = 0 [ 128.859447][ T5693] loop2: detected capacity change from 0 to 4096 [ 128.869189][ T5694] loop4: detected capacity change from 0 to 4096 [pid 5694] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5688] <... pwritev resumed>) = 1114112 [pid 5688] exit_group(0) = ? [pid 5693] <... mount resumed>) = 0 [pid 5693] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5693] chdir("./file0") = 0 [pid 5693] ioctl(4, LOOP_CLR_FD) = 0 [pid 5693] close(4) = 0 [pid 5693] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5694] <... mount resumed>) = 0 [pid 5693] <... openat resumed>) = 4 [pid 5694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5693] unlink("./file1" [pid 5694] <... openat resumed>) = 3 [pid 5694] chdir("./file0") = 0 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [pid 5694] close(4) = 0 [pid 5694] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5694] unlink("./file1" [pid 5693] <... unlink resumed>) = 0 [ 128.956319][ T5698] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.978435][ T5699] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5693] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5694] <... unlink resumed>) = 0 [pid 5688] +++ exited with 0 +++ [pid 5694] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5688, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5690] <... pwritev resumed>) = 1114112 [pid 5690] exit_group(0) = ? [pid 5064] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./50/binderfs") = 0 [pid 5064] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] <... pwritev resumed>) = 1114112 [pid 5689] exit_group(0) = ? [pid 5691] <... pwritev resumed>) = 1114112 [pid 5691] exit_group(0) = ? [pid 5064] <... umount2 resumed>) = 0 [pid 5691] +++ exited with 0 +++ [pid 5064] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5691, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] lstat("./50/file0", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5064] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(4, [pid 5068] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] unlink("./51/binderfs" [pid 5690] +++ exited with 0 +++ [pid 5068] <... unlink resumed>) = 0 [pid 5064] getdents64(4, [pid 5068] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5690, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5063] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./50/file0" [pid 5063] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] getdents64(3, [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./50" [pid 5063] lstat("./50/binderfs", [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] mkdir("./51", 0777 [pid 5063] unlink("./50/binderfs" [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5689] +++ exited with 0 +++ [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5689, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] close(3 [pid 5066] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5700 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./50/binderfs") = 0 [pid 5066] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5700 attached [pid 5700] chdir("./51") = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5700] setpgid(0, 0) = 0 [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5700] write(3, "1000", 4) = 4 [pid 5700] close(3) = 0 [pid 5700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5700] memfd_create("syzkaller", 0) = 3 [pid 5700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5068] fstat(4, [pid 5063] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(4, [pid 5063] lstat("./50/file0", [pid 5693] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5693] <... exit_group resumed>) = ? [pid 5068] close(4 [pid 5066] lstat("./50/file0", [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5063] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./51/file0" [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5066] umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, [pid 5068] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5068] rmdir("./51" [pid 5066] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5068] mkdir("./52", 0777 [pid 5066] fstat(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(4 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./50/file0" [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5068] close(3 [pid 5066] close(4 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5063] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] rmdir("./50/file0" [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./50" [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5701 [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5063] mkdir("./51", 0777 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5701 attached [pid 5066] rmdir("./50" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5701] chdir("./52" [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5701] <... chdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] mkdir("./51", 0777 [pid 5063] <... close resumed>) = 0 [pid 5701] <... prctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5701] setpgid(0, 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5701] <... setpgid resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5702 [pid 5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5701] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5701] write(3, "1000", 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5702 attached [pid 5701] <... write resumed>) = 4 [pid 5066] close(3 [pid 5702] chdir("./51" [pid 5701] close(3 [pid 5066] <... close resumed>) = 0 [pid 5702] <... chdir resumed>) = 0 [pid 5701] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5702] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5701] symlink("/dev/binderfs", "./binderfs" [pid 5700] <... write resumed>) = 2097152 [pid 5702] <... prctl resumed>) = 0 [pid 5701] <... symlink resumed>) = 0 [pid 5702] setpgid(0, 0 [pid 5701] memfd_create("syzkaller", 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5703 [pid 5702] <... setpgid resumed>) = 0 [pid 5701] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5703 attached [pid 5702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5694] <... pwritev resumed>) = 1114112 [pid 5703] chdir("./51" [pid 5702] <... openat resumed>) = 3 [pid 5701] <... mmap resumed>) = 0x7f241a43b000 [pid 5694] exit_group(0 [pid 5703] <... chdir resumed>) = 0 [pid 5702] write(3, "1000", 4 [pid 5694] <... exit_group resumed>) = ? [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5702] <... write resumed>) = 4 [pid 5703] <... prctl resumed>) = 0 [pid 5702] close(3 [pid 5703] setpgid(0, 0 [pid 5702] <... close resumed>) = 0 [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5703] <... setpgid resumed>) = 0 [pid 5702] symlink("/dev/binderfs", "./binderfs" [pid 5693] +++ exited with 0 +++ [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5702] <... symlink resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5693, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5703] <... openat resumed>) = 3 [pid 5702] memfd_create("syzkaller", 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5703] write(3, "1000", 4 [pid 5702] <... memfd_create resumed>) = 3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5703] <... write resumed>) = 4 [pid 5702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5703] close(3 [pid 5702] <... mmap resumed>) = 0x7f241a43b000 [pid 5700] munmap(0x7f241a43b000, 2097152 [pid 5703] <... close resumed>) = 0 [pid 5065] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5703] symlink("/dev/binderfs", "./binderfs" [pid 5700] <... munmap resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5703] <... symlink resumed>) = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5703] memfd_create("syzkaller", 0 [pid 5700] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5703] <... memfd_create resumed>) = 3 [pid 5700] ioctl(4, LOOP_SET_FD, 3 [pid 5065] fstat(3, [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5703] <... mmap resumed>) = 0x7f241a43b000 [pid 5702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5701] <... write resumed>) = 2097152 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./52/binderfs") = 0 [pid 5065] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5701] munmap(0x7f241a43b000, 2097152) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3 [pid 5700] <... ioctl resumed>) = 0 [pid 5700] close(3) = 0 [pid 5700] mkdir("./file0", 0777) = 0 [pid 5700] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5694] +++ exited with 0 +++ [pid 5701] <... ioctl resumed>) = 0 [pid 5701] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5694, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5701] <... close resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5701] mkdir("./file0", 0777 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5701] <... mkdir resumed>) = 0 [pid 5703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5701] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 129.595626][ T5700] loop1: detected capacity change from 0 to 4096 [ 129.633481][ T5701] loop5: detected capacity change from 0 to 4096 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./51/binderfs" [pid 5065] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5702] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./52/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./52") = 0 [pid 5065] mkdir("./53", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5706 ./strace-static-x86_64: Process 5706 attached [pid 5706] chdir("./53" [pid 5702] munmap(0x7f241a43b000, 2097152 [pid 5706] <... chdir resumed>) = 0 [pid 5706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5706] setpgid(0, 0) = 0 [pid 5706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5702] <... munmap resumed>) = 0 [pid 5706] <... openat resumed>) = 3 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5706] write(3, "1000", 4 [pid 5702] <... openat resumed>) = 4 [pid 5706] <... write resumed>) = 4 [pid 5702] ioctl(4, LOOP_SET_FD, 3 [pid 5706] close(3 [pid 5701] <... mount resumed>) = 0 [pid 5700] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5706] <... close resumed>) = 0 [pid 5701] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5700] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5706] symlink("/dev/binderfs", "./binderfs" [pid 5701] <... openat resumed>) = 3 [pid 5700] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5706] <... symlink resumed>) = 0 [pid 5701] chdir("./file0" [pid 5700] chdir("./file0" [pid 5067] lstat("./51/file0", [pid 5706] memfd_create("syzkaller", 0 [pid 5701] <... chdir resumed>) = 0 [pid 5700] <... chdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5706] <... memfd_create resumed>) = 3 [pid 5702] <... ioctl resumed>) = 0 [pid 5701] ioctl(4, LOOP_CLR_FD [pid 5700] ioctl(4, LOOP_CLR_FD [pid 5067] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5702] close(3 [pid 5701] <... ioctl resumed>) = 0 [pid 5700] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5706] <... mmap resumed>) = 0x7f241a43b000 [pid 5702] <... close resumed>) = 0 [pid 5701] close(4 [ 129.704017][ T5704] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.730352][ T5702] loop0: detected capacity change from 0 to 4096 [ 129.737909][ T5705] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5700] close(4 [pid 5067] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5703] <... write resumed>) = 2097152 [pid 5702] mkdir("./file0", 0777 [pid 5701] <... close resumed>) = 0 [pid 5700] <... close resumed>) = 0 [pid 5703] munmap(0x7f241a43b000, 2097152 [pid 5700] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... openat resumed>) = 4 [pid 5702] <... mkdir resumed>) = 0 [pid 5701] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5703] <... munmap resumed>) = 0 [pid 5702] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5700] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5703] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5701] <... openat resumed>) = 4 [pid 5700] unlink("./file1" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5703] <... openat resumed>) = 4 [pid 5701] unlink("./file1" [pid 5700] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5703] ioctl(4, LOOP_SET_FD, 3 [pid 5701] <... unlink resumed>) = 0 [pid 5700] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5703] <... ioctl resumed>) = 0 [pid 5701] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] getdents64(4, [pid 5706] <... write resumed>) = 2097152 [pid 5703] close(3 [pid 5702] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5706] munmap(0x7f241a43b000, 2097152 [pid 5703] <... close resumed>) = 0 [pid 5702] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] close(4 [pid 5702] <... openat resumed>) = 3 [pid 5706] <... munmap resumed>) = 0 [pid 5703] mkdir("./file0", 0777 [pid 5702] chdir("./file0" [pid 5067] <... close resumed>) = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5702] <... chdir resumed>) = 0 [pid 5706] <... openat resumed>) = 4 [pid 5703] <... mkdir resumed>) = 0 [pid 5702] ioctl(4, LOOP_CLR_FD [pid 5067] rmdir("./51/file0" [pid 5706] ioctl(4, LOOP_SET_FD, 3 [pid 5703] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5702] <... ioctl resumed>) = 0 [pid 5702] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5702] <... close resumed>) = 0 [pid 5702] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 129.818739][ T5703] loop3: detected capacity change from 0 to 4096 [ 129.834997][ T5707] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5702] unlink("./file1" [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5702] <... unlink resumed>) = 0 [pid 5067] close(3 [pid 5702] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... close resumed>) = 0 [pid 5706] <... ioctl resumed>) = 0 [pid 5706] close(3 [pid 5067] rmdir("./51" [pid 5706] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5706] mkdir("./file0", 0777 [pid 5067] mkdir("./52", 0777 [pid 5706] <... mkdir resumed>) = 0 [ 129.864431][ T5706] loop2: detected capacity change from 0 to 4096 [pid 5706] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... mkdir resumed>) = 0 [pid 5703] <... mount resumed>) = 0 [pid 5703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5703] chdir("./file0") = 0 [pid 5703] ioctl(4, LOOP_CLR_FD) = 0 [pid 5703] close(4) = 0 [pid 5703] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5703] unlink("./file1" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5709 ./strace-static-x86_64: Process 5709 attached [pid 5709] chdir("./52") = 0 [ 129.897372][ T5708] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5706] <... mount resumed>) = 0 [pid 5709] setpgid(0, 0 [pid 5706] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5709] <... setpgid resumed>) = 0 [pid 5706] <... openat resumed>) = 3 [pid 5703] <... unlink resumed>) = 0 [pid 5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5706] chdir("./file0" [pid 5703] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5709] <... openat resumed>) = 3 [pid 5706] <... chdir resumed>) = 0 [pid 5709] write(3, "1000", 4 [pid 5706] ioctl(4, LOOP_CLR_FD [pid 5709] <... write resumed>) = 4 [pid 5706] <... ioctl resumed>) = 0 [pid 5709] close(3 [pid 5706] close(4 [pid 5709] <... close resumed>) = 0 [pid 5706] <... close resumed>) = 0 [pid 5709] symlink("/dev/binderfs", "./binderfs" [ 129.947150][ T5710] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5706] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5709] <... symlink resumed>) = 0 [pid 5709] memfd_create("syzkaller", 0 [pid 5706] <... openat resumed>) = 4 [pid 5709] <... memfd_create resumed>) = 3 [pid 5706] unlink("./file1" [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5706] <... unlink resumed>) = 0 [pid 5706] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5700] <... pwritev resumed>) = 1114112 [pid 5700] exit_group(0) = ? [pid 5709] <... write resumed>) = 2097152 [pid 5709] munmap(0x7f241a43b000, 2097152) = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5709] close(3) = 0 [pid 5709] mkdir("./file0", 0777) = 0 [pid 5709] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5700] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5700, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5064] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 130.188821][ T5709] loop4: detected capacity change from 0 to 4096 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5709] <... mount resumed>) = 0 [pid 5064] unlink("./51/binderfs") = 0 [pid 5064] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5709] chdir("./file0") = 0 [pid 5709] ioctl(4, LOOP_CLR_FD) = 0 [ 130.252190][ T5711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5709] close(4) = 0 [pid 5709] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5709] unlink("./file1" [pid 5701] <... pwritev resumed>) = 1114112 [pid 5709] <... unlink resumed>) = 0 [pid 5701] exit_group(0 [pid 5709] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5701] <... exit_group resumed>) = ? [pid 5701] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5701, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5702] <... pwritev resumed>) = 1114112 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5702] exit_group(0 [pid 5068] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5702] <... exit_group resumed>) = ? [pid 5068] <... openat resumed>) = 3 [pid 5702] +++ exited with 0 +++ [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5702, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] lstat("./52/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] fstat(3, [pid 5068] unlink("./52/binderfs" [pid 5064] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5068] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] lstat("./51/file0", [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5703] <... pwritev resumed>) = 1114112 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./51/binderfs", [pid 5703] exit_group(0 [pid 5064] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5703] <... exit_group resumed>) = ? [pid 5064] <... openat resumed>) = 4 [pid 5063] unlink("./51/binderfs" [pid 5706] <... pwritev resumed>) = 1114112 [pid 5064] fstat(4, [pid 5063] <... unlink resumed>) = 0 [pid 5706] exit_group(0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5706] <... exit_group resumed>) = ? [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./51/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./51") = 0 [pid 5064] mkdir("./52", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5712 ./strace-static-x86_64: Process 5712 attached [pid 5712] chdir("./52") = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] write(3, "1000", 4) = 4 [pid 5712] close(3) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5712] memfd_create("syzkaller", 0) = 3 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5703] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5703, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5706] +++ exited with 0 +++ [pid 5066] <... restart_syscall resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5706, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5709] <... pwritev resumed>) = 1114112 [pid 5709] exit_group(0) = ? [pid 5066] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5712] <... write resumed>) = 2097152 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5712] munmap(0x7f241a43b000, 2097152 [pid 5066] fstat(3, [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5712] <... munmap resumed>) = 0 [pid 5065] getdents64(3, [pid 5712] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5712] <... openat resumed>) = 4 [pid 5066] getdents64(3, [pid 5065] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5712] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./53/binderfs") = 0 [pid 5065] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./51/binderfs" [pid 5712] <... ioctl resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5712] close(3 [pid 5066] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5712] <... close resumed>) = 0 [pid 5712] mkdir("./file0", 0777) = 0 [pid 5712] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... umount2 resumed>) = 0 [pid 5709] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5709, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5068] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 130.573559][ T5712] loop1: detected capacity change from 0 to 4096 [pid 5067] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5712] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5067] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5712] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5712] <... openat resumed>) = 3 [pid 5068] close(4 [pid 5067] <... openat resumed>) = 3 [pid 5712] chdir("./file0" [pid 5068] <... close resumed>) = 0 [pid 5067] fstat(3, [pid 5712] <... chdir resumed>) = 0 [pid 5068] rmdir("./52/file0" [pid 5712] ioctl(4, LOOP_CLR_FD [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5712] <... ioctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5712] close(4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5712] <... close resumed>) = 0 [pid 5068] close(3 [pid 5712] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./52" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5712] <... openat resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5712] unlink("./file1" [pid 5068] mkdir("./53", 0777) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 130.617419][ T5713] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] lstat("./52/binderfs", [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5067] unlink("./52/binderfs" [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5714 [pid 5067] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5714 attached [pid 5714] chdir("./53") = 0 [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] <... unlink resumed>) = 0 [pid 5712] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5714] setpgid(0, 0) = 0 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5714] memfd_create("syzkaller", 0) = 3 [pid 5714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./51/file0", [pid 5065] lstat("./53/file0", [pid 5063] lstat("./51/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] munmap(0x7f241a43b000, 2097152 [pid 5066] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = 0 [pid 5066] fstat(4, [pid 5065] fstat(4, [pid 5063] <... openat resumed>) = 4 [pid 5067] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5066] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5067] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5065] getdents64(4, [pid 5067] fstat(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5714] <... munmap resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(4 [pid 5065] close(4 [pid 5714] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5714] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] rmdir("./51/file0" [pid 5065] rmdir("./53/file0" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5714] ioctl(4, LOOP_SET_FD, 3 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] close(4 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./52/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./52") = 0 [pid 5067] mkdir("./53", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] getdents64(3, [pid 5065] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5714] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5714] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] close(3 [pid 5065] close(3 [pid 5063] rmdir("./51/file0" [pid 5714] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5714] mkdir("./file0", 0777 [pid 5067] close(3 [pid 5066] rmdir("./51" [pid 5065] rmdir("./53" [pid 5063] <... rmdir resumed>) = 0 [pid 5714] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5714] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] mkdir("./52", 0777 [pid 5065] mkdir("./54", 0777 [pid 5063] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5715 ./strace-static-x86_64: Process 5715 attached [pid 5715] chdir("./53") = 0 [pid 5715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5715] setpgid(0, 0) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 130.802639][ T5714] loop5: detected capacity change from 0 to 4096 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5715] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5715] write(3, "1000", 4 [pid 5065] <... openat resumed>) = 3 [pid 5715] <... write resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5715] close(3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./51" [pid 5715] <... close resumed>) = 0 [pid 5715] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... rmdir resumed>) = 0 [pid 5715] memfd_create("syzkaller", 0 [pid 5066] close(3 [pid 5065] close(3 [pid 5063] mkdir("./52", 0777 [pid 5715] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5715] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5714] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5718 [pid 5714] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5717 [pid 5063] close(3) = 0 [pid 5714] <... openat resumed>) = 3 [pid 5714] chdir("./file0" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5714] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5719 ./strace-static-x86_64: Process 5719 attached [pid 5714] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5717 attached [pid 5719] chdir("./52" [pid 5714] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5718 attached [pid 5719] <... chdir resumed>) = 0 [pid 5717] chdir("./52" [pid 5714] close(4 [pid 5719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5718] chdir("./54" [pid 5717] <... chdir resumed>) = 0 [pid 5715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5714] <... close resumed>) = 0 [pid 5712] <... pwritev resumed>) = 1114112 [pid 5719] <... prctl resumed>) = 0 [pid 5718] <... chdir resumed>) = 0 [pid 5717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5714] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5712] exit_group(0 [ 130.892696][ T5716] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5719] setpgid(0, 0 [pid 5718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5717] <... prctl resumed>) = 0 [pid 5714] <... openat resumed>) = 4 [pid 5712] <... exit_group resumed>) = ? [pid 5719] <... setpgid resumed>) = 0 [pid 5718] <... prctl resumed>) = 0 [pid 5717] setpgid(0, 0 [pid 5714] unlink("./file1" [pid 5719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5718] setpgid(0, 0 [pid 5717] <... setpgid resumed>) = 0 [pid 5714] <... unlink resumed>) = 0 [pid 5719] <... openat resumed>) = 3 [pid 5718] <... setpgid resumed>) = 0 [pid 5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5714] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5719] write(3, "1000", 4 [pid 5718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5717] <... openat resumed>) = 3 [pid 5719] <... write resumed>) = 4 [pid 5718] <... openat resumed>) = 3 [pid 5717] write(3, "1000", 4 [pid 5719] close(3 [pid 5718] write(3, "1000", 4 [pid 5717] <... write resumed>) = 4 [pid 5719] <... close resumed>) = 0 [pid 5718] <... write resumed>) = 4 [pid 5717] close(3 [pid 5719] symlink("/dev/binderfs", "./binderfs" [pid 5718] close(3 [pid 5717] <... close resumed>) = 0 [pid 5719] <... symlink resumed>) = 0 [pid 5718] <... close resumed>) = 0 [pid 5717] symlink("/dev/binderfs", "./binderfs" [pid 5719] memfd_create("syzkaller", 0 [pid 5718] symlink("/dev/binderfs", "./binderfs" [pid 5717] <... symlink resumed>) = 0 [pid 5719] <... memfd_create resumed>) = 3 [pid 5718] <... symlink resumed>) = 0 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5718] memfd_create("syzkaller", 0 [pid 5717] memfd_create("syzkaller", 0 [pid 5719] <... mmap resumed>) = 0x7f241a43b000 [pid 5718] <... memfd_create resumed>) = 3 [pid 5717] <... memfd_create resumed>) = 3 [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5715] <... write resumed>) = 2097152 [pid 5712] +++ exited with 0 +++ [pid 5718] <... mmap resumed>) = 0x7f241a43b000 [pid 5717] <... mmap resumed>) = 0x7f241a43b000 [pid 5715] munmap(0x7f241a43b000, 2097152 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5712, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5715] <... munmap resumed>) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5715] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5715] <... ioctl resumed>) = 0 [pid 5064] unlink("./52/binderfs" [pid 5715] close(3 [pid 5064] <... unlink resumed>) = 0 [pid 5715] <... close resumed>) = 0 [pid 5064] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5715] mkdir("./file0", 0777 [pid 5719] <... write resumed>) = 2097152 [pid 5715] <... mkdir resumed>) = 0 [pid 5715] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 131.049334][ T5715] loop4: detected capacity change from 0 to 4096 [pid 5718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5719] munmap(0x7f241a43b000, 2097152) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5719] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5715] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] lstat("./52/file0", [pid 5715] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5715] chdir("./file0" [pid 5064] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5715] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5715] ioctl(4, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5718] <... write resumed>) = 2097152 [pid 5715] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5719] <... ioctl resumed>) = 0 [pid 5718] munmap(0x7f241a43b000, 2097152 [pid 5717] <... write resumed>) = 2097152 [ 131.141509][ T5720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.145492][ T5719] loop0: detected capacity change from 0 to 4096 [pid 5715] close(4 [pid 5064] fstat(4, [pid 5719] close(3 [pid 5718] <... munmap resumed>) = 0 [pid 5717] munmap(0x7f241a43b000, 2097152 [pid 5715] <... close resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5719] <... close resumed>) = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5717] <... munmap resumed>) = 0 [pid 5715] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] getdents64(4, [pid 5719] mkdir("./file0", 0777 [pid 5718] <... openat resumed>) = 4 [pid 5717] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5719] <... mkdir resumed>) = 0 [pid 5718] ioctl(4, LOOP_SET_FD, 3 [pid 5717] <... openat resumed>) = 4 [pid 5715] <... openat resumed>) = 4 [pid 5064] getdents64(4, [pid 5719] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5717] ioctl(4, LOOP_SET_FD, 3 [pid 5715] unlink("./file1" [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5718] <... ioctl resumed>) = 0 [pid 5717] <... ioctl resumed>) = 0 [pid 5718] close(3 [pid 5717] close(3 [pid 5064] close(4 [pid 5715] <... unlink resumed>) = 0 [ 131.184366][ T5718] loop2: detected capacity change from 0 to 4096 [ 131.192928][ T5717] loop3: detected capacity change from 0 to 4096 [pid 5718] <... close resumed>) = 0 [pid 5717] <... close resumed>) = 0 [pid 5715] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... close resumed>) = 0 [pid 5719] <... mount resumed>) = 0 [pid 5718] mkdir("./file0", 0777 [pid 5717] mkdir("./file0", 0777 [pid 5714] <... pwritev resumed>) = 1114112 [pid 5064] rmdir("./52/file0" [pid 5719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5718] <... mkdir resumed>) = 0 [pid 5717] <... mkdir resumed>) = 0 [pid 5714] exit_group(0 [pid 5064] <... rmdir resumed>) = 0 [pid 5719] <... openat resumed>) = 3 [pid 5718] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5717] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5714] <... exit_group resumed>) = ? [pid 5064] getdents64(3, [pid 5719] chdir("./file0" [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5719] <... chdir resumed>) = 0 [pid 5719] ioctl(4, LOOP_CLR_FD [pid 5064] close(3 [pid 5719] <... ioctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5719] close(4 [pid 5064] rmdir("./52" [pid 5719] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5719] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] mkdir("./53", 0777 [pid 5719] <... openat resumed>) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 5719] unlink("./file1") = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 131.231849][ T5721] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5719] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5722 ./strace-static-x86_64: Process 5722 attached [pid 5722] chdir("./53" [pid 5718] <... mount resumed>) = 0 [pid 5717] <... mount resumed>) = 0 [pid 5722] <... chdir resumed>) = 0 [pid 5718] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5717] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5722] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5718] <... openat resumed>) = 3 [pid 5717] <... openat resumed>) = 3 [pid 5722] <... prctl resumed>) = 0 [pid 5718] chdir("./file0" [pid 5717] chdir("./file0" [pid 5722] setpgid(0, 0 [pid 5718] <... chdir resumed>) = 0 [pid 5717] <... chdir resumed>) = 0 [pid 5722] <... setpgid resumed>) = 0 [pid 5718] ioctl(4, LOOP_CLR_FD [pid 5717] ioctl(4, LOOP_CLR_FD [pid 5722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5718] <... ioctl resumed>) = 0 [pid 5717] <... ioctl resumed>) = 0 [pid 5722] <... openat resumed>) = 3 [pid 5718] close(4 [pid 5717] close(4 [pid 5722] write(3, "1000", 4 [pid 5718] <... close resumed>) = 0 [pid 5717] <... close resumed>) = 0 [pid 5722] <... write resumed>) = 4 [ 131.317027][ T5723] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.328793][ T5724] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5718] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5717] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5722] close(3) = 0 [pid 5722] symlink("/dev/binderfs", "./binderfs" [pid 5718] <... openat resumed>) = 4 [pid 5717] <... openat resumed>) = 4 [pid 5722] <... symlink resumed>) = 0 [pid 5718] unlink("./file1" [pid 5717] unlink("./file1" [pid 5722] memfd_create("syzkaller", 0 [pid 5717] <... unlink resumed>) = 0 [pid 5722] <... memfd_create resumed>) = 3 [pid 5717] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5718] <... unlink resumed>) = 0 [pid 5718] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5714] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5714, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5068] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./53/binderfs") = 0 [pid 5068] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5722] <... write resumed>) = 2097152 [pid 5068] <... umount2 resumed>) = 0 [pid 5719] <... pwritev resumed>) = 1114112 [pid 5722] munmap(0x7f241a43b000, 2097152 [pid 5719] exit_group(0 [pid 5722] <... munmap resumed>) = 0 [pid 5719] <... exit_group resumed>) = ? [pid 5068] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5715] <... pwritev resumed>) = 1114112 [pid 5722] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5715] exit_group(0 [pid 5722] <... openat resumed>) = 4 [pid 5717] <... pwritev resumed>) = 1114112 [pid 5715] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5722] ioctl(4, LOOP_SET_FD, 3 [pid 5717] exit_group(0 [pid 5068] lstat("./53/file0", [pid 5722] <... ioctl resumed>) = 0 [pid 5717] <... exit_group resumed>) = ? [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5722] close(3 [pid 5068] rmdir("./53/file0" [pid 5722] <... close resumed>) = 0 [pid 5722] mkdir("./file0", 0777 [pid 5068] <... rmdir resumed>) = 0 [pid 5722] <... mkdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5722] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [ 131.648694][ T5722] loop1: detected capacity change from 0 to 4096 [pid 5068] rmdir("./53") = 0 [pid 5068] mkdir("./54", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5725 [pid 5722] <... mount resumed>) = 0 [pid 5722] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5722] chdir("./file0") = 0 [pid 5722] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 5725 attached [pid 5722] close(4 [pid 5725] chdir("./54" [pid 5722] <... close resumed>) = 0 [pid 5722] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5722] unlink("./file1" [pid 5725] <... chdir resumed>) = 0 [pid 5725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5725] setpgid(0, 0 [pid 5718] <... pwritev resumed>) = 1114112 [pid 5717] +++ exited with 0 +++ [pid 5725] <... setpgid resumed>) = 0 [pid 5719] +++ exited with 0 +++ [pid 5718] exit_group(0 [pid 5715] +++ exited with 0 +++ [pid 5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5718] <... exit_group resumed>) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5717, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5719, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5725] <... openat resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5715, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5725] write(3, "1000", 4 [pid 5722] <... unlink resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... restart_syscall resumed>) = 0 [pid 5725] <... write resumed>) = 4 [pid 5722] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5725] close(3) = 0 [pid 5725] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5725] memfd_create("syzkaller", 0 [pid 5067] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5725] <... memfd_create resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] fstat(3, [pid 5725] <... mmap resumed>) = 0x7f241a43b000 [ 131.742440][ T5726] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5066] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5067] lstat("./53/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] fstat(3, [pid 5067] unlink("./53/binderfs" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 5066] getdents64(3, [pid 5067] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./52/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] lstat("./52/binderfs", [pid 5066] unlink("./52/binderfs") = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./52/binderfs") = 0 [pid 5063] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./52/file0", [pid 5067] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5063] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(4, [pid 5063] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] fstat(4, [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] close(4 [pid 5063] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] rmdir("./53/file0" [pid 5063] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5063] close(4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] close(3 [pid 5063] rmdir("./52/file0" [pid 5067] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] rmdir("./53" [pid 5063] getdents64(3, [pid 5725] <... write resumed>) = 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] mkdir("./54", 0777 [pid 5063] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] rmdir("./52" [pid 5067] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5725] munmap(0x7f241a43b000, 2097152 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5063] mkdir("./53", 0777 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... umount2 resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5725] <... munmap resumed>) = 0 [pid 5067] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5725] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5725] <... openat resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5725] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5727 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5728 ./strace-static-x86_64: Process 5727 attached [pid 5727] chdir("./54" [pid 5718] +++ exited with 0 +++ [pid 5066] lstat("./52/file0", [pid 5727] <... chdir resumed>) = 0 [pid 5727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5727] <... prctl resumed>) = 0 [pid 5727] setpgid(0, 0 [pid 5066] umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] <... setpgid resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5718, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- ./strace-static-x86_64: Process 5728 attached [pid 5727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5727] <... openat resumed>) = 3 [pid 5727] write(3, "1000", 4) = 4 [pid 5065] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5728] chdir("./53" [pid 5727] close(3 [pid 5725] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5727] <... close resumed>) = 0 [pid 5725] close(3 [pid 5727] symlink("/dev/binderfs", "./binderfs" [pid 5725] <... close resumed>) = 0 [pid 5728] <... chdir resumed>) = 0 [pid 5727] <... symlink resumed>) = 0 [pid 5725] mkdir("./file0", 0777 [pid 5066] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5728] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5727] memfd_create("syzkaller", 0 [pid 5725] <... mkdir resumed>) = 0 [pid 5066] fstat(4, [pid 5065] <... openat resumed>) = 3 [pid 5728] <... prctl resumed>) = 0 [pid 5727] <... memfd_create resumed>) = 3 [pid 5725] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] fstat(3, [pid 5728] setpgid(0, 0 [pid 5727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] getdents64(4, [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5728] <... setpgid resumed>) = 0 [pid 5727] <... mmap resumed>) = 0x7f241a43b000 [pid 5728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(3, [pid 5728] <... openat resumed>) = 3 [pid 5066] getdents64(4, [pid 5728] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5728] <... write resumed>) = 4 [pid 5066] close(4 [pid 5065] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5728] close(3 [pid 5066] <... close resumed>) = 0 [pid 5728] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 131.945446][ T5725] loop5: detected capacity change from 0 to 4096 [pid 5728] symlink("/dev/binderfs", "./binderfs" [pid 5066] rmdir("./52/file0" [pid 5065] lstat("./54/binderfs", [pid 5728] <... symlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5728] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5728] <... memfd_create resumed>) = 3 [pid 5066] close(3 [pid 5065] unlink("./54/binderfs" [pid 5728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5728] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] rmdir("./52" [pid 5065] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./53", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5725] <... mount resumed>) = 0 [pid 5066] close(3 [pid 5727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5725] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5725] chdir("./file0") = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5730 [pid 5725] ioctl(4, LOOP_CLR_FD) = 0 [pid 5725] close(4) = 0 [pid 5725] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000./strace-static-x86_64: Process 5730 attached [pid 5730] chdir("./53") = 0 [pid 5730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5730] setpgid(0, 0) = 0 [pid 5730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5730] write(3, "1000", 4) = 4 [pid 5730] close(3) = 0 [pid 5730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5725] <... openat resumed>) = 4 [pid 5730] memfd_create("syzkaller", 0 [pid 5725] unlink("./file1" [pid 5730] <... memfd_create resumed>) = 3 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 132.023660][ T5729] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5725] <... unlink resumed>) = 0 [pid 5725] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5727] <... write resumed>) = 2097152 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5727] munmap(0x7f241a43b000, 2097152 [pid 5065] getdents64(4, [pid 5727] <... munmap resumed>) = 0 [pid 5728] <... write resumed>) = 2097152 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5727] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5728] munmap(0x7f241a43b000, 2097152 [pid 5727] <... openat resumed>) = 4 [pid 5065] close(4 [pid 5727] ioctl(4, LOOP_SET_FD, 3 [pid 5728] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5065] rmdir("./54/file0" [pid 5728] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5728] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 5728] close(3 [pid 5727] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5730] <... write resumed>) = 2097152 [pid 5728] <... close resumed>) = 0 [pid 5727] close(3 [pid 5065] rmdir("./54" [pid 5727] <... close resumed>) = 0 [pid 5728] mkdir("./file0", 0777 [pid 5727] mkdir("./file0", 0777 [pid 5728] <... mkdir resumed>) = 0 [pid 5727] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5727] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5728] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] mkdir("./55", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 132.160138][ T5727] loop4: detected capacity change from 0 to 4096 [ 132.172465][ T5728] loop0: detected capacity change from 0 to 4096 [pid 5065] close(3) = 0 [pid 5730] munmap(0x7f241a43b000, 2097152 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5730] <... munmap resumed>) = 0 [pid 5730] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5732 [pid 5730] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5732 attached [pid 5730] ioctl(4, LOOP_SET_FD, 3 [pid 5727] <... mount resumed>) = 0 [pid 5722] <... pwritev resumed>) = 1114112 [pid 5732] chdir("./55" [pid 5727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5732] <... chdir resumed>) = 0 [pid 5727] <... openat resumed>) = 3 [pid 5722] exit_group(0 [pid 5732] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5727] chdir("./file0" [pid 5732] <... prctl resumed>) = 0 [pid 5727] <... chdir resumed>) = 0 [pid 5722] <... exit_group resumed>) = ? [pid 5732] setpgid(0, 0 [pid 5728] <... mount resumed>) = 0 [pid 5727] ioctl(4, LOOP_CLR_FD) = 0 [pid 5727] close(4 [pid 5732] <... setpgid resumed>) = 0 [pid 5728] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5727] <... close resumed>) = 0 [pid 5727] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5730] <... ioctl resumed>) = 0 [pid 5730] close(3) = 0 [pid 5730] mkdir("./file0", 0777 [pid 5732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5728] <... openat resumed>) = 3 [pid 5727] <... openat resumed>) = 4 [pid 5727] unlink("./file1" [pid 5730] <... mkdir resumed>) = 0 [pid 5732] <... openat resumed>) = 3 [pid 5730] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5728] chdir("./file0" [pid 5732] write(3, "1000", 4 [pid 5727] <... unlink resumed>) = 0 [pid 5732] <... write resumed>) = 4 [pid 5728] <... chdir resumed>) = 0 [ 132.242585][ T5731] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.254498][ T5730] loop3: detected capacity change from 0 to 4096 [ 132.276277][ T5733] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5727] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5732] close(3 [pid 5728] ioctl(4, LOOP_CLR_FD [pid 5722] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5722, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5732] <... close resumed>) = 0 [pid 5732] symlink("/dev/binderfs", "./binderfs" [pid 5728] <... ioctl resumed>) = 0 [pid 5732] <... symlink resumed>) = 0 [pid 5728] close(4) = 0 [pid 5732] memfd_create("syzkaller", 0) = 3 [pid 5728] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5732] <... mmap resumed>) = 0x7f241a43b000 [pid 5728] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5728] unlink("./file1" [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5728] <... unlink resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5728] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./53/binderfs") = 0 [pid 5064] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5730] <... mount resumed>) = 0 [pid 5732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5730] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5730] chdir("./file0") = 0 [pid 5730] ioctl(4, LOOP_CLR_FD) = 0 [pid 5730] close(4) = 0 [pid 5730] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5730] unlink("./file1" [pid 5725] <... pwritev resumed>) = 1114112 [ 132.385054][ T5734] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5725] exit_group(0) = ? [pid 5064] <... umount2 resumed>) = 0 [pid 5730] <... unlink resumed>) = 0 [pid 5064] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5730] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./53/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5732] <... write resumed>) = 2097152 [pid 5732] munmap(0x7f241a43b000, 2097152 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./53") = 0 [pid 5064] mkdir("./54", 0777 [pid 5732] <... munmap resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5732] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5732] ioctl(4, LOOP_SET_FD, 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5732] <... ioctl resumed>) = 0 [pid 5732] close(3./strace-static-x86_64: Process 5735 attached ) = 0 [pid 5725] +++ exited with 0 +++ [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5735 [pid 5735] chdir("./54" [pid 5732] mkdir("./file0", 0777 [pid 5735] <... chdir resumed>) = 0 [pid 5732] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5725, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5735] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5732] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5728] <... pwritev resumed>) = 1114112 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5735] <... prctl resumed>) = 0 [pid 5728] exit_group(0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5735] setpgid(0, 0) = 0 [pid 5728] <... exit_group resumed>) = ? [ 132.547098][ T5732] loop2: detected capacity change from 0 to 4096 [pid 5735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, [pid 5735] <... openat resumed>) = 3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5735] write(3, "1000", 4 [pid 5068] getdents64(3, [pid 5735] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5735] close(3 [pid 5068] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5735] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5735] symlink("/dev/binderfs", "./binderfs" [pid 5068] lstat("./54/binderfs", [pid 5735] <... symlink resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5735] memfd_create("syzkaller", 0 [pid 5068] unlink("./54/binderfs" [pid 5735] <... memfd_create resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5732] <... mount resumed>) = 0 [pid 5732] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5732] chdir("./file0") = 0 [pid 5732] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5732] close(4) = 0 [pid 5732] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5732] unlink("./file1" [pid 5068] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [ 132.661265][ T5736] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] rmdir("./54/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./54") = 0 [pid 5068] mkdir("./55", 0777 [pid 5727] <... pwritev resumed>) = 1114112 [pid 5068] <... mkdir resumed>) = 0 [pid 5727] exit_group(0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5727] <... exit_group resumed>) = ? [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5728] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5737 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5728, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- ./strace-static-x86_64: Process 5737 attached [pid 5063] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5737] chdir("./55" [pid 5063] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5737] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] fstat(3, [pid 5737] <... prctl resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5737] setpgid(0, 0 [pid 5063] getdents64(3, [pid 5737] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5737] write(3, "1000", 4 [pid 5063] lstat("./53/binderfs", [pid 5737] <... write resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5737] close(3 [pid 5063] unlink("./53/binderfs" [pid 5737] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5737] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] <... symlink resumed>) = 0 [pid 5735] <... write resumed>) = 2097152 [pid 5732] <... unlink resumed>) = 0 [pid 5737] memfd_create("syzkaller", 0 [pid 5732] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5737] <... memfd_create resumed>) = 3 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5735] munmap(0x7f241a43b000, 2097152) = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5735] <... openat resumed>) = 4 [pid 5735] ioctl(4, LOOP_SET_FD, 3 [pid 5730] <... pwritev resumed>) = 1114112 [pid 5063] <... umount2 resumed>) = 0 [pid 5727] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5727, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5063] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... restart_syscall resumed>) = 0 [pid 5063] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5735] <... ioctl resumed>) = 0 [pid 5730] exit_group(0 [pid 5067] fstat(3, [pid 5063] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5735] close(3 [pid 5730] <... exit_group resumed>) = ? [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] fstat(4, [pid 5067] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5067] lstat("./54/binderfs", [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(4, [pid 5067] unlink("./54/binderfs" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5735] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5063] close(4 [pid 5067] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./53/file0" [pid 5735] mkdir("./file0", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./53" [pid 5735] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./54", 0777 [pid 5735] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 132.847944][ T5735] loop1: detected capacity change from 0 to 4096 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5737] <... write resumed>) = 2097152 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5739 ./strace-static-x86_64: Process 5739 attached [pid 5735] <... mount resumed>) = 0 [pid 5739] chdir("./54" [pid 5737] munmap(0x7f241a43b000, 2097152 [pid 5735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5739] <... chdir resumed>) = 0 [pid 5735] <... openat resumed>) = 3 [pid 5739] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5737] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5735] chdir("./file0" [pid 5739] <... prctl resumed>) = 0 [pid 5739] setpgid(0, 0 [pid 5737] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5735] <... chdir resumed>) = 0 [pid 5067] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] <... setpgid resumed>) = 0 [pid 5737] <... openat resumed>) = 4 [pid 5735] ioctl(4, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5735] <... ioctl resumed>) = 0 [pid 5067] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] ioctl(4, LOOP_SET_FD, 3 [pid 5739] <... openat resumed>) = 3 [pid 5735] close(4 [pid 5730] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] write(3, "1000", 4 [pid 5735] <... close resumed>) = 0 [pid 5739] <... write resumed>) = 4 [pid 5737] <... ioctl resumed>) = 0 [pid 5735] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5730, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5739] close(3 [pid 5737] close(3 [pid 5735] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 4 [pid 5739] <... close resumed>) = 0 [pid 5737] <... close resumed>) = 0 [pid 5735] unlink("./file1" [pid 5067] fstat(4, [pid 5739] symlink("/dev/binderfs", "./binderfs" [pid 5737] mkdir("./file0", 0777 [pid 5735] <... unlink resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5739] <... symlink resumed>) = 0 [pid 5737] <... mkdir resumed>) = 0 [ 132.933766][ T5738] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.964558][ T5737] loop5: detected capacity change from 0 to 4096 [pid 5735] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5739] memfd_create("syzkaller", 0 [pid 5737] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] getdents64(4, [pid 5066] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] <... memfd_create resumed>) = 3 [pid 5739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] <... mmap resumed>) = 0x7f241a43b000 [pid 5732] <... pwritev resumed>) = 1114112 [pid 5067] getdents64(4, [pid 5066] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5732] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] close(4 [pid 5066] fstat(3, [pid 5067] <... close resumed>) = 0 [pid 5732] <... exit_group resumed>) = ? [pid 5067] rmdir("./54/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5066] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] unlink("./53/binderfs" [pid 5067] rmdir("./54" [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./55", 0777 [pid 5066] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5740 attached , child_tidptr=0x5555559b05d0) = 5740 [pid 5740] chdir("./55" [pid 5739] <... write resumed>) = 2097152 [pid 5740] <... chdir resumed>) = 0 [pid 5739] munmap(0x7f241a43b000, 2097152 [pid 5740] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5739] <... munmap resumed>) = 0 [pid 5740] <... prctl resumed>) = 0 [pid 5740] setpgid(0, 0 [pid 5739] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5740] <... setpgid resumed>) = 0 [pid 5740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5739] <... openat resumed>) = 4 [pid 5740] <... openat resumed>) = 3 [pid 5739] ioctl(4, LOOP_SET_FD, 3 [pid 5740] write(3, "1000", 4) = 4 [pid 5740] close(3) = 0 [pid 5740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5740] memfd_create("syzkaller", 0) = 3 [pid 5740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5739] <... ioctl resumed>) = 0 [pid 5737] <... mount resumed>) = 0 [pid 5737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5737] chdir("./file0") = 0 [pid 5737] ioctl(4, LOOP_CLR_FD) = 0 [pid 5737] close(4 [pid 5739] close(3 [pid 5737] <... close resumed>) = 0 [pid 5732] +++ exited with 0 +++ [pid 5737] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5739] <... close resumed>) = 0 [pid 5740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5739] mkdir("./file0", 0777 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5732, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5737] <... openat resumed>) = 4 [pid 5737] unlink("./file1" [pid 5739] <... mkdir resumed>) = 0 [pid 5065] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 133.114868][ T5739] loop0: detected capacity change from 0 to 4096 [ 133.128382][ T5741] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./55/binderfs") = 0 [pid 5065] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./53/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5737] <... unlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5737] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] rmdir("./53") = 0 [pid 5066] mkdir("./54", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5742 [pid 5739] <... mount resumed>) = 0 [pid 5739] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5739] chdir("./file0") = 0 [pid 5739] ioctl(4, LOOP_CLR_FD) = 0 [pid 5739] close(4./strace-static-x86_64: Process 5742 attached ) = 0 [pid 5742] chdir("./54" [pid 5739] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5742] <... chdir resumed>) = 0 [pid 5739] unlink("./file1" [pid 5742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5742] setpgid(0, 0) = 0 [pid 5742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5742] write(3, "1000", 4) = 4 [pid 5742] close(3) = 0 [pid 5742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5742] memfd_create("syzkaller", 0 [pid 5740] <... write resumed>) = 2097152 [pid 5742] <... memfd_create resumed>) = 3 [pid 5742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... umount2 resumed>) = 0 [ 133.240593][ T5743] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5740] munmap(0x7f241a43b000, 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] <... unlink resumed>) = 0 [pid 5739] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5742] <... write resumed>) = 2097152 [pid 5740] <... munmap resumed>) = 0 [pid 5065] lstat("./55/file0", [pid 5742] munmap(0x7f241a43b000, 2097152 [pid 5740] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5742] <... munmap resumed>) = 0 [pid 5740] <... openat resumed>) = 4 [pid 5065] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5742] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5740] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5742] <... openat resumed>) = 4 [pid 5740] <... ioctl resumed>) = 0 [pid 5742] ioctl(4, LOOP_SET_FD, 3 [pid 5740] close(3 [pid 5065] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5742] <... ioctl resumed>) = 0 [pid 5740] <... close resumed>) = 0 [pid 5740] mkdir("./file0", 0777 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5742] close(3 [pid 5740] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5742] <... close resumed>) = 0 [pid 5740] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5742] mkdir("./file0", 0777 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./55/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./55" [pid 5742] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5742] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] mkdir("./56", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 133.337623][ T5740] loop4: detected capacity change from 0 to 4096 [ 133.349353][ T5742] loop3: detected capacity change from 0 to 4096 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5744 ./strace-static-x86_64: Process 5744 attached [pid 5744] chdir("./56") = 0 [pid 5744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5740] <... mount resumed>) = 0 [pid 5735] <... pwritev resumed>) = 1114112 [pid 5735] exit_group(0) = ? [pid 5744] <... prctl resumed>) = 0 [pid 5740] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5744] setpgid(0, 0 [pid 5740] <... openat resumed>) = 3 [pid 5744] <... setpgid resumed>) = 0 [pid 5742] <... mount resumed>) = 0 [pid 5740] chdir("./file0" [pid 5744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5740] <... chdir resumed>) = 0 [pid 5744] <... openat resumed>) = 3 [pid 5740] ioctl(4, LOOP_CLR_FD [pid 5744] write(3, "1000", 4 [pid 5740] <... ioctl resumed>) = 0 [pid 5742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5744] <... write resumed>) = 4 [pid 5740] close(4 [pid 5742] <... openat resumed>) = 3 [pid 5744] close(3 [pid 5740] <... close resumed>) = 0 [pid 5744] <... close resumed>) = 0 [ 133.429701][ T5745] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.434050][ T5746] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5740] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5744] symlink("/dev/binderfs", "./binderfs" [pid 5742] chdir("./file0" [pid 5744] <... symlink resumed>) = 0 [pid 5744] memfd_create("syzkaller", 0 [pid 5742] <... chdir resumed>) = 0 [pid 5740] <... openat resumed>) = 4 [pid 5744] <... memfd_create resumed>) = 3 [pid 5742] ioctl(4, LOOP_CLR_FD [pid 5740] unlink("./file1" [pid 5744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5742] <... ioctl resumed>) = 0 [pid 5744] <... mmap resumed>) = 0x7f241a43b000 [pid 5742] close(4) = 0 [pid 5742] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5740] <... unlink resumed>) = 0 [pid 5742] <... openat resumed>) = 4 [pid 5740] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5742] unlink("./file1") = 0 [pid 5742] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5737] <... pwritev resumed>) = 1114112 [pid 5737] exit_group(0 [pid 5744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5737] <... exit_group resumed>) = ? [pid 5735] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5735, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./54/binderfs") = 0 [pid 5064] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5744] <... write resumed>) = 2097152 [pid 5744] munmap(0x7f241a43b000, 2097152 [pid 5739] <... pwritev resumed>) = 1114112 [pid 5744] <... munmap resumed>) = 0 [pid 5744] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5739] exit_group(0 [pid 5744] <... openat resumed>) = 4 [pid 5739] <... exit_group resumed>) = ? [pid 5744] ioctl(4, LOOP_SET_FD, 3 [pid 5737] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5737, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5068] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5744] <... ioctl resumed>) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./55/binderfs" [pid 5744] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5744] <... close resumed>) = 0 [pid 5068] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5744] mkdir("./file0", 0777) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5744] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 133.716777][ T5744] loop2: detected capacity change from 0 to 4096 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./54/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5744] <... mount resumed>) = 0 [pid 5064] close(3 [pid 5744] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5744] <... openat resumed>) = 3 [pid 5739] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = 0 [pid 5064] rmdir("./54" [pid 5744] chdir("./file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5739, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5744] <... chdir resumed>) = 0 [pid 5064] mkdir("./55", 0777 [pid 5744] ioctl(4, LOOP_CLR_FD [pid 5064] <... mkdir resumed>) = 0 [pid 5744] <... ioctl resumed>) = 0 [pid 5744] close(4 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5744] <... close resumed>) = 0 [pid 5068] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5744] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5744] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5744] unlink("./file1" [pid 5068] close(4) = 0 [ 133.797832][ T5747] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] rmdir("./55/file0" [pid 5063] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5744] <... unlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5744] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] getdents64(3, [pid 5064] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3) = 0 [pid 5068] rmdir("./55" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./56", 0777) = 0 [pid 5063] fstat(3, [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5748 [pid 5068] <... openat resumed>) = 3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] getdents64(3, [pid 5068] close(3) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5740] <... pwritev resumed>) = 1114112 [pid 5063] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5740] exit_group(0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5749 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5740] <... exit_group resumed>) = ? [pid 5063] lstat("./54/binderfs", ./strace-static-x86_64: Process 5748 attached ./strace-static-x86_64: Process 5749 attached [pid 5749] chdir("./56" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5749] <... chdir resumed>) = 0 [pid 5063] unlink("./54/binderfs" [pid 5749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5749] setpgid(0, 0 [pid 5748] chdir("./55" [pid 5063] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5749] <... setpgid resumed>) = 0 [pid 5748] <... chdir resumed>) = 0 [pid 5742] <... pwritev resumed>) = 1114112 [pid 5749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5742] exit_group(0 [pid 5749] <... openat resumed>) = 3 [pid 5749] write(3, "1000", 4) = 4 [pid 5749] close(3) = 0 [pid 5749] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5742] <... exit_group resumed>) = ? [pid 5749] memfd_create("syzkaller", 0 [pid 5748] <... prctl resumed>) = 0 [pid 5749] <... memfd_create resumed>) = 3 [pid 5749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5748] setpgid(0, 0) = 0 [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5748] write(3, "1000", 4) = 4 [pid 5748] close(3) = 0 [pid 5748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5748] memfd_create("syzkaller", 0) = 3 [pid 5748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] <... umount2 resumed>) = 0 [pid 5748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./54/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5740] +++ exited with 0 +++ [pid 5063] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5740, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5742] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5742, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5063] rmdir("./54" [pid 5748] <... write resumed>) = 2097152 [pid 5067] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5748] munmap(0x7f241a43b000, 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./55", 0777 [pid 5748] <... munmap resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5748] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5748] <... openat resumed>) = 4 [pid 5067] fstat(3, [pid 5066] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5748] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5749] <... write resumed>) = 2097152 [pid 5067] getdents64(3, [pid 5066] fstat(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5748] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5748] close(3 [pid 5067] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5748] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] close(3 [pid 5748] mkdir("./file0", 0777 [pid 5067] lstat("./55/binderfs", [pid 5066] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5066] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./54/binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5748] <... mkdir resumed>) = 0 [pid 5067] unlink("./55/binderfs" [pid 5066] <... unlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 5066] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5748] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5749] munmap(0x7f241a43b000, 2097152 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5750 [pid 5749] <... munmap resumed>) = 0 [pid 5749] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5749] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5749] close(3) = 0 [pid 5749] mkdir("./file0", 0777./strace-static-x86_64: Process 5750 attached [pid 5750] chdir("./55") = 0 [pid 5750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5750] setpgid(0, 0) = 0 [pid 5750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5749] <... mkdir resumed>) = 0 [pid 5750] <... openat resumed>) = 3 [pid 5749] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5750] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = 0 [ 134.060186][ T5748] loop1: detected capacity change from 0 to 4096 [ 134.092140][ T5749] loop5: detected capacity change from 0 to 4096 [pid 5750] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = 0 [pid 5750] close(3 [pid 5067] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5750] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5750] symlink("/dev/binderfs", "./binderfs" [pid 5748] <... mount resumed>) = 0 [pid 5067] lstat("./55/file0", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5750] <... symlink resumed>) = 0 [pid 5748] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./54/file0", [pid 5750] memfd_create("syzkaller", 0 [pid 5748] <... openat resumed>) = 3 [pid 5067] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5750] <... memfd_create resumed>) = 3 [pid 5748] chdir("./file0" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5750] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5748] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5750] <... mmap resumed>) = 0x7f241a43b000 [pid 5748] ioctl(4, LOOP_CLR_FD [pid 5067] <... openat resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5748] <... ioctl resumed>) = 0 [pid 5067] fstat(4, [pid 5066] fstat(4, [pid 5748] close(4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5748] <... close resumed>) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./54/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./54" [pid 5748] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] getdents64(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5748] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] mkdir("./55", 0777 [pid 5748] unlink("./file1" [pid 5744] <... pwritev resumed>) = 1114112 [pid 5067] getdents64(4, [pid 5066] <... mkdir resumed>) = 0 [ 134.165740][ T5751] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5744] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5744] <... exit_group resumed>) = ? [pid 5067] close(4 [pid 5066] <... openat resumed>) = 3 [pid 5750] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5749] <... mount resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5749] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5749] chdir("./file0" [pid 5066] <... close resumed>) = 0 [pid 5749] <... chdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5749] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5753 [pid 5749] close(4 [pid 5067] <... close resumed>) = 0 [pid 5749] <... close resumed>) = 0 [pid 5067] rmdir("./55/file0" [pid 5749] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5748] <... unlink resumed>) = 0 [pid 5749] <... openat resumed>) = 4 [pid 5748] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5749] unlink("./file1"./strace-static-x86_64: Process 5753 attached [pid 5067] getdents64(3, [pid 5753] chdir("./55" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5753] <... chdir resumed>) = 0 [pid 5067] close(3 [pid 5753] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... close resumed>) = 0 [pid 5753] <... prctl resumed>) = 0 [pid 5067] rmdir("./55" [pid 5753] setpgid(0, 0) = 0 [pid 5753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 5753] <... openat resumed>) = 3 [pid 5067] mkdir("./56", 0777 [pid 5753] write(3, "1000", 4) = 4 [pid 5753] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5753] <... close resumed>) = 0 [pid 5753] symlink("/dev/binderfs", "./binderfs" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5753] <... symlink resumed>) = 0 [pid 5753] memfd_create("syzkaller", 0 [pid 5067] <... openat resumed>) = 3 [pid 5753] <... memfd_create resumed>) = 3 [pid 5753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5753] <... mmap resumed>) = 0x7f241a43b000 [ 134.226557][ T5752] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5749] <... unlink resumed>) = 0 [pid 5749] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5754 [pid 5750] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5754 attached [pid 5750] munmap(0x7f241a43b000, 2097152 [pid 5754] chdir("./56") = 0 [pid 5750] <... munmap resumed>) = 0 [pid 5754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5750] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5754] <... prctl resumed>) = 0 [pid 5750] <... openat resumed>) = 4 [pid 5754] setpgid(0, 0 [pid 5750] ioctl(4, LOOP_SET_FD, 3 [pid 5754] <... setpgid resumed>) = 0 [pid 5754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5754] write(3, "1000", 4) = 4 [pid 5754] close(3) = 0 [pid 5754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5744] +++ exited with 0 +++ [pid 5754] memfd_create("syzkaller", 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5744, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5754] <... memfd_create resumed>) = 3 [pid 5750] <... ioctl resumed>) = 0 [pid 5754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5750] close(3 [pid 5065] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5750] <... close resumed>) = 0 [pid 5065] fstat(3, [pid 5750] mkdir("./file0", 0777 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5750] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 134.341022][ T5750] loop0: detected capacity change from 0 to 4096 [pid 5065] lstat("./56/binderfs", [pid 5750] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./56/binderfs") = 0 [pid 5065] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5753] <... write resumed>) = 2097152 [pid 5750] <... mount resumed>) = 0 [pid 5753] munmap(0x7f241a43b000, 2097152 [pid 5750] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5753] <... munmap resumed>) = 0 [pid 5750] <... openat resumed>) = 3 [pid 5750] chdir("./file0" [pid 5065] <... umount2 resumed>) = 0 [pid 5753] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5750] <... chdir resumed>) = 0 [pid 5753] <... openat resumed>) = 4 [pid 5750] ioctl(4, LOOP_CLR_FD [pid 5753] ioctl(4, LOOP_SET_FD, 3 [pid 5750] <... ioctl resumed>) = 0 [pid 5750] close(4 [pid 5065] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] <... write resumed>) = 2097152 [pid 5750] <... close resumed>) = 0 [pid 5754] munmap(0x7f241a43b000, 2097152 [pid 5750] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5750] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5750] unlink("./file1" [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5754] <... munmap resumed>) = 0 [pid 5750] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5754] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5750] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5753] <... ioctl resumed>) = 0 [ 134.440779][ T5755] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.479038][ T5753] loop3: detected capacity change from 0 to 4096 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5754] <... openat resumed>) = 4 [pid 5753] close(3 [pid 5754] ioctl(4, LOOP_SET_FD, 3 [pid 5753] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5753] mkdir("./file0", 0777) = 0 [pid 5753] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5754] <... ioctl resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./56/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5754] close(3 [pid 5065] close(3) = 0 [pid 5754] <... close resumed>) = 0 [pid 5065] rmdir("./56" [pid 5754] mkdir("./file0", 0777 [pid 5065] <... rmdir resumed>) = 0 [pid 5754] <... mkdir resumed>) = 0 [pid 5065] mkdir("./57", 0777) = 0 [pid 5754] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 134.529615][ T5754] loop4: detected capacity change from 0 to 4096 [pid 5065] close(3) = 0 [pid 5753] <... mount resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5753] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5753] chdir("./file0") = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5758 [pid 5753] ioctl(4, LOOP_CLR_FD) = 0 [pid 5753] close(4./strace-static-x86_64: Process 5758 attached ) = 0 [pid 5758] chdir("./57" [pid 5753] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5758] <... chdir resumed>) = 0 [pid 5754] <... mount resumed>) = 0 [pid 5753] <... openat resumed>) = 4 [pid 5758] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5753] unlink("./file1" [pid 5758] <... prctl resumed>) = 0 [pid 5758] setpgid(0, 0) = 0 [pid 5758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5758] write(3, "1000", 4) = 4 [pid 5758] close(3) = 0 [pid 5758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5754] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5758] memfd_create("syzkaller", 0 [pid 5754] <... openat resumed>) = 3 [pid 5758] <... memfd_create resumed>) = 3 [pid 5754] chdir("./file0" [pid 5758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5754] <... chdir resumed>) = 0 [pid 5758] <... mmap resumed>) = 0x7f241a43b000 [pid 5754] ioctl(4, LOOP_CLR_FD) = 0 [pid 5754] close(4) = 0 [pid 5754] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5753] <... unlink resumed>) = 0 [pid 5749] <... pwritev resumed>) = 1114112 [pid 5754] unlink("./file1" [ 134.595816][ T5756] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.619918][ T5757] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5753] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5748] <... pwritev resumed>) = 1114112 [pid 5754] <... unlink resumed>) = 0 [pid 5749] exit_group(0 [pid 5754] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5749] <... exit_group resumed>) = ? [pid 5748] exit_group(0) = ? [pid 5758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5748] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5748, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5758] munmap(0x7f241a43b000, 2097152) = 0 [pid 5750] <... pwritev resumed>) = 1114112 [pid 5749] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5749, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5758] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5750] exit_group(0 [pid 5758] <... openat resumed>) = 4 [pid 5068] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5758] ioctl(4, LOOP_SET_FD, 3 [pid 5750] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./56/binderfs") = 0 [pid 5068] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./55/binderfs") = 0 [pid 5064] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5758] <... ioctl resumed>) = 0 [pid 5758] close(3) = 0 [pid 5758] mkdir("./file0", 0777) = 0 [ 134.841434][ T5758] loop2: detected capacity change from 0 to 4096 [pid 5758] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./56/file0") = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5064] lstat("./55/file0", [pid 5068] rmdir("./56" [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5758] <... mount resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] mkdir("./57", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5758] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5758] chdir("./file0" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... openat resumed>) = 4 [pid 5758] <... chdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] fstat(4, [pid 5758] ioctl(4, LOOP_CLR_FD [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5758] <... ioctl resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] getdents64(4, [pid 5758] close(4 [pid 5068] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5758] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5758] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5760 [pid 5064] <... close resumed>) = 0 [pid 5758] <... openat resumed>) = 4 [pid 5064] rmdir("./55/file0" [pid 5758] unlink("./file1" [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./55") = 0 [ 134.944868][ T5759] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] mkdir("./56", 0777) = 0 ./strace-static-x86_64: Process 5760 attached [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5760] chdir("./57" [pid 5064] <... openat resumed>) = 3 [pid 5760] <... chdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5760] <... prctl resumed>) = 0 [pid 5064] close(3 [pid 5760] setpgid(0, 0 [pid 5064] <... close resumed>) = 0 [pid 5760] <... setpgid resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5761 [pid 5760] <... openat resumed>) = 3 [pid 5760] write(3, "1000", 4) = 4 [pid 5760] close(3./strace-static-x86_64: Process 5761 attached ) = 0 [pid 5761] chdir("./56" [pid 5760] symlink("/dev/binderfs", "./binderfs" [pid 5761] <... chdir resumed>) = 0 [pid 5758] <... unlink resumed>) = 0 [pid 5761] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5760] <... symlink resumed>) = 0 [pid 5758] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5761] <... prctl resumed>) = 0 [pid 5761] setpgid(0, 0) = 0 [pid 5761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5761] write(3, "1000", 4) = 4 [pid 5761] close(3) = 0 [pid 5761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5761] memfd_create("syzkaller", 0) = 3 [pid 5761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5760] memfd_create("syzkaller", 0 [pid 5761] <... mmap resumed>) = 0x7f241a43b000 [pid 5760] <... memfd_create resumed>) = 3 [pid 5750] +++ exited with 0 +++ [pid 5760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5753] <... pwritev resumed>) = 1114112 [pid 5760] <... mmap resumed>) = 0x7f241a43b000 [pid 5753] exit_group(0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5750, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./55/binderfs", [pid 5753] <... exit_group resumed>) = ? [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./55/binderfs") = 0 [pid 5063] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5760] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5754] <... pwritev resumed>) = 1114112 [pid 5754] exit_group(0) = ? [pid 5760] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5761] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5761] munmap(0x7f241a43b000, 2097152 [pid 5753] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5753, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5063] fstat(4, [pid 5761] <... munmap resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5761] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] <... restart_syscall resumed>) = 0 [pid 5063] getdents64(4, [pid 5761] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5761] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 5761] <... ioctl resumed>) = 0 [pid 5066] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5760] munmap(0x7f241a43b000, 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5066] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5754] +++ exited with 0 +++ [pid 5066] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5760] <... munmap resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5754, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5066] fstat(3, [pid 5063] rmdir("./55/file0" [pid 5760] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5760] <... openat resumed>) = 4 [pid 5066] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5760] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 5761] close(3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5761] <... close resumed>) = 0 [pid 5063] close(3 [pid 5761] mkdir("./file0", 0777 [pid 5067] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5761] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./55" [pid 5761] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./56", 0777 [pid 5067] fstat(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./55/binderfs", [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] getdents64(3, [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5760] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] unlink("./55/binderfs" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5760] close(3 [pid 5067] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5760] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 135.206716][ T5761] loop1: detected capacity change from 0 to 4096 [ 135.229743][ T5760] loop5: detected capacity change from 0 to 4096 [pid 5066] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5760] mkdir("./file0", 0777 [pid 5067] lstat("./56/binderfs", [pid 5063] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./56/binderfs") = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5762 [pid 5067] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5760] <... mkdir resumed>) = 0 [pid 5760] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5762 attached [pid 5762] chdir("./56") = 0 [pid 5761] <... mount resumed>) = 0 [pid 5761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5761] chdir("./file0" [pid 5762] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5761] <... chdir resumed>) = 0 [pid 5761] ioctl(4, LOOP_CLR_FD) = 0 [pid 5761] close(4) = 0 [pid 5762] <... prctl resumed>) = 0 [ 135.256555][ T5763] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5761] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5762] setpgid(0, 0 [pid 5760] <... mount resumed>) = 0 [pid 5762] <... setpgid resumed>) = 0 [pid 5762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5761] <... openat resumed>) = 4 [pid 5760] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5761] unlink("./file1" [pid 5762] <... openat resumed>) = 3 [pid 5760] <... openat resumed>) = 3 [pid 5762] write(3, "1000", 4 [pid 5760] chdir("./file0" [pid 5762] <... write resumed>) = 4 [pid 5760] <... chdir resumed>) = 0 [pid 5762] close(3 [pid 5760] ioctl(4, LOOP_CLR_FD [pid 5762] <... close resumed>) = 0 [pid 5760] <... ioctl resumed>) = 0 [pid 5762] symlink("/dev/binderfs", "./binderfs" [pid 5760] close(4) = 0 [pid 5762] <... symlink resumed>) = 0 [pid 5760] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5762] memfd_create("syzkaller", 0 [pid 5760] <... openat resumed>) = 4 [pid 5762] <... memfd_create resumed>) = 3 [pid 5760] unlink("./file1" [pid 5066] <... umount2 resumed>) = 0 [pid 5762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./56/file0", [pid 5066] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./55/file0", [pid 5761] <... unlink resumed>) = 0 [ 135.299794][ T5764] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5761] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... openat resumed>) = 4 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5760] <... unlink resumed>) = 0 [pid 5758] <... pwritev resumed>) = 1114112 [pid 5067] fstat(4, [pid 5760] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5758] exit_group(0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5758] <... exit_group resumed>) = ? [pid 5067] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(4, [pid 5066] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] fstat(4, [pid 5067] close(4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5067] rmdir("./56/file0") = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5762] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] getdents64(3, [pid 5066] getdents64(4, [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./56") = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] mkdir("./57", 0777 [pid 5066] close(4 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5066] rmdir("./55/file0" [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5765 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./55") = 0 [pid 5066] mkdir("./56", 0777./strace-static-x86_64: Process 5765 attached ) = 0 [pid 5765] chdir("./57" [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5765] <... chdir resumed>) = 0 [pid 5765] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... openat resumed>) = 3 [pid 5765] <... prctl resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5765] setpgid(0, 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5765] <... setpgid resumed>) = 0 [pid 5066] close(3 [pid 5765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... close resumed>) = 0 [pid 5765] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5765] write(3, "1000", 4) = 4 [pid 5765] close(3) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5766 [pid 5765] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5766 attached ) = 0 [pid 5765] memfd_create("syzkaller", 0) = 3 [pid 5765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5766] chdir("./56" [pid 5762] <... write resumed>) = 2097152 [pid 5766] <... chdir resumed>) = 0 [pid 5762] munmap(0x7f241a43b000, 2097152 [pid 5766] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5762] <... munmap resumed>) = 0 [pid 5766] <... prctl resumed>) = 0 [pid 5766] setpgid(0, 0 [pid 5762] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5766] <... setpgid resumed>) = 0 [pid 5762] <... openat resumed>) = 4 [pid 5766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5762] ioctl(4, LOOP_SET_FD, 3 [pid 5766] <... openat resumed>) = 3 [pid 5766] write(3, "1000", 4) = 4 [pid 5766] close(3) = 0 [pid 5766] symlink("/dev/binderfs", "./binderfs" [pid 5762] <... ioctl resumed>) = 0 [pid 5765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5766] <... symlink resumed>) = 0 [pid 5762] close(3 [pid 5758] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5758, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5766] memfd_create("syzkaller", 0 [pid 5762] <... close resumed>) = 0 [pid 5766] <... memfd_create resumed>) = 3 [pid 5762] mkdir("./file0", 0777 [pid 5065] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./57/binderfs") = 0 [pid 5065] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5762] <... mkdir resumed>) = 0 [ 135.496920][ T5762] loop0: detected capacity change from 0 to 4096 [pid 5766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5762] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5766] <... mmap resumed>) = 0x7f241a43b000 [pid 5766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5762] <... mount resumed>) = 0 [pid 5762] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5762] chdir("./file0") = 0 [pid 5762] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = 0 [pid 5762] <... ioctl resumed>) = 0 [pid 5762] close(4 [pid 5765] <... write resumed>) = 2097152 [pid 5762] <... close resumed>) = 0 [pid 5762] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 135.599952][ T5767] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5762] unlink("./file1" [pid 5760] <... pwritev resumed>) = 1114112 [pid 5765] munmap(0x7f241a43b000, 2097152 [pid 5760] exit_group(0) = ? [pid 5765] <... munmap resumed>) = 0 [pid 5765] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5765] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./57/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./57") = 0 [pid 5065] mkdir("./58", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5765] <... ioctl resumed>) = 0 [pid 5765] close(3 [pid 5762] <... unlink resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5765] <... close resumed>) = 0 [pid 5762] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5765] mkdir("./file0", 0777 [pid 5065] close(3 [pid 5765] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5765] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5768 ./strace-static-x86_64: Process 5768 attached [pid 5768] chdir("./58") = 0 [pid 5768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5768] setpgid(0, 0) = 0 [ 135.672319][ T5765] loop4: detected capacity change from 0 to 4096 [pid 5768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5768] write(3, "1000", 4) = 4 [pid 5768] close(3) = 0 [pid 5768] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5766] <... write resumed>) = 2097152 [pid 5768] memfd_create("syzkaller", 0) = 3 [pid 5768] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5766] munmap(0x7f241a43b000, 2097152) = 0 [pid 5765] <... mount resumed>) = 0 [pid 5766] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5768] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5766] <... openat resumed>) = 4 [pid 5765] <... openat resumed>) = 3 [pid 5765] chdir("./file0" [pid 5766] ioctl(4, LOOP_SET_FD, 3 [pid 5765] <... chdir resumed>) = 0 [pid 5761] <... pwritev resumed>) = 1114112 [pid 5765] ioctl(4, LOOP_CLR_FD [pid 5761] exit_group(0 [pid 5765] <... ioctl resumed>) = 0 [pid 5761] <... exit_group resumed>) = ? [pid 5765] close(4) = 0 [pid 5765] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5765] unlink("./file1" [pid 5766] <... ioctl resumed>) = 0 [pid 5766] close(3) = 0 [pid 5766] mkdir("./file0", 0777 [pid 5760] +++ exited with 0 +++ [pid 5766] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5760, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5766] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 135.761907][ T5769] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.792844][ T5766] loop3: detected capacity change from 0 to 4096 [pid 5765] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5765] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./57/binderfs") = 0 [pid 5068] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5768] <... write resumed>) = 2097152 [pid 5766] <... mount resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5766] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5766] <... openat resumed>) = 3 [pid 5766] chdir("./file0" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5766] <... chdir resumed>) = 0 [pid 5068] lstat("./57/file0", [pid 5766] ioctl(4, LOOP_CLR_FD [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5766] <... ioctl resumed>) = 0 [pid 5068] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5766] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5768] munmap(0x7f241a43b000, 2097152) = 0 [pid 5768] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5768] ioctl(4, LOOP_SET_FD, 3 [pid 5766] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5766] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5761] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5761, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5766] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5766] unlink("./file1" [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5766] <... unlink resumed>) = 0 [pid 5068] getdents64(4, [pid 5766] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(4 [pid 5064] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5768] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5064] fstat(3, [pid 5068] rmdir("./57/file0" [pid 5768] close(3) = 0 [pid 5768] mkdir("./file0", 0777) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5768] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] getdents64(3, [pid 5064] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./57" [pid 5064] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./58", 0777 [pid 5064] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] unlink("./56/binderfs" [ 135.896023][ T5770] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.925091][ T5768] loop2: detected capacity change from 0 to 4096 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5771 attached , child_tidptr=0x5555559b05d0) = 5771 [pid 5771] chdir("./58") = 0 [pid 5771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5771] setpgid(0, 0) = 0 [pid 5771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5771] write(3, "1000", 4 [pid 5768] <... mount resumed>) = 0 [pid 5771] <... write resumed>) = 4 [pid 5768] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5771] close(3 [pid 5768] <... openat resumed>) = 3 [pid 5771] <... close resumed>) = 0 [pid 5768] chdir("./file0" [pid 5771] symlink("/dev/binderfs", "./binderfs" [pid 5768] <... chdir resumed>) = 0 [pid 5771] <... symlink resumed>) = 0 [pid 5768] ioctl(4, LOOP_CLR_FD [pid 5771] memfd_create("syzkaller", 0 [pid 5768] <... ioctl resumed>) = 0 [pid 5771] <... memfd_create resumed>) = 3 [pid 5768] close(4 [pid 5064] <... umount2 resumed>) = 0 [pid 5771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5768] <... close resumed>) = 0 [pid 5771] <... mmap resumed>) = 0x7f241a43b000 [pid 5768] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5768] unlink("./file1" [pid 5064] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 136.027472][ T5772] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5768] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5768] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./56/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./56") = 0 [pid 5064] mkdir("./57", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5762] <... pwritev resumed>) = 1114112 [pid 5064] close(3 [pid 5762] exit_group(0 [pid 5064] <... close resumed>) = 0 [pid 5762] <... exit_group resumed>) = ? [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5773 ./strace-static-x86_64: Process 5773 attached [pid 5773] chdir("./57") = 0 [pid 5773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5773] setpgid(0, 0) = 0 [pid 5773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5773] write(3, "1000", 4 [pid 5771] <... write resumed>) = 2097152 [pid 5773] <... write resumed>) = 4 [pid 5773] close(3) = 0 [pid 5773] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5773] memfd_create("syzkaller", 0) = 3 [pid 5773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5771] munmap(0x7f241a43b000, 2097152) = 0 [pid 5771] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5765] <... pwritev resumed>) = 1114112 [pid 5771] <... openat resumed>) = 4 [pid 5765] exit_group(0 [pid 5771] ioctl(4, LOOP_SET_FD, 3 [pid 5765] <... exit_group resumed>) = ? [pid 5771] <... ioctl resumed>) = 0 [pid 5773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5771] close(3) = 0 [pid 5771] mkdir("./file0", 0777) = 0 [ 136.237885][ T5771] loop5: detected capacity change from 0 to 4096 [pid 5771] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5762] +++ exited with 0 +++ [pid 5771] <... mount resumed>) = 0 [pid 5771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5762, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} --- [pid 5771] <... openat resumed>) = 3 [pid 5063] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5771] chdir("./file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5773] <... write resumed>) = 2097152 [pid 5771] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5773] munmap(0x7f241a43b000, 2097152 [pid 5771] ioctl(4, LOOP_CLR_FD [pid 5765] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 5773] <... munmap resumed>) = 0 [pid 5771] <... ioctl resumed>) = 0 [pid 5773] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5771] close(4 [pid 5766] <... pwritev resumed>) = 1114112 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5765, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] fstat(3, [pid 5773] <... openat resumed>) = 4 [pid 5771] <... close resumed>) = 0 [ 136.287883][ T5774] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] ioctl(4, LOOP_SET_FD, 3 [pid 5771] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5766] exit_group(0 [pid 5067] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5771] <... openat resumed>) = 4 [pid 5766] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5773] <... ioctl resumed>) = 0 [pid 5771] unlink("./file1" [pid 5067] fstat(3, [pid 5773] close(3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5773] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5773] mkdir("./file0", 0777 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5773] <... mkdir resumed>) = 0 [pid 5067] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5771] <... unlink resumed>) = 0 [pid 5067] lstat("./57/binderfs", [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5771] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./57/binderfs") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./56/binderfs") = 0 [ 136.342900][ T5773] loop1: detected capacity change from 0 to 4096 [pid 5063] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] <... mount resumed>) = 0 [pid 5773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5773] chdir("./file0") = 0 [pid 5773] ioctl(4, LOOP_CLR_FD) = 0 [pid 5773] close(4) = 0 [pid 5773] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5773] unlink("./file1" [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] fstat(4, [pid 5063] lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 136.428145][ T5775] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 4 [pid 5773] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5063] fstat(4, [pid 5773] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5768] <... pwritev resumed>) = 1114112 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5768] exit_group(0 [pid 5766] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5768] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] close(4 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5067] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5766, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./56/file0" [pid 5067] rmdir("./57/file0" [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./56" [pid 5067] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] mkdir("./57", 0777 [pid 5067] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] rmdir("./57" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5067] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] mkdir("./58", 0777 [pid 5066] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] fstat(3, [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5776 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 5776 attached [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5776] chdir("./57") = 0 [pid 5067] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5776] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... close resumed>) = 0 [pid 5066] lstat("./56/binderfs", [pid 5776] <... prctl resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5776] setpgid(0, 0 [pid 5066] unlink("./56/binderfs" [pid 5776] <... setpgid resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5777 [pid 5066] <... unlink resumed>) = 0 [pid 5776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5776] <... openat resumed>) = 3 [pid 5776] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5777 attached [pid 5776] close(3 [pid 5777] chdir("./58" [pid 5776] <... close resumed>) = 0 [pid 5776] symlink("/dev/binderfs", "./binderfs" [pid 5777] <... chdir resumed>) = 0 [pid 5777] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5776] <... symlink resumed>) = 0 [pid 5777] <... prctl resumed>) = 0 [pid 5777] setpgid(0, 0 [pid 5776] memfd_create("syzkaller", 0 [pid 5777] <... setpgid resumed>) = 0 [pid 5776] <... memfd_create resumed>) = 3 [pid 5777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5777] <... openat resumed>) = 3 [pid 5776] <... mmap resumed>) = 0x7f241a43b000 [pid 5777] write(3, "1000", 4) = 4 [pid 5777] close(3) = 0 [pid 5777] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5777] memfd_create("syzkaller", 0) = 3 [pid 5777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5768] +++ exited with 0 +++ [pid 5777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5768, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, [pid 5066] <... umount2 resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] lstat("./56/file0", [pid 5065] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] unlink("./58/binderfs") = 0 [pid 5065] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5771] <... pwritev resumed>) = 1114112 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5771] exit_group(0 [pid 5066] getdents64(4, [pid 5771] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./56/file0" [pid 5065] <... umount2 resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./56") = 0 [pid 5066] mkdir("./57", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5776] <... write resumed>) = 2097152 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5776] munmap(0x7f241a43b000, 2097152 [pid 5065] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5776] <... munmap resumed>) = 0 [pid 5776] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5778 [pid 5776] <... openat resumed>) = 4 [pid 5776] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5777] <... write resumed>) = 2097152 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, ./strace-static-x86_64: Process 5778 attached 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5778] chdir("./57" [pid 5776] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5778] <... chdir resumed>) = 0 [pid 5777] munmap(0x7f241a43b000, 2097152 [pid 5776] close(3 [pid 5065] rmdir("./58/file0" [pid 5778] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5777] <... munmap resumed>) = 0 [pid 5776] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5777] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(3, [pid 5778] <... prctl resumed>) = 0 [pid 5776] mkdir("./file0", 0777 [pid 5777] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5777] ioctl(4, LOOP_SET_FD, 3 [pid 5778] setpgid(0, 0 [pid 5065] close(3 [pid 5778] <... setpgid resumed>) = 0 [pid 5776] <... mkdir resumed>) = 0 [pid 5773] <... pwritev resumed>) = 1114112 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./58" [pid 5773] exit_group(0 [pid 5778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5777] <... ioctl resumed>) = 0 [pid 5776] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5771] +++ exited with 0 +++ [pid 5065] <... rmdir resumed>) = 0 [pid 5778] <... openat resumed>) = 3 [pid 5773] <... exit_group resumed>) = ? [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5771, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5065] mkdir("./59", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 5778] write(3, "1000", 4 [pid 5777] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5778] <... write resumed>) = 4 [pid 5777] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5778] close(3 [pid 5777] mkdir("./file0", 0777 [pid 5068] <... openat resumed>) = 3 [ 136.791352][ T5776] loop0: detected capacity change from 0 to 4096 [ 136.817587][ T5777] loop4: detected capacity change from 0 to 4096 [pid 5778] <... close resumed>) = 0 [pid 5777] <... mkdir resumed>) = 0 [pid 5776] <... mount resumed>) = 0 [pid 5068] fstat(3, [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5780 [pid 5777] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./58/binderfs") = 0 [pid 5068] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5780 attached [pid 5780] chdir("./59") = 0 [pid 5780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5780] setpgid(0, 0) = 0 [pid 5780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5776] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5778] memfd_create("syzkaller", 0 [pid 5776] <... openat resumed>) = 3 [pid 5778] <... memfd_create resumed>) = 3 [pid 5776] chdir("./file0" [pid 5778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5776] <... chdir resumed>) = 0 [pid 5780] write(3, "1000", 4 [pid 5778] <... mmap resumed>) = 0x7f241a43b000 [pid 5776] ioctl(4, LOOP_CLR_FD [pid 5780] <... write resumed>) = 4 [pid 5776] <... ioctl resumed>) = 0 [pid 5780] close(3 [pid 5776] close(4 [pid 5780] <... close resumed>) = 0 [pid 5776] <... close resumed>) = 0 [pid 5776] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5780] symlink("/dev/binderfs", "./binderfs" [pid 5776] <... openat resumed>) = 4 [pid 5780] <... symlink resumed>) = 0 [ 136.854514][ T5779] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5776] unlink("./file1" [pid 5780] memfd_create("syzkaller", 0 [pid 5777] <... mount resumed>) = 0 [pid 5776] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5780] <... memfd_create resumed>) = 3 [pid 5778] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5776] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5780] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5777] <... openat resumed>) = 3 [pid 5780] <... mmap resumed>) = 0x7f241a43b000 [pid 5777] chdir("./file0" [pid 5773] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5773, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5064] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5777] <... chdir resumed>) = 0 [pid 5068] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5777] ioctl(4, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5777] <... ioctl resumed>) = 0 [pid 5068] lstat("./58/file0", [pid 5064] lstat("./57/binderfs", [pid 5777] close(4 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5777] <... close resumed>) = 0 [pid 5068] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./57/binderfs" [pid 5777] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5777] <... openat resumed>) = 4 [pid 5777] unlink("./file1" [pid 5068] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [ 136.913214][ T5781] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5777] <... unlink resumed>) = 0 [pid 5777] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./58/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./58") = 0 [pid 5068] mkdir("./59", 0777 [pid 5780] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5778] <... write resumed>) = 2097152 [pid 5068] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5778] munmap(0x7f241a43b000, 2097152 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5782 [pid 5778] <... munmap resumed>) = 0 [pid 5778] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5778] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5782 attached [pid 5064] <... umount2 resumed>) = 0 [pid 5782] chdir("./59") = 0 [pid 5782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5782] setpgid(0, 0) = 0 [pid 5782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5782] <... openat resumed>) = 3 [pid 5782] write(3, "1000", 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5782] <... write resumed>) = 4 [pid 5782] close(3 [pid 5064] lstat("./57/file0", [pid 5782] <... close resumed>) = 0 [pid 5782] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5782] <... symlink resumed>) = 0 [pid 5782] memfd_create("syzkaller", 0 [pid 5064] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5782] <... memfd_create resumed>) = 3 [pid 5782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5782] <... mmap resumed>) = 0x7f241a43b000 [ 137.027032][ T5778] loop3: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5778] <... ioctl resumed>) = 0 [pid 5778] close(3 [pid 5064] <... openat resumed>) = 4 [pid 5778] <... close resumed>) = 0 [pid 5778] mkdir("./file0", 0777 [pid 5064] fstat(4, [pid 5778] <... mkdir resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5778] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] getdents64(4, [pid 5780] <... write resumed>) = 2097152 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5780] munmap(0x7f241a43b000, 2097152 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./57/file0") = 0 [pid 5064] getdents64(3, [pid 5780] <... munmap resumed>) = 0 [pid 5780] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5780] <... openat resumed>) = 4 [pid 5064] close(3 [pid 5780] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... close resumed>) = 0 [pid 5782] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./57") = 0 [pid 5064] mkdir("./58", 0777 [pid 5780] <... ioctl resumed>) = 0 [pid 5780] close(3 [pid 5064] <... mkdir resumed>) = 0 [pid 5780] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5780] mkdir("./file0", 0777) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5780] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5778] <... mount resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5778] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5785 [pid 5778] chdir("./file0") = 0 [ 137.130839][ T5780] loop2: detected capacity change from 0 to 4096 [ 137.170344][ T5783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5785 attached [pid 5780] <... mount resumed>) = 0 [pid 5778] ioctl(4, LOOP_CLR_FD [pid 5785] chdir("./58" [pid 5780] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5778] <... ioctl resumed>) = 0 [pid 5785] <... chdir resumed>) = 0 [pid 5780] <... openat resumed>) = 3 [pid 5778] close(4 [pid 5785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5785] setpgid(0, 0) = 0 [pid 5785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5785] write(3, "1000", 4 [pid 5778] <... close resumed>) = 0 [pid 5785] <... write resumed>) = 4 [pid 5780] chdir("./file0" [pid 5778] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5785] close(3) = 0 [pid 5785] symlink("/dev/binderfs", "./binderfs" [pid 5780] <... chdir resumed>) = 0 [pid 5785] <... symlink resumed>) = 0 [pid 5780] ioctl(4, LOOP_CLR_FD [pid 5785] memfd_create("syzkaller", 0 [pid 5778] <... openat resumed>) = 4 [pid 5780] <... ioctl resumed>) = 0 [pid 5785] <... memfd_create resumed>) = 3 [pid 5780] close(4 [pid 5778] unlink("./file1" [pid 5785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5780] <... close resumed>) = 0 [pid 5780] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5785] <... mmap resumed>) = 0x7f241a43b000 [pid 5780] <... openat resumed>) = 4 [pid 5780] unlink("./file1" [pid 5778] <... unlink resumed>) = 0 [pid 5778] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 137.187403][ T5784] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5782] <... write resumed>) = 2097152 [pid 5780] <... unlink resumed>) = 0 [pid 5780] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5782] munmap(0x7f241a43b000, 2097152) = 0 [pid 5782] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5782] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5776] <... pwritev resumed>) = 1114112 [pid 5782] close(3 [pid 5776] exit_group(0 [pid 5782] <... close resumed>) = 0 [pid 5776] <... exit_group resumed>) = ? [pid 5782] mkdir("./file0", 0777) = 0 [ 137.298686][ T5782] loop5: detected capacity change from 0 to 4096 [pid 5782] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5782] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5785] <... write resumed>) = 2097152 [pid 5782] <... openat resumed>) = 3 [pid 5785] munmap(0x7f241a43b000, 2097152 [pid 5782] chdir("./file0" [pid 5785] <... munmap resumed>) = 0 [pid 5782] <... chdir resumed>) = 0 [pid 5782] ioctl(4, LOOP_CLR_FD [pid 5785] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5782] <... ioctl resumed>) = 0 [pid 5785] <... openat resumed>) = 4 [pid 5785] ioctl(4, LOOP_SET_FD, 3 [ 137.381423][ T5786] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5782] close(4) = 0 [pid 5782] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5776] +++ exited with 0 +++ [pid 5782] unlink("./file1" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5776, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5782] <... unlink resumed>) = 0 [pid 5782] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5777] <... pwritev resumed>) = 1114112 [pid 5777] exit_group(0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5777] <... exit_group resumed>) = ? [ 137.426589][ T5785] loop1: detected capacity change from 0 to 4096 [pid 5063] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5785] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5785] close(3 [pid 5063] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5785] <... close resumed>) = 0 [pid 5785] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./57/binderfs", [pid 5785] <... mkdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5785] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] unlink("./57/binderfs") = 0 [pid 5063] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5778] <... pwritev resumed>) = 1114112 [pid 5778] exit_group(0 [pid 5785] <... mount resumed>) = 0 [pid 5778] <... exit_group resumed>) = ? [pid 5785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5785] chdir("./file0") = 0 [pid 5785] ioctl(4, LOOP_CLR_FD) = 0 [pid 5785] close(4) = 0 [pid 5780] <... pwritev resumed>) = 1114112 [pid 5785] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5780] exit_group(0 [pid 5785] <... openat resumed>) = 4 [pid 5780] <... exit_group resumed>) = ? [ 137.567383][ T5787] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5785] unlink("./file1" [pid 5778] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 5777] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5778, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5785] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5777, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./57/file0", [pid 5785] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5066] lstat("./57/binderfs", [pid 5063] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] fstat(3, [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] unlink("./57/binderfs" [pid 5063] <... openat resumed>) = 4 [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 5063] fstat(4, [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./58/binderfs", [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(4, [pid 5067] unlink("./58/binderfs" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5063] close(4 [pid 5067] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./57/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./57") = 0 [pid 5063] mkdir("./58", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5788 ./strace-static-x86_64: Process 5788 attached [pid 5066] <... umount2 resumed>) = 0 [pid 5788] chdir("./58") = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5788] <... prctl resumed>) = 0 [pid 5788] setpgid(0, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5788] <... setpgid resumed>) = 0 [pid 5066] lstat("./57/file0", [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5788] <... openat resumed>) = 3 [pid 5066] umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5788] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5788] <... write resumed>) = 4 [pid 5788] close(3 [pid 5066] openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5788] <... close resumed>) = 0 [pid 5788] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... openat resumed>) = 4 [pid 5788] <... symlink resumed>) = 0 [pid 5066] fstat(4, [pid 5788] memfd_create("syzkaller", 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5788] <... memfd_create resumed>) = 3 [pid 5788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] getdents64(4, [pid 5788] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5780] +++ exited with 0 +++ [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./57/file0" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5780, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5066] getdents64(3, [pid 5065] <... restart_syscall resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5067] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./57" [pid 5065] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, [pid 5065] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] mkdir("./58", 0777 [pid 5067] close(4 [pid 5065] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] rmdir("./58/file0" [pid 5065] fstat(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] getdents64(3, [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5065] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] rmdir("./58" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./59", 0777 [pid 5066] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5789 [pid 5065] lstat("./59/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5789 attached [pid 5789] chdir("./59" [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5790 [pid 5065] unlink("./59/binderfs") = 0 [pid 5065] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5789] <... chdir resumed>) = 0 [pid 5789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5789] setpgid(0, 0) = 0 [pid 5789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5789] write(3, "1000", 4 [pid 5788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5789] <... write resumed>) = 4 ./strace-static-x86_64: Process 5790 attached [pid 5789] close(3 [pid 5782] <... pwritev resumed>) = 1114112 [pid 5789] <... close resumed>) = 0 [pid 5782] exit_group(0 [pid 5790] chdir("./58" [pid 5789] symlink("/dev/binderfs", "./binderfs" [pid 5782] <... exit_group resumed>) = ? [pid 5789] <... symlink resumed>) = 0 [pid 5790] <... chdir resumed>) = 0 [pid 5789] memfd_create("syzkaller", 0) = 3 [pid 5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5790] setpgid(0, 0) = 0 [pid 5790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5790] write(3, "1000", 4) = 4 [pid 5790] close(3 [pid 5065] <... umount2 resumed>) = 0 [pid 5790] <... close resumed>) = 0 [pid 5065] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5790] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5790] <... symlink resumed>) = 0 [pid 5065] lstat("./59/file0", [pid 5790] memfd_create("syzkaller", 0) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5790] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5788] <... write resumed>) = 2097152 [pid 5065] rmdir("./59/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./59") = 0 [pid 5065] mkdir("./60", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5788] munmap(0x7f241a43b000, 2097152 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5790] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5791 [pid 5782] +++ exited with 0 +++ ./strace-static-x86_64: Process 5791 attached [pid 5788] <... munmap resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5782, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5788] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] chdir("./60" [pid 5788] <... openat resumed>) = 4 [pid 5791] <... chdir resumed>) = 0 [pid 5788] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5791] <... prctl resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5791] setpgid(0, 0 [pid 5068] fstat(3, [pid 5791] <... setpgid resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] getdents64(3, [pid 5788] <... ioctl resumed>) = 0 [pid 5788] close(3) = 0 [pid 5788] mkdir("./file0", 0777 [pid 5791] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5791] write(3, "1000", 4 [pid 5068] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5791] close(3 [pid 5068] lstat("./59/binderfs", [pid 5791] <... close resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5791] symlink("/dev/binderfs", "./binderfs" [pid 5068] unlink("./59/binderfs" [pid 5791] <... symlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5791] memfd_create("syzkaller", 0 [pid 5068] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] <... memfd_create resumed>) = 3 [pid 5788] <... mkdir resumed>) = 0 [pid 5788] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5789] <... write resumed>) = 2097152 [pid 5789] munmap(0x7f241a43b000, 2097152) = 0 [pid 5789] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 137.981243][ T5788] loop0: detected capacity change from 0 to 4096 [pid 5789] ioctl(4, LOOP_SET_FD, 3 [pid 5788] <... mount resumed>) = 0 [pid 5788] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5788] chdir("./file0") = 0 [pid 5788] ioctl(4, LOOP_CLR_FD) = 0 [pid 5790] <... write resumed>) = 2097152 [pid 5788] close(4 [pid 5791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5790] munmap(0x7f241a43b000, 2097152 [pid 5788] <... close resumed>) = 0 [pid 5785] <... pwritev resumed>) = 1114112 [pid 5068] <... umount2 resumed>) = 0 [pid 5789] <... ioctl resumed>) = 0 [pid 5788] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5785] exit_group(0 [pid 5790] <... munmap resumed>) = 0 [pid 5789] close(3 [pid 5785] <... exit_group resumed>) = ? [pid 5790] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5789] <... close resumed>) = 0 [pid 5788] <... openat resumed>) = 4 [pid 5789] mkdir("./file0", 0777 [pid 5788] unlink("./file1" [pid 5789] <... mkdir resumed>) = 0 [pid 5789] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5790] <... openat resumed>) = 4 [ 138.031670][ T5789] loop4: detected capacity change from 0 to 4096 [ 138.051958][ T5792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5790] ioctl(4, LOOP_SET_FD, 3 [pid 5068] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, [pid 5788] <... unlink resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5788] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 138.094680][ T5790] loop3: detected capacity change from 0 to 4096 [pid 5068] getdents64(4, [pid 5790] <... ioctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5789] <... mount resumed>) = 0 [pid 5790] close(3 [pid 5789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] getdents64(4, [pid 5790] <... close resumed>) = 0 [pid 5789] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5790] mkdir("./file0", 0777 [pid 5789] chdir("./file0" [pid 5068] close(4 [pid 5789] <... chdir resumed>) = 0 [pid 5790] <... mkdir resumed>) = 0 [pid 5789] ioctl(4, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5790] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5789] <... ioctl resumed>) = 0 [pid 5068] rmdir("./59/file0" [pid 5789] close(4) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5789] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] getdents64(3, [pid 5789] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5789] unlink("./file1" [pid 5068] close(3) = 0 [pid 5068] rmdir("./59") = 0 [pid 5068] mkdir("./60", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5794 [pid 5791] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5794 attached [ 138.138183][ T5793] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5791] munmap(0x7f241a43b000, 2097152 [pid 5789] <... unlink resumed>) = 0 [pid 5789] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5794] chdir("./60" [pid 5791] <... munmap resumed>) = 0 [pid 5785] +++ exited with 0 +++ [pid 5794] <... chdir resumed>) = 0 [pid 5791] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5791] <... openat resumed>) = 4 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5785, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5794] <... prctl resumed>) = 0 [pid 5791] ioctl(4, LOOP_SET_FD, 3 [pid 5790] <... mount resumed>) = 0 [pid 5794] setpgid(0, 0 [pid 5790] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5790] <... openat resumed>) = 3 [pid 5790] chdir("./file0") = 0 [pid 5790] ioctl(4, LOOP_CLR_FD) = 0 [pid 5790] close(4) = 0 [pid 5790] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5794] <... setpgid resumed>) = 0 [pid 5790] <... openat resumed>) = 4 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5790] unlink("./file1" [pid 5794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5794] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5794] write(3, "1000", 4) = 4 [pid 5064] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5794] close(3) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5794] symlink("/dev/binderfs", "./binderfs" [pid 5064] fstat(3, [pid 5794] <... symlink resumed>) = 0 [pid 5794] memfd_create("syzkaller", 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5794] <... memfd_create resumed>) = 3 [pid 5791] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, [pid 5794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5791] close(3 [pid 5794] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5791] <... close resumed>) = 0 [pid 5790] <... unlink resumed>) = 0 [pid 5790] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] mkdir("./file0", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./58/binderfs", [pid 5791] <... mkdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 138.225654][ T5795] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.239372][ T5791] loop2: detected capacity change from 0 to 4096 [pid 5791] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] unlink("./58/binderfs") = 0 [pid 5064] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5791] <... mount resumed>) = 0 [pid 5064] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5791] <... openat resumed>) = 3 [pid 5791] chdir("./file0" [pid 5064] lstat("./58/file0", [pid 5791] <... chdir resumed>) = 0 [pid 5791] ioctl(4, LOOP_CLR_FD [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5791] <... ioctl resumed>) = 0 [pid 5064] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] close(4) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5791] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5791] <... openat resumed>) = 4 [pid 5791] unlink("./file1" [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./58/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [ 138.360070][ T5796] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] close(3) = 0 [pid 5064] rmdir("./58") = 0 [pid 5064] mkdir("./59", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5791] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5794] <... write resumed>) = 2097152 [pid 5791] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5794] munmap(0x7f241a43b000, 2097152) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5794] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] close(3 [pid 5794] <... openat resumed>) = 4 [pid 5794] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5797 ./strace-static-x86_64: Process 5797 attached [pid 5797] chdir("./59") = 0 [pid 5797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5797] setpgid(0, 0) = 0 [pid 5794] <... ioctl resumed>) = 0 [pid 5794] close(3 [pid 5797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5794] <... close resumed>) = 0 [pid 5797] <... openat resumed>) = 3 [pid 5794] mkdir("./file0", 0777 [pid 5797] write(3, "1000", 4 [ 138.472877][ T5794] loop5: detected capacity change from 0 to 4096 [pid 5794] <... mkdir resumed>) = 0 [pid 5797] <... write resumed>) = 4 [pid 5794] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5797] close(3) = 0 [pid 5797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5797] memfd_create("syzkaller", 0 [pid 5788] <... pwritev resumed>) = 1114112 [pid 5797] <... memfd_create resumed>) = 3 [pid 5788] exit_group(0 [pid 5797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5788] <... exit_group resumed>) = ? [pid 5797] <... mmap resumed>) = 0x7f241a43b000 [pid 5789] <... pwritev resumed>) = 1114112 [pid 5789] exit_group(0) = ? [pid 5797] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5788] +++ exited with 0 +++ [pid 5794] <... mount resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5788, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5794] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5790] <... pwritev resumed>) = 1114112 [pid 5063] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5794] <... openat resumed>) = 3 [pid 5790] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5794] chdir("./file0" [pid 5790] <... exit_group resumed>) = ? [pid 5063] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5794] <... chdir resumed>) = 0 [pid 5063] unlink("./58/binderfs" [pid 5794] ioctl(4, LOOP_CLR_FD [pid 5063] <... unlink resumed>) = 0 [pid 5794] <... ioctl resumed>) = 0 [pid 5063] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5794] close(4) = 0 [pid 5794] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 138.616517][ T5798] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5794] unlink("./file1") = 0 [pid 5794] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5797] <... write resumed>) = 2097152 [pid 5797] munmap(0x7f241a43b000, 2097152) = 0 [pid 5797] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5797] ioctl(4, LOOP_SET_FD, 3 [pid 5789] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5789, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./59/binderfs", [pid 5063] <... umount2 resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./59/binderfs") = 0 [pid 5067] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5797] <... ioctl resumed>) = 0 [pid 5063] lstat("./58/file0", [pid 5791] <... pwritev resumed>) = 1114112 [pid 5791] exit_group(0) = ? [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5797] close(3) = 0 [pid 5797] mkdir("./file0", 0777) = 0 [pid 5797] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... openat resumed>) = 4 [ 138.706602][ T5797] loop1: detected capacity change from 0 to 4096 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./58/file0") = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./58") = 0 [pid 5063] mkdir("./59", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5797] <... mount resumed>) = 0 [pid 5067] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5800 [pid 5797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5797] <... openat resumed>) = 3 [pid 5067] lstat("./59/file0", [pid 5797] chdir("./file0" [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5800 attached [pid 5797] ioctl(4, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5800] chdir("./59" [pid 5797] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5800] <... chdir resumed>) = 0 [pid 5797] close(4 [pid 5790] +++ exited with 0 +++ [pid 5067] <... openat resumed>) = 4 [pid 5800] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5797] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5800] <... prctl resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5800] setpgid(0, 0 [pid 5067] getdents64(4, [pid 5800] <... setpgid resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5797] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] getdents64(4, [pid 5800] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5800] write(3, "1000", 4 [pid 5797] <... openat resumed>) = 4 [pid 5067] close(4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5790, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5800] <... write resumed>) = 4 [pid 5797] unlink("./file1" [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5800] close(3 [pid 5067] rmdir("./59/file0" [pid 5800] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5800] symlink("/dev/binderfs", "./binderfs" [pid 5067] getdents64(3, [pid 5066] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5800] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5800] memfd_create("syzkaller", 0 [pid 5067] close(3 [pid 5066] fstat(3, [pid 5800] <... memfd_create resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] rmdir("./59" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5800] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] mkdir("./60", 0777 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... mkdir resumed>) = 0 [ 138.808783][ T5799] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5797] <... unlink resumed>) = 0 [pid 5791] +++ exited with 0 +++ [pid 5067] <... openat resumed>) = 3 [pid 5066] lstat("./58/binderfs", [pid 5797] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5791, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5801 ./strace-static-x86_64: Process 5801 attached [pid 5066] unlink("./58/binderfs") = 0 [pid 5066] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5801] chdir("./60" [pid 5800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5801] <... chdir resumed>) = 0 [pid 5801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5801] setpgid(0, 0) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5801] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5801] write(3, "1000", 4) = 4 [pid 5065] fstat(3, [pid 5801] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5801] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5801] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5801] <... symlink resumed>) = 0 [pid 5065] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5801] memfd_create("syzkaller", 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5801] <... memfd_create resumed>) = 3 [pid 5065] lstat("./60/binderfs", [pid 5801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5801] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] unlink("./60/binderfs") = 0 [pid 5065] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./58/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./58") = 0 [pid 5066] mkdir("./59", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5800] <... write resumed>) = 2097152 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5802 [pid 5800] munmap(0x7f241a43b000, 2097152) = 0 ./strace-static-x86_64: Process 5802 attached [pid 5800] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5802] chdir("./59" [pid 5800] <... openat resumed>) = 4 [pid 5802] <... chdir resumed>) = 0 [pid 5800] ioctl(4, LOOP_SET_FD, 3 [pid 5802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5802] setpgid(0, 0) = 0 [pid 5802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5802] write(3, "1000", 4) = 4 [pid 5802] close(3) = 0 [pid 5065] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5802] symlink("/dev/binderfs", "./binderfs" [pid 5800] <... ioctl resumed>) = 0 [pid 5794] <... pwritev resumed>) = 1114112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5800] close(3 [pid 5794] exit_group(0 [pid 5065] lstat("./60/file0", [pid 5800] <... close resumed>) = 0 [pid 5794] <... exit_group resumed>) = ? [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5802] <... symlink resumed>) = 0 [pid 5800] mkdir("./file0", 0777 [pid 5065] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5802] memfd_create("syzkaller", 0 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5800] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5802] <... memfd_create resumed>) = 3 [pid 5800] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5802] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] close(4) = 0 [pid 5065] rmdir("./60/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./60") = 0 [pid 5065] mkdir("./61", 0777) = 0 [ 139.042172][ T5800] loop0: detected capacity change from 0 to 4096 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5803 [pid 5801] <... write resumed>) = 2097152 [pid 5801] munmap(0x7f241a43b000, 2097152./strace-static-x86_64: Process 5803 attached [pid 5803] chdir("./61") = 0 [pid 5803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5803] setpgid(0, 0) = 0 [pid 5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5801] <... munmap resumed>) = 0 [pid 5803] <... openat resumed>) = 3 [pid 5803] write(3, "1000", 4) = 4 [pid 5803] close(3) = 0 [pid 5803] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5801] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5800] <... mount resumed>) = 0 [pid 5803] memfd_create("syzkaller", 0 [pid 5801] <... openat resumed>) = 4 [pid 5800] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5803] <... memfd_create resumed>) = 3 [pid 5801] ioctl(4, LOOP_SET_FD, 3 [pid 5800] <... openat resumed>) = 3 [pid 5803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5800] chdir("./file0" [pid 5803] <... mmap resumed>) = 0x7f241a43b000 [pid 5800] <... chdir resumed>) = 0 [pid 5800] ioctl(4, LOOP_CLR_FD) = 0 [pid 5800] close(4 [pid 5801] <... ioctl resumed>) = 0 [pid 5800] <... close resumed>) = 0 [pid 5801] close(3 [pid 5800] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5797] <... pwritev resumed>) = 1114112 [pid 5801] <... close resumed>) = 0 [pid 5797] exit_group(0 [pid 5801] mkdir("./file0", 0777 [pid 5800] <... openat resumed>) = 4 [pid 5797] <... exit_group resumed>) = ? [pid 5802] <... write resumed>) = 2097152 [pid 5801] <... mkdir resumed>) = 0 [pid 5800] unlink("./file1" [pid 5794] +++ exited with 0 +++ [ 139.129112][ T5804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.150408][ T5801] loop4: detected capacity change from 0 to 4096 [pid 5803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5802] munmap(0x7f241a43b000, 2097152 [pid 5801] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5794, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5068] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5802] <... munmap resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5802] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5802] <... openat resumed>) = 4 [pid 5068] unlink("./60/binderfs" [pid 5802] ioctl(4, LOOP_SET_FD, 3 [pid 5800] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5800] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5802] <... ioctl resumed>) = 0 [pid 5802] close(3) = 0 [pid 5802] mkdir("./file0", 0777) = 0 [pid 5802] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5801] <... mount resumed>) = 0 [pid 5803] <... write resumed>) = 2097152 [pid 5801] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5801] chdir("./file0") = 0 [pid 5801] ioctl(4, LOOP_CLR_FD) = 0 [pid 5801] close(4 [pid 5803] munmap(0x7f241a43b000, 2097152 [pid 5801] <... close resumed>) = 0 [pid 5801] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5801] unlink("./file1" [pid 5803] <... munmap resumed>) = 0 [ 139.229903][ T5802] loop3: detected capacity change from 0 to 4096 [ 139.267718][ T5805] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5803] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5802] <... mount resumed>) = 0 [pid 5802] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5802] chdir("./file0") = 0 [pid 5802] ioctl(4, LOOP_CLR_FD) = 0 [pid 5802] close(4) = 0 [pid 5802] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5803] ioctl(4, LOOP_SET_FD, 3 [pid 5802] unlink("./file1" [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./60/file0", [pid 5797] +++ exited with 0 +++ [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5797, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5068] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... restart_syscall resumed>) = 0 [pid 5803] <... ioctl resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] close(3 [pid 5068] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5803] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5803] mkdir("./file0", 0777 [pid 5068] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5802] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] fstat(3, [pid 5803] <... mkdir resumed>) = 0 [ 139.303171][ T5806] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.320621][ T5803] loop2: detected capacity change from 0 to 4096 [pid 5802] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5801] <... unlink resumed>) = 0 [pid 5068] close(4 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5803] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5801] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5068] rmdir("./60/file0" [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] lstat("./59/binderfs", [pid 5068] close(3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] unlink("./59/binderfs" [pid 5068] rmdir("./60" [pid 5064] <... unlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5064] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./61", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5808 [pid 5803] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5808 attached [pid 5808] chdir("./61") = 0 [pid 5808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5808] setpgid(0, 0 [pid 5803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5808] <... setpgid resumed>) = 0 [pid 5808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5803] <... openat resumed>) = 3 [pid 5808] <... openat resumed>) = 3 [pid 5803] chdir("./file0" [pid 5808] write(3, "1000", 4) = 4 [pid 5803] <... chdir resumed>) = 0 [pid 5808] close(3 [pid 5803] ioctl(4, LOOP_CLR_FD [pid 5808] <... close resumed>) = 0 [pid 5808] symlink("/dev/binderfs", "./binderfs" [pid 5803] <... ioctl resumed>) = 0 [pid 5808] <... symlink resumed>) = 0 [pid 5803] close(4 [pid 5808] memfd_create("syzkaller", 0 [pid 5803] <... close resumed>) = 0 [pid 5808] <... memfd_create resumed>) = 3 [pid 5803] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 139.397522][ T5807] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5803] <... openat resumed>) = 4 [pid 5803] unlink("./file1" [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5803] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5800] <... pwritev resumed>) = 1114112 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5800] exit_group(0) = ? [pid 5064] close(4) = 0 [pid 5064] rmdir("./59/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./59") = 0 [pid 5064] mkdir("./60", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5809 ./strace-static-x86_64: Process 5809 attached [pid 5809] chdir("./60") = 0 [pid 5809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5809] setpgid(0, 0 [pid 5808] <... write resumed>) = 2097152 [pid 5809] <... setpgid resumed>) = 0 [pid 5808] munmap(0x7f241a43b000, 2097152 [pid 5809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5809] write(3, "1000", 4 [pid 5808] <... munmap resumed>) = 0 [pid 5808] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5809] <... write resumed>) = 4 [pid 5808] <... openat resumed>) = 4 [pid 5808] ioctl(4, LOOP_SET_FD, 3 [pid 5809] close(3 [pid 5800] +++ exited with 0 +++ [pid 5809] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5800, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5809] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5809] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5809] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5809] <... memfd_create resumed>) = 3 [pid 5808] <... ioctl resumed>) = 0 [pid 5063] fstat(3, [pid 5809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5808] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5809] <... mmap resumed>) = 0x7f241a43b000 [pid 5808] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5808] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5808] <... mkdir resumed>) = 0 [pid 5063] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5808] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./59/binderfs") = 0 [ 139.629338][ T5808] loop5: detected capacity change from 0 to 4096 [pid 5063] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5808] <... mount resumed>) = 0 [pid 5808] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5808] chdir("./file0") = 0 [pid 5808] ioctl(4, LOOP_CLR_FD) = 0 [pid 5808] close(4) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5808] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5808] unlink("./file1" [pid 5802] <... pwritev resumed>) = 1114112 [pid 5063] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./59/file0", [pid 5802] exit_group(0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5802] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [ 139.719405][ T5810] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] close(4) = 0 [pid 5063] rmdir("./59/file0") = 0 [pid 5063] getdents64(3, [pid 5803] <... pwritev resumed>) = 1114112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5808] <... unlink resumed>) = 0 [pid 5803] exit_group(0 [pid 5063] close(3 [pid 5809] <... write resumed>) = 2097152 [pid 5808] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5803] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 5809] munmap(0x7f241a43b000, 2097152 [pid 5802] +++ exited with 0 +++ [pid 5801] <... pwritev resumed>) = 1114112 [pid 5063] rmdir("./59" [pid 5809] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5801] exit_group(0 [pid 5063] mkdir("./60", 0777 [pid 5809] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5801] <... exit_group resumed>) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5802, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5809] <... openat resumed>) = 4 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5811 [pid 5809] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5811 attached [pid 5811] chdir("./60") = 0 [pid 5811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5811] setpgid(0, 0) = 0 [pid 5811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5809] <... ioctl resumed>) = 0 [pid 5811] write(3, "1000", 4 [pid 5066] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5809] close(3 [pid 5811] <... write resumed>) = 4 [pid 5811] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5811] <... close resumed>) = 0 [pid 5809] <... close resumed>) = 0 [pid 5811] symlink("/dev/binderfs", "./binderfs" [pid 5066] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5811] <... symlink resumed>) = 0 [pid 5809] mkdir("./file0", 0777 [pid 5066] <... openat resumed>) = 3 [pid 5811] memfd_create("syzkaller", 0) = 3 [pid 5811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5809] <... mkdir resumed>) = 0 [pid 5066] fstat(3, [pid 5809] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./59/binderfs") = 0 [ 139.847295][ T5809] loop1: detected capacity change from 0 to 4096 [pid 5066] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5809] <... mount resumed>) = 0 [pid 5809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5809] chdir("./file0") = 0 [pid 5809] ioctl(4, LOOP_CLR_FD) = 0 [pid 5801] +++ exited with 0 +++ [pid 5809] close(4) = 0 [pid 5809] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5801, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5809] <... openat resumed>) = 4 [ 139.916725][ T5812] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5809] unlink("./file1" [pid 5067] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./59/file0", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(3, [pid 5066] openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(3, [pid 5809] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] getdents64(4, [pid 5809] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./59/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./59") = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./60", 0777 [pid 5067] lstat("./60/binderfs", [pid 5803] +++ exited with 0 +++ [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./60/binderfs" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5067] <... unlink resumed>) = 0 [pid 5065] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5065] fstat(3, [pid 5066] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5813 [pid 5065] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./61/binderfs", ./strace-static-x86_64: Process 5813 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./61/binderfs") = 0 [pid 5065] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5813] chdir("./60") = 0 [pid 5813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5813] setpgid(0, 0) = 0 [pid 5813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5813] write(3, "1000", 4) = 4 [pid 5811] <... write resumed>) = 2097152 [pid 5813] close(3) = 0 [pid 5813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5813] memfd_create("syzkaller", 0) = 3 [pid 5813] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5813] <... mmap resumed>) = 0x7f241a43b000 [pid 5811] munmap(0x7f241a43b000, 2097152) = 0 [pid 5811] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5811] ioctl(4, LOOP_SET_FD, 3 [pid 5067] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./60/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5811] <... ioctl resumed>) = 0 [pid 5067] close(3 [pid 5811] close(3 [pid 5067] <... close resumed>) = 0 [pid 5811] <... close resumed>) = 0 [pid 5067] rmdir("./60" [pid 5813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5811] mkdir("./file0", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5811] <... mkdir resumed>) = 0 [pid 5067] mkdir("./61", 0777 [pid 5811] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... mkdir resumed>) = 0 [pid 5065] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] lstat("./61/file0", [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 140.058546][ T5811] loop0: detected capacity change from 0 to 4096 [pid 5067] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5808] <... pwritev resumed>) = 1114112 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5808] exit_group(0 [pid 5065] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5808] <... exit_group resumed>) = ? [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5814 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 5814 attached [pid 5065] fstat(4, [pid 5814] chdir("./61" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5814] <... chdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5814] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5814] setpgid(0, 0 [pid 5065] getdents64(4, [pid 5814] <... setpgid resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] close(4 [pid 5814] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5814] write(3, "1000", 4 [pid 5065] rmdir("./61/file0" [pid 5814] <... write resumed>) = 4 [pid 5814] close(3) = 0 [pid 5814] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5814] memfd_create("syzkaller", 0 [pid 5065] getdents64(3, [pid 5814] <... memfd_create resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] close(3 [pid 5814] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./61") = 0 [pid 5065] mkdir("./62", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5811] <... mount resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5811] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5816 [pid 5813] <... write resumed>) = 2097152 [pid 5811] chdir("./file0") = 0 [pid 5811] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5816 attached [pid 5814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5811] <... ioctl resumed>) = 0 [pid 5811] close(4 [pid 5816] chdir("./62" [pid 5811] <... close resumed>) = 0 [pid 5811] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5816] <... chdir resumed>) = 0 [pid 5816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5811] <... openat resumed>) = 4 [pid 5811] unlink("./file1" [pid 5813] munmap(0x7f241a43b000, 2097152 [pid 5816] <... prctl resumed>) = 0 [pid 5816] setpgid(0, 0 [pid 5813] <... munmap resumed>) = 0 [pid 5816] <... setpgid resumed>) = 0 [pid 5813] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5813] ioctl(4, LOOP_SET_FD, 3 [pid 5816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 140.185801][ T5815] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5816] write(3, "1000", 4) = 4 [pid 5811] <... unlink resumed>) = 0 [pid 5816] close(3 [pid 5811] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5816] <... close resumed>) = 0 [pid 5816] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5816] memfd_create("syzkaller", 0) = 3 [pid 5816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5813] <... ioctl resumed>) = 0 [pid 5816] <... mmap resumed>) = 0x7f241a43b000 [pid 5813] close(3) = 0 [pid 5813] mkdir("./file0", 0777) = 0 [pid 5813] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 140.240954][ T5813] loop3: detected capacity change from 0 to 4096 [pid 5816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5808] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5808, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5814] <... write resumed>) = 2097152 [pid 5068] unlink("./61/binderfs") = 0 [pid 5814] munmap(0x7f241a43b000, 2097152 [pid 5068] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5814] <... munmap resumed>) = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5814] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5813] <... mount resumed>) = 0 [pid 5813] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5813] chdir("./file0") = 0 [pid 5813] ioctl(4, LOOP_CLR_FD) = 0 [pid 5813] close(4) = 0 [pid 5813] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5809] <... pwritev resumed>) = 1114112 [pid 5809] exit_group(0) = ? [pid 5813] <... openat resumed>) = 4 [pid 5813] unlink("./file1" [pid 5814] close(3) = 0 [pid 5814] mkdir("./file0", 0777) = 0 [ 140.328565][ T5814] loop4: detected capacity change from 0 to 4096 [ 140.335314][ T5817] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5814] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5813] <... unlink resumed>) = 0 [pid 5068] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5813] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5816] <... write resumed>) = 2097152 [pid 5068] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5816] munmap(0x7f241a43b000, 2097152 [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5816] <... munmap resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5816] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] close(4) = 0 [pid 5816] <... openat resumed>) = 4 [pid 5068] rmdir("./61/file0" [pid 5816] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./61") = 0 [pid 5068] mkdir("./62", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5819 [pid 5814] <... mount resumed>) = 0 [pid 5814] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5814] chdir("./file0") = 0 [pid 5814] ioctl(4, LOOP_CLR_FD) = 0 [pid 5814] close(4) = 0 [pid 5814] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5814] unlink("./file1" [pid 5816] <... ioctl resumed>) = 0 [pid 5816] close(3./strace-static-x86_64: Process 5819 attached ) = 0 [pid 5819] chdir("./62" [pid 5816] mkdir("./file0", 0777 [pid 5819] <... chdir resumed>) = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5816] <... mkdir resumed>) = 0 [pid 5819] <... prctl resumed>) = 0 [pid 5816] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5819] setpgid(0, 0 [pid 5809] +++ exited with 0 +++ [pid 5819] <... setpgid resumed>) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5809, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5819] <... openat resumed>) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5819] close(3) = 0 [pid 5814] <... unlink resumed>) = 0 [pid 5819] symlink("/dev/binderfs", "./binderfs" [ 140.453583][ T5816] loop2: detected capacity change from 0 to 4096 [ 140.479254][ T5818] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5814] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5819] <... symlink resumed>) = 0 [pid 5816] <... mount resumed>) = 0 [pid 5819] memfd_create("syzkaller", 0 [pid 5816] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5819] <... memfd_create resumed>) = 3 [pid 5819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5064] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5816] chdir("./file0" [pid 5064] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5816] <... chdir resumed>) = 0 [pid 5816] ioctl(4, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5816] <... ioctl resumed>) = 0 [pid 5064] fstat(3, [pid 5816] close(4) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5816] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5064] getdents64(3, [pid 5816] unlink("./file1" [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5816] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 140.532745][ T5820] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./60/binderfs" [pid 5811] <... pwritev resumed>) = 1114112 [pid 5064] <... unlink resumed>) = 0 [pid 5819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5811] exit_group(0 [pid 5064] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] <... exit_group resumed>) = ? [pid 5819] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5819] munmap(0x7f241a43b000, 2097152 [pid 5064] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5811] +++ exited with 0 +++ [pid 5064] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5811, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5819] <... munmap resumed>) = 0 [pid 5064] getdents64(4, [pid 5819] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5819] ioctl(4, LOOP_SET_FD, 3 [pid 5064] close(4 [pid 5063] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./60/binderfs", [pid 5064] <... close resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./60/binderfs" [pid 5819] <... ioctl resumed>) = 0 [pid 5064] rmdir("./60/file0" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5819] close(3 [pid 5064] getdents64(3, [pid 5819] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5819] mkdir("./file0", 0777 [pid 5064] <... close resumed>) = 0 [pid 5819] <... mkdir resumed>) = 0 [pid 5064] rmdir("./60" [pid 5819] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./61", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 140.749859][ T5819] loop5: detected capacity change from 0 to 4096 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5821 [pid 5063] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5813] <... pwritev resumed>) = 1114112 [pid 5063] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5821 attached [pid 5813] exit_group(0 [pid 5063] <... openat resumed>) = 4 [pid 5821] chdir("./61" [pid 5813] <... exit_group resumed>) = ? [pid 5821] <... chdir resumed>) = 0 [pid 5063] fstat(4, [pid 5821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5821] <... prctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5821] setpgid(0, 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5821] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 5821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5063] close(4 [pid 5821] write(3, "1000", 4 [pid 5063] <... close resumed>) = 0 [pid 5821] <... write resumed>) = 4 [pid 5063] rmdir("./60/file0" [pid 5821] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5821] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5821] <... symlink resumed>) = 0 [pid 5063] close(3 [pid 5821] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5821] <... memfd_create resumed>) = 3 [pid 5063] rmdir("./60" [pid 5821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5821] <... mmap resumed>) = 0x7f241a43b000 [pid 5819] <... mount resumed>) = 0 [pid 5063] mkdir("./61", 0777 [pid 5819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 5819] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5819] chdir("./file0" [pid 5063] <... openat resumed>) = 3 [pid 5819] <... chdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5819] ioctl(4, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5819] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5819] close(4 [pid 5063] <... close resumed>) = 0 [pid 5819] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5819] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5823 [ 140.847786][ T5822] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5819] unlink("./file1"./strace-static-x86_64: Process 5823 attached [pid 5823] chdir("./61") = 0 [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] setpgid(0, 0) = 0 [pid 5819] <... unlink resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5819] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5823] <... openat resumed>) = 3 [pid 5823] write(3, "1000", 4) = 4 [pid 5823] close(3) = 0 [pid 5816] <... pwritev resumed>) = 1114112 [pid 5823] symlink("/dev/binderfs", "./binderfs" [pid 5816] exit_group(0 [pid 5814] <... pwritev resumed>) = 1114112 [pid 5823] <... symlink resumed>) = 0 [pid 5816] <... exit_group resumed>) = ? [pid 5814] exit_group(0 [pid 5823] memfd_create("syzkaller", 0) = 3 [pid 5823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5814] <... exit_group resumed>) = ? [pid 5813] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5813, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, [pid 5823] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./60/binderfs") = 0 [pid 5066] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5821] <... write resumed>) = 2097152 [pid 5821] munmap(0x7f241a43b000, 2097152) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5821] ioctl(4, LOOP_SET_FD, 3 [pid 5816] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = 0 [pid 5821] <... ioctl resumed>) = 0 [pid 5814] +++ exited with 0 +++ [pid 5066] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5814, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5816, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5821] close(3) = 0 [pid 5066] lstat("./60/file0", [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] fstat(4, [pid 5065] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5067] fstat(3, [pid 5066] getdents64(4, [pid 5065] fstat(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] getdents64(4, [pid 5065] getdents64(3, [pid 5821] mkdir("./file0", 0777 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5067] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5823] <... write resumed>) = 2097152 [pid 5821] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5065] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./61/binderfs", [pid 5066] rmdir("./60/file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] lstat("./62/binderfs", [pid 5823] munmap(0x7f241a43b000, 2097152 [pid 5819] <... pwritev resumed>) = 1114112 [pid 5067] unlink("./61/binderfs" [pid 5066] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5819] exit_group(0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] unlink("./62/binderfs" [pid 5823] <... munmap resumed>) = 0 [pid 5819] <... exit_group resumed>) = ? [pid 5067] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5065] <... unlink resumed>) = 0 [ 141.088026][ T5821] loop1: detected capacity change from 0 to 4096 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5065] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] <... openat resumed>) = 4 [pid 5066] rmdir("./60") = 0 [pid 5823] ioctl(4, LOOP_SET_FD, 3 [pid 5066] mkdir("./61", 0777 [pid 5823] <... ioctl resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5823] close(3 [pid 5821] <... mount resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... close resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 5823] mkdir("./file0", 0777 [pid 5821] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5821] chdir("./file0") = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... mkdir resumed>) = 0 [pid 5821] ioctl(4, LOOP_CLR_FD [pid 5066] close(3 [pid 5823] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5821] <... ioctl resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5821] close(4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... close resumed>) = 0 ./strace-static-x86_64: Process 5825 attached [pid 5821] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5825 [pid 5821] <... openat resumed>) = 4 [pid 5825] chdir("./61" [pid 5821] unlink("./file1" [pid 5825] <... chdir resumed>) = 0 [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5825] setpgid(0, 0 [pid 5821] <... unlink resumed>) = 0 [pid 5825] <... setpgid resumed>) = 0 [pid 5821] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [ 141.176141][ T5824] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.188250][ T5823] loop0: detected capacity change from 0 to 4096 [pid 5825] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5825] write(3, "1000", 4) = 4 [pid 5819] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5819, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5067] <... openat resumed>) = 4 [pid 5065] lstat("./62/file0", [pid 5825] <... close resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] fstat(4, [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5825] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... mount resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] chdir("./file0" [pid 5068] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, [pid 5065] <... openat resumed>) = 4 [pid 5823] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] fstat(4, [pid 5823] ioctl(4, LOOP_CLR_FD [pid 5068] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5825] <... symlink resumed>) = 0 [pid 5823] <... ioctl resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5825] memfd_create("syzkaller", 0 [pid 5823] close(4 [pid 5068] fstat(3, [pid 5067] rmdir("./61/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5825] <... memfd_create resumed>) = 3 [pid 5823] <... close resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5825] <... mmap resumed>) = 0x7f241a43b000 [pid 5823] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5823] unlink("./file1" [pid 5068] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5065] rmdir("./62/file0" [pid 5068] lstat("./62/binderfs", [pid 5067] rmdir("./61" [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5068] unlink("./62/binderfs" [pid 5067] mkdir("./62", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5068] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] rmdir("./62" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./63", 0777 [pid 5067] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 5823] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [ 141.257673][ T5826] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5827 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 ./strace-static-x86_64: Process 5827 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] chdir("./62") = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5828 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5828 attached [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5828] chdir("./63" [pid 5827] <... openat resumed>) = 3 [pid 5828] <... chdir resumed>) = 0 [pid 5827] write(3, "1000", 4 [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] <... write resumed>) = 4 [pid 5828] <... prctl resumed>) = 0 [pid 5827] close(3 [pid 5828] setpgid(0, 0 [pid 5827] <... close resumed>) = 0 [pid 5828] <... setpgid resumed>) = 0 [pid 5827] symlink("/dev/binderfs", "./binderfs" [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5827] <... symlink resumed>) = 0 [pid 5828] write(3, "1000", 4 [pid 5827] memfd_create("syzkaller", 0 [pid 5828] <... write resumed>) = 4 [pid 5827] <... memfd_create resumed>) = 3 [pid 5828] close(3 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] <... close resumed>) = 0 [pid 5827] <... mmap resumed>) = 0x7f241a43b000 [pid 5828] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5828] memfd_create("syzkaller", 0) = 3 [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5825] <... write resumed>) = 2097152 [pid 5828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5825] munmap(0x7f241a43b000, 2097152 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5825] <... munmap resumed>) = 0 [pid 5068] lstat("./62/file0", [pid 5825] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5068] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5825] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... openat resumed>) = 4 [pid 5825] <... ioctl resumed>) = 0 [pid 5068] fstat(4, [pid 5825] close(3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5825] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5825] mkdir("./file0", 0777 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5825] <... mkdir resumed>) = 0 [pid 5068] getdents64(4, [pid 5825] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./62/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./62") = 0 [pid 5068] mkdir("./63", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 141.413438][ T5825] loop3: detected capacity change from 0 to 4096 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5821] <... pwritev resumed>) = 1114112 [pid 5068] close(3 [pid 5825] <... mount resumed>) = 0 [pid 5821] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... exit_group resumed>) = ? [pid 5825] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5825] chdir("./file0" [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5830 [pid 5827] <... write resumed>) = 2097152 [pid 5825] <... chdir resumed>) = 0 [pid 5827] munmap(0x7f241a43b000, 2097152 [pid 5825] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5830 attached [pid 5827] <... munmap resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5830] chdir("./63" [ 141.487911][ T5829] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5827] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5830] <... chdir resumed>) = 0 [pid 5827] <... openat resumed>) = 4 [pid 5825] close(4 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... close resumed>) = 0 [pid 5830] <... prctl resumed>) = 0 [pid 5830] setpgid(0, 0) = 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "1000", 4) = 4 [pid 5825] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5830] close(3) = 0 [pid 5825] <... openat resumed>) = 4 [pid 5830] symlink("/dev/binderfs", "./binderfs" [pid 5825] unlink("./file1" [pid 5830] <... symlink resumed>) = 0 [pid 5830] memfd_create("syzkaller", 0) = 3 [pid 5825] <... unlink resumed>) = 0 [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] <... write resumed>) = 2097152 [pid 5827] <... ioctl resumed>) = 0 [pid 5825] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5830] <... mmap resumed>) = 0x7f241a43b000 [pid 5827] close(3 [pid 5821] +++ exited with 0 +++ [pid 5828] munmap(0x7f241a43b000, 2097152 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5821, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5828] <... munmap resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] mkdir("./file0", 0777 [pid 5828] <... openat resumed>) = 4 [pid 5828] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... mkdir resumed>) = 0 [pid 5064] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5827] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [ 141.553960][ T5827] loop4: detected capacity change from 0 to 4096 [pid 5064] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./61/binderfs", [pid 5828] <... ioctl resumed>) = 0 [pid 5827] <... mount resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] unlink("./61/binderfs" [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5828] close(3 [pid 5827] <... openat resumed>) = 3 [pid 5828] <... close resumed>) = 0 [pid 5827] chdir("./file0" [pid 5064] <... unlink resumed>) = 0 [pid 5828] mkdir("./file0", 0777 [pid 5827] <... chdir resumed>) = 0 [pid 5064] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5827] ioctl(4, LOOP_CLR_FD [pid 5828] <... mkdir resumed>) = 0 [pid 5828] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(4) = 0 [pid 5827] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 141.619065][ T5828] loop2: detected capacity change from 0 to 4096 [ 141.637825][ T5831] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5827] unlink("./file1" [pid 5064] <... umount2 resumed>) = 0 [pid 5828] <... mount resumed>) = 0 [pid 5827] <... unlink resumed>) = 0 [pid 5828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5828] chdir("./file0") = 0 [pid 5828] ioctl(4, LOOP_CLR_FD [pid 5827] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5828] <... ioctl resumed>) = 0 [pid 5823] <... pwritev resumed>) = 1114112 [pid 5828] close(4 [pid 5823] exit_group(0 [pid 5830] <... write resumed>) = 2097152 [pid 5828] <... close resumed>) = 0 [pid 5823] <... exit_group resumed>) = ? [pid 5828] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5830] munmap(0x7f241a43b000, 2097152 [pid 5828] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] unlink("./file1" [ 141.723848][ T5832] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5830] <... munmap resumed>) = 0 [pid 5828] <... unlink resumed>) = 0 [pid 5064] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5830] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5828] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./61/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5064] rmdir("./61" [pid 5830] close(3) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5830] mkdir("./file0", 0777 [pid 5064] mkdir("./62", 0777 [pid 5830] <... mkdir resumed>) = 0 [pid 5830] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 141.811450][ T5830] loop5: detected capacity change from 0 to 4096 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5833 [pid 5063] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5833 attached ) = 3 [pid 5833] chdir("./62" [pid 5063] fstat(3, [pid 5833] <... chdir resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(3, [pid 5833] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./61/binderfs") = 0 [pid 5063] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] setpgid(0, 0 [pid 5830] <... mount resumed>) = 0 [pid 5825] <... pwritev resumed>) = 1114112 [pid 5833] <... setpgid resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5825] exit_group(0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5830] <... openat resumed>) = 3 [ 141.904004][ T5834] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5825] <... exit_group resumed>) = ? [pid 5833] <... openat resumed>) = 3 [pid 5830] chdir("./file0") = 0 [pid 5830] ioctl(4, LOOP_CLR_FD) = 0 [pid 5830] close(4) = 0 [pid 5830] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5833] write(3, "1000", 4 [pid 5830] <... openat resumed>) = 4 [pid 5833] <... write resumed>) = 4 [pid 5830] unlink("./file1" [pid 5833] close(3) = 0 [pid 5830] <... unlink resumed>) = 0 [pid 5833] symlink("/dev/binderfs", "./binderfs" [pid 5830] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5833] <... symlink resumed>) = 0 [pid 5833] memfd_create("syzkaller", 0) = 3 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5827] <... pwritev resumed>) = 1114112 [pid 5063] lstat("./61/file0", [pid 5827] exit_group(0) = ? [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./61/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./61") = 0 [pid 5063] mkdir("./62", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5835 ./strace-static-x86_64: Process 5835 attached [pid 5835] chdir("./62") = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5835] memfd_create("syzkaller", 0 [pid 5825] +++ exited with 0 +++ [pid 5835] <... memfd_create resumed>) = 3 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5825, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5835] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] munmap(0x7f241a43b000, 2097152 [pid 5066] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... munmap resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5833] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] fstat(3, [pid 5833] <... openat resumed>) = 4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] ioctl(4, LOOP_SET_FD, 3 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./61/binderfs") = 0 [pid 5066] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5827] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 5833] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5833] <... close resumed>) = 0 [pid 5067] fstat(3, [pid 5833] mkdir("./file0", 0777 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5833] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5833] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5828] <... pwritev resumed>) = 1114112 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] exit_group(0 [ 142.149807][ T5833] loop1: detected capacity change from 0 to 4096 [pid 5067] lstat("./62/binderfs", [pid 5828] <... exit_group resumed>) = ? [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./62/binderfs") = 0 [pid 5067] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] lstat("./61/file0", [pid 5833] <... openat resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] chdir("./file0" [pid 5066] umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5833] ioctl(4, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5833] <... ioctl resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5833] close(4 [pid 5066] fstat(4, [pid 5833] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] getdents64(4, [pid 5833] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5833] unlink("./file1" [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./61/file0" [pid 5835] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5835] munmap(0x7f241a43b000, 2097152 [pid 5066] rmdir("./61" [pid 5835] <... munmap resumed>) = 0 [pid 5067] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./62", 0777 [pid 5835] <... openat resumed>) = 4 [pid 5067] lstat("./62/file0", [pid 5066] <... mkdir resumed>) = 0 [ 142.256364][ T5836] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5835] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... openat resumed>) = 4 [pid 5066] close(3 [pid 5067] fstat(4, [pid 5066] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5833] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5837 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5837 attached [pid 5067] close(4) = 0 [pid 5837] chdir("./62" [pid 5067] rmdir("./62/file0" [pid 5837] <... chdir resumed>) = 0 [pid 5835] <... ioctl resumed>) = 0 [pid 5830] <... pwritev resumed>) = 1114112 [pid 5067] <... rmdir resumed>) = 0 [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5835] close(3 [pid 5830] exit_group(0 [pid 5067] getdents64(3, [pid 5837] <... prctl resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5830] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5837] setpgid(0, 0 [pid 5835] mkdir("./file0", 0777 [pid 5067] close(3 [pid 5837] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] rmdir("./62" [pid 5837] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5837] write(3, "1000", 4 [pid 5067] mkdir("./63", 0777 [pid 5837] <... write resumed>) = 4 [pid 5835] <... mkdir resumed>) = 0 [pid 5828] +++ exited with 0 +++ [pid 5067] <... mkdir resumed>) = 0 [pid 5837] close(3 [ 142.312309][ T5835] loop0: detected capacity change from 0 to 4096 [pid 5835] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5837] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5837] symlink("/dev/binderfs", "./binderfs" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5837] <... symlink resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5837] memfd_create("syzkaller", 0 [pid 5067] close(3 [pid 5837] <... memfd_create resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5837] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5838 [pid 5065] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5838 attached [pid 5065] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... mount resumed>) = 0 [pid 5838] chdir("./63" [pid 5835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] <... chdir resumed>) = 0 [pid 5065] lstat("./63/binderfs", [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5838] <... prctl resumed>) = 0 [pid 5065] unlink("./63/binderfs" [pid 5838] setpgid(0, 0 [pid 5835] <... openat resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5838] <... setpgid resumed>) = 0 [pid 5835] chdir("./file0" [pid 5065] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] <... chdir resumed>) = 0 [pid 5838] <... openat resumed>) = 3 [pid 5837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5835] ioctl(4, LOOP_CLR_FD [pid 5838] write(3, "1000", 4 [pid 5835] <... ioctl resumed>) = 0 [pid 5838] <... write resumed>) = 4 [pid 5835] close(4 [pid 5838] close(3) = 0 [pid 5835] <... close resumed>) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs" [pid 5835] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5838] <... symlink resumed>) = 0 [pid 5838] memfd_create("syzkaller", 0 [pid 5835] <... openat resumed>) = 4 [pid 5838] <... memfd_create resumed>) = 3 [pid 5835] unlink("./file1" [ 142.404201][ T5839] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5835] <... unlink resumed>) = 0 [pid 5835] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5830] +++ exited with 0 +++ [pid 5065] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5065] lstat("./63/file0", [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(4, [pid 5068] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5837] <... write resumed>) = 2097152 [pid 5068] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5837] munmap(0x7f241a43b000, 2097152 [pid 5068] fstat(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5837] <... munmap resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5837] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] close(4 [pid 5837] ioctl(4, LOOP_SET_FD, 3 [pid 5068] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./63/binderfs") = 0 [pid 5068] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./63/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./63") = 0 [pid 5065] mkdir("./64", 0777) = 0 [pid 5837] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5837] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5837] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5837] mkdir("./file0", 0777 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5837] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5837] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5838] <... write resumed>) = 2097152 [pid 5838] munmap(0x7f241a43b000, 2097152) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5838] <... openat resumed>) = 4 [pid 5838] ioctl(4, LOOP_SET_FD, 3 [ 142.564081][ T5837] loop3: detected capacity change from 0 to 4096 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5840 ./strace-static-x86_64: Process 5840 attached [pid 5840] chdir("./64") = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] setpgid(0, 0) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5840] write(3, "1000", 4) = 4 [pid 5840] close(3) = 0 [pid 5840] symlink("/dev/binderfs", "./binderfs" [pid 5838] <... ioctl resumed>) = 0 [pid 5840] <... symlink resumed>) = 0 [pid 5838] close(3 [pid 5840] memfd_create("syzkaller", 0) = 3 [pid 5838] <... close resumed>) = 0 [pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5838] mkdir("./file0", 0777 [pid 5068] <... umount2 resumed>) = 0 [pid 5840] <... mmap resumed>) = 0x7f241a43b000 [pid 5838] <... mkdir resumed>) = 0 [pid 5838] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 142.620076][ T5838] loop4: detected capacity change from 0 to 4096 [pid 5068] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5837] <... mount resumed>) = 0 [pid 5068] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5837] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5837] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5837] chdir("./file0" [pid 5068] <... openat resumed>) = 4 [pid 5837] <... chdir resumed>) = 0 [pid 5068] fstat(4, [pid 5837] ioctl(4, LOOP_CLR_FD [pid 5835] <... pwritev resumed>) = 1114112 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5837] <... ioctl resumed>) = 0 [pid 5835] exit_group(0 [pid 5833] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(4, [pid 5837] close(4 [pid 5835] <... exit_group resumed>) = ? [pid 5833] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [ 142.681009][ T5841] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5840] <... write resumed>) = 2097152 [pid 5837] <... close resumed>) = 0 [pid 5833] <... exit_group resumed>) = ? [pid 5068] getdents64(4, [pid 5840] munmap(0x7f241a43b000, 2097152 [pid 5837] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5840] <... munmap resumed>) = 0 [pid 5068] close(4 [pid 5840] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] <... close resumed>) = 0 [pid 5840] <... openat resumed>) = 4 [pid 5068] rmdir("./63/file0" [pid 5840] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5837] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5837] unlink("./file1" [pid 5068] rmdir("./63" [pid 5837] <... unlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5837] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] mkdir("./64", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5838] <... mount resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5838] <... openat resumed>) = 3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5838] chdir("./file0" [pid 5068] close(3 [pid 5838] <... chdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5838] ioctl(4, LOOP_CLR_FD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] <... ioctl resumed>) = 0 [pid 5838] close(4 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5843 [pid 5838] <... close resumed>) = 0 [pid 5838] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5840] <... ioctl resumed>) = 0 [pid 5838] <... openat resumed>) = 4 [pid 5840] close(3 [pid 5838] unlink("./file1"./strace-static-x86_64: Process 5843 attached [pid 5840] <... close resumed>) = 0 [pid 5843] chdir("./64" [pid 5840] mkdir("./file0", 0777 [pid 5843] <... chdir resumed>) = 0 [pid 5840] <... mkdir resumed>) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5840] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5843] <... prctl resumed>) = 0 [pid 5843] setpgid(0, 0) = 0 [ 142.740164][ T5840] loop2: detected capacity change from 0 to 4096 [ 142.753295][ T5842] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5843] memfd_create("syzkaller", 0) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5838] <... unlink resumed>) = 0 [pid 5838] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5840] <... mount resumed>) = 0 [pid 5840] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5840] chdir("./file0" [pid 5833] +++ exited with 0 +++ [pid 5840] <... chdir resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5840] ioctl(4, LOOP_CLR_FD) = 0 [pid 5840] close(4) = 0 [pid 5064] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5840] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5840] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5840] unlink("./file1" [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./62/binderfs") = 0 [pid 5064] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [ 142.857589][ T5844] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./62/binderfs") = 0 [pid 5063] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5840] <... unlink resumed>) = 0 [pid 5840] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./62/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./62") = 0 [pid 5064] mkdir("./63", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5845 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./62/file0", ./strace-static-x86_64: Process 5845 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5845] chdir("./63") = 0 [pid 5063] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] fstat(4, [pid 5845] write(3, "1000", 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5845] <... write resumed>) = 4 [pid 5063] getdents64(4, [pid 5845] close(3 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5845] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5845] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5845] <... symlink resumed>) = 0 [pid 5063] close(4 [pid 5845] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5845] <... memfd_create resumed>) = 3 [pid 5063] rmdir("./62/file0" [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5845] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] getdents64(3, [pid 5843] <... write resumed>) = 2097152 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5843] munmap(0x7f241a43b000, 2097152 [pid 5063] close(3) = 0 [pid 5063] rmdir("./62") = 0 [pid 5843] <... munmap resumed>) = 0 [pid 5063] mkdir("./63", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5846 ./strace-static-x86_64: Process 5846 attached [pid 5846] chdir("./63" [pid 5843] <... openat resumed>) = 4 [pid 5846] <... chdir resumed>) = 0 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] <... ioctl resumed>) = 0 [pid 5846] <... prctl resumed>) = 0 [pid 5843] close(3 [pid 5846] setpgid(0, 0) = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] <... close resumed>) = 0 [pid 5846] write(3, "1000", 4 [pid 5843] mkdir("./file0", 0777 [pid 5846] <... write resumed>) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5843] <... mkdir resumed>) = 0 [pid 5846] memfd_create("syzkaller", 0 [pid 5843] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5846] <... memfd_create resumed>) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 143.107594][ T5843] loop5: detected capacity change from 0 to 4096 [pid 5843] <... mount resumed>) = 0 [pid 5843] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5843] chdir("./file0") = 0 [pid 5843] ioctl(4, LOOP_CLR_FD) = 0 [pid 5843] close(4) = 0 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5843] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5843] unlink("./file1" [pid 5837] <... pwritev resumed>) = 1114112 [ 143.151947][ T5847] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5837] exit_group(0) = ? [pid 5845] <... write resumed>) = 2097152 [pid 5845] munmap(0x7f241a43b000, 2097152 [pid 5846] <... write resumed>) = 2097152 [pid 5845] <... munmap resumed>) = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5843] <... unlink resumed>) = 0 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5843] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5845] <... ioctl resumed>) = 0 [pid 5845] close(3) = 0 [pid 5845] mkdir("./file0", 0777) = 0 [pid 5845] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5846] munmap(0x7f241a43b000, 2097152) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 143.248125][ T5845] loop1: detected capacity change from 0 to 4096 [pid 5846] ioctl(4, LOOP_SET_FD, 3 [pid 5845] <... mount resumed>) = 0 [pid 5845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5845] chdir("./file0") = 0 [pid 5845] ioctl(4, LOOP_CLR_FD) = 0 [pid 5845] close(4) = 0 [pid 5845] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5846] <... ioctl resumed>) = 0 [pid 5845] <... openat resumed>) = 4 [pid 5846] close(3 [pid 5845] unlink("./file1" [pid 5846] <... close resumed>) = 0 [pid 5838] <... pwritev resumed>) = 1114112 [pid 5846] mkdir("./file0", 0777 [pid 5838] exit_group(0 [pid 5846] <... mkdir resumed>) = 0 [pid 5838] <... exit_group resumed>) = ? [ 143.307373][ T5846] loop0: detected capacity change from 0 to 4096 [ 143.321069][ T5848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5846] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5837] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5845] <... unlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5846] <... mount resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5846] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] getdents64(3, [pid 5846] chdir("./file0") = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5846] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5846] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] <... close resumed>) = 0 [pid 5846] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] lstat("./62/binderfs", [pid 5846] <... openat resumed>) = 4 [pid 5840] <... pwritev resumed>) = 1114112 [pid 5838] +++ exited with 0 +++ [ 143.407463][ T5849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5846] unlink("./file1" [pid 5840] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5840] <... exit_group resumed>) = ? [pid 5067] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./62/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5067] unlink("./63/binderfs") = 0 [pid 5067] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5846] <... unlink resumed>) = 0 [pid 5846] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5840] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5067] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(4, [pid 5067] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(4, [pid 5066] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./64/binderfs", [pid 5067] getdents64(4, [pid 5066] close(4 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... close resumed>) = 0 [pid 5065] unlink("./64/binderfs" [pid 5067] getdents64(4, [pid 5066] rmdir("./62/file0" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5067] close(4 [pid 5066] getdents64(3, [pid 5065] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./63/file0" [pid 5066] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] rmdir("./62" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 5066] mkdir("./63", 0777 [pid 5067] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] rmdir("./63" [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] mkdir("./64", 0777 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5850 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5851 ./strace-static-x86_64: Process 5850 attached [pid 5850] chdir("./63" [pid 5843] <... pwritev resumed>) = 1114112 ./strace-static-x86_64: Process 5851 attached [pid 5850] <... chdir resumed>) = 0 [pid 5843] exit_group(0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] <... exit_group resumed>) = ? [pid 5851] chdir("./64" [pid 5850] <... prctl resumed>) = 0 [pid 5843] +++ exited with 0 +++ [pid 5850] setpgid(0, 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5850] <... setpgid resumed>) = 0 [pid 5851] <... chdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5850] write(3, "1000", 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... write resumed>) = 4 [pid 5068] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] close(3 [pid 5068] <... openat resumed>) = 3 [pid 5851] <... prctl resumed>) = 0 [pid 5850] <... close resumed>) = 0 [pid 5068] fstat(3, [pid 5850] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5851] setpgid(0, 0 [pid 5850] <... symlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5851] <... setpgid resumed>) = 0 [pid 5850] memfd_create("syzkaller", 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5850] <... memfd_create resumed>) = 3 [pid 5068] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... openat resumed>) = 3 [pid 5850] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] lstat("./64/binderfs", [pid 5851] write(3, "1000", 4 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5851] <... write resumed>) = 4 [pid 5068] unlink("./64/binderfs" [pid 5851] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5851] <... close resumed>) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] memfd_create("syzkaller", 0) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5846] <... pwritev resumed>) = 1114112 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5851] <... mmap resumed>) = 0x7f241a43b000 [pid 5846] exit_group(0 [pid 5065] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5846] <... exit_group resumed>) = ? [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./64/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./64") = 0 [pid 5065] mkdir("./65", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5852 ./strace-static-x86_64: Process 5852 attached [pid 5852] chdir("./65") = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5852] close(3) = 0 [pid 5852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] memfd_create("syzkaller", 0) = 3 [pid 5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5850] <... write resumed>) = 2097152 [pid 5845] <... pwritev resumed>) = 1114112 [pid 5850] munmap(0x7f241a43b000, 2097152 [pid 5845] exit_group(0) = ? [pid 5850] <... munmap resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 5846] +++ exited with 0 +++ [pid 5852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5063] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5850] <... ioctl resumed>) = 0 [pid 5063] unlink("./63/binderfs" [pid 5850] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5851] <... write resumed>) = 2097152 [pid 5850] <... close resumed>) = 0 [pid 5063] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5850] mkdir("./file0", 0777) = 0 [ 143.877329][ T5850] loop3: detected capacity change from 0 to 4096 [pid 5850] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5851] munmap(0x7f241a43b000, 2097152 [pid 5068] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] <... munmap resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, [pid 5851] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5851] <... openat resumed>) = 4 [pid 5068] getdents64(4, [pid 5851] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5852] <... write resumed>) = 2097152 [pid 5068] close(4) = 0 [pid 5068] rmdir("./64/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./64") = 0 [pid 5068] mkdir("./65", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5854 [pid 5851] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5854 attached [pid 5851] close(3 [pid 5854] chdir("./65" [pid 5851] <... close resumed>) = 0 [pid 5854] <... chdir resumed>) = 0 [pid 5851] mkdir("./file0", 0777 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... mkdir resumed>) = 0 [pid 5854] <... prctl resumed>) = 0 [pid 5851] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5854] setpgid(0, 0) = 0 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5854] write(3, "1000", 4) = 4 [pid 5854] close(3) = 0 [pid 5854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5854] memfd_create("syzkaller", 0) = 3 [pid 5845] +++ exited with 0 +++ [ 143.954274][ T5851] loop4: detected capacity change from 0 to 4096 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5854] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5850] <... mount resumed>) = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5850] chdir("./file0") = 0 [pid 5850] ioctl(4, LOOP_CLR_FD [pid 5064] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5852] munmap(0x7f241a43b000, 2097152 [pid 5850] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 3 [pid 5850] unlink("./file1" [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./63/binderfs", [pid 5852] <... munmap resumed>) = 0 [pid 5851] <... mount resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5851] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5851] chdir("./file0" [pid 5852] <... openat resumed>) = 4 [pid 5851] <... chdir resumed>) = 0 [pid 5064] unlink("./63/binderfs" [pid 5063] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5851] ioctl(4, LOOP_CLR_FD [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5852] ioctl(4, LOOP_SET_FD, 3 [pid 5851] <... ioctl resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] close(4) = 0 [ 144.024632][ T5853] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.049220][ T5855] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5851] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5851] <... openat resumed>) = 4 [pid 5063] lstat("./63/file0", [pid 5851] unlink("./file1" [pid 5852] <... ioctl resumed>) = 0 [pid 5850] <... unlink resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5850] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5852] close(3 [pid 5063] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5852] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5852] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [ 144.072291][ T5852] loop2: detected capacity change from 0 to 4096 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5852] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5851] <... unlink resumed>) = 0 [pid 5063] getdents64(4, [pid 5851] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./63/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./63") = 0 [pid 5063] mkdir("./64", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5856 [pid 5854] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5856 attached [pid 5856] chdir("./64" [pid 5854] munmap(0x7f241a43b000, 2097152 [pid 5856] <... chdir resumed>) = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5854] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5856] setpgid(0, 0 [pid 5854] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5852] <... mount resumed>) = 0 [pid 5856] <... setpgid resumed>) = 0 [pid 5854] <... openat resumed>) = 4 [pid 5852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5854] ioctl(4, LOOP_SET_FD, 3 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] <... openat resumed>) = 3 [pid 5856] <... openat resumed>) = 3 [pid 5852] chdir("./file0" [pid 5856] write(3, "1000", 4 [pid 5852] <... chdir resumed>) = 0 [pid 5852] ioctl(4, LOOP_CLR_FD) = 0 [pid 5856] <... write resumed>) = 4 [pid 5852] close(4 [pid 5856] close(3 [pid 5852] <... close resumed>) = 0 [pid 5064] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5856] <... close resumed>) = 0 [pid 5852] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5856] symlink("/dev/binderfs", "./binderfs" [pid 5064] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5854] <... ioctl resumed>) = 0 [pid 5854] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] <... close resumed>) = 0 [pid 5856] <... symlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5854] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 4 [pid 5856] memfd_create("syzkaller", 0 [pid 5854] <... mkdir resumed>) = 0 [pid 5852] <... openat resumed>) = 4 [pid 5064] fstat(4, [pid 5856] <... memfd_create resumed>) = 3 [pid 5854] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5852] unlink("./file1" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] getdents64(4, [pid 5856] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [ 144.212793][ T5857] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.225829][ T5854] loop5: detected capacity change from 0 to 4096 [pid 5064] rmdir("./63/file0") = 0 [pid 5852] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 5852] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./63") = 0 [pid 5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] mkdir("./64", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5859 [pid 5854] <... mount resumed>) = 0 [pid 5854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] chdir("./file0") = 0 [pid 5854] ioctl(4, LOOP_CLR_FD) = 0 [pid 5854] close(4) = 0 [pid 5854] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 ./strace-static-x86_64: Process 5859 attached [pid 5854] unlink("./file1" [pid 5859] chdir("./64") = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5854] <... unlink resumed>) = 0 [ 144.304950][ T5858] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5859] memfd_create("syzkaller", 0 [pid 5854] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5859] <... memfd_create resumed>) = 3 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5856] <... write resumed>) = 2097152 [pid 5856] munmap(0x7f241a43b000, 2097152) = 0 [pid 5856] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5856] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5856] close(3) = 0 [pid 5856] mkdir("./file0", 0777) = 0 [pid 5850] <... pwritev resumed>) = 1114112 [pid 5850] exit_group(0 [pid 5856] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5850] <... exit_group resumed>) = ? [pid 5850] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5850, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./63/binderfs") = 0 [ 144.489353][ T5856] loop0: detected capacity change from 0 to 4096 [pid 5066] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] munmap(0x7f241a43b000, 2097152) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5859] ioctl(4, LOOP_SET_FD, 3 [pid 5856] <... mount resumed>) = 0 [pid 5859] <... ioctl resumed>) = 0 [pid 5856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5859] close(3 [pid 5856] <... openat resumed>) = 3 [pid 5859] <... close resumed>) = 0 [pid 5856] chdir("./file0" [pid 5859] mkdir("./file0", 0777 [pid 5856] <... chdir resumed>) = 0 [pid 5859] <... mkdir resumed>) = 0 [pid 5856] ioctl(4, LOOP_CLR_FD [pid 5851] <... pwritev resumed>) = 1114112 [pid 5859] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5856] <... ioctl resumed>) = 0 [pid 5856] close(4 [pid 5851] exit_group(0 [pid 5856] <... close resumed>) = 0 [pid 5851] <... exit_group resumed>) = ? [ 144.572347][ T5859] loop1: detected capacity change from 0 to 4096 [ 144.572367][ T5860] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5856] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5851] +++ exited with 0 +++ [pid 5856] <... openat resumed>) = 4 [pid 5856] unlink("./file1" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5856] <... unlink resumed>) = 0 [pid 5067] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5856] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5859] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./64/binderfs", [pid 5859] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5859] chdir("./file0" [pid 5067] unlink("./64/binderfs" [pid 5859] <... chdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5859] ioctl(4, LOOP_CLR_FD [pid 5067] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] <... ioctl resumed>) = 0 [pid 5859] close(4) = 0 [pid 5859] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 144.658717][ T5861] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5859] unlink("./file1" [pid 5852] <... pwritev resumed>) = 1114112 [pid 5852] exit_group(0) = ? [pid 5852] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5854] <... pwritev resumed>) = 1114112 [pid 5066] <... umount2 resumed>) = 0 [pid 5854] exit_group(0) = ? [pid 5065] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] <... unlink resumed>) = 0 [pid 5859] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5854] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./63/file0", [pid 5065] <... openat resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] fstat(3, [pid 5066] umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5068] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 4 [pid 5065] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] fstat(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./65/binderfs", [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] unlink("./65/binderfs" [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] getdents64(4, [pid 5065] <... unlink resumed>) = 0 [pid 5068] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(4 [pid 5068] lstat("./65/binderfs", [pid 5066] <... close resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] rmdir("./63/file0" [pid 5068] unlink("./65/binderfs") = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./63") = 0 [pid 5066] mkdir("./64", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5067] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5862 ./strace-static-x86_64: Process 5862 attached [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5862] chdir("./64") = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5067] lstat("./64/file0", [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5862] <... openat resumed>) = 3 [pid 5862] write(3, "1000", 4 [pid 5067] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] <... write resumed>) = 4 [pid 5862] close(3) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5862] <... symlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, [pid 5862] memfd_create("syzkaller", 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5862] <... memfd_create resumed>) = 3 [pid 5067] getdents64(4, [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5862] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./64/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./64") = 0 [pid 5067] mkdir("./65", 0777 [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5863 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./65/file0", ./strace-static-x86_64: Process 5863 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5863] chdir("./65" [pid 5065] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5863] <... chdir resumed>) = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5863] <... prctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5863] setpgid(0, 0) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] fstat(4, [pid 5863] <... openat resumed>) = 3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5863] write(3, "1000", 4 [pid 5065] getdents64(4, [pid 5863] <... write resumed>) = 4 [pid 5863] close(3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5863] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5863] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5862] <... write resumed>) = 2097152 [pid 5863] <... symlink resumed>) = 0 [pid 5862] munmap(0x7f241a43b000, 2097152 [pid 5065] close(4 [pid 5863] memfd_create("syzkaller", 0 [pid 5862] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./65/file0" [pid 5863] <... memfd_create resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5862] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] getdents64(3, [pid 5863] <... mmap resumed>) = 0x7f241a43b000 [pid 5862] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./65") = 0 [pid 5065] mkdir("./66", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5862] <... ioctl resumed>) = 0 [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5862] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5862] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5862] mkdir("./file0", 0777 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5862] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5862] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5864 [ 145.020347][ T5862] loop3: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5864 attached [pid 5856] <... pwritev resumed>) = 1114112 [pid 5864] chdir("./66" [pid 5856] exit_group(0 [pid 5864] <... chdir resumed>) = 0 [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5864] setpgid(0, 0) = 0 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] <... exit_group resumed>) = ? [pid 5864] <... openat resumed>) = 3 [pid 5864] write(3, "1000", 4) = 4 [pid 5864] close(3) = 0 [pid 5864] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] <... mount resumed>) = 0 [pid 5864] memfd_create("syzkaller", 0 [pid 5862] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5864] <... memfd_create resumed>) = 3 [pid 5862] <... openat resumed>) = 3 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5862] chdir("./file0" [pid 5864] <... mmap resumed>) = 0x7f241a43b000 [pid 5862] <... chdir resumed>) = 0 [pid 5859] <... pwritev resumed>) = 1114112 [pid 5862] ioctl(4, LOOP_CLR_FD) = 0 [pid 5862] close(4) = 0 [pid 5859] exit_group(0 [pid 5862] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5859] <... exit_group resumed>) = ? [pid 5863] <... write resumed>) = 2097152 [pid 5862] <... openat resumed>) = 4 [ 145.087117][ T5865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5862] unlink("./file1") = 0 [pid 5862] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5863] munmap(0x7f241a43b000, 2097152 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5863] <... munmap resumed>) = 0 [pid 5863] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5863] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5863] close(3) = 0 [pid 5863] mkdir("./file0", 0777) = 0 [ 145.176966][ T5863] loop4: detected capacity change from 0 to 4096 [pid 5863] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5864] <... write resumed>) = 2097152 [pid 5863] <... mount resumed>) = 0 [pid 5856] +++ exited with 0 +++ [pid 5863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5863] chdir("./file0") = 0 [pid 5863] ioctl(4, LOOP_CLR_FD) = 0 [pid 5863] close(4) = 0 [pid 5863] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5864] munmap(0x7f241a43b000, 2097152 [pid 5863] <... openat resumed>) = 4 [pid 5864] <... munmap resumed>) = 0 [pid 5863] unlink("./file1" [pid 5859] +++ exited with 0 +++ [pid 5864] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5063] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5864] ioctl(4, LOOP_SET_FD, 3 [ 145.248909][ T5866] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5864] <... ioctl resumed>) = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, [pid 5064] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5064] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5063] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5063] lstat("./64/binderfs", [pid 5864] close(3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./64/binderfs" [pid 5864] <... close resumed>) = 0 [pid 5064] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5864] mkdir("./file0", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5863] <... unlink resumed>) = 0 [pid 5064] lstat("./64/binderfs", [pid 5863] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5864] <... mkdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5864] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 145.297776][ T5864] loop2: detected capacity change from 0 to 4096 [pid 5064] unlink("./64/binderfs") = 0 [pid 5064] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, [pid 5864] <... mount resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./64/file0") = 0 [pid 5063] getdents64(3, [pid 5864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5864] <... openat resumed>) = 3 [pid 5864] chdir("./file0" [pid 5063] close(3 [pid 5864] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5864] ioctl(4, LOOP_CLR_FD [pid 5063] rmdir("./64" [pid 5864] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5864] close(4 [pid 5063] mkdir("./65", 0777 [pid 5864] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5864] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5864] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 145.388281][ T5868] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] close(3 [pid 5864] unlink("./file1" [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5864] <... unlink resumed>) = 0 [pid 5864] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5869 ./strace-static-x86_64: Process 5869 attached [pid 5869] chdir("./65") = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5869] memfd_create("syzkaller", 0) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5862] <... pwritev resumed>) = 1114112 [pid 5862] exit_group(0) = ? [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./64/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./64") = 0 [pid 5064] mkdir("./65", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5870 ./strace-static-x86_64: Process 5870 attached [pid 5870] chdir("./65") = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] setpgid(0, 0) = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5870] write(3, "1000", 4) = 4 [pid 5870] close(3) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5870] memfd_create("syzkaller", 0) = 3 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5862] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5869] <... write resumed>) = 2097152 [pid 5066] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5869] munmap(0x7f241a43b000, 2097152 [pid 5066] <... openat resumed>) = 3 [pid 5869] <... munmap resumed>) = 0 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] getdents64(3, [pid 5869] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5869] ioctl(4, LOOP_SET_FD, 3 [pid 5066] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./64/binderfs") = 0 [pid 5066] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5869] <... ioctl resumed>) = 0 [pid 5863] <... pwritev resumed>) = 1114112 [pid 5869] close(3) = 0 [pid 5869] mkdir("./file0", 0777 [pid 5863] exit_group(0 [pid 5869] <... mkdir resumed>) = 0 [pid 5863] <... exit_group resumed>) = ? [ 145.688639][ T5869] loop0: detected capacity change from 0 to 4096 [pid 5869] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5864] <... pwritev resumed>) = 1114112 [pid 5869] chdir("./file0" [pid 5864] exit_group(0 [pid 5869] <... chdir resumed>) = 0 [pid 5864] <... exit_group resumed>) = ? [pid 5869] ioctl(4, LOOP_CLR_FD) = 0 [pid 5869] close(4) = 0 [pid 5869] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5870] <... write resumed>) = 2097152 [pid 5869] <... openat resumed>) = 4 [pid 5869] unlink("./file1" [pid 5870] munmap(0x7f241a43b000, 2097152) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 145.787595][ T5871] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5870] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... umount2 resumed>) = 0 [pid 5870] <... ioctl resumed>) = 0 [pid 5869] <... unlink resumed>) = 0 [pid 5066] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5870] close(3) = 0 [pid 5066] umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5870] mkdir("./file0", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5870] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 145.827934][ T5870] loop1: detected capacity change from 0 to 4096 [pid 5870] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5863] +++ exited with 0 +++ [pid 5066] <... openat resumed>) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5864] +++ exited with 0 +++ [pid 5067] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5864, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5067] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] close(4 [pid 5067] fstat(3, [pid 5066] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] rmdir("./64/file0" [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] lstat("./65/binderfs", [pid 5066] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] unlink("./65/binderfs" [pid 5066] rmdir("./64" [pid 5065] fstat(3, [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] mkdir("./65", 0777 [pid 5065] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... openat resumed>) = 3 [pid 5065] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] lstat("./66/binderfs", [pid 5066] close(3) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] unlink("./66/binderfs") = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5873 [pid 5065] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5873 attached [pid 5067] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5873] chdir("./65" [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5873] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5870] <... mount resumed>) = 0 [pid 5870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5870] chdir("./file0" [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5870] <... chdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5873] <... prctl resumed>) = 0 [pid 5870] ioctl(4, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5873] setpgid(0, 0 [pid 5870] <... ioctl resumed>) = 0 [pid 5067] close(4 [pid 5873] <... setpgid resumed>) = 0 [pid 5870] close(4 [pid 5067] <... close resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5870] <... close resumed>) = 0 [pid 5067] rmdir("./65/file0" [pid 5873] <... openat resumed>) = 3 [pid 5870] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... rmdir resumed>) = 0 [pid 5873] write(3, "1000", 4 [pid 5870] <... openat resumed>) = 4 [pid 5067] getdents64(3, [pid 5873] <... write resumed>) = 4 [pid 5870] unlink("./file1" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5873] close(3 [ 145.965353][ T5872] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] close(3 [pid 5873] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs" [pid 5067] rmdir("./65" [pid 5873] <... symlink resumed>) = 0 [pid 5870] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5873] memfd_create("syzkaller", 0 [pid 5870] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] mkdir("./66", 0777 [pid 5873] <... memfd_create resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5873] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5874 ./strace-static-x86_64: Process 5874 attached [pid 5874] chdir("./66") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5065] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] <... openat resumed>) = 3 [pid 5874] write(3, "1000", 4 [pid 5065] lstat("./66/file0", [pid 5874] <... write resumed>) = 4 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5874] close(3 [pid 5065] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5874] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./66/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./66") = 0 [pid 5065] mkdir("./67", 0777 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5875 ./strace-static-x86_64: Process 5875 attached [pid 5875] chdir("./67") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5875] memfd_create("syzkaller", 0) = 3 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5874] <... write resumed>) = 2097152 [pid 5874] munmap(0x7f241a43b000, 2097152) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5874] close(3) = 0 [pid 5874] mkdir("./file0", 0777) = 0 [pid 5874] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5869] <... pwritev resumed>) = 1114112 [pid 5869] exit_group(0) = ? [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5873] <... write resumed>) = 2097152 [pid 5873] munmap(0x7f241a43b000, 2097152) = 0 [ 146.188650][ T5874] loop4: detected capacity change from 0 to 4096 [pid 5873] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5874] <... mount resumed>) = 0 [pid 5873] <... openat resumed>) = 4 [pid 5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5874] chdir("./file0") = 0 [pid 5874] ioctl(4, LOOP_CLR_FD) = 0 [pid 5873] ioctl(4, LOOP_SET_FD, 3 [pid 5874] close(4) = 0 [pid 5874] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5874] unlink("./file1" [pid 5873] <... ioctl resumed>) = 0 [pid 5873] close(3) = 0 [pid 5873] mkdir("./file0", 0777) = 0 [ 146.251874][ T5876] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.265107][ T5873] loop3: detected capacity change from 0 to 4096 [pid 5873] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5874] <... unlink resumed>) = 0 [pid 5874] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5875] <... write resumed>) = 2097152 [pid 5869] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5875] munmap(0x7f241a43b000, 2097152 [pid 5873] <... mount resumed>) = 0 [pid 5875] <... munmap resumed>) = 0 [pid 5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5873] chdir("./file0") = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5873] ioctl(4, LOOP_CLR_FD [pid 5875] <... openat resumed>) = 4 [pid 5873] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5873] close(4 [pid 5875] ioctl(4, LOOP_SET_FD, 3 [pid 5873] <... close resumed>) = 0 [pid 5063] fstat(3, [pid 5875] <... ioctl resumed>) = 0 [pid 5873] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./65/binderfs", [pid 5873] <... openat resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./65/binderfs" [pid 5873] unlink("./file1" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5875] close(3 [pid 5873] <... unlink resumed>) = 0 [pid 5875] <... close resumed>) = 0 [pid 5873] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 146.344256][ T5877] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.378378][ T5875] loop2: detected capacity change from 0 to 4096 [pid 5875] mkdir("./file0", 0777) = 0 [pid 5875] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5870] <... pwritev resumed>) = 1114112 [pid 5875] <... mount resumed>) = 0 [pid 5870] exit_group(0 [pid 5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5870] <... exit_group resumed>) = ? [pid 5875] <... openat resumed>) = 3 [pid 5875] chdir("./file0") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5875] ioctl(4, LOOP_CLR_FD) = 0 [pid 5875] close(4) = 0 [pid 5875] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./65/file0", [pid 5875] <... openat resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5875] unlink("./file1" [pid 5063] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 146.447708][ T5878] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./65/file0") = 0 [pid 5063] getdents64(3, [pid 5875] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5875] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./65") = 0 [pid 5063] mkdir("./66", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5879 ./strace-static-x86_64: Process 5879 attached [pid 5879] chdir("./66") = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4) = 4 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5879] memfd_create("syzkaller", 0 [pid 5870] +++ exited with 0 +++ [pid 5879] <... memfd_create resumed>) = 3 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./65/binderfs" [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5879] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5879] munmap(0x7f241a43b000, 2097152 [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5879] <... munmap resumed>) = 0 [pid 5064] getdents64(4, [pid 5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5879] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./65/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./65") = 0 [pid 5874] <... pwritev resumed>) = 1114112 [pid 5064] mkdir("./66", 0777 [pid 5879] <... ioctl resumed>) = 0 [pid 5874] exit_group(0 [pid 5879] close(3 [pid 5874] <... exit_group resumed>) = ? [pid 5879] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5879] mkdir("./file0", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5879] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [ 146.701680][ T5879] loop0: detected capacity change from 0 to 4096 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5880 ./strace-static-x86_64: Process 5880 attached [pid 5880] chdir("./66") = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5873] <... pwritev resumed>) = 1114112 [pid 5880] <... prctl resumed>) = 0 [pid 5873] exit_group(0 [pid 5880] setpgid(0, 0 [pid 5873] <... exit_group resumed>) = ? [pid 5879] <... mount resumed>) = 0 [pid 5879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5879] chdir("./file0") = 0 [pid 5879] ioctl(4, LOOP_CLR_FD) = 0 [pid 5879] close(4) = 0 [pid 5879] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5880] <... setpgid resumed>) = 0 [pid 5879] unlink("./file1" [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5880] memfd_create("syzkaller", 0) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 146.790803][ T5881] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5879] <... unlink resumed>) = 0 [pid 5879] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5875] <... pwritev resumed>) = 1114112 [pid 5875] exit_group(0 [pid 5874] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5067] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5875] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./66/binderfs") = 0 [pid 5067] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5873] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./65/binderfs") = 0 [pid 5066] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5880] <... write resumed>) = 2097152 [pid 5880] munmap(0x7f241a43b000, 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5880] <... munmap resumed>) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5875] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 5067] lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5880] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./66/file0" [pid 5880] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./66") = 0 [pid 5067] mkdir("./67", 0777 [pid 5880] <... ioctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5880] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] lstat("./65/file0", [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5066] <... openat resumed>) = 4 [pid 5065] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(4, [pid 5880] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] mkdir("./file0", 0777 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5880] <... mkdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5882 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 3 [pid 5066] getdents64(4, [pid 5065] fstat(3, [pid 5880] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5882 attached [pid 5882] chdir("./67" [pid 5066] close(4 [pid 5065] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] rmdir("./65/file0" [pid 5065] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5882] <... chdir resumed>) = 0 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] <... prctl resumed>) = 0 [pid 5066] getdents64(3, [pid 5065] lstat("./67/binderfs", [pid 5882] setpgid(0, 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5882] <... setpgid resumed>) = 0 [pid 5066] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... close resumed>) = 0 [pid 5065] unlink("./67/binderfs" [pid 5882] <... openat resumed>) = 3 [pid 5882] write(3, "1000", 4 [pid 5065] <... unlink resumed>) = 0 [pid 5066] rmdir("./65" [pid 5065] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5882] <... write resumed>) = 4 [pid 5882] close(3) = 0 [pid 5882] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5882] <... symlink resumed>) = 0 [pid 5882] memfd_create("syzkaller", 0) = 3 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] mkdir("./66", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 146.968600][ T5880] loop1: detected capacity change from 0 to 4096 [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5883 attached [pid 5883] chdir("./66" [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5883 [pid 5883] <... chdir resumed>) = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] <... mount resumed>) = 0 [pid 5883] write(3, "1000", 4 [pid 5880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5883] <... write resumed>) = 4 [pid 5880] <... openat resumed>) = 3 [pid 5883] close(3) = 0 [pid 5880] chdir("./file0" [pid 5883] symlink("/dev/binderfs", "./binderfs" [pid 5880] <... chdir resumed>) = 0 [pid 5883] <... symlink resumed>) = 0 [pid 5880] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = 0 [pid 5880] <... ioctl resumed>) = 0 [pid 5883] memfd_create("syzkaller", 0 [pid 5880] close(4 [pid 5065] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5883] <... memfd_create resumed>) = 3 [pid 5880] <... close resumed>) = 0 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5880] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5883] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./67/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./67") = 0 [ 147.056879][ T5884] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./68", 0777 [pid 5880] <... openat resumed>) = 4 [pid 5880] unlink("./file1" [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5880] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5880] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5885 attached , child_tidptr=0x5555559b05d0) = 5885 [pid 5885] chdir("./68") = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0) = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5885] <... openat resumed>) = 3 [pid 5882] <... write resumed>) = 2097152 [pid 5885] write(3, "1000", 4 [pid 5882] munmap(0x7f241a43b000, 2097152 [pid 5885] <... write resumed>) = 4 [pid 5882] <... munmap resumed>) = 0 [pid 5885] close(3) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5885] symlink("/dev/binderfs", "./binderfs" [pid 5882] <... openat resumed>) = 4 [pid 5885] <... symlink resumed>) = 0 [pid 5882] ioctl(4, LOOP_SET_FD, 3 [pid 5885] memfd_create("syzkaller", 0) = 3 [pid 5882] <... ioctl resumed>) = 0 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5882] close(3 [pid 5885] <... mmap resumed>) = 0x7f241a43b000 [pid 5882] <... close resumed>) = 0 [pid 5882] mkdir("./file0", 0777) = 0 [pid 5882] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5879] <... pwritev resumed>) = 1114112 [pid 5879] exit_group(0) = ? [pid 5883] <... write resumed>) = 2097152 [ 147.178329][ T5882] loop4: detected capacity change from 0 to 4096 [pid 5883] munmap(0x7f241a43b000, 2097152) = 0 [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5882] <... mount resumed>) = 0 [pid 5883] ioctl(4, LOOP_SET_FD, 3 [pid 5882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5882] chdir("./file0") = 0 [pid 5882] ioctl(4, LOOP_CLR_FD) = 0 [pid 5882] close(4) = 0 [pid 5882] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5882] unlink("./file1" [pid 5883] <... ioctl resumed>) = 0 [pid 5883] close(3) = 0 [pid 5883] mkdir("./file0", 0777) = 0 [pid 5883] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5882] <... unlink resumed>) = 0 [ 147.248222][ T5886] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.260423][ T5883] loop3: detected capacity change from 0 to 4096 [pid 5882] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5885] <... write resumed>) = 2097152 [pid 5885] munmap(0x7f241a43b000, 2097152) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5885] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5885] close(3) = 0 [pid 5885] mkdir("./file0", 0777) = 0 [pid 5885] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5879] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5883] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./66/binderfs") = 0 [pid 5883] <... openat resumed>) = 3 [pid 5063] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5883] chdir("./file0") = 0 [ 147.332414][ T5885] loop2: detected capacity change from 0 to 4096 [ 147.366271][ T5887] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5883] ioctl(4, LOOP_CLR_FD) = 0 [pid 5883] close(4) = 0 [pid 5883] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5885] <... mount resumed>) = 0 [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5885] chdir("./file0") = 0 [pid 5883] <... openat resumed>) = 4 [pid 5885] ioctl(4, LOOP_CLR_FD) = 0 [pid 5885] close(4 [pid 5883] unlink("./file1" [pid 5885] <... close resumed>) = 0 [pid 5885] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5885] unlink("./file1" [pid 5883] <... unlink resumed>) = 0 [pid 5883] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... umount2 resumed>) = 0 [ 147.393335][ T5888] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5885] <... unlink resumed>) = 0 [pid 5885] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5880] <... pwritev resumed>) = 1114112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5880] exit_group(0) = ? [pid 5063] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./66/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./66") = 0 [pid 5063] mkdir("./67", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5889 ./strace-static-x86_64: Process 5889 attached [pid 5889] chdir("./67") = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5889] setpgid(0, 0) = 0 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5889] write(3, "1000", 4) = 4 [pid 5889] close(3) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5889] memfd_create("syzkaller", 0) = 3 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5880] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./66/binderfs") = 0 [pid 5064] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./66/file0", [pid 5882] <... pwritev resumed>) = 1114112 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5883] <... pwritev resumed>) = 1114112 [pid 5882] exit_group(0 [pid 5064] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5883] exit_group(0 [pid 5882] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5883] <... exit_group resumed>) = ? [pid 5064] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./66/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./66") = 0 [pid 5064] mkdir("./67", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5890 ./strace-static-x86_64: Process 5890 attached [pid 5890] chdir("./67") = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5890] setpgid(0, 0) = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3) = 0 [pid 5890] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5890] memfd_create("syzkaller", 0) = 3 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5889] <... write resumed>) = 2097152 [pid 5889] munmap(0x7f241a43b000, 2097152) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5889] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5889] close(3) = 0 [pid 5882] +++ exited with 0 +++ [pid 5889] mkdir("./file0", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5889] <... mkdir resumed>) = 0 [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5889] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5885] <... pwritev resumed>) = 1114112 [pid 5883] +++ exited with 0 +++ [pid 5885] exit_group(0) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 147.799001][ T5889] loop0: detected capacity change from 0 to 4096 [pid 5066] fstat(3, [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./66/binderfs") = 0 [pid 5889] <... mount resumed>) = 0 [pid 5067] fstat(3, [pid 5066] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] <... write resumed>) = 2097152 [pid 5889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5890] munmap(0x7f241a43b000, 2097152 [pid 5889] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5890] <... munmap resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5889] chdir("./file0" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5890] <... openat resumed>) = 4 [pid 5889] <... chdir resumed>) = 0 [pid 5067] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5889] ioctl(4, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 5889] <... ioctl resumed>) = 0 [pid 5067] lstat("./67/binderfs", [pid 5889] close(4) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5889] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] unlink("./67/binderfs" [pid 5890] <... ioctl resumed>) = 0 [pid 5889] <... openat resumed>) = 4 [pid 5889] unlink("./file1" [pid 5067] <... unlink resumed>) = 0 [pid 5890] close(3 [pid 5067] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] <... close resumed>) = 0 [pid 5889] <... unlink resumed>) = 0 [pid 5889] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5890] mkdir("./file0", 0777 [pid 5066] umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [ 147.855621][ T5891] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.891741][ T5890] loop1: detected capacity change from 0 to 4096 [pid 5066] close(4) = 0 [pid 5890] <... mkdir resumed>) = 0 [pid 5066] rmdir("./66/file0" [pid 5890] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./66") = 0 [pid 5066] mkdir("./67", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5892 [pid 5067] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5892 attached [pid 5892] chdir("./67") = 0 [pid 5890] <... mount resumed>) = 0 [pid 5885] +++ exited with 0 +++ [pid 5067] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5892] <... prctl resumed>) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5065] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5892] <... openat resumed>) = 3 [pid 5890] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5892] write(3, "1000", 4 [pid 5890] chdir("./file0" [pid 5067] lstat("./67/file0", [pid 5065] <... openat resumed>) = 3 [pid 5892] <... write resumed>) = 4 [pid 5890] <... chdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] fstat(3, [pid 5892] close(3 [pid 5890] ioctl(4, LOOP_CLR_FD [pid 5067] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5892] <... close resumed>) = 0 [pid 5890] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5892] symlink("/dev/binderfs", "./binderfs" [pid 5890] close(4 [pid 5067] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5892] <... symlink resumed>) = 0 [pid 5890] <... close resumed>) = 0 [pid 5065] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5892] memfd_create("syzkaller", 0 [pid 5890] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5892] <... memfd_create resumed>) = 3 [pid 5890] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5065] lstat("./68/binderfs", [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5890] unlink("./file1" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5892] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] unlink("./68/binderfs" [pid 5890] <... unlink resumed>) = 0 [ 147.984634][ T5893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(4, [pid 5065] <... unlink resumed>) = 0 [pid 5890] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./67/file0") = 0 [pid 5067] getdents64(3, [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./67") = 0 [pid 5067] mkdir("./68", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5894 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5894 attached [pid 5065] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] chdir("./68" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] <... chdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... openat resumed>) = 4 [pid 5894] <... prctl resumed>) = 0 [pid 5065] fstat(4, [pid 5894] setpgid(0, 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5894] <... setpgid resumed>) = 0 [pid 5065] getdents64(4, [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5894] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5894] write(3, "1000", 4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5894] <... write resumed>) = 4 [pid 5065] close(4 [pid 5894] close(3 [pid 5065] <... close resumed>) = 0 [pid 5894] <... close resumed>) = 0 [pid 5065] rmdir("./68/file0" [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5894] <... symlink resumed>) = 0 [pid 5065] getdents64(3, [pid 5894] memfd_create("syzkaller", 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5894] <... memfd_create resumed>) = 3 [pid 5065] close(3 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 5894] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] rmdir("./68" [pid 5892] <... write resumed>) = 2097152 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./69", 0777 [pid 5892] munmap(0x7f241a43b000, 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5892] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5892] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5892] <... openat resumed>) = 4 [pid 5889] <... pwritev resumed>) = 1114112 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5892] ioctl(4, LOOP_SET_FD, 3 [pid 5889] exit_group(0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5895 [pid 5892] <... ioctl resumed>) = 0 [pid 5889] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5895 attached [pid 5895] chdir("./69") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] memfd_create("syzkaller", 0 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5892] close(3 [pid 5895] <... memfd_create resumed>) = 3 [pid 5892] <... close resumed>) = 0 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5892] mkdir("./file0", 0777 [pid 5895] <... mmap resumed>) = 0x7f241a43b000 [pid 5892] <... mkdir resumed>) = 0 [ 148.179178][ T5892] loop3: detected capacity change from 0 to 4096 [pid 5892] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5892] <... mount resumed>) = 0 [pid 5892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5892] chdir("./file0") = 0 [pid 5892] ioctl(4, LOOP_CLR_FD) = 0 [pid 5892] close(4) = 0 [pid 5892] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5892] unlink("./file1" [pid 5894] <... write resumed>) = 2097152 [pid 5895] <... write resumed>) = 2097152 [pid 5894] munmap(0x7f241a43b000, 2097152 [pid 5895] munmap(0x7f241a43b000, 2097152 [pid 5894] <... munmap resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5889] +++ exited with 0 +++ [pid 5894] <... openat resumed>) = 4 [ 148.266913][ T5896] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5894] ioctl(4, LOOP_SET_FD, 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5892] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5892] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./67/binderfs") = 0 [pid 5063] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... munmap resumed>) = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5894] <... ioctl resumed>) = 0 [pid 5895] <... openat resumed>) = 4 [pid 5894] close(3 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5894] <... close resumed>) = 0 [pid 5894] mkdir("./file0", 0777) = 0 [pid 5890] <... pwritev resumed>) = 1114112 [pid 5894] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5890] exit_group(0) = ? [ 148.323438][ T5894] loop4: detected capacity change from 0 to 4096 [ 148.353507][ T5895] loop2: detected capacity change from 0 to 4096 [pid 5895] <... ioctl resumed>) = 0 [pid 5895] close(3) = 0 [pid 5895] mkdir("./file0", 0777 [pid 5894] <... mount resumed>) = 0 [pid 5895] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5895] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5894] chdir("./file0") = 0 [pid 5894] ioctl(4, LOOP_CLR_FD) = 0 [pid 5894] close(4 [pid 5063] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... close resumed>) = 0 [pid 5894] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5894] <... openat resumed>) = 4 [pid 5063] lstat("./67/file0", [pid 5894] unlink("./file1" [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5894] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5894] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 148.417889][ T5897] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./67/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./67" [pid 5895] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] mkdir("./68", 0777 [pid 5895] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5895] chdir("./file0" [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5895] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5895] ioctl(4, LOOP_CLR_FD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5895] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5895] close(4 [pid 5063] close(3 [pid 5895] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5895] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5895] <... openat resumed>) = 4 [pid 5895] unlink("./file1" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5899 ./strace-static-x86_64: Process 5899 attached [pid 5890] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5899] chdir("./68" [pid 5064] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5899] <... chdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] fstat(3, [pid 5899] <... prctl resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5899] setpgid(0, 0 [pid 5064] getdents64(3, [pid 5899] <... setpgid resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] write(3, "1000", 4 [pid 5064] lstat("./67/binderfs", [pid 5899] <... write resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5899] close(3 [pid 5064] unlink("./67/binderfs" [pid 5899] <... close resumed>) = 0 [ 148.493055][ T5898] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] <... unlink resumed>) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs" [pid 5064] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] <... symlink resumed>) = 0 [pid 5895] <... unlink resumed>) = 0 [pid 5899] memfd_create("syzkaller", 0 [pid 5895] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5899] <... memfd_create resumed>) = 3 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5892] <... pwritev resumed>) = 1114112 [pid 5892] exit_group(0) = ? [pid 5064] <... umount2 resumed>) = 0 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./67/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./67") = 0 [pid 5064] mkdir("./68", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5900 [pid 5892] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- ./strace-static-x86_64: Process 5900 attached [pid 5066] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5900] chdir("./68" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5900] <... chdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... openat resumed>) = 3 [pid 5900] <... prctl resumed>) = 0 [pid 5066] fstat(3, [pid 5900] setpgid(0, 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5900] <... setpgid resumed>) = 0 [pid 5066] getdents64(3, [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5900] <... openat resumed>) = 3 [pid 5899] <... write resumed>) = 2097152 [pid 5894] <... pwritev resumed>) = 1114112 [pid 5066] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5900] write(3, "1000", 4 [pid 5894] exit_group(0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5900] <... write resumed>) = 4 [pid 5894] <... exit_group resumed>) = ? [pid 5066] lstat("./67/binderfs", [pid 5900] close(3 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5900] <... close resumed>) = 0 [pid 5066] unlink("./67/binderfs" [pid 5900] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... unlink resumed>) = 0 [pid 5900] <... symlink resumed>) = 0 [pid 5066] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5900] memfd_create("syzkaller", 0) = 3 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5899] munmap(0x7f241a43b000, 2097152 [pid 5900] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = 0 [pid 5899] <... munmap resumed>) = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5899] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5899] close(3 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5899] <... close resumed>) = 0 [pid 5899] mkdir("./file0", 0777) = 0 [pid 5899] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5894] +++ exited with 0 +++ [pid 5066] rmdir("./67/file0" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5066] <... rmdir resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [ 148.771424][ T5899] loop0: detected capacity change from 0 to 4096 [pid 5066] getdents64(3, [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5067] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./67" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] mkdir("./68", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5902 [pid 5067] fstat(3, ./strace-static-x86_64: Process 5902 attached [pid 5900] <... write resumed>) = 2097152 [pid 5899] <... mount resumed>) = 0 [pid 5895] <... pwritev resumed>) = 1114112 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5902] chdir("./68" [pid 5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5895] exit_group(0 [pid 5067] getdents64(3, [pid 5902] <... chdir resumed>) = 0 [pid 5899] <... openat resumed>) = 3 [pid 5895] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5900] munmap(0x7f241a43b000, 2097152 [pid 5899] chdir("./file0" [pid 5067] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] <... chdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] ioctl(4, LOOP_CLR_FD [pid 5067] lstat("./68/binderfs", [pid 5902] <... prctl resumed>) = 0 [pid 5899] <... ioctl resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5902] setpgid(0, 0 [pid 5899] close(4 [pid 5067] unlink("./68/binderfs" [pid 5902] <... setpgid resumed>) = 0 [pid 5900] <... munmap resumed>) = 0 [pid 5899] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5899] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5902] <... openat resumed>) = 3 [pid 5900] <... openat resumed>) = 4 [pid 5899] <... openat resumed>) = 4 [pid 5902] write(3, "1000", 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3 [ 148.846690][ T5901] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5899] unlink("./file1" [pid 5902] <... write resumed>) = 4 [pid 5902] close(3) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs" [pid 5899] <... unlink resumed>) = 0 [pid 5902] <... symlink resumed>) = 0 [pid 5899] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5902] memfd_create("syzkaller", 0) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5900] <... ioctl resumed>) = 0 [pid 5900] close(3 [pid 5895] +++ exited with 0 +++ [pid 5900] <... close resumed>) = 0 [pid 5900] mkdir("./file0", 0777 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5900] <... mkdir resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5900] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... restart_syscall resumed>) = 0 [ 148.905566][ T5900] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = 0 [pid 5065] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./69/binderfs") = 0 [pid 5065] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, [pid 5065] <... umount2 resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5900] <... mount resumed>) = 0 [pid 5067] getdents64(4, [pid 5900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5900] <... openat resumed>) = 3 [pid 5067] getdents64(4, [pid 5900] chdir("./file0" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5900] <... chdir resumed>) = 0 [pid 5067] close(4 [pid 5900] ioctl(4, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5900] <... ioctl resumed>) = 0 [pid 5067] rmdir("./68/file0" [pid 5900] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5900] <... close resumed>) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./68" [pid 5900] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./69", 0777 [pid 5900] <... openat resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5900] unlink("./file1" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5902] <... write resumed>) = 2097152 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5904 [pid 5065] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5900] <... unlink resumed>) = 0 [pid 5065] lstat("./69/file0", [pid 5902] munmap(0x7f241a43b000, 2097152 [pid 5900] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5904 attached [pid 5065] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] chdir("./69" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] <... chdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... openat resumed>) = 4 [pid 5904] <... prctl resumed>) = 0 [ 149.016699][ T5903] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] fstat(4, [pid 5904] setpgid(0, 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5904] <... setpgid resumed>) = 0 [pid 5902] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5902] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5904] <... openat resumed>) = 3 [pid 5902] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5904] write(3, "1000", 4 [pid 5902] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5904] <... write resumed>) = 4 [pid 5065] close(4 [pid 5904] close(3 [pid 5065] <... close resumed>) = 0 [pid 5904] <... close resumed>) = 0 [pid 5065] rmdir("./69/file0" [pid 5904] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5904] <... symlink resumed>) = 0 [pid 5065] getdents64(3, [pid 5904] memfd_create("syzkaller", 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5904] <... memfd_create resumed>) = 3 [pid 5065] close(3 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 5904] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] rmdir("./69") = 0 [pid 5065] mkdir("./70", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5905 ./strace-static-x86_64: Process 5905 attached [pid 5905] chdir("./70" [pid 5902] <... ioctl resumed>) = 0 [pid 5902] close(3 [pid 5905] <... chdir resumed>) = 0 [pid 5902] <... close resumed>) = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5902] mkdir("./file0", 0777 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5902] <... mkdir resumed>) = 0 [pid 5905] <... openat resumed>) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5902] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] memfd_create("syzkaller", 0) = 3 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 149.091003][ T5902] loop3: detected capacity change from 0 to 4096 [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5902] <... mount resumed>) = 0 [pid 5902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5902] chdir("./file0") = 0 [pid 5902] ioctl(4, LOOP_CLR_FD) = 0 [pid 5902] close(4) = 0 [pid 5902] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5902] unlink("./file1" [pid 5904] <... write resumed>) = 2097152 [ 149.169523][ T5906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5904] munmap(0x7f241a43b000, 2097152) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5904] ioctl(4, LOOP_SET_FD, 3 [pid 5902] <... unlink resumed>) = 0 [pid 5905] <... write resumed>) = 2097152 [pid 5902] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5904] <... ioctl resumed>) = 0 [pid 5904] close(3) = 0 [pid 5904] mkdir("./file0", 0777) = 0 [pid 5904] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5905] munmap(0x7f241a43b000, 2097152) = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 149.240260][ T5904] loop4: detected capacity change from 0 to 4096 [pid 5905] ioctl(4, LOOP_SET_FD, 3 [pid 5899] <... pwritev resumed>) = 1114112 [pid 5899] exit_group(0) = ? [pid 5905] <... ioctl resumed>) = 0 [pid 5905] close(3) = 0 [pid 5905] mkdir("./file0", 0777) = 0 [pid 5905] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5904] <... mount resumed>) = 0 [pid 5904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] chdir("./file0") = 0 [pid 5904] ioctl(4, LOOP_CLR_FD) = 0 [ 149.295673][ T5905] loop2: detected capacity change from 0 to 4096 [ 149.332891][ T5907] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5904] close(4) = 0 [pid 5904] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5904] unlink("./file1") = 0 [pid 5904] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5899] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5063] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./68/binderfs") = 0 [pid 5063] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5905] <... mount resumed>) = 0 [pid 5905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5905] chdir("./file0") = 0 [pid 5905] ioctl(4, LOOP_CLR_FD) = 0 [pid 5905] close(4) = 0 [pid 5905] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5905] unlink("./file1" [pid 5900] <... pwritev resumed>) = 1114112 [pid 5900] exit_group(0) = ? [ 149.399686][ T5908] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5905] <... unlink resumed>) = 0 [pid 5905] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5900] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./68/file0" [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./68/binderfs", [pid 5063] <... close resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] rmdir("./68" [pid 5064] unlink("./68/binderfs") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./69", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5902] <... pwritev resumed>) = 1114112 [pid 5902] exit_group(0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5909 [pid 5902] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5909 attached [pid 5064] <... umount2 resumed>) = 0 [pid 5909] chdir("./69") = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] <... prctl resumed>) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5909] <... openat resumed>) = 3 [pid 5064] lstat("./68/file0", [pid 5909] write(3, "1000", 4) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5909] close(3) = 0 [pid 5064] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5909] <... symlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5909] memfd_create("syzkaller", 0 [pid 5064] <... openat resumed>) = 4 [pid 5909] <... memfd_create resumed>) = 3 [pid 5064] fstat(4, [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5909] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./68/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./68" [pid 5905] <... pwritev resumed>) = 1114112 [pid 5064] <... rmdir resumed>) = 0 [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5905] exit_group(0 [pid 5064] mkdir("./69", 0777 [pid 5905] <... exit_group resumed>) = ? [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5904] <... pwritev resumed>) = 1114112 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5904] exit_group(0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5904] <... exit_group resumed>) = ? [pid 5064] close(3 [pid 5909] <... write resumed>) = 2097152 [pid 5902] +++ exited with 0 +++ [pid 5064] <... close resumed>) = 0 [pid 5909] munmap(0x7f241a43b000, 2097152 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5909] <... munmap resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- ./strace-static-x86_64: Process 5910 attached [pid 5909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5910 [pid 5910] chdir("./69" [pid 5909] <... openat resumed>) = 4 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5910] <... chdir resumed>) = 0 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5905] +++ exited with 0 +++ [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] <... ioctl resumed>) = 0 [pid 5066] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5066] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... restart_syscall resumed>) = 0 [pid 5910] setpgid(0, 0 [pid 5066] <... openat resumed>) = 3 [pid 5910] <... setpgid resumed>) = 0 [pid 5066] fstat(3, [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] close(3 [pid 5910] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5909] <... close resumed>) = 0 [pid 5910] write(3, "1000", 4 [pid 5909] mkdir("./file0", 0777 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5910] <... write resumed>) = 4 [pid 5909] <... mkdir resumed>) = 0 [pid 5066] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5910] close(3 [pid 5909] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(3, [pid 5910] <... close resumed>) = 0 [pid 5066] lstat("./68/binderfs", [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5904] +++ exited with 0 +++ [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] getdents64(3, [pid 5910] memfd_create("syzkaller", 0 [pid 5066] unlink("./68/binderfs" [pid 5910] <... memfd_create resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... unlink resumed>) = 0 [pid 5065] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./70/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] unlink("./70/binderfs" [pid 5067] <... openat resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5067] fstat(3, [ 149.767935][ T5909] loop0: detected capacity change from 0 to 4096 [pid 5065] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./69/binderfs") = 0 [pid 5067] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5909] <... mount resumed>) = 0 [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5909] chdir("./file0") = 0 [pid 5909] ioctl(4, LOOP_CLR_FD) = 0 [pid 5909] close(4) = 0 [pid 5909] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5909] unlink("./file1" [pid 5065] lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./70/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [ 149.836941][ T5911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] rmdir("./70") = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] mkdir("./71", 0777 [pid 5909] <... unlink resumed>) = 0 [pid 5066] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5909] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5912 [pid 5066] lstat("./68/file0", ./strace-static-x86_64: Process 5912 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5912] chdir("./71" [pid 5066] <... openat resumed>) = 4 [pid 5912] <... chdir resumed>) = 0 [pid 5066] fstat(4, [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5910] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5912] <... prctl resumed>) = 0 [pid 5910] munmap(0x7f241a43b000, 2097152 [pid 5067] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5912] setpgid(0, 0 [pid 5910] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5912] <... setpgid resumed>) = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] lstat("./69/file0", [pid 5066] getdents64(4, [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5910] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5912] <... openat resumed>) = 3 [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(4 [pid 5912] write(3, "1000", 4 [pid 5067] umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5912] <... write resumed>) = 4 [pid 5910] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5912] close(3 [pid 5910] close(3 [pid 5067] openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./68/file0" [pid 5912] <... close resumed>) = 0 [pid 5910] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5912] symlink("/dev/binderfs", "./binderfs" [pid 5910] mkdir("./file0", 0777 [pid 5067] fstat(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5912] <... symlink resumed>) = 0 [pid 5912] memfd_create("syzkaller", 0 [pid 5910] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5912] <... memfd_create resumed>) = 3 [pid 5910] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] close(3 [pid 5912] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./68" [pid 5067] close(4 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] mkdir("./69", 0777 [pid 5067] rmdir("./69/file0" [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [pid 5066] close(3) = 0 [pid 5067] rmdir("./69" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./70", 0777 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5914 [ 149.948833][ T5910] loop1: detected capacity change from 0 to 4096 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5910] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5914 attached [pid 5914] chdir("./69") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5910] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5910] chdir("./file0" [pid 5067] close(3 [pid 5910] <... chdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5910] ioctl(4, LOOP_CLR_FD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5910] <... ioctl resumed>) = 0 [pid 5910] close(4) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5915 [pid 5910] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5910] <... openat resumed>) = 4 [pid 5910] unlink("./file1" [pid 5914] <... openat resumed>) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5915 attached ) = 0 [pid 5915] chdir("./70" [pid 5914] memfd_create("syzkaller", 0 [pid 5915] <... chdir resumed>) = 0 [pid 5914] <... memfd_create resumed>) = 3 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5915] <... prctl resumed>) = 0 [pid 5914] <... mmap resumed>) = 0x7f241a43b000 [ 150.010639][ T5913] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.046301][ C1] ================================================================== [pid 5915] setpgid(0, 0) = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5915] write(3, "1000", 4) = 4 [pid 5915] close(3) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5915] memfd_create("syzkaller", 0) = 3 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 150.054457][ C1] BUG: KASAN: use-after-free in __lock_acquire+0x77/0x1f80 [ 150.061719][ C1] Read of size 8 at addr ffff88802057a6b0 by task segctord/5911 [ 150.069379][ C1] [ 150.071731][ C1] CPU: 1 PID: 5911 Comm: segctord Not tainted 6.2.0-rc8-syzkaller-00151-g925cf0457d7e #0 [ 150.081561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 150.091644][ C1] Call Trace: [ 150.094951][ C1] [ 150.097949][ C1] dump_stack_lvl+0x1e7/0x2d0 [ 150.102675][ C1] ? irq_work_queue+0xca/0x150 [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 150.107494][ C1] ? nf_tcp_handle_invalid+0x640/0x640 [ 150.113006][ C1] ? panic+0x770/0x770 [ 150.117110][ C1] ? _printk+0xd5/0x120 [ 150.121307][ C1] ? lockdep_lock+0x2b0/0x2b0 [ 150.126034][ C1] print_report+0x163/0x4f0 [ 150.130571][ C1] ? validate_chain+0x13d5/0x58e0 [ 150.135624][ C1] ? __virt_addr_valid+0x22f/0x2e0 [ 150.140778][ C1] ? __phys_addr+0xba/0x170 [ 150.145324][ C1] ? __lock_acquire+0x77/0x1f80 [ 150.150222][ C1] kasan_report+0x13a/0x170 [ 150.154759][ C1] ? __lock_acquire+0x77/0x1f80 [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [ 150.159658][ C1] __lock_acquire+0x77/0x1f80 [ 150.164377][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 150.170073][ C1] ? validate_chain+0x119/0x58e0 [ 150.175045][ C1] lock_acquire+0x235/0x630 [ 150.179628][ C1] ? try_to_wake_up+0xb6/0x12b0 [ 150.184516][ C1] ? lockdep_lock+0x2b0/0x2b0 [ 150.189240][ C1] ? read_lock_is_recursive+0x20/0x20 [ 150.194670][ C1] ? mark_lock+0x9a/0x340 [ 150.199028][ C1] ? __lock_acquire+0x125b/0x1f80 [ 150.204097][ C1] ? _raw_spin_lock_irqsave+0xb0/0x120 [pid 5914] <... write resumed>) = 2097152 [pid 5914] munmap(0x7f241a43b000, 2097152) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5914] ioctl(4, LOOP_SET_FD, 3 [pid 5915] munmap(0x7f241a43b000, 2097152) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5915] ioctl(4, LOOP_SET_FD, 3 [pid 5914] <... ioctl resumed>) = 0 [pid 5914] close(3) = 0 [pid 5914] mkdir("./file0", 0777) = 0 [ 150.209593][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 150.214919][ C1] ? try_to_wake_up+0xb6/0x12b0 [ 150.219819][ C1] ? _raw_spin_lock+0x40/0x40 [ 150.222786][ T5914] loop3: detected capacity change from 0 to 4096 [ 150.224517][ C1] try_to_wake_up+0xb6/0x12b0 [ 150.235565][ C1] ? cpu_curr_snapshot+0xd0/0xd0 [ 150.237943][ T5915] loop4: detected capacity change from 0 to 4096 [ 150.240527][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 150.240565][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 150.240599][ C1] ? call_timer_fn+0xb0/0x820 [ 150.263326][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 150.268555][ C1] call_timer_fn+0x1ed/0x820 [ 150.273197][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 150.278422][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 150.284427][ C1] ? __run_timers+0x860/0x860 [ 150.289128][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 150.294337][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.299566][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 150.304770][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 150.309982][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 150.315196][ C1] __run_timers+0x64f/0x860 [ 150.319737][ C1] ? detach_timer+0x430/0x430 [ 150.324420][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 150.330411][ C1] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 150.336686][ C1] run_timer_softirq+0x67/0xf0 [ 150.341457][ C1] __do_softirq+0x308/0xb15 [ 150.345969][ C1] ? __irq_exit_rcu+0x159/0x250 [ 150.350822][ C1] ? __lock_text_end+0xc/0xc [ 150.355413][ C1] ? hrtimer_interrupt+0x76f/0x980 [ 150.360537][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 150.365734][ C1] __irq_exit_rcu+0x159/0x250 [ 150.370410][ C1] ? irq_exit_rcu+0x20/0x20 [ 150.374932][ C1] irq_exit_rcu+0x9/0x20 [ 150.379176][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 150.384852][ C1] [ 150.387782][ C1] [ 150.390707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 150.396688][ C1] RIP: 0010:kernel_text_address+0x7/0xe0 [ 150.402378][ C1] Code: 93 c1 48 c7 c2 cb 5a a6 8f 48 39 d3 0f 92 c2 20 ca 08 c2 0f b6 c2 5b c3 66 2e 0f 1f 84 00 00 00 00 00 90 66 0f 1f 00 55 41 56 <53> 48 89 fb 48 c7 c0 00 00 00 81 bd 01 00 00 00 48 39 c7 72 0c 48 [ 150.422094][ C1] RSP: 0018:ffffc900055ef0d8 EFLAGS: 00000246 [ 150.428167][ C1] RAX: 0000000000000000 RBX: ffffffff83527b01 RCX: 0000000080000000 [ 150.436145][ C1] RDX: dffffc0000000000 RSI: ffffc900055e8000 RDI: ffffffff83527b01 [ 150.444117][ C1] RBP: ffffc900055ef1b0 R08: ffffc900055ef6f0 R09: ffffc900055ef170 [ 150.452086][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888026cad7c0 [ 150.460054][ C1] R13: ffffffff81798700 R14: dffffc0000000000 R15: 1ffff92000abde2d [ 150.468038][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 150.473084][ C1] ? nilfs_segctor_do_construct+0x3a11/0x6f70 [ 150.479192][ C1] ? nilfs_segctor_do_construct+0x3a11/0x6f70 [ 150.485282][ C1] __kernel_text_address+0xd/0x40 [ 150.490414][ C1] unwind_get_return_address+0x4d/0x90 [ 150.495884][ C1] arch_stack_walk+0xf7/0x140 [ 150.500576][ C1] ? nilfs_segctor_do_construct+0x3a11/0x6f70 [ 150.506650][ C1] stack_trace_save+0x117/0x1c0 [ 150.511504][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 150.516622][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 150.522288][ C1] ? nilfs_btree_assign+0xa48/0xd10 [ 150.527489][ C1] kasan_set_track+0x4f/0x80 [ 150.532081][ C1] ? kasan_set_track+0x4f/0x80 [ 150.536849][ C1] ? kasan_save_free_info+0x2b/0x40 [ 150.542073][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 150.547353][ C1] ? kmem_cache_free+0x2b5/0x580 [ 150.552292][ C1] ? nilfs_btree_assign+0xa48/0xd10 [ 150.557493][ C1] ? nilfs_bmap_assign+0x8b/0x160 [ 150.562556][ C1] kasan_save_free_info+0x2b/0x40 [ 150.567589][ C1] ____kasan_slab_free+0xd6/0x120 [ 150.572630][ C1] kmem_cache_free+0x2b5/0x580 [ 150.577397][ C1] ? nilfs_btree_assign+0xa48/0xd10 [ 150.582597][ C1] nilfs_btree_assign+0xa48/0xd10 [ 150.587640][ C1] ? nilfs_btree_lookup_dirty_buffers+0xfd0/0xfd0 [ 150.594077][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 150.600076][ C1] nilfs_bmap_assign+0x8b/0x160 [ 150.604927][ C1] nilfs_segctor_do_construct+0x3a11/0x6f70 [ 150.611031][ C1] ? nilfs_transaction_unlock+0x210/0x210 [ 150.616762][ C1] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 150.622219][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 150.627946][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 150.633941][ C1] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 150.639410][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 150.644460][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 150.649663][ C1] ? _raw_spin_unlock+0x28/0x40 [ 150.654530][ C1] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 150.660076][ C1] nilfs_segctor_construct+0x145/0x8c0 [ 150.665554][ C1] nilfs_segctor_thread+0x53a/0x1140 [ 150.670951][ C1] ? nilfs_construction_timeout+0x40/0x40 [ 150.676673][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 150.682675][ C1] ? _raw_spin_unlock+0x40/0x40 [ 150.687538][ C1] ? wake_bit_function+0x220/0x220 [ 150.692655][ C1] ? _raw_spin_unlock+0x40/0x40 [ 150.697519][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 150.703508][ C1] ? __kthread_parkme+0x164/0x1c0 [ 150.708545][ C1] kthread+0x270/0x300 [ 150.712613][ C1] ? nilfs_construction_timeout+0x40/0x40 [ 150.718332][ C1] ? kthread_blkcg+0xd0/0xd0 [ 150.722919][ C1] ret_from_fork+0x1f/0x30 [ 150.727364][ C1] [ 150.730379][ C1] [ 150.732701][ C1] Allocated by task 2: [ 150.736776][ C1] kasan_set_track+0x4f/0x80 [ 150.741361][ C1] __kasan_slab_alloc+0x69/0x80 [ 150.746208][ C1] slab_post_alloc_hook+0x68/0x390 [ 150.751327][ C1] kmem_cache_alloc_node+0x158/0x2c0 [ 150.756607][ C1] dup_task_struct+0x57/0x6d0 [ 150.761279][ C1] copy_process+0x5c9/0x3f50 [ 150.765865][ C1] kernel_clone+0x22d/0x990 [ 150.770367][ C1] kernel_thread+0x156/0x1d0 [ 150.775129][ C1] kthreadd+0x583/0x750 [ 150.779279][ C1] ret_from_fork+0x1f/0x30 [ 150.783695][ C1] [ 150.786015][ C1] Freed by task 5862: [ 150.789989][ C1] kasan_set_track+0x4f/0x80 [ 150.794585][ C1] kasan_save_free_info+0x2b/0x40 [ 150.799605][ C1] ____kasan_slab_free+0xd6/0x120 [ 150.804622][ C1] kmem_cache_free+0x2b5/0x580 [ 150.809387][ C1] rcu_core+0xa9e/0x17a0 [ 150.813626][ C1] __do_softirq+0x308/0xb15 [ 150.818135][ C1] [ 150.820464][ C1] Last potentially related work creation: [ 150.826170][ C1] kasan_save_stack+0x3f/0x60 [ 150.830869][ C1] __kasan_record_aux_stack+0xb0/0xc0 [ 150.836244][ C1] call_rcu+0x167/0xac0 [ 150.840401][ C1] __schedule+0x1411/0x43f0 [ 150.844917][ C1] schedule+0xc3/0x190 [ 150.848989][ C1] ptrace_stop+0x590/0x970 [ 150.853405][ C1] ptrace_notify+0x229/0x350 [ 150.858004][ C1] syscall_exit_to_user_mode+0x171/0x2e0 [ 150.863819][ C1] do_syscall_64+0x4d/0xc0 [ 150.868586][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 150.874488][ C1] [ 150.876993][ C1] Second to last potentially related work creation: [ 150.883583][ C1] kasan_save_stack+0x3f/0x60 [ 150.888345][ C1] __kasan_record_aux_stack+0xb0/0xc0 [ 150.893805][ C1] call_rcu+0x167/0xac0 [ 150.897981][ C1] release_task+0x155d/0x16a0 [ 150.902659][ C1] wait_consider_task+0x19f8/0x2d30 [ 150.907876][ C1] do_wait+0x396/0xc40 [ 150.911949][ C1] kernel_wait4+0x2a2/0x3e0 [ 150.916480][ C1] __x64_sys_wait4+0x134/0x1e0 [ 150.921336][ C1] do_syscall_64+0x41/0xc0 [ 150.925758][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 150.931673][ C1] [ 150.933990][ C1] The buggy address belongs to the object at ffff888020579d40 [ 150.933990][ C1] which belongs to the cache task_struct of size 7232 [ 150.948125][ C1] The buggy address is located 2416 bytes inside of [ 150.948125][ C1] 7232-byte region [ffff888020579d40, ffff88802057b980) [ 150.961654][ C1] [ 150.963978][ C1] The buggy address belongs to the physical page: [ 150.970379][ C1] page:ffffea0000815e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20578 [ 150.980526][ C1] head:ffffea0000815e00 order:3 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 150.990584][ C1] anon flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 150.998999][ C1] raw: 00fff00000010200 ffff888140007500 0000000000000000 dead000000000001 [ 151.007580][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 151.016153][ C1] page dumped because: kasan: bad access detected [ 151.022571][ C1] page_owner tracks the page as allocated [ 151.028277][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 8881010723, free_ts 0 [ 151.047889][ C1] get_page_from_freelist+0x3449/0x35c0 [ 151.053467][ C1] __alloc_pages+0x291/0x7e0 [ 151.058063][ C1] alloc_slab_page+0x6a/0x160 [ 151.062753][ C1] new_slab+0x84/0x2f0 [ 151.066834][ C1] ___slab_alloc+0xa85/0x10a0 [ 151.071514][ C1] kmem_cache_alloc_node+0x1dc/0x2c0 [ 151.076800][ C1] dup_task_struct+0x57/0x6d0 [ 151.081476][ C1] copy_process+0x5c9/0x3f50 [ 151.086061][ C1] kernel_clone+0x22d/0x990 [ 151.090564][ C1] kernel_thread+0x156/0x1d0 [ 151.095149][ C1] kthreadd+0x583/0x750 [ 151.099300][ C1] ret_from_fork+0x1f/0x30 [ 151.103732][ C1] page_owner free stack trace missing [ 151.109090][ C1] [ 151.111409][ C1] Memory state around the buggy address: [ 151.117031][ C1] ffff88802057a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.125088][ C1] ffff88802057a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.133144][ C1] >ffff88802057a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.141199][ C1] ^ [ 151.146826][ C1] ffff88802057a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.154881][ C1] ffff88802057a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.162936][ C1] ================================================================== [ 151.170987][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 151.178176][ C1] CPU: 1 PID: 5911 Comm: segctord Not tainted 6.2.0-rc8-syzkaller-00151-g925cf0457d7e #0 [ 151.187978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 151.198039][ C1] Call Trace: [ 151.201324][ C1] [ 151.204165][ C1] dump_stack_lvl+0x1e7/0x2d0 [ 151.208852][ C1] ? nf_tcp_handle_invalid+0x640/0x640 [ 151.214312][ C1] ? panic+0x770/0x770 [ 151.218387][ C1] ? lock_release+0x106/0xaa0 [ 151.223073][ C1] ? vscnprintf+0x5d/0x80 [ 151.227401][ C1] panic+0x31c/0x770 [ 151.231295][ C1] ? check_panic_on_warn+0x21/0xa0 [ 151.236409][ C1] ? memcpy_page_flushcache+0x100/0x100 [ 151.241954][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 151.247843][ C1] ? _raw_spin_unlock+0x40/0x40 [ 151.252688][ C1] ? rcu_read_lock_sched_held+0x63/0x130 [ 151.258325][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 151.264313][ C1] check_panic_on_warn+0x82/0xa0 [ 151.269253][ C1] ? __lock_acquire+0x77/0x1f80 [ 151.274143][ C1] end_report+0xb2/0x160 [ 151.278392][ C1] kasan_report+0x147/0x170 [ 151.282892][ C1] ? __lock_acquire+0x77/0x1f80 [ 151.287748][ C1] __lock_acquire+0x77/0x1f80 [ 151.292456][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 151.298097][ C1] ? validate_chain+0x119/0x58e0 [ 151.303039][ C1] lock_acquire+0x235/0x630 [ 151.307563][ C1] ? try_to_wake_up+0xb6/0x12b0 [ 151.312436][ C1] ? lockdep_lock+0x2b0/0x2b0 [ 151.317119][ C1] ? read_lock_is_recursive+0x20/0x20 [ 151.322499][ C1] ? mark_lock+0x9a/0x340 [ 151.326840][ C1] ? __lock_acquire+0x125b/0x1f80 [ 151.331871][ C1] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 151.337329][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 151.342613][ C1] ? try_to_wake_up+0xb6/0x12b0 [ 151.347493][ C1] ? _raw_spin_lock+0x40/0x40 [ 151.352186][ C1] try_to_wake_up+0xb6/0x12b0 [ 151.356880][ C1] ? cpu_curr_snapshot+0xd0/0xd0 [ 151.361824][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 151.367466][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 151.373480][ C1] ? call_timer_fn+0xb0/0x820 [ 151.378167][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 151.383365][ C1] call_timer_fn+0x1ed/0x820 [ 151.387979][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 151.393188][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 151.399171][ C1] ? __run_timers+0x860/0x860 [ 151.403855][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 151.409054][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.414273][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 151.419470][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 151.424678][ C1] ? nilfs_iput_work_func+0x70/0x70 [ 151.429905][ C1] __run_timers+0x64f/0x860 [ 151.434432][ C1] ? detach_timer+0x430/0x430 [ 151.439121][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 151.445110][ C1] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 151.451375][ C1] run_timer_softirq+0x67/0xf0 [ 151.456147][ C1] __do_softirq+0x308/0xb15 [ 151.460670][ C1] ? __irq_exit_rcu+0x159/0x250 [ 151.465524][ C1] ? __lock_text_end+0xc/0xc [ 151.470134][ C1] ? hrtimer_interrupt+0x76f/0x980 [ 151.475281][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 151.480496][ C1] __irq_exit_rcu+0x159/0x250 [ 151.485190][ C1] ? irq_exit_rcu+0x20/0x20 [ 151.489739][ C1] irq_exit_rcu+0x9/0x20 [ 151.494000][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 151.499679][ C1] [ 151.502611][ C1] [ 151.505542][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.511533][ C1] RIP: 0010:kernel_text_address+0x7/0xe0 [ 151.517201][ C1] Code: 93 c1 48 c7 c2 cb 5a a6 8f 48 39 d3 0f 92 c2 20 ca 08 c2 0f b6 c2 5b c3 66 2e 0f 1f 84 00 00 00 00 00 90 66 0f 1f 00 55 41 56 <53> 48 89 fb 48 c7 c0 00 00 00 81 bd 01 00 00 00 48 39 c7 72 0c 48 [ 151.537266][ C1] RSP: 0018:ffffc900055ef0d8 EFLAGS: 00000246 [ 151.543376][ C1] RAX: 0000000000000000 RBX: ffffffff83527b01 RCX: 0000000080000000 [ 151.551372][ C1] RDX: dffffc0000000000 RSI: ffffc900055e8000 RDI: ffffffff83527b01 [ 151.559381][ C1] RBP: ffffc900055ef1b0 R08: ffffc900055ef6f0 R09: ffffc900055ef170 [ 151.567383][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888026cad7c0 [ 151.575364][ C1] R13: ffffffff81798700 R14: dffffc0000000000 R15: 1ffff92000abde2d [ 151.583343][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 151.588375][ C1] ? nilfs_segctor_do_construct+0x3a11/0x6f70 [ 151.594444][ C1] ? nilfs_segctor_do_construct+0x3a11/0x6f70 [ 151.600526][ C1] __kernel_text_address+0xd/0x40 [ 151.605559][ C1] unwind_get_return_address+0x4d/0x90 [ 151.611023][ C1] arch_stack_walk+0xf7/0x140 [ 151.615710][ C1] ? nilfs_segctor_do_construct+0x3a11/0x6f70 [ 151.621786][ C1] stack_trace_save+0x117/0x1c0 [ 151.626641][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 151.631748][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 151.637402][ C1] ? nilfs_btree_assign+0xa48/0xd10 [ 151.642613][ C1] kasan_set_track+0x4f/0x80 [ 151.647297][ C1] ? kasan_set_track+0x4f/0x80 [ 151.652085][ C1] ? kasan_save_free_info+0x2b/0x40 [ 151.657289][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 151.662486][ C1] ? kmem_cache_free+0x2b5/0x580 [ 151.667441][ C1] ? nilfs_btree_assign+0xa48/0xd10 [ 151.672661][ C1] ? nilfs_bmap_assign+0x8b/0x160 [ 151.677809][ C1] kasan_save_free_info+0x2b/0x40 [ 151.682850][ C1] ____kasan_slab_free+0xd6/0x120 [ 151.687880][ C1] kmem_cache_free+0x2b5/0x580 [ 151.692653][ C1] ? nilfs_btree_assign+0xa48/0xd10 [ 151.697857][ C1] nilfs_btree_assign+0xa48/0xd10 [ 151.702901][ C1] ? nilfs_btree_lookup_dirty_buffers+0xfd0/0xfd0 [ 151.709322][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 151.715401][ C1] nilfs_bmap_assign+0x8b/0x160 [ 151.720257][ C1] nilfs_segctor_do_construct+0x3a11/0x6f70 [ 151.726178][ C1] ? nilfs_transaction_unlock+0x210/0x210 [ 151.731905][ C1] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 151.737372][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 151.743016][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 151.749110][ C1] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 151.754583][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 151.759800][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 151.764998][ C1] ? _raw_spin_unlock+0x28/0x40 [ 151.769850][ C1] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 151.775326][ C1] nilfs_segctor_construct+0x145/0x8c0 [ 151.780786][ C1] nilfs_segctor_thread+0x53a/0x1140 [ 151.786090][ C1] ? nilfs_construction_timeout+0x40/0x40 [ 151.791824][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 151.797719][ C1] ? _raw_spin_unlock+0x40/0x40 [ 151.802600][ C1] ? wake_bit_function+0x220/0x220 [ 151.807721][ C1] ? _raw_spin_unlock+0x40/0x40 [ 151.812570][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 151.818564][ C1] ? __kthread_parkme+0x164/0x1c0 [ 151.823616][ C1] kthread+0x270/0x300 [ 151.827686][ C1] ? nilfs_construction_timeout+0x40/0x40 [ 151.833406][ C1] ? kthread_blkcg+0xd0/0xd0 [ 151.838001][ C1] ret_from_fork+0x1f/0x30 [ 151.842445][ C1] [ 151.845544][ C1] Kernel Offset: disabled [ 151.849872][ C1] Rebooting in 86400 seconds..