./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1504681094 <...> Warning: Permanently added '10.128.1.184' (ECDSA) to the list of known hosts. execve("./syz-executor1504681094", ["./syz-executor1504681094"], 0x7ffd42b77c10 /* 10 vars */) = 0 brk(NULL) = 0x5555559b0000 brk(0x5555559b0c40) = 0x5555559b0c40 arch_prctl(ARCH_SET_FS, 0x5555559b0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1504681094", 4096) = 28 brk(0x5555559d1c40) = 0x5555559d1c40 brk(0x5555559d2000) = 0x5555559d2000 mprotect(0x7f24228f8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x5555559b05d0) = 5063 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getpid() = 5063 ./strace-static-x86_64: Process 5064 attached [pid 5063] mkdir("./syzkaller.3j1dT4", 0700 [pid 5062] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5064 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5065 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5066 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5067 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5068 [pid 5063] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5065 attached [pid 5064] getpid() = 5064 [pid 5064] mkdir("./syzkaller.CfSUF6", 0700 [pid 5063] chmod("./syzkaller.3j1dT4", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] chmod("./syzkaller.CfSUF6", 0777) = 0 [pid 5064] chdir("./syzkaller.CfSUF6") = 0 [pid 5064] mkdir("./0", 0777 [pid 5063] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5068 attached [pid 5068] getpid( [pid 5063] chdir("./syzkaller.3j1dT4" [pid 5068] <... getpid resumed>) = 5068 [pid 5064] <... mkdir resumed>) = 0 [pid 5068] mkdir("./syzkaller.IvgIyr", 0700 [pid 5063] <... chdir resumed>) = 0 [pid 5065] getpid( [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5067 attached [pid 5067] getpid( [pid 5063] mkdir("./0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... getpid resumed>) = 5067 [pid 5065] <... getpid resumed>) = 5065 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] mkdir("./syzkaller.RGsGMm", 0700 [pid 5065] mkdir("./syzkaller.q2H5oa", 0700./strace-static-x86_64: Process 5066 attached [pid 5068] chmod("./syzkaller.IvgIyr", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5068] <... chmod resumed>) = 0 [pid 5066] getpid( [pid 5068] chdir("./syzkaller.IvgIyr" [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getpid resumed>) = 5066 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] mkdir("./syzkaller.I1OaDf", 0700 [pid 5063] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] chmod("./syzkaller.q2H5oa", 0777) = 0 [pid 5068] <... chdir resumed>) = 0 [pid 5065] chdir("./syzkaller.q2H5oa" [pid 5067] chmod("./syzkaller.RGsGMm", 0777 [pid 5065] <... chdir resumed>) = 0 [pid 5068] mkdir("./0", 0777 [pid 5067] <... chmod resumed>) = 0 [pid 5065] mkdir("./0", 0777 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... mkdir resumed>) = 0 [pid 5066] chmod("./syzkaller.I1OaDf", 0777./strace-static-x86_64: Process 5070 attached ./strace-static-x86_64: Process 5069 attached [pid 5070] chdir("./0" [pid 5066] <... chmod resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 5069] chdir("./0" [pid 5065] <... mkdir resumed>) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... chdir resumed>) = 0 [pid 5070] <... prctl resumed>) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] setpgid(0, 0 [pid 5069] <... prctl resumed>) = 0 [pid 5070] <... setpgid resumed>) = 0 [pid 5069] setpgid(0, 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... setpgid resumed>) = 0 [pid 5067] chdir("./syzkaller.RGsGMm" [pid 5070] <... openat resumed>) = 3 [pid 5067] <... chdir resumed>) = 0 [pid 5066] chdir("./syzkaller.I1OaDf" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5069 [pid 5070] write(3, "1000", 4 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] <... write resumed>) = 4 [pid 5070] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] mkdir("./0", 0777 [pid 5066] <... chdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5070 [pid 5070] <... close resumed>) = 0 [pid 5069] write(3, "1000", 4 [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... write resumed>) = 4 [pid 5070] <... symlink resumed>) = 0 [pid 5069] close(3 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./0", 0777 [pid 5070] memfd_create("syzkaller", 0) = 3 [pid 5069] <... close resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5070] <... mmap resumed>) = 0x7f241a43b000 [pid 5069] <... symlink resumed>) = 0 [pid 5068] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] memfd_create("syzkaller", 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5069] <... memfd_create resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 5065] <... close resumed>) = 0 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5072 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... mmap resumed>) = 0x7f241a43b000 ./strace-static-x86_64: Process 5073 attached ./strace-static-x86_64: Process 5072 attached [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] chdir("./0"./strace-static-x86_64: Process 5074 attached [pid 5074] chdir("./0") = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5073 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5074 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... chdir resumed>) = 0 [pid 5072] chdir("./0" [pid 5074] <... openat resumed>) = 3 [pid 5074] write(3, "1000", 4) = 4 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... chdir resumed>) = 0 [pid 5073] <... prctl resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5075 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] setpgid(0, 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... setpgid resumed>) = 0 [pid 5072] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5075 attached [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] setpgid(0, 0 [pid 5075] chdir("./0" [pid 5074] memfd_create("syzkaller", 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... setpgid resumed>) = 0 [pid 5075] <... chdir resumed>) = 0 [pid 5074] <... memfd_create resumed>) = 3 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... prctl resumed>) = 0 [pid 5074] <... mmap resumed>) = 0x7f241a43b000 [pid 5073] write(3, "1000", 4 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5075] setpgid(0, 0 [pid 5073] <... write resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5075] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] close(3 [pid 5072] write(3, "1000", 4 [pid 5070] <... write resumed>) = 2097152 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... write resumed>) = 4 [pid 5070] munmap(0x7f241a43b000, 2097152 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5073] symlink("/dev/binderfs", "./binderfs" [pid 5072] close(3 [pid 5073] <... symlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5070] <... munmap resumed>) = 0 [pid 5073] memfd_create("syzkaller", 0 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5070] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... memfd_create resumed>) = 3 [pid 5072] <... symlink resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] memfd_create("syzkaller", 0 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... mmap resumed>) = 0x7f241a43b000 [pid 5072] <... memfd_create resumed>) = 3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(3) = 0 [pid 5070] mkdir("./file0", 0777 [pid 5069] <... write resumed>) = 2097152 [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5070] <... mkdir resumed>) = 0 [pid 5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 69.540759][ T5070] loop1: detected capacity change from 0 to 4096 [pid 5070] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5069] munmap(0x7f241a43b000, 2097152) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5069] close(3) = 0 [pid 5069] mkdir("./file0", 0777 [pid 5074] <... write resumed>) = 2097152 [pid 5073] <... write resumed>) = 2097152 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5074] munmap(0x7f241a43b000, 2097152 [pid 5073] munmap(0x7f241a43b000, 2097152 [pid 5070] <... mount resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5073] <... munmap resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5074] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5070] chdir("./file0" [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] <... chdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5075] <... write resumed>) = 2097152 [pid 5074] <... openat resumed>) = 4 [pid 5075] munmap(0x7f241a43b000, 2097152 [ 69.636835][ T5069] loop0: detected capacity change from 0 to 4096 [ 69.661536][ T5077] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5074] ioctl(4, LOOP_SET_FD, 3 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5075] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... ioctl resumed>) = 0 [pid 5072] <... write resumed>) = 2097152 [pid 5070] close(4 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] munmap(0x7f241a43b000, 2097152 [pid 5073] close(3 [pid 5070] <... close resumed>) = 0 [pid 5072] <... munmap resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5072] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [ 69.688352][ T5074] loop2: detected capacity change from 0 to 4096 [ 69.705002][ T5073] loop4: detected capacity change from 0 to 4096 [ 69.707318][ T5075] loop3: detected capacity change from 0 to 4096 [pid 5070] unlink("./file1" [pid 5073] mkdir("./file0", 0777) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5072] mkdir("./file0", 0777 [pid 5070] <... unlink resumed>) = 0 [pid 5074] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 5070] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5074] <... close resumed>) = 0 [pid 5072] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5074] mkdir("./file0", 0777 [pid 5069] <... mount resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] chdir("./file0") = 0 [pid 5069] ioctl(4, LOOP_CLR_FD [pid 5074] <... mkdir resumed>) = 0 [pid 5069] <... ioctl resumed>) = 0 [pid 5069] close(4) = 0 [pid 5069] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5074] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5069] <... openat resumed>) = 4 [ 69.737349][ T5072] loop5: detected capacity change from 0 to 4096 [ 69.756792][ T5078] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5069] unlink("./file1" [pid 5073] <... mount resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5069] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5073] chdir("./file0" [pid 5075] <... close resumed>) = 0 [pid 5075] mkdir("./file0", 0777 [pid 5073] <... chdir resumed>) = 0 [pid 5073] ioctl(4, LOOP_CLR_FD [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5073] close(4 [pid 5075] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5073] <... close resumed>) = 0 [ 69.801819][ T5080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5073] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5073] unlink("./file1") = 0 [pid 5072] <... mount resumed>) = 0 [pid 5074] <... mount resumed>) = 0 [pid 5073] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5072] chdir("./file0" [pid 5074] chdir("./file0" [pid 5072] <... chdir resumed>) = 0 [pid 5074] <... chdir resumed>) = 0 [pid 5072] ioctl(4, LOOP_CLR_FD [pid 5074] ioctl(4, LOOP_CLR_FD [pid 5072] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] close(4 [pid 5074] close(4 [pid 5072] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5074] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5072] <... openat resumed>) = 4 [pid 5072] unlink("./file1" [pid 5074] <... openat resumed>) = 4 [ 69.863931][ T5082] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.877483][ T5083] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5074] unlink("./file1" [pid 5075] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file0") = 0 [pid 5075] ioctl(4, LOOP_CLR_FD [pid 5072] <... unlink resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5075] close(4) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 69.920112][ T5084] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5075] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5075] unlink("./file1") = 0 [pid 5075] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5070] <... pwritev resumed>) = 1114112 [pid 5070] exit_group(0) = ? [pid 5074] <... pwritev resumed>) = 1114112 [pid 5073] <... pwritev resumed>) = 1114112 [pid 5074] exit_group(0) = ? [pid 5073] exit_group(0) = ? [pid 5069] <... pwritev resumed>) = 1114112 [pid 5069] exit_group(0) = ? [pid 5072] <... pwritev resumed>) = 1114112 [pid 5072] exit_group(0) = ? [pid 5073] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5067] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5069] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] lstat("./0/binderfs", [pid 5072] +++ exited with 0 +++ [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5075] <... pwritev resumed>) = 1114112 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] unlink("./0/binderfs" [pid 5063] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5075] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5075] <... exit_group resumed>) = ? [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5070] +++ exited with 0 +++ [pid 5068] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5063] getdents64(3, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./0/binderfs", [pid 5068] unlink("./0/binderfs" [pid 5064] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] unlink("./0/binderfs" [pid 5064] fstat(3, [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5064] getdents64(3, [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5064] lstat("./0/binderfs", [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./0/binderfs" [pid 5065] unlink("./0/binderfs") = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 70.454356][ T5070] syz-executor150 (5070) used greatest stack depth: 18864 bytes left [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./0/file0", [pid 5068] lstat("./0/file0", [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] getdents64(4, [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5068] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] close(4 [pid 5068] getdents64(4, [pid 5067] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./0/file0" [pid 5068] close(4 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5068] rmdir("./0/file0" [pid 5067] lstat("./0/file0", [pid 5063] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5067] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] rmdir("./0" [pid 5075] +++ exited with 0 +++ [pid 5068] rmdir("./0" [pid 5067] fstat(4, [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./1", 0777 [pid 5068] mkdir("./1", 0777 [pid 5067] getdents64(4, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] lstat("./0/file0", [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... openat resumed>) = 3 [pid 5067] getdents64(4, [pid 5066] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] lstat("./0/file0", [pid 5063] <... openat resumed>) = 3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(4 [pid 5066] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3 [pid 5067] <... close resumed>) = 0 [pid 5066] fstat(3, [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5067] rmdir("./0/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... rmdir resumed>) = 0 [pid 5065] fstat(4, [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(4, [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] lstat("./0/binderfs", [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5086 [pid 5067] rmdir("./0" [pid 5066] unlink("./0/binderfs" [pid 5065] close(4 [pid 5064] fstat(4, ./strace-static-x86_64: Process 5086 attached [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5086] chdir("./1" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1", 0777 [pid 5065] rmdir("./0/file0" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5086] <... chdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5087 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] close(4 [pid 5067] <... close resumed>) = 0 [pid 5065] rmdir("./0" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./0/file0" [pid 5086] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5065] mkdir("./1", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5086] <... setpgid resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5088 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5086] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5088 attached ./strace-static-x86_64: Process 5087 attached [pid 5086] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5087] chdir("./1" [pid 5086] close(3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] close(3 [pid 5088] chdir("./1" [pid 5087] <... chdir resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... close resumed>) = 0 [pid 5088] <... chdir resumed>) = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5064] rmdir("./0" [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] <... prctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5088] <... prctl resumed>) = 0 [pid 5087] setpgid(0, 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] mkdir("./1", 0777 [pid 5088] setpgid(0, 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... mkdir resumed>) = 0 [pid 5088] <... setpgid resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5089 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] <... openat resumed>) = 3 [pid 5086] <... symlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 3 [pid 5087] write(3, "1000", 4 [pid 5086] memfd_create("syzkaller", 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5088] write(3, "1000", 4 [pid 5087] <... write resumed>) = 4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5088] <... write resumed>) = 4 [pid 5087] close(3 [pid 5064] close(3./strace-static-x86_64: Process 5089 attached [pid 5088] close(3 [pid 5087] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5089] chdir("./1" [pid 5088] <... close resumed>) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] <... chdir resumed>) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5087] <... symlink resumed>) = 0 [pid 5086] <... memfd_create resumed>) = 3 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... symlink resumed>) = 0 [pid 5087] memfd_create("syzkaller", 0 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5090 [pid 5089] <... prctl resumed>) = 0 [pid 5088] memfd_create("syzkaller", 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] setpgid(0, 0 [pid 5088] <... memfd_create resumed>) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] <... setpgid resumed>) = 0 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = 0 [pid 5089] write(3, "1000", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5089] memfd_create("syzkaller", 0) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 ./strace-static-x86_64: Process 5090 attached [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] chdir("./1" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] <... chdir resumed>) = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] lstat("./0/file0", [pid 5090] <... prctl resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5090] setpgid(0, 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... setpgid resumed>) = 0 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 4 [pid 5090] <... write resumed>) = 4 [pid 5066] fstat(4, [pid 5090] close(3) = 0 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(4, [pid 5090] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5090] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5090] <... memfd_create resumed>) = 3 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] close(4 [pid 5090] <... mmap resumed>) = 0x7f241a43b000 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./0/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./0") = 0 [pid 5066] mkdir("./1", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5086] <... write resumed>) = 2097152 [pid 5066] close(3 [pid 5086] munmap(0x7f241a43b000, 2097152 [pid 5066] <... close resumed>) = 0 [pid 5087] <... write resumed>) = 2097152 [pid 5086] <... munmap resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5088] <... write resumed>) = 2097152 [pid 5086] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5091 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5091] chdir("./1" [pid 5086] <... ioctl resumed>) = 0 [pid 5091] <... chdir resumed>) = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] <... write resumed>) = 2097152 [pid 5088] munmap(0x7f241a43b000, 2097152 [pid 5091] <... prctl resumed>) = 0 [pid 5088] <... munmap resumed>) = 0 [pid 5087] munmap(0x7f241a43b000, 2097152 [pid 5091] setpgid(0, 0 [pid 5088] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5091] <... setpgid resumed>) = 0 [pid 5088] <... openat resumed>) = 4 [pid 5087] <... munmap resumed>) = 0 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] <... openat resumed>) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5091] <... openat resumed>) = 3 [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3) = 0 [pid 5091] write(3, "1000", 4 [pid 5087] mkdir("./file0", 0777) = 0 [pid 5091] <... write resumed>) = 4 [pid 5087] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5091] close(3 [pid 5090] <... write resumed>) = 2097152 [pid 5089] munmap(0x7f241a43b000, 2097152 [pid 5088] <... ioctl resumed>) = 0 [pid 5086] close(3 [pid 5091] <... close resumed>) = 0 [pid 5090] munmap(0x7f241a43b000, 2097152 [pid 5089] <... munmap resumed>) = 0 [pid 5088] close(3 [pid 5086] <... close resumed>) = 0 [pid 5091] symlink("/dev/binderfs", "./binderfs" [pid 5090] <... munmap resumed>) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5088] <... close resumed>) = 0 [pid 5086] mkdir("./file0", 0777 [pid 5091] <... symlink resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5089] <... openat resumed>) = 4 [pid 5088] mkdir("./file0", 0777 [pid 5086] <... mkdir resumed>) = 0 [pid 5091] memfd_create("syzkaller", 0 [pid 5090] <... openat resumed>) = 4 [ 70.818981][ T5086] loop5: detected capacity change from 0 to 4096 [ 70.840173][ T5088] loop4: detected capacity change from 0 to 4096 [ 70.848936][ T5087] loop0: detected capacity change from 0 to 4096 [pid 5089] ioctl(4, LOOP_SET_FD, 3 [pid 5088] <... mkdir resumed>) = 0 [pid 5086] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5091] <... memfd_create resumed>) = 3 [pid 5090] ioctl(4, LOOP_SET_FD, 3 [pid 5089] <... ioctl resumed>) = 0 [pid 5088] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5090] <... ioctl resumed>) = 0 [pid 5089] close(3 [pid 5091] <... mmap resumed>) = 0x7f241a43b000 [pid 5087] <... mount resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5090] close(3 [pid 5089] mkdir("./file0", 0777 [pid 5087] <... openat resumed>) = 3 [pid 5087] chdir("./file0" [pid 5090] <... close resumed>) = 0 [pid 5089] <... mkdir resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5090] mkdir("./file0", 0777 [pid 5089] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 70.897019][ T5089] loop2: detected capacity change from 0 to 4096 [ 70.909710][ T5090] loop1: detected capacity change from 0 to 4096 [ 70.935583][ T5093] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5086] <... mount resumed>) = 0 [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5090] <... mkdir resumed>) = 0 [pid 5087] <... ioctl resumed>) = 0 [pid 5090] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5087] close(4 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5087] <... close resumed>) = 0 [pid 5086] <... openat resumed>) = 3 [pid 5087] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5086] chdir("./file0" [pid 5087] <... openat resumed>) = 4 [pid 5086] <... chdir resumed>) = 0 [pid 5087] unlink("./file1" [pid 5086] ioctl(4, LOOP_CLR_FD [pid 5088] <... mount resumed>) = 0 [pid 5087] <... unlink resumed>) = 0 [pid 5086] <... ioctl resumed>) = 0 [pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5087] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5086] close(4 [pid 5088] <... openat resumed>) = 3 [pid 5086] <... close resumed>) = 0 [pid 5088] chdir("./file0" [pid 5086] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5088] <... chdir resumed>) = 0 [pid 5088] ioctl(4, LOOP_CLR_FD [pid 5086] <... openat resumed>) = 4 [pid 5088] <... ioctl resumed>) = 0 [ 70.938288][ T5092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.975201][ T5094] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5086] unlink("./file1" [pid 5088] close(4) = 0 [pid 5088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5088] unlink("./file1" [pid 5086] <... unlink resumed>) = 0 [pid 5090] <... mount resumed>) = 0 [pid 5089] <... mount resumed>) = 0 [pid 5086] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5091] <... write resumed>) = 2097152 [pid 5090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5091] munmap(0x7f241a43b000, 2097152 [pid 5090] <... openat resumed>) = 3 [pid 5089] <... openat resumed>) = 3 [pid 5091] <... munmap resumed>) = 0 [pid 5090] chdir("./file0" [pid 5089] chdir("./file0" [pid 5091] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5090] <... chdir resumed>) = 0 [pid 5089] <... chdir resumed>) = 0 [pid 5091] <... openat resumed>) = 4 [pid 5090] ioctl(4, LOOP_CLR_FD [pid 5089] ioctl(4, LOOP_CLR_FD [pid 5088] <... unlink resumed>) = 0 [ 71.017103][ T5095] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.032565][ T5096] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5091] ioctl(4, LOOP_SET_FD, 3 [pid 5090] <... ioctl resumed>) = 0 [pid 5089] <... ioctl resumed>) = 0 [pid 5088] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5091] <... ioctl resumed>) = 0 [pid 5090] close(4 [pid 5089] close(4 [pid 5090] <... close resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5090] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5089] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5091] close(3 [pid 5089] <... openat resumed>) = 4 [pid 5091] <... close resumed>) = 0 [pid 5090] <... openat resumed>) = 4 [pid 5089] unlink("./file1" [pid 5091] mkdir("./file0", 0777 [pid 5090] unlink("./file1" [pid 5089] <... unlink resumed>) = 0 [pid 5091] <... mkdir resumed>) = 0 [pid 5089] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 71.077721][ T5091] loop3: detected capacity change from 0 to 4096 [pid 5091] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5090] <... unlink resumed>) = 0 [pid 5090] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5091] <... mount resumed>) = 0 [pid 5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5091] chdir("./file0") = 0 [pid 5091] ioctl(4, LOOP_CLR_FD) = 0 [pid 5091] close(4) = 0 [pid 5091] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5091] unlink("./file1") = 0 [ 71.216639][ T5097] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5091] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5087] <... pwritev resumed>) = 1114112 [pid 5087] exit_group(0) = ? [pid 5088] <... pwritev resumed>) = 1114112 [pid 5088] exit_group(0) = ? [pid 5086] <... pwritev resumed>) = 1114112 [pid 5086] exit_group(0) = ? [pid 5089] <... pwritev resumed>) = 1114112 [pid 5089] exit_group(0) = ? [pid 5087] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./1/binderfs") = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... pwritev resumed>) = 1114112 [pid 5090] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./1/file0", [pid 5089] +++ exited with 0 +++ [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5086] +++ exited with 0 +++ [pid 5065] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5063] fstat(4, [pid 5068] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5088] +++ exited with 0 +++ [pid 5068] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... openat resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, [pid 5068] fstat(3, [pid 5090] +++ exited with 0 +++ [pid 5065] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5091] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5065] lstat("./1/binderfs", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5091] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5091] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5068] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] rmdir("./1/file0" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./1/binderfs" [pid 5063] <... rmdir resumed>) = 0 [pid 5068] lstat("./1/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] unlink("./1/binderfs" [pid 5067] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 5067] fstat(3, [pid 5064] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./1" [pid 5067] getdents64(3, [pid 5064] fstat(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] mkdir("./2", 0777 [pid 5067] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] lstat("./1/binderfs", [pid 5064] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5067] unlink("./1/binderfs" [pid 5064] lstat("./1/binderfs", [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] close(3 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./1/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5098 ./strace-static-x86_64: Process 5098 attached [pid 5098] chdir("./2") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] memfd_create("syzkaller", 0) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./1/file0") = 0 [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./1" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5068] lstat("./1/file0", [pid 5065] mkdir("./2", 0777 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5068] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5099 [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5099 attached [pid 5068] close(4 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] chdir("./2" [pid 5091] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] <... chdir resumed>) = 0 [pid 5068] rmdir("./1/file0" [pid 5067] lstat("./1/file0", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5064] lstat("./1/file0", [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] <... prctl resumed>) = 0 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] getdents64(3, [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] setpgid(0, 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] <... setpgid resumed>) = 0 [pid 5068] close(3 [pid 5067] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5066] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5099] <... openat resumed>) = 3 [pid 5068] rmdir("./1" [pid 5067] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(4, [pid 5099] write(3, "1000", 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] <... write resumed>) = 4 [pid 5068] mkdir("./2", 0777 [pid 5067] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5099] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] fstat(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5099] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5099] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5099] <... symlink resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] close(4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] close(4 [pid 5099] memfd_create("syzkaller", 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5099] <... memfd_create resumed>) = 3 [pid 5068] close(3 [pid 5067] rmdir("./1/file0" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... close resumed>) = 0 [pid 5066] lstat("./1/binderfs", [pid 5064] rmdir("./1/file0" [pid 5099] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5066] unlink("./1/binderfs" [pid 5064] <... rmdir resumed>) = 0 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] <... write resumed>) = 2097152 [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5100 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5064] close(3 [pid 5067] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] rmdir("./1" [pid 5064] rmdir("./1"./strace-static-x86_64: Process 5100 attached [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5098] munmap(0x7f241a43b000, 2097152 [pid 5064] mkdir("./2", 0777 [pid 5100] chdir("./2" [pid 5098] <... munmap resumed>) = 0 [pid 5067] mkdir("./2", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5100] <... chdir resumed>) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5098] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5100] <... prctl resumed>) = 0 [pid 5099] <... write resumed>) = 2097152 [pid 5098] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5100] setpgid(0, 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5100] <... setpgid resumed>) = 0 [pid 5099] munmap(0x7f241a43b000, 2097152 [pid 5098] <... ioctl resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5099] <... munmap resumed>) = 0 [pid 5098] close(3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5101 [pid 5100] <... openat resumed>) = 3 [pid 5098] <... close resumed>) = 0 [pid 5067] close(3 [pid 5100] write(3, "1000", 4 [pid 5099] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5098] mkdir("./file0", 0777 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5098] <... mkdir resumed>) = 0 [pid 5100] <... write resumed>) = 4 [pid 5098] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5100] close(3 [pid 5099] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5101 attached [pid 5100] <... close resumed>) = 0 [pid 5101] chdir("./2" [pid 5100] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5102 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5101] <... chdir resumed>) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] <... symlink resumed>) = 0 [pid 5101] <... prctl resumed>) = 0 [pid 5101] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5102 attached [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5102] chdir("./2" [pid 5101] <... openat resumed>) = 3 [pid 5102] <... chdir resumed>) = 0 [pid 5101] write(3, "1000", 4 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5101] <... write resumed>) = 4 [pid 5102] <... prctl resumed>) = 0 [pid 5101] close(3 [pid 5102] setpgid(0, 0 [pid 5101] <... close resumed>) = 0 [pid 5102] <... setpgid resumed>) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs" [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] <... symlink resumed>) = 0 [pid 5102] <... openat resumed>) = 3 [pid 5101] memfd_create("syzkaller", 0 [pid 5100] memfd_create("syzkaller", 0 [pid 5099] <... ioctl resumed>) = 0 [pid 5102] write(3, "1000", 4 [pid 5101] <... memfd_create resumed>) = 3 [pid 5100] <... memfd_create resumed>) = 3 [pid 5102] <... write resumed>) = 4 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] close(3 [pid 5101] <... mmap resumed>) = 0x7f241a43b000 [pid 5100] <... mmap resumed>) = 0x7f241a43b000 [pid 5102] <... close resumed>) = 0 [pid 5066] lstat("./1/file0", [pid 5102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5102] memfd_create("syzkaller", 0) = 3 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] close(3 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] mkdir("./file0", 0777 [pid 5066] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5099] <... mkdir resumed>) = 0 [pid 5099] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [ 71.928523][ T5098] loop0: detected capacity change from 0 to 4096 [ 71.948996][ T5099] loop2: detected capacity change from 0 to 4096 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] <... mount resumed>) = 0 [pid 5066] rmdir("./1/file0" [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 5098] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5098] chdir("./file0" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5098] <... chdir resumed>) = 0 [pid 5066] close(3 [pid 5098] ioctl(4, LOOP_CLR_FD [pid 5066] <... close resumed>) = 0 [pid 5098] <... ioctl resumed>) = 0 [pid 5098] close(4 [pid 5066] rmdir("./1" [pid 5098] <... close resumed>) = 0 [pid 5098] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./2", 0777) = 0 [pid 5098] <... openat resumed>) = 4 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5098] unlink("./file1" [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 72.000879][ T5103] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] close(3 [pid 5099] <... mount resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] chdir("./file0" [pid 5098] <... unlink resumed>) = 0 [pid 5099] <... chdir resumed>) = 0 [pid 5099] ioctl(4, LOOP_CLR_FD [pid 5098] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5105 [pid 5099] <... ioctl resumed>) = 0 [pid 5099] close(4) = 0 [pid 5099] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5099] unlink("./file1"./strace-static-x86_64: Process 5105 attached [pid 5105] chdir("./2") = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] <... write resumed>) = 2097152 [pid 5105] write(3, "1000", 4 [pid 5101] <... write resumed>) = 2097152 [pid 5105] <... write resumed>) = 4 [pid 5101] munmap(0x7f241a43b000, 2097152 [pid 5105] close(3) = 0 [ 72.050293][ T5104] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] symlink("/dev/binderfs", "./binderfs" [pid 5101] <... munmap resumed>) = 0 [pid 5105] <... symlink resumed>) = 0 [pid 5102] munmap(0x7f241a43b000, 2097152 [pid 5101] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5105] memfd_create("syzkaller", 0 [pid 5101] <... openat resumed>) = 4 [pid 5105] <... memfd_create resumed>) = 3 [pid 5101] ioctl(4, LOOP_SET_FD, 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5102] <... munmap resumed>) = 0 [pid 5101] <... ioctl resumed>) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5105] <... mmap resumed>) = 0x7f241a43b000 [pid 5102] <... openat resumed>) = 4 [pid 5102] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5100] <... write resumed>) = 2097152 [pid 5100] munmap(0x7f241a43b000, 2097152 [pid 5099] <... unlink resumed>) = 0 [pid 5099] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5100] <... munmap resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5100] ioctl(4, LOOP_SET_FD, 3 [pid 5101] close(3) = 0 [pid 5101] mkdir("./file0", 0777 [pid 5102] close(3 [pid 5101] <... mkdir resumed>) = 0 [pid 5102] <... close resumed>) = 0 [pid 5101] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5102] mkdir("./file0", 0777) = 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5102] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777) = 0 [ 72.117099][ T5101] loop1: detected capacity change from 0 to 4096 [ 72.127006][ T5102] loop4: detected capacity change from 0 to 4096 [ 72.156995][ T5100] loop5: detected capacity change from 0 to 4096 [pid 5100] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5105] <... write resumed>) = 2097152 [pid 5102] <... mount resumed>) = 0 [pid 5101] <... mount resumed>) = 0 [pid 5100] <... mount resumed>) = 0 [pid 5105] munmap(0x7f241a43b000, 2097152 [pid 5102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5102] <... openat resumed>) = 3 [pid 5102] chdir("./file0") = 0 [pid 5105] <... munmap resumed>) = 0 [pid 5102] ioctl(4, LOOP_CLR_FD [pid 5105] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5102] <... ioctl resumed>) = 0 [pid 5101] <... openat resumed>) = 3 [pid 5100] <... openat resumed>) = 3 [pid 5105] <... openat resumed>) = 4 [pid 5102] close(4 [pid 5101] chdir("./file0" [pid 5100] chdir("./file0" [ 72.237303][ T5106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.238667][ T5107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.249303][ T5108] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5102] <... close resumed>) = 0 [pid 5101] <... chdir resumed>) = 0 [pid 5100] <... chdir resumed>) = 0 [pid 5102] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5102] unlink("./file1" [pid 5101] ioctl(4, LOOP_CLR_FD [pid 5100] ioctl(4, LOOP_CLR_FD [pid 5101] <... ioctl resumed>) = 0 [pid 5100] <... ioctl resumed>) = 0 [pid 5101] close(4 [pid 5100] close(4 [pid 5101] <... close resumed>) = 0 [pid 5100] <... close resumed>) = 0 [pid 5101] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5100] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5105] <... ioctl resumed>) = 0 [pid 5101] <... openat resumed>) = 4 [pid 5101] unlink("./file1" [pid 5105] close(3 [pid 5100] <... openat resumed>) = 4 [pid 5105] <... close resumed>) = 0 [pid 5100] unlink("./file1" [pid 5105] mkdir("./file0", 0777) = 0 [pid 5105] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5101] <... unlink resumed>) = 0 [pid 5101] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5100] <... unlink resumed>) = 0 [ 72.288139][ T5105] loop3: detected capacity change from 0 to 4096 [pid 5100] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5105] <... mount resumed>) = 0 [pid 5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5102] <... unlink resumed>) = 0 [pid 5102] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5105] chdir("./file0") = 0 [pid 5105] ioctl(4, LOOP_CLR_FD) = 0 [pid 5105] close(4) = 0 [pid 5105] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 72.355791][ T5109] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5105] unlink("./file1") = 0 [pid 5105] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5098] <... pwritev resumed>) = 1114112 [pid 5098] exit_group(0) = ? [pid 5099] <... pwritev resumed>) = 1114112 [pid 5099] exit_group(0) = ? [pid 5098] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./2/binderfs") = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... pwritev resumed>) = 1114112 [pid 5101] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./2/file0", [pid 5102] <... pwritev resumed>) = 1114112 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5102] exit_group(0) = ? [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] +++ exited with 0 +++ [pid 5100] <... pwritev resumed>) = 1114112 [pid 5099] +++ exited with 0 +++ [pid 5100] exit_group(0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5100] <... exit_group resumed>) = ? [pid 5063] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./2/binderfs") = 0 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5063] <... openat resumed>) = 4 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5065] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] rmdir("./2/file0") = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 5065] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./2/binderfs", [pid 5063] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./2/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./2") = 0 [pid 5063] mkdir("./3", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5110 ./strace-static-x86_64: Process 5110 attached [pid 5110] chdir("./3") = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4) = 4 [pid 5110] close(3) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5110] memfd_create("syzkaller", 0) = 3 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5105] <... pwritev resumed>) = 1114112 [pid 5102] +++ exited with 0 +++ [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5105] exit_group(0) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./2/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] lstat("./2/file0", [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(3, [pid 5065] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5065] fstat(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] fstat(4, [pid 5067] lstat("./2/binderfs", [pid 5065] getdents64(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./2/binderfs" [pid 5065] close(4 [pid 5064] getdents64(4, [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 72.886519][ T5102] syz-executor150 (5102) used greatest stack depth: 18688 bytes left [pid 5065] rmdir("./2/file0" [pid 5064] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./2/file0") = 0 [pid 5065] getdents64(3, [pid 5064] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5064] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] rmdir("./2") = 0 [pid 5064] rmdir("./2" [pid 5065] mkdir("./3", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] mkdir("./3", 0777 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] close(3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5105] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5111 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./2/file0", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(3, [pid 5111] chdir("./3" [pid 5068] fstat(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5112 [pid 5111] <... chdir resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5111] <... prctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5111] setpgid(0, 0 [pid 5067] fstat(4, [pid 5066] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... setpgid resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, [pid 5066] lstat("./2/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] lstat("./2/binderfs", [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] unlink("./2/binderfs"./strace-static-x86_64: Process 5112 attached [pid 5111] <... openat resumed>) = 3 [pid 5110] <... write resumed>) = 2097152 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] <... unlink resumed>) = 0 [pid 5111] write(3, "1000", 4 [pid 5110] munmap(0x7f241a43b000, 2097152 [pid 5068] unlink("./2/binderfs" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... write resumed>) = 4 [pid 5112] chdir("./3") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0 [pid 5110] <... munmap resumed>) = 0 [pid 5112] <... setpgid resumed>) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(4 [pid 5068] <... unlink resumed>) = 0 [pid 5111] close(3 [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5112] <... openat resumed>) = 3 [pid 5111] <... close resumed>) = 0 [pid 5110] <... openat resumed>) = 4 [pid 5067] rmdir("./2/file0" [pid 5112] write(3, "1000", 4 [pid 5111] symlink("/dev/binderfs", "./binderfs" [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5112] <... write resumed>) = 4 [pid 5111] <... symlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5112] close(3 [pid 5111] memfd_create("syzkaller", 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5112] <... close resumed>) = 0 [pid 5111] <... memfd_create resumed>) = 3 [pid 5067] close(3 [pid 5112] symlink("/dev/binderfs", "./binderfs" [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5110] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5112] <... symlink resumed>) = 0 [pid 5111] <... mmap resumed>) = 0x7f241a43b000 [pid 5110] close(3 [pid 5067] rmdir("./2" [pid 5112] memfd_create("syzkaller", 0 [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5110] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5112] <... memfd_create resumed>) = 3 [pid 5110] mkdir("./file0", 0777 [pid 5067] mkdir("./3", 0777 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5110] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5112] <... mmap resumed>) = 0x7f241a43b000 [pid 5110] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 73.044388][ T5110] loop0: detected capacity change from 0 to 4096 [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5113 ./strace-static-x86_64: Process 5113 attached [pid 5113] chdir("./3") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] <... umount2 resumed>) = 0 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3 [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5113] <... close resumed>) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] lstat("./2/file0", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5113] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./2/file0", [pid 5110] <... mount resumed>) = 0 [pid 5068] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] chdir("./file0" [pid 5068] <... openat resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5110] <... chdir resumed>) = 0 [pid 5068] fstat(4, [pid 5066] <... openat resumed>) = 4 [pid 5110] ioctl(4, LOOP_CLR_FD [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] fstat(4, [pid 5110] <... ioctl resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5110] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5110] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5110] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5110] unlink("./file1" [pid 5068] rmdir("./2/file0" [pid 5066] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [ 73.147950][ T5114] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] rmdir("./2/file0" [pid 5111] <... write resumed>) = 2097152 [pid 5068] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5112] <... write resumed>) = 2097152 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5110] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5110] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] rmdir("./2" [pid 5066] <... close resumed>) = 0 [pid 5111] munmap(0x7f241a43b000, 2097152) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] rmdir("./2" [pid 5112] munmap(0x7f241a43b000, 2097152 [pid 5068] mkdir("./3", 0777 [pid 5112] <... munmap resumed>) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... rmdir resumed>) = 0 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5111] <... openat resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] mkdir("./3", 0777 [pid 5112] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5111] ioctl(4, LOOP_SET_FD, 3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5112] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5115 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5111] <... ioctl resumed>) = 0 [pid 5111] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5116 [pid 5111] <... close resumed>) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5111] mkdir("./file0", 0777./strace-static-x86_64: Process 5116 attached [pid 5112] close(3 [pid 5111] <... mkdir resumed>) = 0 [pid 5116] chdir("./3" [pid 5112] <... close resumed>) = 0 [pid 5111] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5115 attached [pid 5116] <... chdir resumed>) = 0 [pid 5112] mkdir("./file0", 0777 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5115] chdir("./3" [pid 5112] <... mkdir resumed>) = 0 [pid 5116] <... prctl resumed>) = 0 [pid 5115] <... chdir resumed>) = 0 [pid 5112] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5116] setpgid(0, 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5116] <... setpgid resumed>) = 0 [ 73.256163][ T5111] loop2: detected capacity change from 0 to 4096 [ 73.265102][ T5112] loop1: detected capacity change from 0 to 4096 [pid 5115] <... prctl resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5115] setpgid(0, 0 [pid 5116] <... openat resumed>) = 3 [pid 5115] <... setpgid resumed>) = 0 [pid 5116] write(3, "1000", 4 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5116] <... write resumed>) = 4 [pid 5115] <... openat resumed>) = 3 [pid 5116] close(3 [pid 5115] write(3, "1000", 4 [pid 5116] <... close resumed>) = 0 [pid 5115] <... write resumed>) = 4 [pid 5113] <... write resumed>) = 2097152 [pid 5116] symlink("/dev/binderfs", "./binderfs" [pid 5115] close(3 [pid 5113] munmap(0x7f241a43b000, 2097152 [pid 5116] <... symlink resumed>) = 0 [pid 5115] <... close resumed>) = 0 [pid 5116] memfd_create("syzkaller", 0 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 5113] <... munmap resumed>) = 0 [pid 5116] <... memfd_create resumed>) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5115] <... symlink resumed>) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5116] <... mmap resumed>) = 0x7f241a43b000 [pid 5115] memfd_create("syzkaller", 0 [pid 5113] <... openat resumed>) = 4 [pid 5111] <... mount resumed>) = 0 [pid 5115] <... memfd_create resumed>) = 3 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5113] <... ioctl resumed>) = 0 [pid 5111] <... openat resumed>) = 3 [pid 5115] <... mmap resumed>) = 0x7f241a43b000 [pid 5113] close(3 [pid 5112] <... mount resumed>) = 0 [pid 5111] chdir("./file0" [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5113] <... close resumed>) = 0 [pid 5112] close(4 [pid 5111] <... chdir resumed>) = 0 [pid 5113] mkdir("./file0", 0777 [pid 5112] <... close resumed>) = 0 [pid 5112] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5112] unlink("./file1" [pid 5111] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] <... mkdir resumed>) = 0 [pid 5111] close(4 [pid 5113] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5111] <... close resumed>) = 0 [pid 5111] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 73.364800][ T5117] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.388127][ T5113] loop4: detected capacity change from 0 to 4096 [ 73.388579][ T5118] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5111] unlink("./file1") = 0 [pid 5111] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5113] <... mount resumed>) = 0 [pid 5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./file0") = 0 [pid 5113] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] close(4 [pid 5112] <... unlink resumed>) = 0 [pid 5113] <... close resumed>) = 0 [ 73.474481][ T5119] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5112] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5113] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5113] unlink("./file1" [pid 5116] <... write resumed>) = 2097152 [pid 5116] munmap(0x7f241a43b000, 2097152) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5113] <... unlink resumed>) = 0 [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5115] <... write resumed>) = 2097152 [pid 5113] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5116] <... ioctl resumed>) = 0 [pid 5115] munmap(0x7f241a43b000, 2097152) = 0 [pid 5115] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5115] ioctl(4, LOOP_SET_FD, 3 [pid 5116] close(3) = 0 [pid 5115] <... ioctl resumed>) = 0 [pid 5116] mkdir("./file0", 0777 [pid 5115] close(3 [pid 5116] <... mkdir resumed>) = 0 [pid 5115] <... close resumed>) = 0 [pid 5116] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5115] mkdir("./file0", 0777) = 0 [ 73.588430][ T5116] loop3: detected capacity change from 0 to 4096 [ 73.628056][ T5115] loop5: detected capacity change from 0 to 4096 [pid 5115] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5110] <... pwritev resumed>) = 1114112 [pid 5110] exit_group(0 [pid 5115] <... mount resumed>) = 0 [pid 5115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5110] <... exit_group resumed>) = ? [pid 5115] <... openat resumed>) = 3 [pid 5115] chdir("./file0") = 0 [pid 5116] <... mount resumed>) = 0 [pid 5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5115] ioctl(4, LOOP_CLR_FD [pid 5116] <... openat resumed>) = 3 [pid 5115] <... ioctl resumed>) = 0 [pid 5116] chdir("./file0" [pid 5115] close(4 [pid 5116] <... chdir resumed>) = 0 [pid 5115] <... close resumed>) = 0 [pid 5116] ioctl(4, LOOP_CLR_FD [pid 5115] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5116] <... ioctl resumed>) = 0 [pid 5116] close(4 [pid 5115] <... openat resumed>) = 4 [pid 5116] <... close resumed>) = 0 [pid 5115] unlink("./file1" [pid 5116] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5115] <... unlink resumed>) = 0 [pid 5116] unlink("./file1" [ 73.691650][ T5121] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.707711][ T5120] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5115] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5116] <... unlink resumed>) = 0 [pid 5116] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5111] <... pwritev resumed>) = 1114112 [pid 5112] <... pwritev resumed>) = 1114112 [pid 5111] exit_group(0 [pid 5112] exit_group(0 [pid 5111] <... exit_group resumed>) = ? [pid 5112] <... exit_group resumed>) = ? [pid 5110] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5113] <... pwritev resumed>) = 1114112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5113] exit_group(0 [pid 5063] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./3/binderfs") = 0 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5111] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5065] fstat(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./3/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./3/binderfs", [pid 5065] lstat("./3/binderfs", [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./3/binderfs" [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./3/binderfs" [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./3/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./3") = 0 [pid 5063] mkdir("./4", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5122 ./strace-static-x86_64: Process 5122 attached [pid 5122] chdir("./4" [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = 0 [pid 5064] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] +++ exited with 0 +++ [pid 5122] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] setpgid(0, 0 [pid 5067] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5122] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5122] write(3, "1000", 4 [pid 5067] fstat(3, [pid 5122] <... write resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5122] close(3 [pid 5067] getdents64(3, [pid 5122] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5122] symlink("/dev/binderfs", "./binderfs" [pid 5115] <... pwritev resumed>) = 1114112 [pid 5067] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5122] <... symlink resumed>) = 0 [pid 5115] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5122] memfd_create("syzkaller", 0 [pid 5115] <... exit_group resumed>) = ? [pid 5067] lstat("./3/binderfs", [pid 5065] lstat("./3/file0", [pid 5064] fstat(4, [pid 5122] <... memfd_create resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./3/binderfs" [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5122] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] fstat(4, [pid 5064] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] rmdir("./3/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] rmdir("./3/file0" [pid 5064] rmdir("./3" [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] mkdir("./4", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5065] rmdir("./3" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./4", 0777 [pid 5064] close(3 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5123 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 ./strace-static-x86_64: Process 5123 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5123] chdir("./4") = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5124 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5124 attached [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5124] chdir("./4" [pid 5123] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5123] write(3, "1000", 4 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5123] <... write resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5124] <... prctl resumed>) = 0 [pid 5123] close(3 [pid 5067] lstat("./3/file0", [pid 5123] <... close resumed>) = 0 [pid 5124] setpgid(0, 0 [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5124] <... setpgid resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5123] <... symlink resumed>) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... openat resumed>) = 3 [pid 5123] memfd_create("syzkaller", 0 [pid 5116] <... pwritev resumed>) = 1114112 [pid 5124] write(3, "1000", 4 [pid 5123] <... memfd_create resumed>) = 3 [pid 5116] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5124] <... write resumed>) = 4 [pid 5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5116] <... exit_group resumed>) = ? [pid 5067] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5124] close(3 [pid 5123] <... mmap resumed>) = 0x7f241a43b000 [pid 5124] <... close resumed>) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5122] <... write resumed>) = 2097152 [pid 5067] getdents64(4, [pid 5122] munmap(0x7f241a43b000, 2097152 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5122] <... munmap resumed>) = 0 [pid 5067] getdents64(4, [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5122] <... openat resumed>) = 4 [pid 5067] close(4 [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... close resumed>) = 0 [pid 5122] <... ioctl resumed>) = 0 [pid 5067] rmdir("./3/file0" [pid 5122] close(3 [pid 5115] +++ exited with 0 +++ [pid 5122] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5067] <... rmdir resumed>) = 0 [pid 5122] mkdir("./file0", 0777 [pid 5067] getdents64(3, [pid 5123] <... write resumed>) = 2097152 [pid 5122] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5123] munmap(0x7f241a43b000, 2097152 [pid 5068] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] close(3 [pid 5123] <... munmap resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./3" [pid 5123] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5123] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5067] mkdir("./4", 0777 [pid 5123] ioctl(4, LOOP_SET_FD, 3 [ 74.309298][ T5122] loop0: detected capacity change from 0 to 4096 [pid 5068] fstat(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5123] <... ioctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5123] close(3 [pid 5068] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5123] <... close resumed>) = 0 [pid 5116] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5123] mkdir("./file0", 0777 [pid 5068] lstat("./3/binderfs", [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5123] <... mkdir resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5123] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] unlink("./3/binderfs" [pid 5067] <... close resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5124] <... write resumed>) = 2097152 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... restart_syscall resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5126 [pid 5124] munmap(0x7f241a43b000, 2097152 [pid 5066] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... munmap resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5126 attached [pid 5124] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] lstat("./3/binderfs", [pid 5126] chdir("./4" [pid 5124] <... openat resumed>) = 4 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5126] <... chdir resumed>) = 0 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [ 74.355528][ T5123] loop1: detected capacity change from 0 to 4096 [pid 5066] unlink("./3/binderfs" [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... unlink resumed>) = 0 [pid 5122] <... mount resumed>) = 0 [pid 5126] <... prctl resumed>) = 0 [pid 5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] <... openat resumed>) = 3 [pid 5122] chdir("./file0") = 0 [pid 5122] ioctl(4, LOOP_CLR_FD) = 0 [pid 5122] close(4 [pid 5126] setpgid(0, 0 [pid 5122] <... close resumed>) = 0 [pid 5126] <... setpgid resumed>) = 0 [pid 5122] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] <... openat resumed>) = 4 [pid 5122] unlink("./file1" [pid 5126] <... openat resumed>) = 3 [pid 5126] write(3, "1000", 4) = 4 [pid 5123] <... mount resumed>) = 0 [pid 5126] close(3 [pid 5123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5126] <... close resumed>) = 0 [pid 5123] <... openat resumed>) = 3 [pid 5126] symlink("/dev/binderfs", "./binderfs" [pid 5123] chdir("./file0" [pid 5124] <... ioctl resumed>) = 0 [pid 5124] close(3) = 0 [pid 5124] mkdir("./file0", 0777) = 0 [pid 5124] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5126] <... symlink resumed>) = 0 [pid 5123] <... chdir resumed>) = 0 [pid 5126] memfd_create("syzkaller", 0 [pid 5123] ioctl(4, LOOP_CLR_FD [pid 5126] <... memfd_create resumed>) = 3 [pid 5123] <... ioctl resumed>) = 0 [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5123] close(4 [pid 5126] <... mmap resumed>) = 0x7f241a43b000 [pid 5123] <... close resumed>) = 0 [pid 5123] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 74.403307][ T5124] loop2: detected capacity change from 0 to 4096 [ 74.411122][ T5125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.434798][ T5127] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5123] unlink("./file1" [pid 5066] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5122] <... unlink resumed>) = 0 [pid 5068] lstat("./3/file0", [pid 5122] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5123] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5123] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] fstat(4, [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(4, [pid 5066] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5124] <... openat resumed>) = 3 [pid 5068] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5124] chdir("./file0" [pid 5068] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5124] <... chdir resumed>) = 0 [pid 5068] rmdir("./3/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5124] ioctl(4, LOOP_CLR_FD [pid 5066] getdents64(4, [pid 5124] <... ioctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5124] close(4 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5124] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5124] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5124] <... openat resumed>) = 4 [pid 5068] close(3 [pid 5066] <... close resumed>) = 0 [pid 5124] unlink("./file1" [pid 5066] rmdir("./3/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./3" [pid 5066] close(3) = 0 [pid 5066] rmdir("./3" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] mkdir("./4", 0777 [pid 5066] mkdir("./4", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5066] close(3 [pid 5068] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5129 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5130 ./strace-static-x86_64: Process 5129 attached [pid 5129] chdir("./4") = 0 ./strace-static-x86_64: Process 5130 attached [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5130] chdir("./4" [pid 5129] <... prctl resumed>) = 0 [pid 5124] <... unlink resumed>) = 0 [ 74.517669][ T5128] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5130] <... chdir resumed>) = 0 [pid 5129] setpgid(0, 0 [pid 5124] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5129] <... setpgid resumed>) = 0 [pid 5130] <... prctl resumed>) = 0 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] setpgid(0, 0 [pid 5129] <... openat resumed>) = 3 [pid 5130] <... setpgid resumed>) = 0 [pid 5129] write(3, "1000", 4 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5129] <... write resumed>) = 4 [pid 5130] <... openat resumed>) = 3 [pid 5129] close(3 [pid 5130] write(3, "1000", 4 [pid 5129] <... close resumed>) = 0 [pid 5130] <... write resumed>) = 4 [pid 5129] symlink("/dev/binderfs", "./binderfs" [pid 5130] close(3 [pid 5129] <... symlink resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5129] memfd_create("syzkaller", 0 [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 5129] <... memfd_create resumed>) = 3 [pid 5130] <... symlink resumed>) = 0 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5130] memfd_create("syzkaller", 0 [pid 5129] <... mmap resumed>) = 0x7f241a43b000 [pid 5130] <... memfd_create resumed>) = 3 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5126] <... write resumed>) = 2097152 [pid 5126] munmap(0x7f241a43b000, 2097152 [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5126] <... munmap resumed>) = 0 [pid 5126] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5126] ioctl(4, LOOP_SET_FD, 3 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5126] <... ioctl resumed>) = 0 [pid 5126] close(3) = 0 [pid 5126] mkdir("./file0", 0777) = 0 [ 74.647690][ T5126] loop4: detected capacity change from 0 to 4096 [pid 5126] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5129] <... write resumed>) = 2097152 [pid 5130] <... write resumed>) = 2097152 [pid 5126] <... mount resumed>) = 0 [pid 5126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5126] chdir("./file0") = 0 [pid 5126] ioctl(4, LOOP_CLR_FD) = 0 [pid 5126] close(4) = 0 [pid 5126] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5126] unlink("./file1" [pid 5129] munmap(0x7f241a43b000, 2097152 [pid 5130] munmap(0x7f241a43b000, 2097152) = 0 [ 74.746323][ T5131] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5129] <... munmap resumed>) = 0 [pid 5130] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5129] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5130] <... openat resumed>) = 4 [pid 5129] <... openat resumed>) = 4 [pid 5130] ioctl(4, LOOP_SET_FD, 3 [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 5130] <... ioctl resumed>) = 0 [pid 5126] <... unlink resumed>) = 0 [pid 5126] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5130] close(3 [pid 5129] <... ioctl resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5129] close(3 [pid 5130] mkdir("./file0", 0777 [pid 5129] <... close resumed>) = 0 [pid 5129] mkdir("./file0", 0777 [pid 5130] <... mkdir resumed>) = 0 [pid 5130] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5129] <... mkdir resumed>) = 0 [ 74.819155][ T5130] loop3: detected capacity change from 0 to 4096 [ 74.825781][ T5129] loop5: detected capacity change from 0 to 4096 [pid 5129] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5122] <... pwritev resumed>) = 1114112 [pid 5122] exit_group(0) = ? [pid 5130] <... mount resumed>) = 0 [pid 5130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5130] chdir("./file0") = 0 [pid 5130] ioctl(4, LOOP_CLR_FD) = 0 [pid 5130] close(4) = 0 [pid 5130] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5130] unlink("./file1" [pid 5123] <... pwritev resumed>) = 1114112 [pid 5123] exit_group(0) = ? [ 74.906950][ T5132] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5130] <... unlink resumed>) = 0 [pid 5130] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5129] <... mount resumed>) = 0 [pid 5124] <... pwritev resumed>) = 1114112 [pid 5124] exit_group(0) = ? [pid 5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5129] chdir("./file0") = 0 [pid 5129] ioctl(4, LOOP_CLR_FD) = 0 [pid 5129] close(4) = 0 [pid 5129] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 74.948862][ T5133] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5129] unlink("./file1") = 0 [pid 5129] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5124] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./4/binderfs") = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5123] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(3, [pid 5063] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./4/binderfs", [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] lstat("./4/binderfs", [pid 5065] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] unlink("./4/binderfs" [pid 5065] getdents64(4, [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./4/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./4/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./4") = 0 [pid 5065] mkdir("./5", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5134 ./strace-static-x86_64: Process 5134 attached [pid 5134] chdir("./5") = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5134] setpgid(0, 0) = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./4/file0", [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./4/file0" [pid 5064] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5064] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] fstat(4, [pid 5063] close(3) = 0 [pid 5063] rmdir("./4" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] mkdir("./5", 0777 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] close(4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] rmdir("./4/file0" [pid 5063] close(3 [pid 5130] <... pwritev resumed>) = 1114112 [pid 5126] <... pwritev resumed>) = 1114112 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5130] exit_group(0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5130] <... exit_group resumed>) = ? [pid 5126] exit_group(0 [pid 5064] getdents64(3, ./strace-static-x86_64: Process 5135 attached [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5135 [pid 5126] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5135] chdir("./5" [pid 5064] close(3 [pid 5135] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] <... write resumed>) = 2097152 [pid 5135] <... prctl resumed>) = 0 [pid 5134] munmap(0x7f241a43b000, 2097152 [pid 5064] rmdir("./4" [pid 5135] setpgid(0, 0 [pid 5134] <... munmap resumed>) = 0 [pid 5135] <... setpgid resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5134] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] mkdir("./5", 0777 [pid 5135] <... openat resumed>) = 3 [pid 5135] write(3, "1000", 4 [pid 5134] <... openat resumed>) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 5135] <... write resumed>) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5135] close(3 [pid 5064] <... openat resumed>) = 3 [pid 5135] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5135] <... symlink resumed>) = 0 [pid 5064] close(3 [pid 5135] memfd_create("syzkaller", 0 [pid 5134] <... ioctl resumed>) = 0 [pid 5135] <... memfd_create resumed>) = 3 [pid 5134] close(3 [pid 5064] <... close resumed>) = 0 [pid 5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5135] <... mmap resumed>) = 0x7f241a43b000 [pid 5134] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 5136 attached [pid 5136] chdir("./5") = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3 [pid 5134] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5130] +++ exited with 0 +++ [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5136 [pid 5136] <... close resumed>) = 0 [pid 5126] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [ 75.392799][ T5134] loop2: detected capacity change from 0 to 4096 [pid 5136] memfd_create("syzkaller", 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5136] <... memfd_create resumed>) = 3 [pid 5067] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5134] <... mount resumed>) = 0 [pid 5129] <... pwritev resumed>) = 1114112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5134] chdir("./file0" [pid 5066] fstat(3, [pid 5134] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5134] ioctl(4, LOOP_CLR_FD [pid 5066] getdents64(3, [pid 5134] <... ioctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5134] close(4 [pid 5129] exit_group(0 [pid 5066] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... close resumed>) = 0 [pid 5129] <... exit_group resumed>) = ? [pid 5067] fstat(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5135] <... write resumed>) = 2097152 [pid 5134] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] lstat("./4/binderfs", [pid 5134] <... openat resumed>) = 4 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5134] unlink("./file1" [pid 5066] unlink("./4/binderfs" [pid 5135] munmap(0x7f241a43b000, 2097152 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [ 75.461696][ T5137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(3, [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] <... munmap resumed>) = 0 [pid 5134] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5135] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5134] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5135] ioctl(4, LOOP_SET_FD, 3 [pid 5067] lstat("./4/binderfs", [pid 5135] <... ioctl resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./4/binderfs" [pid 5135] close(3) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5135] mkdir("./file0", 0777 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] <... mkdir resumed>) = 0 [pid 5135] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [ 75.538843][ T5135] loop0: detected capacity change from 0 to 4096 [pid 5066] rmdir("./4/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./4") = 0 [pid 5066] mkdir("./5", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5139 [pid 5135] <... mount resumed>) = 0 [pid 5135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5139 attached ) = 3 [pid 5139] chdir("./5" [pid 5136] <... write resumed>) = 2097152 [pid 5139] <... chdir resumed>) = 0 [pid 5135] chdir("./file0" [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5135] <... chdir resumed>) = 0 [pid 5139] setpgid(0, 0 [pid 5135] ioctl(4, LOOP_CLR_FD [pid 5139] <... setpgid resumed>) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5135] <... ioctl resumed>) = 0 [pid 5139] <... openat resumed>) = 3 [pid 5136] munmap(0x7f241a43b000, 2097152 [pid 5139] write(3, "1000", 4 [pid 5136] <... munmap resumed>) = 0 [pid 5135] close(4 [pid 5129] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = 0 [pid 5139] <... write resumed>) = 4 [pid 5135] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5139] close(3 [pid 5136] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5135] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] <... close resumed>) = 0 [pid 5136] <... openat resumed>) = 4 [pid 5139] symlink("/dev/binderfs", "./binderfs" [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5135] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5139] <... symlink resumed>) = 0 [ 75.627989][ T5138] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5135] unlink("./file1" [pid 5067] lstat("./4/file0", [pid 5139] memfd_create("syzkaller", 0 [pid 5136] <... ioctl resumed>) = 0 [pid 5068] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5139] <... memfd_create resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5139] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] fstat(3, [pid 5067] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(4, [pid 5068] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] getdents64(4, [pid 5068] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] close(3 [pid 5135] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5136] <... close resumed>) = 0 [pid 5135] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] lstat("./4/binderfs", [pid 5067] getdents64(4, [pid 5136] mkdir("./file0", 0777 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./4/binderfs") = 0 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5136] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 75.677681][ T5136] loop1: detected capacity change from 0 to 4096 [pid 5067] close(4) = 0 [pid 5067] rmdir("./4/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./4") = 0 [pid 5067] mkdir("./5", 0777 [pid 5139] <... write resumed>) = 2097152 [pid 5136] <... mount resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5136] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5139] munmap(0x7f241a43b000, 2097152 [pid 5136] chdir("./file0" [pid 5068] <... umount2 resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5136] <... chdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5136] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 5136] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5136] close(4 [pid 5068] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5136] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5139] <... munmap resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] fstat(4, [pid 5139] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5136] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5141 [pid 5136] unlink("./file1" [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./4/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./4") = 0 [pid 5068] mkdir("./5", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [ 75.771757][ T5140] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5142 attached ./strace-static-x86_64: Process 5141 attached [pid 5139] <... openat resumed>) = 4 [pid 5142] chdir("./5" [pid 5141] chdir("./5" [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5142 [pid 5142] <... chdir resumed>) = 0 [pid 5141] <... chdir resumed>) = 0 [pid 5136] <... unlink resumed>) = 0 [pid 5136] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5139] <... ioctl resumed>) = 0 [pid 5142] <... prctl resumed>) = 0 [pid 5141] <... prctl resumed>) = 0 [pid 5139] close(3 [pid 5142] setpgid(0, 0 [pid 5141] setpgid(0, 0 [pid 5139] <... close resumed>) = 0 [pid 5142] <... setpgid resumed>) = 0 [pid 5141] <... setpgid resumed>) = 0 [pid 5139] mkdir("./file0", 0777 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5139] <... mkdir resumed>) = 0 [pid 5142] <... openat resumed>) = 3 [pid 5139] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5142] write(3, "1000", 4) = 4 [pid 5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5142] close(3) = 0 [pid 5141] <... openat resumed>) = 3 [pid 5142] symlink("/dev/binderfs", "./binderfs" [pid 5141] write(3, "1000", 4 [pid 5142] <... symlink resumed>) = 0 [pid 5141] <... write resumed>) = 4 [pid 5142] memfd_create("syzkaller", 0 [pid 5141] close(3 [pid 5142] <... memfd_create resumed>) = 3 [pid 5141] <... close resumed>) = 0 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5141] symlink("/dev/binderfs", "./binderfs" [pid 5142] <... mmap resumed>) = 0x7f241a43b000 [pid 5141] <... symlink resumed>) = 0 [ 75.848839][ T5139] loop3: detected capacity change from 0 to 4096 [pid 5141] memfd_create("syzkaller", 0) = 3 [pid 5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] <... pwritev resumed>) = 1114112 [pid 5141] <... mmap resumed>) = 0x7f241a43b000 [pid 5139] <... mount resumed>) = 0 [pid 5134] exit_group(0 [pid 5139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5134] <... exit_group resumed>) = ? [pid 5139] <... openat resumed>) = 3 [pid 5139] chdir("./file0") = 0 [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 75.907015][ T5143] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5139] ioctl(4, LOOP_CLR_FD) = 0 [pid 5139] close(4) = 0 [pid 5139] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5139] unlink("./file1") = 0 [pid 5139] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5141] <... write resumed>) = 2097152 [pid 5141] munmap(0x7f241a43b000, 2097152 [pid 5134] +++ exited with 0 +++ [pid 5141] <... munmap resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5141] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5141] <... openat resumed>) = 4 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5141] ioctl(4, LOOP_SET_FD, 3 [pid 5142] <... write resumed>) = 2097152 [pid 5065] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] munmap(0x7f241a43b000, 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./5/binderfs", [pid 5142] <... munmap resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] unlink("./5/binderfs" [pid 5142] <... openat resumed>) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 5142] ioctl(4, LOOP_SET_FD, 3 [pid 5141] <... ioctl resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] close(3) = 0 [pid 5141] mkdir("./file0", 0777) = 0 [pid 5141] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5142] <... ioctl resumed>) = 0 [ 76.055705][ T5141] loop4: detected capacity change from 0 to 4096 [ 76.087993][ T5142] loop5: detected capacity change from 0 to 4096 [pid 5142] close(3) = 0 [pid 5135] <... pwritev resumed>) = 1114112 [pid 5142] mkdir("./file0", 0777 [pid 5135] exit_group(0 [pid 5142] <... mkdir resumed>) = 0 [pid 5135] <... exit_group resumed>) = ? [pid 5142] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... umount2 resumed>) = 0 [pid 5141] <... mount resumed>) = 0 [pid 5141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5141] chdir("./file0") = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5141] <... ioctl resumed>) = 0 [pid 5065] lstat("./5/file0", [pid 5141] close(4 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5142] <... mount resumed>) = 0 [pid 5141] <... close resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5141] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5142] <... openat resumed>) = 3 [pid 5141] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5142] chdir("./file0" [pid 5141] unlink("./file1" [pid 5065] <... openat resumed>) = 4 [pid 5142] <... chdir resumed>) = 0 [pid 5065] fstat(4, [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5142] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5142] close(4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5142] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5142] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5142] <... openat resumed>) = 4 [pid 5065] rmdir("./5/file0" [ 76.155992][ T5144] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.183860][ T5145] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5142] unlink("./file1" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./5") = 0 [pid 5142] <... unlink resumed>) = 0 [pid 5141] <... unlink resumed>) = 0 [pid 5065] mkdir("./6", 0777 [pid 5142] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5141] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5135] +++ exited with 0 +++ [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- ./strace-static-x86_64: Process 5146 attached [pid 5063] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] chdir("./6" [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5146 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5146] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... openat resumed>) = 3 [pid 5146] <... prctl resumed>) = 0 [pid 5063] fstat(3, [pid 5146] setpgid(0, 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5146] <... setpgid resumed>) = 0 [pid 5063] getdents64(3, [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5146] <... openat resumed>) = 3 [pid 5063] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5146] <... write resumed>) = 4 [pid 5063] lstat("./5/binderfs", [pid 5146] close(3 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5146] <... close resumed>) = 0 [pid 5063] unlink("./5/binderfs" [pid 5146] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5146] <... symlink resumed>) = 0 [pid 5146] memfd_create("syzkaller", 0) = 3 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5136] <... pwritev resumed>) = 1114112 [pid 5146] <... mmap resumed>) = 0x7f241a43b000 [pid 5136] exit_group(0) = ? [pid 5139] <... pwritev resumed>) = 1114112 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5139] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./5/file0") = 0 [pid 5063] getdents64(3, [pid 5146] <... write resumed>) = 2097152 [pid 5139] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] close(3 [pid 5136] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5066] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./5" [pid 5066] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] <... openat resumed>) = 3 [pid 5064] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5066] fstat(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./6", 0777 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 5063] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5066] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(3, [pid 5146] munmap(0x7f241a43b000, 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./5/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5146] <... munmap resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] getdents64(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5066] unlink("./5/binderfs" [pid 5146] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5146] <... openat resumed>) = 4 [pid 5142] <... pwritev resumed>) = 1114112 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5064] lstat("./5/binderfs", [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./5/binderfs" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5147 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] exit_group(0) = ? [pid 5146] <... ioctl resumed>) = 0 [pid 5146] close(3) = 0 [pid 5146] mkdir("./file0", 0777) = 0 [pid 5146] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, ""./strace-static-x86_64: Process 5147 attached [pid 5147] chdir("./6") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5147] write(3, "1000", 4 [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 76.546672][ T5146] loop2: detected capacity change from 0 to 4096 [pid 5064] lstat("./5/file0", [pid 5147] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5147] close(3 [pid 5066] lstat("./5/file0", [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] <... close resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] symlink("/dev/binderfs", "./binderfs" [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5147] <... symlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5147] memfd_create("syzkaller", 0 [pid 5066] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 4 [pid 5147] <... memfd_create resumed>) = 3 [pid 5066] <... openat resumed>) = 4 [pid 5064] fstat(4, [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] fstat(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5064] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, [pid 5064] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5146] <... mount resumed>) = 0 [pid 5142] +++ exited with 0 +++ [pid 5066] close(4 [pid 5064] rmdir("./5/file0" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] <... close resumed>) = 0 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] rmdir("./5/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5146] <... openat resumed>) = 3 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5146] chdir("./file0" [pid 5066] getdents64(3, [pid 5064] getdents64(3, [pid 5146] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5146] ioctl(4, LOOP_CLR_FD [pid 5068] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5064] close(3 [pid 5146] <... ioctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5146] close(4 [pid 5068] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./5" [pid 5064] rmdir("./5" [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5146] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5146] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] fstat(3, [pid 5066] mkdir("./6", 0777 [pid 5064] mkdir("./6", 0777 [pid 5146] <... openat resumed>) = 4 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5146] unlink("./file1" [pid 5141] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5141] exit_group(0 [ 76.638672][ T5148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5141] <... exit_group resumed>) = ? [pid 5068] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] lstat("./5/binderfs", [pid 5066] close(3 [pid 5064] close(3 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] unlink("./5/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5149 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5150 [pid 5146] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5150 attached [pid 5150] chdir("./6" [pid 5146] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5150] <... chdir resumed>) = 0 [pid 5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5150] setpgid(0, 0) = 0 [pid 5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5150] write(3, "1000", 4) = 4 [pid 5150] close(3) = 0 [pid 5150] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5150] memfd_create("syzkaller", 0 [pid 5147] <... write resumed>) = 2097152 [pid 5150] <... memfd_create resumed>) = 3 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5147] munmap(0x7f241a43b000, 2097152) = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5147] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5149 attached [pid 5149] chdir("./6") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4 [pid 5068] <... umount2 resumed>) = 0 [pid 5147] <... ioctl resumed>) = 0 [pid 5149] <... write resumed>) = 4 [pid 5147] close(3) = 0 [pid 5147] mkdir("./file0", 0777 [pid 5149] close(3 [pid 5147] <... mkdir resumed>) = 0 [pid 5147] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5149] memfd_create("syzkaller", 0 [pid 5068] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5149] <... memfd_create resumed>) = 3 [pid 5068] <... openat resumed>) = 4 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 76.744016][ T5147] loop0: detected capacity change from 0 to 4096 [pid 5068] fstat(4, [pid 5149] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./5/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./5") = 0 [pid 5068] mkdir("./6", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5152 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5152 attached [pid 5147] <... mount resumed>) = 0 [pid 5152] chdir("./6" [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5152] <... chdir resumed>) = 0 [pid 5147] <... openat resumed>) = 3 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5147] chdir("./file0" [pid 5152] <... prctl resumed>) = 0 [pid 5147] <... chdir resumed>) = 0 [pid 5152] setpgid(0, 0 [pid 5147] ioctl(4, LOOP_CLR_FD [pid 5152] <... setpgid resumed>) = 0 [pid 5147] <... ioctl resumed>) = 0 [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5147] close(4 [pid 5152] <... openat resumed>) = 3 [pid 5147] <... close resumed>) = 0 [pid 5152] write(3, "1000", 4 [pid 5147] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5152] <... write resumed>) = 4 [pid 5147] <... openat resumed>) = 4 [pid 5152] close(3 [pid 5147] unlink("./file1" [pid 5152] <... close resumed>) = 0 [pid 5152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5141] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5150] <... write resumed>) = 2097152 [pid 5067] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5150] munmap(0x7f241a43b000, 2097152 [pid 5067] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5150] <... munmap resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 76.830799][ T5151] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(3, [pid 5150] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5150] ioctl(4, LOOP_SET_FD, 3 [pid 5147] <... unlink resumed>) = 0 [pid 5067] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5147] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./5/binderfs") = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] <... ioctl resumed>) = 0 [pid 5150] close(3) = 0 [pid 5150] mkdir("./file0", 0777) = 0 [ 76.893506][ T5150] loop1: detected capacity change from 0 to 4096 [pid 5150] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5149] <... write resumed>) = 2097152 [pid 5149] munmap(0x7f241a43b000, 2097152) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] <... write resumed>) = 2097152 [pid 5149] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5152] munmap(0x7f241a43b000, 2097152 [pid 5149] close(3 [pid 5067] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5152] <... munmap resumed>) = 0 [pid 5149] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [ 76.973005][ T5149] loop3: detected capacity change from 0 to 4096 [pid 5152] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5150] <... mount resumed>) = 0 [pid 5149] mkdir("./file0", 0777 [pid 5067] fstat(4, [pid 5150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5152] <... openat resumed>) = 4 [pid 5150] <... openat resumed>) = 3 [pid 5150] chdir("./file0") = 0 [pid 5149] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5152] ioctl(4, LOOP_SET_FD, 3 [pid 5150] ioctl(4, LOOP_CLR_FD) = 0 [pid 5067] getdents64(4, [pid 5150] close(4) = 0 [pid 5150] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5150] unlink("./file1" [pid 5152] <... ioctl resumed>) = 0 [pid 5149] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5152] close(3 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5152] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5152] mkdir("./file0", 0777 [pid 5067] rmdir("./5/file0" [pid 5152] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5152] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 77.021989][ T5153] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.039607][ T5152] loop5: detected capacity change from 0 to 4096 [pid 5150] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5150] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5149] <... mount resumed>) = 0 [pid 5067] close(3 [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... close resumed>) = 0 [pid 5149] <... openat resumed>) = 3 [pid 5149] chdir("./file0" [pid 5067] rmdir("./5" [pid 5149] <... chdir resumed>) = 0 [pid 5149] ioctl(4, LOOP_CLR_FD [pid 5067] <... rmdir resumed>) = 0 [pid 5149] <... ioctl resumed>) = 0 [pid 5067] mkdir("./6", 0777 [pid 5149] close(4) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5149] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5149] <... openat resumed>) = 4 [pid 5146] <... pwritev resumed>) = 1114112 [pid 5067] <... openat resumed>) = 3 [pid 5149] unlink("./file1" [pid 5146] exit_group(0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5146] <... exit_group resumed>) = ? [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5156 ./strace-static-x86_64: Process 5156 attached [ 77.097300][ T5154] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5156] chdir("./6" [pid 5149] <... unlink resumed>) = 0 [pid 5156] <... chdir resumed>) = 0 [pid 5152] <... mount resumed>) = 0 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5149] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5156] <... prctl resumed>) = 0 [pid 5152] <... openat resumed>) = 3 [pid 5152] chdir("./file0" [pid 5156] setpgid(0, 0) = 0 [pid 5152] <... chdir resumed>) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5152] ioctl(4, LOOP_CLR_FD [pid 5156] <... openat resumed>) = 3 [pid 5152] <... ioctl resumed>) = 0 [pid 5156] write(3, "1000", 4 [pid 5152] close(4 [pid 5156] <... write resumed>) = 4 [pid 5152] <... close resumed>) = 0 [pid 5156] close(3 [pid 5152] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5156] <... close resumed>) = 0 [pid 5156] symlink("/dev/binderfs", "./binderfs" [pid 5152] <... openat resumed>) = 4 [pid 5156] <... symlink resumed>) = 0 [pid 5152] unlink("./file1" [pid 5156] memfd_create("syzkaller", 0) = 3 [pid 5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 77.158696][ T5155] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5152] <... unlink resumed>) = 0 [pid 5152] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5146] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./6/binderfs") = 0 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./6/file0", [pid 5147] <... pwritev resumed>) = 1114112 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] exit_group(0) = ? [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] <... write resumed>) = 2097152 [pid 5156] munmap(0x7f241a43b000, 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./6/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5156] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5156] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] rmdir("./6" [pid 5156] <... openat resumed>) = 4 [pid 5156] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5156] <... ioctl resumed>) = 0 [pid 5065] mkdir("./7", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5157 [pid 5147] +++ exited with 0 +++ ./strace-static-x86_64: Process 5157 attached [pid 5156] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5157] chdir("./7" [pid 5156] <... close resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5157] <... chdir resumed>) = 0 [pid 5156] mkdir("./file0", 0777) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5156] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 77.419451][ T5156] loop4: detected capacity change from 0 to 4096 [pid 5157] <... prctl resumed>) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5063] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] <... openat resumed>) = 3 [pid 5157] write(3, "1000", 4 [pid 5152] <... pwritev resumed>) = 1114112 [pid 5063] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5157] <... write resumed>) = 4 [pid 5152] exit_group(0 [pid 5157] close(3 [pid 5152] <... exit_group resumed>) = ? [pid 5063] <... openat resumed>) = 3 [pid 5157] <... close resumed>) = 0 [pid 5150] <... pwritev resumed>) = 1114112 [pid 5150] exit_group(0) = ? [pid 5157] symlink("/dev/binderfs", "./binderfs" [pid 5063] fstat(3, [pid 5157] <... symlink resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5157] memfd_create("syzkaller", 0 [pid 5063] getdents64(3, [pid 5157] <... memfd_create resumed>) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5157] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./6/binderfs", [pid 5156] <... mount resumed>) = 0 [pid 5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5156] <... openat resumed>) = 3 [pid 5063] unlink("./6/binderfs" [pid 5156] chdir("./file0") = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5156] ioctl(4, LOOP_CLR_FD [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5156] <... ioctl resumed>) = 0 [pid 5156] close(4) = 0 [pid 5156] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5156] unlink("./file1" [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5156] <... unlink resumed>) = 0 [ 77.535743][ T5158] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5156] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5149] <... pwritev resumed>) = 1114112 [pid 5149] exit_group(0) = ? [pid 5150] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5150, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5152] +++ exited with 0 +++ [pid 5064] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] lstat("./6/binderfs", [pid 5068] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./6/binderfs" [pid 5068] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5063] <... umount2 resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] <... write resumed>) = 2097152 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./6/binderfs", [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5157] munmap(0x7f241a43b000, 2097152 [pid 5149] +++ exited with 0 +++ [pid 5068] unlink("./6/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5157] <... munmap resumed>) = 0 [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./6/file0", [pid 5157] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5157] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5157] <... ioctl resumed>) = 0 [pid 5066] unlink("./6/binderfs" [pid 5157] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5157] <... close resumed>) = 0 [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] mkdir("./file0", 0777 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5157] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5157] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./6/file0" [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5063] getdents64(3, [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./6" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5064] lstat("./6/file0", [pid 5063] mkdir("./7", 0777 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] lstat("./6/file0", [pid 5064] fstat(4, [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [ 77.708059][ T5157] loop2: detected capacity change from 0 to 4096 [pid 5068] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 5064] getdents64(4, ./strace-static-x86_64: Process 5159 attached [pid 5068] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5159 [pid 5159] chdir("./7" [pid 5068] fstat(4, [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4 [pid 5159] <... chdir resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(4, [pid 5066] lstat("./6/file0", [pid 5064] rmdir("./6/file0" [pid 5159] <... prctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5159] setpgid(0, 0 [pid 5157] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5159] <... setpgid resumed>) = 0 [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5157] <... openat resumed>) = 3 [pid 5068] close(4 [pid 5066] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] close(3 [pid 5159] <... openat resumed>) = 3 [pid 5157] chdir("./file0" [pid 5068] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5159] write(3, "1000", 4 [pid 5157] <... chdir resumed>) = 0 [pid 5068] rmdir("./6/file0" [pid 5066] fstat(4, [pid 5064] rmdir("./6" [pid 5159] <... write resumed>) = 4 [pid 5157] ioctl(4, LOOP_CLR_FD [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5159] close(3 [pid 5157] <... ioctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] getdents64(4, [pid 5064] mkdir("./7", 0777 [pid 5159] <... close resumed>) = 0 [pid 5157] close(4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5159] symlink("/dev/binderfs", "./binderfs" [pid 5157] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5064] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 5159] <... symlink resumed>) = 0 [pid 5157] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5159] memfd_create("syzkaller", 0 [pid 5157] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5064] <... openat resumed>) = 3 [pid 5159] <... memfd_create resumed>) = 3 [pid 5157] unlink("./file1" [pid 5068] rmdir("./6" [pid 5066] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5157] <... unlink resumed>) = 0 [pid 5066] rmdir("./6/file0" [pid 5159] <... mmap resumed>) = 0x7f241a43b000 [pid 5157] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] mkdir("./7", 0777 [pid 5066] getdents64(3, [ 77.797607][ T5160] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5161 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5162 [pid 5066] close(3) = 0 ./strace-static-x86_64: Process 5161 attached [pid 5066] rmdir("./6" [pid 5161] chdir("./7"./strace-static-x86_64: Process 5162 attached ) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5162] chdir("./7" [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] mkdir("./7", 0777 [pid 5162] <... chdir resumed>) = 0 [pid 5161] <... prctl resumed>) = 0 [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5161] setpgid(0, 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5162] <... prctl resumed>) = 0 [pid 5161] <... setpgid resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5162] setpgid(0, 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5162] <... setpgid resumed>) = 0 [pid 5161] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5161] write(3, "1000", 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5162] <... openat resumed>) = 3 [pid 5161] <... write resumed>) = 4 [pid 5066] close(3 [pid 5162] write(3, "1000", 4 [pid 5161] close(3 [pid 5066] <... close resumed>) = 0 [pid 5162] <... write resumed>) = 4 [pid 5161] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5162] close(3 [pid 5161] symlink("/dev/binderfs", "./binderfs" [pid 5162] <... close resumed>) = 0 [pid 5161] <... symlink resumed>) = 0 [pid 5162] symlink("/dev/binderfs", "./binderfs" [pid 5161] memfd_create("syzkaller", 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5163 [pid 5162] <... symlink resumed>) = 0 [pid 5161] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5163 attached [pid 5162] memfd_create("syzkaller", 0 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5163] chdir("./7" [pid 5162] <... memfd_create resumed>) = 3 [pid 5161] <... mmap resumed>) = 0x7f241a43b000 [pid 5163] <... chdir resumed>) = 0 [pid 5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5162] <... mmap resumed>) = 0x7f241a43b000 [pid 5163] <... prctl resumed>) = 0 [pid 5159] <... write resumed>) = 2097152 [pid 5163] setpgid(0, 0 [pid 5159] munmap(0x7f241a43b000, 2097152 [pid 5163] <... setpgid resumed>) = 0 [pid 5159] <... munmap resumed>) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5163] <... openat resumed>) = 3 [pid 5159] <... openat resumed>) = 4 [pid 5163] write(3, "1000", 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3 [pid 5163] <... write resumed>) = 4 [pid 5163] close(3 [pid 5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5156] <... pwritev resumed>) = 1114112 [pid 5163] <... close resumed>) = 0 [pid 5156] exit_group(0 [pid 5163] symlink("/dev/binderfs", "./binderfs" [pid 5159] <... ioctl resumed>) = 0 [pid 5156] <... exit_group resumed>) = ? [pid 5163] <... symlink resumed>) = 0 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5163] memfd_create("syzkaller", 0 [pid 5159] close(3 [pid 5163] <... memfd_create resumed>) = 3 [pid 5159] <... close resumed>) = 0 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5159] mkdir("./file0", 0777 [pid 5163] <... mmap resumed>) = 0x7f241a43b000 [pid 5159] <... mkdir resumed>) = 0 [ 77.966696][ T5159] loop0: detected capacity change from 0 to 4096 [pid 5159] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5161] <... write resumed>) = 2097152 [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5159] <... mount resumed>) = 0 [pid 5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5161] munmap(0x7f241a43b000, 2097152 [pid 5159] <... openat resumed>) = 3 [pid 5161] <... munmap resumed>) = 0 [pid 5159] chdir("./file0") = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5161] <... openat resumed>) = 4 [pid 5159] <... ioctl resumed>) = 0 [pid 5161] ioctl(4, LOOP_SET_FD, 3 [pid 5159] close(4 [pid 5161] <... ioctl resumed>) = 0 [pid 5159] <... close resumed>) = 0 [pid 5159] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5161] close(3 [pid 5159] <... openat resumed>) = 4 [pid 5159] unlink("./file1" [pid 5162] <... write resumed>) = 2097152 [pid 5162] munmap(0x7f241a43b000, 2097152 [pid 5161] <... close resumed>) = 0 [pid 5162] <... munmap resumed>) = 0 [pid 5162] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5161] mkdir("./file0", 0777 [pid 5157] <... pwritev resumed>) = 1114112 [pid 5162] <... openat resumed>) = 4 [pid 5161] <... mkdir resumed>) = 0 [pid 5157] exit_group(0 [pid 5162] ioctl(4, LOOP_SET_FD, 3 [pid 5161] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5157] <... exit_group resumed>) = ? [ 78.057290][ T5164] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.089094][ T5161] loop1: detected capacity change from 0 to 4096 [pid 5163] <... write resumed>) = 2097152 [pid 5162] <... ioctl resumed>) = 0 [pid 5162] close(3) = 0 [pid 5162] mkdir("./file0", 0777) = 0 [pid 5162] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5163] munmap(0x7f241a43b000, 2097152 [pid 5156] +++ exited with 0 +++ [pid 5159] <... unlink resumed>) = 0 [pid 5159] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5163] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 5163] ioctl(4, LOOP_SET_FD, 3 [ 78.129222][ T5162] loop5: detected capacity change from 0 to 4096 [pid 5067] fstat(3, [pid 5163] <... ioctl resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5163] close(3 [pid 5067] getdents64(3, [pid 5163] <... close resumed>) = 0 [pid 5161] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5163] mkdir("./file0", 0777 [pid 5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... mkdir resumed>) = 0 [pid 5161] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5163] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5161] chdir("./file0" [pid 5067] lstat("./6/binderfs", [pid 5162] <... mount resumed>) = 0 [pid 5161] <... chdir resumed>) = 0 [pid 5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5161] ioctl(4, LOOP_CLR_FD [pid 5162] <... openat resumed>) = 3 [pid 5161] <... ioctl resumed>) = 0 [pid 5162] chdir("./file0" [pid 5161] close(4 [pid 5162] <... chdir resumed>) = 0 [pid 5161] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5162] ioctl(4, LOOP_CLR_FD [pid 5161] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] unlink("./6/binderfs" [pid 5162] <... ioctl resumed>) = 0 [pid 5161] <... openat resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 5162] close(4 [pid 5161] unlink("./file1" [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5162] <... close resumed>) = 0 [pid 5162] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 78.177960][ T5163] loop3: detected capacity change from 0 to 4096 [ 78.190949][ T5165] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.209022][ T5166] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5162] unlink("./file1" [pid 5163] <... mount resumed>) = 0 [pid 5163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file0") = 0 [pid 5163] ioctl(4, LOOP_CLR_FD) = 0 [pid 5163] close(4 [pid 5162] <... unlink resumed>) = 0 [pid 5163] <... close resumed>) = 0 [pid 5162] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5163] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5157] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5161] <... unlink resumed>) = 0 [pid 5161] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5163] <... openat resumed>) = 4 [ 78.260411][ T5167] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5163] unlink("./file1" [pid 5067] <... umount2 resumed>) = 0 [pid 5065] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] lstat("./6/file0", [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(4, [pid 5065] lstat("./7/binderfs", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] getdents64(4, [pid 5065] unlink("./7/binderfs" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... unlink resumed>) = 0 [pid 5163] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./6/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./6") = 0 [pid 5067] mkdir("./7", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5168 ./strace-static-x86_64: Process 5168 attached [pid 5168] chdir("./7") = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5168] close(3 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... close resumed>) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] <... symlink resumed>) = 0 [pid 5159] <... pwritev resumed>) = 1114112 [pid 5065] lstat("./7/file0", [pid 5168] memfd_create("syzkaller", 0 [pid 5159] exit_group(0 [pid 5168] <... memfd_create resumed>) = 3 [pid 5159] <... exit_group resumed>) = ? [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5168] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./7/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./7") = 0 [pid 5065] mkdir("./8", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5169 ./strace-static-x86_64: Process 5169 attached [pid 5169] chdir("./8") = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5168] <... write resumed>) = 2097152 [pid 5162] <... pwritev resumed>) = 1114112 [pid 5169] symlink("/dev/binderfs", "./binderfs" [pid 5168] munmap(0x7f241a43b000, 2097152 [pid 5162] exit_group(0) = ? [pid 5169] <... symlink resumed>) = 0 [pid 5168] <... munmap resumed>) = 0 [pid 5169] memfd_create("syzkaller", 0 [pid 5168] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5159] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5063] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... memfd_create resumed>) = 3 [pid 5168] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5169] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./7/binderfs") = 0 [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5168] <... ioctl resumed>) = 0 [pid 5161] <... pwritev resumed>) = 1114112 [pid 5168] close(3 [pid 5161] exit_group(0 [pid 5168] <... close resumed>) = 0 [pid 5162] +++ exited with 0 +++ [pid 5161] <... exit_group resumed>) = ? [pid 5168] mkdir("./file0", 0777) = 0 [ 78.648519][ T5168] loop4: detected capacity change from 0 to 4096 [pid 5168] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./7/binderfs") = 0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... write resumed>) = 2097152 [pid 5169] munmap(0x7f241a43b000, 2097152) = 0 [pid 5169] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5169] close(3) = 0 [pid 5169] mkdir("./file0", 0777) = 0 [pid 5169] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5168] <... mount resumed>) = 0 [pid 5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] chdir("./file0" [pid 5068] <... umount2 resumed>) = 0 [pid 5063] lstat("./7/file0", [pid 5168] <... chdir resumed>) = 0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] ioctl(4, LOOP_CLR_FD [ 78.750960][ T5169] loop2: detected capacity change from 0 to 4096 [ 78.786492][ T5170] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... ioctl resumed>) = 0 [pid 5068] lstat("./7/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] close(4 [pid 5163] <... pwritev resumed>) = 1114112 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5168] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5168] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5163] exit_group(0 [pid 5068] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(4, [pid 5163] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] <... openat resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] unlink("./file1" [pid 5068] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5068] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] fstat(4, [pid 5063] getdents64(4, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5063] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5063] rmdir("./7/file0" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5168] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5168] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5068] rmdir("./7/file0" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] close(3 [pid 5063] rmdir("./7" [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./7" [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5063] mkdir("./8", 0777 [pid 5169] <... mount resumed>) = 0 [pid 5161] +++ exited with 0 +++ [pid 5068] mkdir("./8", 0777 [pid 5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 5169] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5169] chdir("./file0" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5169] <... chdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... openat resumed>) = 3 [pid 5169] ioctl(4, LOOP_CLR_FD) = 0 [pid 5169] close(4) = 0 [pid 5169] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5169] <... openat resumed>) = 4 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5169] unlink("./file1" [pid 5068] close(3) = 0 [pid 5063] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5172 [pid 5064] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5172 attached [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5172] chdir("./8" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5173 [pid 5172] <... chdir resumed>) = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] getdents64(3, [pid 5172] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5173 attached [pid 5172] setpgid(0, 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5173] chdir("./8" [pid 5172] <... setpgid resumed>) = 0 [pid 5064] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] <... chdir resumed>) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5172] <... openat resumed>) = 3 [pid 5064] lstat("./7/binderfs", [pid 5173] <... prctl resumed>) = 0 [ 78.874566][ T5171] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5172] write(3, "1000", 4 [pid 5173] setpgid(0, 0) = 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5172] <... write resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5173] write(3, "1000", 4 [pid 5172] close(3 [pid 5064] unlink("./7/binderfs" [pid 5173] <... write resumed>) = 4 [pid 5172] <... close resumed>) = 0 [pid 5169] <... unlink resumed>) = 0 [pid 5173] close(3 [pid 5172] symlink("/dev/binderfs", "./binderfs" [pid 5169] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... unlink resumed>) = 0 [pid 5173] <... close resumed>) = 0 [pid 5172] <... symlink resumed>) = 0 [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5172] memfd_create("syzkaller", 0) = 3 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5163] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5066] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = 0 [pid 5066] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./7/binderfs") = 0 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./7/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./7") = 0 [pid 5064] mkdir("./8", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5174 ./strace-static-x86_64: Process 5174 attached [pid 5174] chdir("./8") = 0 [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5174] setpgid(0, 0 [pid 5173] <... write resumed>) = 2097152 [pid 5174] <... setpgid resumed>) = 0 [pid 5172] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = 0 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5173] munmap(0x7f241a43b000, 2097152 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] <... openat resumed>) = 3 [pid 5173] <... munmap resumed>) = 0 [pid 5174] write(3, "1000", 4 [pid 5173] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5174] <... write resumed>) = 4 [pid 5173] <... openat resumed>) = 4 [pid 5172] munmap(0x7f241a43b000, 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] close(3 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5174] <... close resumed>) = 0 [pid 5172] <... munmap resumed>) = 0 [pid 5066] lstat("./7/file0", [pid 5174] symlink("/dev/binderfs", "./binderfs" [pid 5172] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] <... symlink resumed>) = 0 [pid 5172] <... openat resumed>) = 4 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] memfd_create("syzkaller", 0 [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... memfd_create resumed>) = 3 [pid 5173] <... ioctl resumed>) = 0 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5173] close(3 [pid 5168] <... pwritev resumed>) = 1114112 [pid 5066] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5173] <... close resumed>) = 0 [pid 5172] <... ioctl resumed>) = 0 [pid 5168] exit_group(0 [pid 5066] <... openat resumed>) = 4 [pid 5173] mkdir("./file0", 0777 [pid 5172] close(3 [pid 5168] <... exit_group resumed>) = ? [pid 5066] fstat(4, [pid 5173] <... mkdir resumed>) = 0 [pid 5172] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 79.180646][ T5173] loop0: detected capacity change from 0 to 4096 [ 79.214575][ T5172] loop5: detected capacity change from 0 to 4096 [pid 5173] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5172] mkdir("./file0", 0777 [pid 5066] getdents64(4, [pid 5172] <... mkdir resumed>) = 0 [pid 5169] <... pwritev resumed>) = 1114112 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5172] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5169] exit_group(0 [pid 5066] getdents64(4, [pid 5169] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./7/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./7") = 0 [pid 5066] mkdir("./8", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5175 ./strace-static-x86_64: Process 5175 attached [pid 5175] chdir("./8") = 0 [pid 5173] <... mount resumed>) = 0 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4 [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5172] <... mount resumed>) = 0 [pid 5175] <... write resumed>) = 4 [pid 5175] close(3) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5173] <... openat resumed>) = 3 [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5173] chdir("./file0" [pid 5172] <... openat resumed>) = 3 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5173] <... chdir resumed>) = 0 [pid 5172] chdir("./file0" [pid 5175] <... mmap resumed>) = 0x7f241a43b000 [pid 5173] ioctl(4, LOOP_CLR_FD [pid 5172] <... chdir resumed>) = 0 [pid 5173] <... ioctl resumed>) = 0 [pid 5172] ioctl(4, LOOP_CLR_FD [pid 5173] close(4 [pid 5172] <... ioctl resumed>) = 0 [pid 5173] <... close resumed>) = 0 [pid 5172] close(4 [pid 5173] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5172] <... close resumed>) = 0 [pid 5172] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5173] <... openat resumed>) = 4 [pid 5172] <... openat resumed>) = 4 [ 79.285366][ T5177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.296627][ T5176] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5173] unlink("./file1" [pid 5172] unlink("./file1" [pid 5173] <... unlink resumed>) = 0 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5172] <... unlink resumed>) = 0 [pid 5169] +++ exited with 0 +++ [pid 5168] +++ exited with 0 +++ [pid 5173] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5067] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5174] <... write resumed>) = 2097152 [pid 5172] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] fstat(3, [pid 5065] fstat(3, [pid 5174] munmap(0x7f241a43b000, 2097152 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] <... munmap resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] getdents64(3, [pid 5174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5174] <... openat resumed>) = 4 [pid 5067] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5174] <... ioctl resumed>) = 0 [pid 5067] lstat("./7/binderfs", [pid 5065] lstat("./8/binderfs", [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./7/binderfs" [pid 5065] unlink("./8/binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] close(3) = 0 [pid 5174] mkdir("./file0", 0777) = 0 [pid 5174] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5175] <... write resumed>) = 2097152 [pid 5175] munmap(0x7f241a43b000, 2097152) = 0 [ 79.398265][ T5174] loop1: detected capacity change from 0 to 4096 [pid 5175] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5175] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./7/file0", [pid 5065] <... umount2 resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... ioctl resumed>) = 0 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./8/file0", [pid 5067] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5175] close(3 [pid 5174] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] fstat(4, [pid 5065] getdents64(4, [pid 5175] <... close resumed>) = 0 [pid 5174] <... openat resumed>) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5175] mkdir("./file0", 0777 [pid 5174] chdir("./file0" [pid 5067] getdents64(4, [pid 5065] getdents64(4, [pid 5174] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5174] ioctl(4, LOOP_CLR_FD [pid 5067] getdents64(4, [pid 5065] close(4 [pid 5174] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5175] <... mkdir resumed>) = 0 [pid 5174] close(4 [pid 5067] close(4 [pid 5065] rmdir("./8/file0" [pid 5175] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5174] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5174] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [ 79.475118][ T5175] loop3: detected capacity change from 0 to 4096 [ 79.510378][ T5178] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] rmdir("./8" [pid 5174] <... openat resumed>) = 4 [pid 5067] rmdir("./7/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5174] unlink("./file1" [pid 5065] mkdir("./9", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [pid 5065] close(3 [pid 5067] rmdir("./7" [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./8", 0777 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5179 [pid 5174] <... unlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5174] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5179 attached [pid 5179] chdir("./9" [pid 5067] <... openat resumed>) = 3 [pid 5179] <... chdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5179] <... prctl resumed>) = 0 [pid 5067] close(3 [pid 5179] setpgid(0, 0 [pid 5067] <... close resumed>) = 0 [pid 5179] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5181 attached ) = 3 [pid 5175] <... mount resumed>) = 0 [pid 5181] chdir("./8" [pid 5179] write(3, "1000", 4 [pid 5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5179] <... write resumed>) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5181 [pid 5181] <... chdir resumed>) = 0 [pid 5179] close(3 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5179] <... close resumed>) = 0 [pid 5175] <... openat resumed>) = 3 [pid 5181] <... prctl resumed>) = 0 [pid 5179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] setpgid(0, 0 [pid 5175] chdir("./file0" [pid 5179] memfd_create("syzkaller", 0) = 3 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5181] <... setpgid resumed>) = 0 [pid 5179] <... mmap resumed>) = 0x7f241a43b000 [pid 5175] <... chdir resumed>) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5175] ioctl(4, LOOP_CLR_FD [pid 5181] <... openat resumed>) = 3 [pid 5175] <... ioctl resumed>) = 0 [pid 5181] write(3, "1000", 4 [pid 5175] close(4 [pid 5181] <... write resumed>) = 4 [pid 5175] <... close resumed>) = 0 [pid 5181] close(3 [pid 5175] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5181] <... close resumed>) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5175] <... openat resumed>) = 4 [ 79.591995][ T5180] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5175] unlink("./file1" [pid 5181] <... mmap resumed>) = 0x7f241a43b000 [pid 5175] <... unlink resumed>) = 0 [pid 5175] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5179] <... write resumed>) = 2097152 [pid 5179] munmap(0x7f241a43b000, 2097152) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5179] ioctl(4, LOOP_SET_FD, 3 [pid 5173] <... pwritev resumed>) = 1114112 [pid 5173] exit_group(0) = ? [pid 5172] <... pwritev resumed>) = 1114112 [pid 5172] exit_group(0) = ? [pid 5179] <... ioctl resumed>) = 0 [pid 5179] close(3) = 0 [pid 5179] mkdir("./file0", 0777) = 0 [pid 5179] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5181] <... write resumed>) = 2097152 [pid 5181] munmap(0x7f241a43b000, 2097152) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 79.783864][ T5179] loop2: detected capacity change from 0 to 4096 [pid 5181] ioctl(4, LOOP_SET_FD, 3 [pid 5179] <... mount resumed>) = 0 [pid 5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5179] chdir("./file0") = 0 [pid 5179] ioctl(4, LOOP_CLR_FD) = 0 [pid 5179] close(4 [pid 5181] <... ioctl resumed>) = 0 [pid 5179] <... close resumed>) = 0 [pid 5181] close(3 [pid 5179] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5181] <... close resumed>) = 0 [pid 5179] <... openat resumed>) = 4 [pid 5173] +++ exited with 0 +++ [pid 5181] mkdir("./file0", 0777 [pid 5179] unlink("./file1" [pid 5172] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5181] <... mkdir resumed>) = 0 [pid 5179] <... unlink resumed>) = 0 [pid 5063] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 79.842863][ T5181] loop4: detected capacity change from 0 to 4096 [ 79.865678][ T5182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5179] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./8/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] lstat("./8/binderfs", [pid 5068] unlink("./8/binderfs" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5063] unlink("./8/binderfs" [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5174] <... pwritev resumed>) = 1114112 [pid 5174] exit_group(0 [pid 5181] <... mount resumed>) = 0 [pid 5174] <... exit_group resumed>) = ? [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./file0") = 0 [pid 5181] ioctl(4, LOOP_CLR_FD) = 0 [pid 5181] close(4) = 0 [pid 5181] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = 0 [pid 5181] <... openat resumed>) = 4 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] unlink("./file1" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5181] <... unlink resumed>) = 0 [ 79.994236][ T5183] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5068] lstat("./8/file0", [pid 5063] fstat(4, [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5068] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5175] <... pwritev resumed>) = 1114112 [pid 5068] fstat(4, [pid 5063] close(4 [pid 5175] exit_group(0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5175] <... exit_group resumed>) = ? [pid 5068] getdents64(4, [pid 5063] rmdir("./8/file0" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] getdents64(4, [pid 5063] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5063] close(3 [pid 5068] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] rmdir("./8/file0" [pid 5063] rmdir("./8" [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5063] mkdir("./9", 0777 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5068] rmdir("./8" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] mkdir("./9", 0777 [pid 5063] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5184 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5185 ./strace-static-x86_64: Process 5184 attached [pid 5184] chdir("./9"./strace-static-x86_64: Process 5185 attached ) = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5185] chdir("./9" [pid 5184] <... prctl resumed>) = 0 [pid 5184] setpgid(0, 0 [pid 5185] <... chdir resumed>) = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5184] <... setpgid resumed>) = 0 [pid 5185] <... prctl resumed>) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] setpgid(0, 0 [pid 5184] <... openat resumed>) = 3 [pid 5185] <... setpgid resumed>) = 0 [pid 5184] write(3, "1000", 4 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5184] <... write resumed>) = 4 [pid 5185] <... openat resumed>) = 3 [pid 5184] close(3 [pid 5185] write(3, "1000", 4 [pid 5184] <... close resumed>) = 0 [pid 5185] <... write resumed>) = 4 [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5185] close(3 [pid 5184] <... symlink resumed>) = 0 [pid 5175] +++ exited with 0 +++ [pid 5185] <... close resumed>) = 0 [pid 5184] memfd_create("syzkaller", 0 [pid 5185] symlink("/dev/binderfs", "./binderfs" [pid 5184] <... memfd_create resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5185] <... symlink resumed>) = 0 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5185] memfd_create("syzkaller", 0 [pid 5184] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5185] <... memfd_create resumed>) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5174] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(3, [pid 5066] lstat("./8/binderfs", [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] getdents64(3, [pid 5066] unlink("./8/binderfs" [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... unlink resumed>) = 0 [pid 5064] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./8/binderfs", [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./8/binderfs") = 0 [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... umount2 resumed>) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5181] <... pwritev resumed>) = 1114112 [pid 5066] rmdir("./8/file0" [pid 5064] lstat("./8/file0", [pid 5181] exit_group(0 [pid 5066] <... rmdir resumed>) = 0 [pid 5181] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 5179] <... pwritev resumed>) = 1114112 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5179] exit_group(0 [pid 5066] close(3 [pid 5185] <... write resumed>) = 2097152 [pid 5184] <... write resumed>) = 2097152 [pid 5179] <... exit_group resumed>) = ? [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5185] munmap(0x7f241a43b000, 2097152 [pid 5184] munmap(0x7f241a43b000, 2097152 [pid 5066] rmdir("./8" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... munmap resumed>) = 0 [pid 5184] <... munmap resumed>) = 0 [pid 5181] +++ exited with 0 +++ [pid 5064] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5185] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5184] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5185] <... openat resumed>) = 4 [pid 5184] <... openat resumed>) = 4 [pid 5066] mkdir("./9", 0777 [pid 5064] fstat(4, [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5185] <... ioctl resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5185] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5185] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5185] mkdir("./file0", 0777 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5185] <... mkdir resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5185] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] close(3 [pid 5184] <... ioctl resumed>) = 0 [pid 5179] +++ exited with 0 +++ [pid 5067] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5184] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5184] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5186 [pid 5184] mkdir("./file0", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5065] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] fstat(3, ./strace-static-x86_64: Process 5186 attached [pid 5184] <... mkdir resumed>) = 0 [pid 5064] close(4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5064] rmdir("./8/file0" [pid 5186] chdir("./9" [pid 5065] <... openat resumed>) = 3 [pid 5186] <... chdir resumed>) = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] fstat(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5186] <... prctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5186] setpgid(0, 0 [pid 5067] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5186] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] lstat("./8/binderfs", [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] close(3 [pid 5186] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5186] write(3, "1000", 4 [pid 5067] unlink("./8/binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./8" [pid 5186] <... write resumed>) = 4 [pid 5186] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5065] lstat("./9/binderfs", [pid 5064] <... rmdir resumed>) = 0 [pid 5186] <... close resumed>) = 0 [ 80.384213][ T5185] loop5: detected capacity change from 0 to 4096 [ 80.391768][ T5184] loop0: detected capacity change from 0 to 4096 [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] mkdir("./9", 0777 [pid 5186] symlink("/dev/binderfs", "./binderfs" [pid 5065] unlink("./9/binderfs" [pid 5186] <... symlink resumed>) = 0 [pid 5186] memfd_create("syzkaller", 0 [pid 5065] <... unlink resumed>) = 0 [pid 5186] <... memfd_create resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5186] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5187 ./strace-static-x86_64: Process 5187 attached [pid 5187] chdir("./9" [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5187] <... chdir resumed>) = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5187] write(3, "1000", 4) = 4 [pid 5187] close(3) = 0 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] memfd_create("syzkaller", 0) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4) = 0 [pid 5065] <... umount2 resumed>) = 0 [ 80.468971][ T5188] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5185] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5185] unlink("./file1" [pid 5184] <... mount resumed>) = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5185] <... unlink resumed>) = 0 [pid 5184] <... openat resumed>) = 3 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5184] chdir("./file0") = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] lstat("./9/file0", [pid 5184] close(4 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5184] <... close resumed>) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5184] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5184] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5184] unlink("./file1" [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5067] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] fstat(4, [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5184] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 80.515591][ T5189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] getdents64(4, [pid 5184] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] fstat(4, [pid 5065] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5186] <... write resumed>) = 2097152 [pid 5067] getdents64(4, [pid 5065] close(4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] rmdir("./9/file0" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] close(4 [pid 5065] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./8/file0" [pid 5065] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] rmdir("./9" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] mkdir("./10", 0777 [pid 5067] rmdir("./8") = 0 [pid 5067] mkdir("./9", 0777) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5186] munmap(0x7f241a43b000, 2097152 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5186] <... munmap resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5186] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] close(3 [pid 5065] close(3 [pid 5186] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5186] ioctl(4, LOOP_SET_FD, 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5190 attached ./strace-static-x86_64: Process 5191 attached [pid 5190] chdir("./9" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5190 [pid 5191] chdir("./10" [pid 5190] <... chdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5191 [pid 5191] <... chdir resumed>) = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5191] <... prctl resumed>) = 0 [pid 5190] <... prctl resumed>) = 0 [pid 5186] <... ioctl resumed>) = 0 [pid 5186] close(3) = 0 [pid 5186] mkdir("./file0", 0777) = 0 [pid 5186] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5191] setpgid(0, 0 [pid 5190] setpgid(0, 0 [pid 5191] <... setpgid resumed>) = 0 [pid 5190] <... setpgid resumed>) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5191] <... openat resumed>) = 3 [pid 5190] <... openat resumed>) = 3 [pid 5191] write(3, "1000", 4 [ 80.629451][ T5186] loop3: detected capacity change from 0 to 4096 [pid 5190] write(3, "1000", 4 [pid 5191] <... write resumed>) = 4 [pid 5190] <... write resumed>) = 4 [pid 5191] close(3 [pid 5190] close(3 [pid 5191] <... close resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs" [pid 5190] symlink("/dev/binderfs", "./binderfs" [pid 5187] <... write resumed>) = 2097152 [pid 5191] <... symlink resumed>) = 0 [pid 5190] <... symlink resumed>) = 0 [pid 5191] memfd_create("syzkaller", 0 [pid 5190] memfd_create("syzkaller", 0 [pid 5191] <... memfd_create resumed>) = 3 [pid 5190] <... memfd_create resumed>) = 3 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5187] munmap(0x7f241a43b000, 2097152 [pid 5191] <... mmap resumed>) = 0x7f241a43b000 [pid 5190] <... mmap resumed>) = 0x7f241a43b000 [pid 5187] <... munmap resumed>) = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5187] ioctl(4, LOOP_SET_FD, 3 [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5187] <... ioctl resumed>) = 0 [pid 5187] close(3) = 0 [pid 5187] mkdir("./file0", 0777) = 0 [pid 5187] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5186] <... mount resumed>) = 0 [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5186] chdir("./file0") = 0 [pid 5186] ioctl(4, LOOP_CLR_FD) = 0 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5186] close(4) = 0 [pid 5186] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 80.713254][ T5187] loop1: detected capacity change from 0 to 4096 [ 80.740928][ T5192] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5186] unlink("./file1" [pid 5187] <... mount resumed>) = 0 [pid 5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5187] chdir("./file0") = 0 [pid 5187] ioctl(4, LOOP_CLR_FD) = 0 [pid 5187] close(4) = 0 [pid 5187] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5187] unlink("./file1" [pid 5186] <... unlink resumed>) = 0 [pid 5186] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5187] <... unlink resumed>) = 0 [pid 5187] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5191] <... write resumed>) = 2097152 [ 80.808445][ T5193] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5190] <... write resumed>) = 2097152 [pid 5191] munmap(0x7f241a43b000, 2097152) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3 [pid 5190] munmap(0x7f241a43b000, 2097152) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5191] <... ioctl resumed>) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file0", 0777) = 0 [pid 5184] <... pwritev resumed>) = 1114112 [pid 5184] exit_group(0 [pid 5191] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5184] <... exit_group resumed>) = ? [pid 5190] <... ioctl resumed>) = 0 [pid 5190] close(3) = 0 [pid 5190] mkdir("./file0", 0777) = 0 [pid 5190] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5185] <... pwritev resumed>) = 1114112 [pid 5185] exit_group(0) = ? [ 80.900266][ T5191] loop2: detected capacity change from 0 to 4096 [ 80.919802][ T5190] loop4: detected capacity change from 0 to 4096 [pid 5191] <... mount resumed>) = 0 [pid 5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5190] <... mount resumed>) = 0 [pid 5191] <... openat resumed>) = 3 [pid 5191] chdir("./file0") = 0 [pid 5191] ioctl(4, LOOP_CLR_FD) = 0 [pid 5191] close(4) = 0 [pid 5190] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5191] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5190] <... openat resumed>) = 3 [pid 5191] <... openat resumed>) = 4 [pid 5190] chdir("./file0" [pid 5191] unlink("./file1" [pid 5190] <... chdir resumed>) = 0 [pid 5190] ioctl(4, LOOP_CLR_FD) = 0 [pid 5190] close(4) = 0 [pid 5190] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 80.987716][ T5194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.998282][ T5195] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5190] unlink("./file1" [pid 5184] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5190] <... unlink resumed>) = 0 [pid 5190] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./9/binderfs") = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... unlink resumed>) = 0 [pid 5191] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5185] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5068] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./9/binderfs") = 0 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5187] <... pwritev resumed>) = 1114112 [pid 5063] lstat("./9/file0", [pid 5187] exit_group(0) = ? [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(4 [pid 5068] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5063] rmdir("./9/file0" [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] getdents64(4, [pid 5063] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./9/file0" [pid 5063] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5186] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5186] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5186] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 5063] rmdir("./9" [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./9") = 0 [pid 5068] mkdir("./10", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] mkdir("./10", 0777 [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... mkdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5196 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5196 attached ) = -1 ENXIO (No such device or address) [pid 5196] chdir("./10" [pid 5063] close(3) = 0 [pid 5196] <... chdir resumed>) = 0 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5196] <... prctl resumed>) = 0 [pid 5196] setpgid(0, 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5197 [pid 5196] <... setpgid resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5196] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5197 attached [pid 5196] close(3 [pid 5187] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5197] chdir("./10" [pid 5196] <... close resumed>) = 0 [pid 5197] <... chdir resumed>) = 0 [pid 5196] symlink("/dev/binderfs", "./binderfs" [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] <... symlink resumed>) = 0 [pid 5064] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] memfd_create("syzkaller", 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] <... prctl resumed>) = 0 [pid 5196] <... memfd_create resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5197] setpgid(0, 0 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... openat resumed>) = 3 [pid 5196] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5197] <... setpgid resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] write(3, "1000", 4 [pid 5064] lstat("./9/binderfs", [pid 5197] <... write resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5197] close(3 [pid 5064] unlink("./9/binderfs" [pid 5197] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5197] symlink("/dev/binderfs", "./binderfs" [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] <... symlink resumed>) = 0 [pid 5197] memfd_create("syzkaller", 0 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5197] <... memfd_create resumed>) = 3 [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5186] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./9/binderfs", [pid 5190] <... pwritev resumed>) = 1114112 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./9/binderfs" [pid 5190] exit_group(0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] lstat("./9/file0", [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] <... exit_group resumed>) = ? [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 81.408227][ T897] cfg80211: failed to load regulatory.db [pid 5064] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] <... openat resumed>) = 4 [pid 5067] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5067] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] fstat(3, [pid 5064] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5064] close(4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5067] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./9/file0" [pid 5191] <... pwritev resumed>) = 1114112 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5191] exit_group(0 [pid 5067] lstat("./9/binderfs", [pid 5064] getdents64(3, [pid 5191] <... exit_group resumed>) = ? [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./9/binderfs" [pid 5064] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./9" [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./10", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5198 ./strace-static-x86_64: Process 5198 attached [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] chdir("./10" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5198] <... chdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... openat resumed>) = 4 [pid 5198] <... prctl resumed>) = 0 [pid 5066] fstat(4, [pid 5198] setpgid(0, 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5198] <... setpgid resumed>) = 0 [pid 5066] getdents64(4, [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5198] <... openat resumed>) = 3 [pid 5066] getdents64(4, [pid 5198] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5198] <... write resumed>) = 4 [pid 5066] close(4 [pid 5198] close(3 [pid 5066] <... close resumed>) = 0 [pid 5198] <... close resumed>) = 0 [pid 5066] rmdir("./9/file0" [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5198] <... symlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5198] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5198] <... memfd_create resumed>) = 3 [pid 5066] close(3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 5198] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] rmdir("./9" [pid 5196] <... write resumed>) = 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./10", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5196] munmap(0x7f241a43b000, 2097152 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5199 [pid 5196] <... munmap resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 ./strace-static-x86_64: Process 5199 attached [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5199] chdir("./10") = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5199] write(3, "1000", 4 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5199] <... write resumed>) = 4 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] memfd_create("syzkaller", 0) = 3 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5191] +++ exited with 0 +++ [pid 5197] <... write resumed>) = 2097152 [pid 5196] <... ioctl resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5065] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] munmap(0x7f241a43b000, 2097152 [pid 5196] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5197] <... munmap resumed>) = 0 [pid 5196] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5196] mkdir("./file0", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5197] <... openat resumed>) = 4 [pid 5065] unlink("./10/binderfs" [pid 5197] ioctl(4, LOOP_SET_FD, 3 [pid 5196] <... mkdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [ 81.587946][ T5196] loop5: detected capacity change from 0 to 4096 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5197] <... ioctl resumed>) = 0 [ 81.640055][ T5197] loop0: detected capacity change from 0 to 4096 [pid 5197] close(3 [pid 5196] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5197] <... close resumed>) = 0 [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5197] mkdir("./file0", 0777 [pid 5196] <... openat resumed>) = 3 [pid 5197] <... mkdir resumed>) = 0 [pid 5196] chdir("./file0" [pid 5197] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5196] <... chdir resumed>) = 0 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] close(4) = 0 [pid 5196] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5198] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5196] <... openat resumed>) = 4 [pid 5196] unlink("./file1" [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 81.690896][ T5200] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] munmap(0x7f241a43b000, 2097152 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, [pid 5198] <... munmap resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5198] <... openat resumed>) = 4 [pid 5067] lstat("./9/file0", [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5198] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] close(4 [pid 5197] <... mount resumed>) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./10/file0" [pid 5197] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] getdents64(3, [pid 5067] fstat(4, [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] close(3 [pid 5067] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] rmdir("./10" [pid 5067] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5197] chdir("./file0" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] mkdir("./11", 0777 [pid 5197] <... chdir resumed>) = 0 [pid 5067] close(4 [pid 5065] <... mkdir resumed>) = 0 [pid 5197] ioctl(4, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5197] <... ioctl resumed>) = 0 [pid 5067] rmdir("./9/file0" [pid 5065] <... openat resumed>) = 3 [pid 5197] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(3, [pid 5197] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5199] <... write resumed>) = 2097152 [pid 5197] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 5197] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5197] unlink("./file1" [pid 5067] rmdir("./9" [pid 5196] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5202 [pid 5199] munmap(0x7f241a43b000, 2097152 [pid 5196] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] mkdir("./10", 0777 [pid 5199] <... munmap resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5202 attached [pid 5199] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5198] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5202] chdir("./11" [pid 5199] <... openat resumed>) = 4 [pid 5198] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5202] <... chdir resumed>) = 0 [pid 5199] ioctl(4, LOOP_SET_FD, 3 [pid 5198] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 81.749960][ T5201] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.756605][ T5198] loop1: detected capacity change from 0 to 4096 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5198] mkdir("./file0", 0777 [pid 5067] close(3 [pid 5202] <... prctl resumed>) = 0 [pid 5198] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5202] setpgid(0, 0 [pid 5198] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5202] <... setpgid resumed>) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5203 [pid 5202] <... openat resumed>) = 3 [pid 5202] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5203 attached [pid 5202] close(3 [pid 5197] <... unlink resumed>) = 0 [pid 5203] chdir("./10" [pid 5202] <... close resumed>) = 0 [pid 5197] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5203] <... chdir resumed>) = 0 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] <... ioctl resumed>) = 0 [pid 5202] memfd_create("syzkaller", 0 [pid 5199] close(3 [pid 5202] <... memfd_create resumed>) = 3 [pid 5199] <... close resumed>) = 0 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5199] mkdir("./file0", 0777 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5202] <... mmap resumed>) = 0x7f241a43b000 [pid 5199] <... mkdir resumed>) = 0 [pid 5203] <... prctl resumed>) = 0 [ 81.808494][ T5199] loop3: detected capacity change from 0 to 4096 [pid 5199] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5198] <... mount resumed>) = 0 [pid 5203] close(3 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5203] <... close resumed>) = 0 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5198] <... openat resumed>) = 3 [pid 5203] symlink("/dev/binderfs", "./binderfs" [pid 5198] chdir("./file0" [pid 5203] <... symlink resumed>) = 0 [pid 5198] <... chdir resumed>) = 0 [pid 5203] memfd_create("syzkaller", 0 [pid 5198] ioctl(4, LOOP_CLR_FD [pid 5203] <... memfd_create resumed>) = 3 [pid 5198] <... ioctl resumed>) = 0 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5198] close(4 [pid 5203] <... mmap resumed>) = 0x7f241a43b000 [pid 5198] <... close resumed>) = 0 [pid 5198] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 81.883121][ T5204] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5198] unlink("./file1" [pid 5199] <... mount resumed>) = 0 [pid 5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5198] <... unlink resumed>) = 0 [pid 5199] <... openat resumed>) = 3 [pid 5198] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5199] chdir("./file0") = 0 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5199] ioctl(4, LOOP_CLR_FD) = 0 [pid 5199] close(4) = 0 [pid 5199] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 81.931724][ T5205] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5199] unlink("./file1") = 0 [pid 5199] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5202] <... write resumed>) = 2097152 [pid 5202] munmap(0x7f241a43b000, 2097152) = 0 [pid 5202] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5203] <... write resumed>) = 2097152 [pid 5202] <... ioctl resumed>) = 0 [pid 5202] close(3) = 0 [pid 5202] mkdir("./file0", 0777) = 0 [ 82.042558][ T5202] loop2: detected capacity change from 0 to 4096 [pid 5202] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5203] munmap(0x7f241a43b000, 2097152) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5203] close(3 [pid 5202] <... mount resumed>) = 0 [pid 5203] <... close resumed>) = 0 [pid 5202] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5203] mkdir("./file0", 0777 [pid 5202] <... openat resumed>) = 3 [pid 5203] <... mkdir resumed>) = 0 [pid 5202] chdir("./file0" [pid 5203] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5202] <... chdir resumed>) = 0 [pid 5202] ioctl(4, LOOP_CLR_FD) = 0 [pid 5202] close(4) = 0 [ 82.119863][ T5203] loop4: detected capacity change from 0 to 4096 [ 82.151369][ T5206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5202] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5202] unlink("./file1" [pid 5196] <... pwritev resumed>) = 1114112 [pid 5203] <... mount resumed>) = 0 [pid 5196] exit_group(0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5196] <... exit_group resumed>) = ? [pid 5203] <... openat resumed>) = 3 [pid 5203] chdir("./file0") = 0 [pid 5203] ioctl(4, LOOP_CLR_FD) = 0 [pid 5203] close(4) = 0 [pid 5202] <... unlink resumed>) = 0 [pid 5203] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5202] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5203] <... openat resumed>) = 4 [ 82.221745][ T5207] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5203] unlink("./file1" [pid 5197] <... pwritev resumed>) = 1114112 [pid 5197] exit_group(0 [pid 5203] <... unlink resumed>) = 0 [pid 5197] <... exit_group resumed>) = ? [pid 5203] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5196] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5198] <... pwritev resumed>) = 1114112 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5198] exit_group(0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5198] <... exit_group resumed>) = ? [pid 5068] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./10/binderfs") = 0 [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5197] +++ exited with 0 +++ [pid 5199] <... pwritev resumed>) = 1114112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5199] exit_group(0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5199] <... exit_group resumed>) = ? [pid 5063] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] +++ exited with 0 +++ [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] lstat("./10/file0", [pid 5063] <... openat resumed>) = 3 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(3, [pid 5068] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5068] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 3 [pid 5068] fstat(4, [pid 5064] fstat(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 5064] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./10/binderfs", [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(4 [pid 5064] lstat("./10/binderfs", [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./10/binderfs" [pid 5068] rmdir("./10/file0" [pid 5064] unlink("./10/binderfs" [pid 5068] <... rmdir resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./10") = 0 [pid 5068] mkdir("./11", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5208 [pid 5064] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5208 attached [pid 5208] chdir("./11" [pid 5199] +++ exited with 0 +++ [pid 5208] <... chdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] setpgid(0, 0) = 0 [pid 5064] lstat("./10/file0", [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5208] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... write resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5208] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5208] <... close resumed>) = 0 [pid 5066] fstat(3, [pid 5064] <... openat resumed>) = 4 [pid 5208] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(4, [pid 5208] <... symlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] getdents64(4, [pid 5208] <... memfd_create resumed>) = 3 [pid 5066] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5208] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] lstat("./10/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] lstat("./10/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] unlink("./10/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5064] rmdir("./10/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, [pid 5064] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5064] rmdir("./10" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5064] mkdir("./11", 0777 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] close(4 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./10/file0" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] getdents64(3, [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5203] <... pwritev resumed>) = 1114112 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5203] exit_group(0 [pid 5202] <... pwritev resumed>) = 1114112 [pid 5063] rmdir("./10" [pid 5203] <... exit_group resumed>) = ? [pid 5202] exit_group(0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5209 [pid 5063] <... rmdir resumed>) = 0 [pid 5202] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = 0 [pid 5063] mkdir("./11", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5209 attached ) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5209] chdir("./11" [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5209] <... chdir resumed>) = 0 [pid 5063] close(3 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5209] <... prctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5209] setpgid(0, 0 [pid 5066] lstat("./10/file0", [pid 5209] <... setpgid resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5210 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5210 attached [pid 5209] write(3, "1000", 4 [pid 5066] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5210] chdir("./11" [pid 5209] <... write resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5210] <... chdir resumed>) = 0 [pid 5209] close(3 [pid 5066] fstat(4, [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5209] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5210] <... prctl resumed>) = 0 [pid 5209] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(4, [pid 5210] setpgid(0, 0 [pid 5209] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5210] <... setpgid resumed>) = 0 [pid 5209] memfd_create("syzkaller", 0 [pid 5066] getdents64(4, [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5209] <... memfd_create resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5210] <... openat resumed>) = 3 [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] close(4 [pid 5210] write(3, "1000", 4 [pid 5209] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... close resumed>) = 0 [pid 5210] <... write resumed>) = 4 [pid 5066] rmdir("./10/file0" [pid 5210] close(3) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5210] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(3, [pid 5210] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5210] memfd_create("syzkaller", 0 [pid 5066] close(3 [pid 5210] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] rmdir("./10" [pid 5210] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... rmdir resumed>) = 0 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] mkdir("./11", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5208] <... write resumed>) = 2097152 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5208] munmap(0x7f241a43b000, 2097152) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5211 attached [pid 5202] +++ exited with 0 +++ [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5211 [pid 5211] chdir("./11" [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5211] <... chdir resumed>) = 0 [pid 5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5211] setpgid(0, 0) = 0 [pid 5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] <... ioctl resumed>) = 0 [pid 5065] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] write(3, "1000", 4 [pid 5208] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5211] <... write resumed>) = 4 [pid 5208] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5211] close(3 [pid 5208] mkdir("./file0", 0777 [pid 5203] +++ exited with 0 +++ [pid 5065] <... openat resumed>) = 3 [pid 5211] <... close resumed>) = 0 [pid 5209] <... write resumed>) = 2097152 [pid 5208] <... mkdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5065] fstat(3, [pid 5211] symlink("/dev/binderfs", "./binderfs" [pid 5208] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5211] <... symlink resumed>) = 0 [pid 5065] getdents64(3, [pid 5211] memfd_create("syzkaller", 0 [pid 5067] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5211] <... memfd_create resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5211] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... openat resumed>) = 3 [pid 5065] lstat("./11/binderfs", [pid 5067] fstat(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] unlink("./11/binderfs" [pid 5067] getdents64(3, [pid 5065] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [ 82.879775][ T5208] loop5: detected capacity change from 0 to 4096 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./10/binderfs") = 0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... mount resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5208] chdir("./file0") = 0 [pid 5208] ioctl(4, LOOP_CLR_FD) = 0 [pid 5208] close(4 [pid 5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5210] <... write resumed>) = 2097152 [pid 5208] <... close resumed>) = 0 [pid 5210] munmap(0x7f241a43b000, 2097152 [pid 5208] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5210] <... munmap resumed>) = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5209] munmap(0x7f241a43b000, 2097152 [pid 5208] <... openat resumed>) = 4 [pid 5210] ioctl(4, LOOP_SET_FD, 3 [ 82.947875][ T5212] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5208] unlink("./file1" [pid 5209] <... munmap resumed>) = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5209] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5210] <... ioctl resumed>) = 0 [pid 5065] lstat("./11/file0", [pid 5210] close(3) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5210] mkdir("./file0", 0777 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5210] <... mkdir resumed>) = 0 [pid 5065] fstat(4, [pid 5210] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5209] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5209] close(3 [pid 5067] lstat("./10/file0", [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5209] <... close resumed>) = 0 [pid 5208] <... unlink resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5209] mkdir("./file0", 0777 [pid 5208] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [ 82.994977][ T5210] loop0: detected capacity change from 0 to 4096 [ 83.009939][ T5209] loop1: detected capacity change from 0 to 4096 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5209] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(4 [pid 5209] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] rmdir("./11/file0" [pid 5067] fstat(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5211] <... write resumed>) = 2097152 [pid 5210] <... mount resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5211] munmap(0x7f241a43b000, 2097152 [pid 5210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] close(3 [pid 5067] getdents64(4, [pid 5211] <... munmap resumed>) = 0 [pid 5210] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5211] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5210] chdir("./file0" [pid 5067] close(4 [pid 5065] rmdir("./11" [pid 5211] <... openat resumed>) = 4 [pid 5210] <... chdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5211] ioctl(4, LOOP_SET_FD, 3 [pid 5210] ioctl(4, LOOP_CLR_FD [pid 5067] rmdir("./10/file0" [pid 5065] mkdir("./12", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./10" [pid 5210] <... ioctl resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5210] close(4 [pid 5067] mkdir("./11", 0777 [pid 5065] <... mkdir resumed>) = 0 [pid 5210] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5215 ./strace-static-x86_64: Process 5215 attached [pid 5211] <... ioctl resumed>) = 0 [pid 5210] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5215] chdir("./11" [pid 5211] close(3 [pid 5210] <... openat resumed>) = 4 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 83.076816][ T5213] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.108878][ T5211] loop3: detected capacity change from 0 to 4096 [pid 5215] <... chdir resumed>) = 0 [pid 5211] <... close resumed>) = 0 [pid 5210] unlink("./file1" [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5215] <... prctl resumed>) = 0 [pid 5211] mkdir("./file0", 0777 [pid 5209] <... mount resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5215] setpgid(0, 0 [pid 5211] <... mkdir resumed>) = 0 [pid 5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5215] <... setpgid resumed>) = 0 [pid 5211] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5209] <... openat resumed>) = 3 [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5209] chdir("./file0" [pid 5215] <... openat resumed>) = 3 [pid 5210] <... unlink resumed>) = 0 [pid 5209] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5216 attached [pid 5215] write(3, "1000", 4 [pid 5210] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5209] ioctl(4, LOOP_CLR_FD [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5216 [pid 5216] chdir("./12" [pid 5215] <... write resumed>) = 4 [pid 5209] <... ioctl resumed>) = 0 [pid 5216] <... chdir resumed>) = 0 [pid 5215] close(3 [pid 5209] close(4 [pid 5216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5215] <... close resumed>) = 0 [pid 5209] <... close resumed>) = 0 [pid 5216] <... prctl resumed>) = 0 [pid 5215] symlink("/dev/binderfs", "./binderfs" [pid 5209] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5216] setpgid(0, 0 [pid 5215] <... symlink resumed>) = 0 [pid 5209] <... openat resumed>) = 4 [pid 5216] <... setpgid resumed>) = 0 [pid 5215] memfd_create("syzkaller", 0 [pid 5209] unlink("./file1" [pid 5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5215] <... memfd_create resumed>) = 3 [pid 5216] <... openat resumed>) = 3 [ 83.131226][ T5214] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5216] write(3, "1000", 4 [pid 5215] <... mmap resumed>) = 0x7f241a43b000 [pid 5216] <... write resumed>) = 4 [pid 5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5216] close(3 [pid 5211] <... mount resumed>) = 0 [pid 5209] <... unlink resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5209] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5216] symlink("/dev/binderfs", "./binderfs" [pid 5211] <... openat resumed>) = 3 [pid 5216] <... symlink resumed>) = 0 [pid 5211] chdir("./file0" [pid 5216] memfd_create("syzkaller", 0 [pid 5211] <... chdir resumed>) = 0 [pid 5216] <... memfd_create resumed>) = 3 [pid 5211] ioctl(4, LOOP_CLR_FD [pid 5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5211] <... ioctl resumed>) = 0 [pid 5216] <... mmap resumed>) = 0x7f241a43b000 [pid 5211] close(4) = 0 [pid 5211] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 83.204468][ T5217] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5211] unlink("./file1" [pid 5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5211] <... unlink resumed>) = 0 [pid 5211] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5215] <... write resumed>) = 2097152 [pid 5215] munmap(0x7f241a43b000, 2097152) = 0 [pid 5215] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5215] close(3) = 0 [pid 5215] mkdir("./file0", 0777) = 0 [ 83.370735][ T5215] loop4: detected capacity change from 0 to 4096 [pid 5215] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5216] <... write resumed>) = 2097152 [pid 5216] munmap(0x7f241a43b000, 2097152) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5216] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5216] close(3) = 0 [pid 5216] mkdir("./file0", 0777) = 0 [pid 5216] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5208] <... pwritev resumed>) = 1114112 [pid 5215] <... mount resumed>) = 0 [pid 5208] exit_group(0 [pid 5215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5208] <... exit_group resumed>) = ? [pid 5215] <... openat resumed>) = 3 [pid 5215] chdir("./file0") = 0 [pid 5215] ioctl(4, LOOP_CLR_FD) = 0 [pid 5215] close(4) = 0 [pid 5215] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 83.453028][ T5216] loop2: detected capacity change from 0 to 4096 [ 83.492586][ T5218] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5215] unlink("./file1" [pid 5216] <... mount resumed>) = 0 [pid 5216] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5216] chdir("./file0" [pid 5210] <... pwritev resumed>) = 1114112 [pid 5216] <... chdir resumed>) = 0 [pid 5210] exit_group(0 [pid 5216] ioctl(4, LOOP_CLR_FD [pid 5210] <... exit_group resumed>) = ? [pid 5216] <... ioctl resumed>) = 0 [pid 5210] +++ exited with 0 +++ [pid 5216] close(4 [pid 5215] <... unlink resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5215] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5210, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 83.539475][ T5219] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5216] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5216] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] unlink("./file1" [pid 5063] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5209] <... pwritev resumed>) = 1114112 [pid 5063] unlink("./11/binderfs" [pid 5209] exit_group(0 [pid 5063] <... unlink resumed>) = 0 [pid 5209] <... exit_group resumed>) = ? [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5064] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5216] <... unlink resumed>) = 0 [pid 5064] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5216] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./11/binderfs", [pid 5208] +++ exited with 0 +++ [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./11/binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] <... unlink resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... restart_syscall resumed>) = 0 [pid 5068] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./11/binderfs") = 0 [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5211] <... pwritev resumed>) = 1114112 [pid 5211] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./11/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./11") = 0 [pid 5063] mkdir("./12", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5220 [pid 5211] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, ./strace-static-x86_64: Process 5220 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5220] chdir("./12" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] <... chdir resumed>) = 0 [pid 5066] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] <... prctl resumed>) = 0 [pid 5066] lstat("./11/binderfs", [pid 5220] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] <... setpgid resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] unlink("./11/binderfs" [pid 5064] getdents64(4, [pid 5220] <... openat resumed>) = 3 [pid 5220] write(3, "1000", 4 [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5220] <... write resumed>) = 4 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5220] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5220] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs" [pid 5064] rmdir("./11/file0" [pid 5220] <... symlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5220] memfd_create("syzkaller", 0 [pid 5064] rmdir("./11" [pid 5220] <... memfd_create resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./12", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5220] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5221 [pid 5068] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5221 attached [pid 5221] chdir("./12") = 0 [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] <... prctl resumed>) = 0 [pid 5068] lstat("./11/file0", [pid 5221] setpgid(0, 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5221] <... setpgid resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./11/file0" [pid 5221] write(3, "1000", 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5221] <... write resumed>) = 4 [pid 5068] getdents64(3, [pid 5221] close(3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./11") = 0 [pid 5068] mkdir("./12", 0777 [pid 5221] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5221] <... symlink resumed>) = 0 [pid 5215] <... pwritev resumed>) = 1114112 [pid 5068] <... openat resumed>) = 3 [pid 5221] memfd_create("syzkaller", 0 [pid 5215] exit_group(0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5221] <... memfd_create resumed>) = 3 [pid 5215] <... exit_group resumed>) = ? [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5222 ./strace-static-x86_64: Process 5222 attached [pid 5222] chdir("./12") = 0 [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] setpgid(0, 0) = 0 [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5216] <... pwritev resumed>) = 1114112 [pid 5222] write(3, "1000", 4 [pid 5216] exit_group(0 [pid 5222] <... write resumed>) = 4 [pid 5216] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5222] memfd_create("syzkaller", 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... memfd_create resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] lstat("./11/file0", [pid 5222] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./11/file0" [pid 5220] <... write resumed>) = 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./11") = 0 [pid 5066] mkdir("./12", 0777 [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5220] munmap(0x7f241a43b000, 2097152 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5223 ./strace-static-x86_64: Process 5223 attached [pid 5220] <... munmap resumed>) = 0 [pid 5223] chdir("./12" [pid 5220] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5223] <... chdir resumed>) = 0 [pid 5220] <... openat resumed>) = 4 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5220] ioctl(4, LOOP_SET_FD, 3 [pid 5223] <... prctl resumed>) = 0 [pid 5215] +++ exited with 0 +++ [pid 5223] setpgid(0, 0) = 0 [pid 5220] <... ioctl resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5220] close(3 [pid 5067] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... openat resumed>) = 3 [pid 5220] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] write(3, "1000", 4 [pid 5220] mkdir("./file0", 0777 [pid 5067] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5223] <... write resumed>) = 4 [pid 5220] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5223] close(3 [pid 5220] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] fstat(3, [pid 5223] <... close resumed>) = 0 [pid 5221] <... write resumed>) = 2097152 [pid 5216] +++ exited with 0 +++ [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] symlink("/dev/binderfs", "./binderfs" [pid 5221] munmap(0x7f241a43b000, 2097152 [pid 5067] getdents64(3, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5216, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5223] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5223] memfd_create("syzkaller", 0 [pid 5221] <... munmap resumed>) = 0 [pid 5067] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5223] <... memfd_create resumed>) = 3 [pid 5221] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... restart_syscall resumed>) = 0 [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5221] <... openat resumed>) = 4 [ 84.158825][ T5220] loop0: detected capacity change from 0 to 4096 [pid 5067] lstat("./11/binderfs", [pid 5223] <... mmap resumed>) = 0x7f241a43b000 [pid 5221] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./11/binderfs") = 0 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... write resumed>) = 2097152 [pid 5065] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] close(3 [pid 5065] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] <... close resumed>) = 0 [pid 5222] munmap(0x7f241a43b000, 2097152 [pid 5221] mkdir("./file0", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5220] <... mount resumed>) = 0 [pid 5221] <... mkdir resumed>) = 0 [pid 5220] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] fstat(3, [pid 5222] <... munmap resumed>) = 0 [pid 5221] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5220] <... openat resumed>) = 3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5220] chdir("./file0" [pid 5065] getdents64(3, [pid 5222] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5220] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5222] <... openat resumed>) = 4 [pid 5220] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5220] <... ioctl resumed>) = 0 [ 84.227007][ T5221] loop1: detected capacity change from 0 to 4096 [ 84.244293][ T5224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5220] close(4 [pid 5065] lstat("./12/binderfs", [pid 5220] <... close resumed>) = 0 [pid 5222] <... ioctl resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] mkdir("./file0", 0777 [pid 5067] <... umount2 resumed>) = 0 [pid 5220] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5221] <... mount resumed>) = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file0") = 0 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5221] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5065] unlink("./12/binderfs" [pid 5222] <... mkdir resumed>) = 0 [pid 5221] unlink("./file1" [pid 5220] <... openat resumed>) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 5222] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5220] unlink("./file1" [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./11/file0", [pid 5220] <... unlink resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5220] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./11/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [ 84.289949][ T5222] loop5: detected capacity change from 0 to 4096 [ 84.306892][ T5225] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] rmdir("./11") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5067] mkdir("./12", 0777 [pid 5223] <... write resumed>) = 2097152 [pid 5067] <... mkdir resumed>) = 0 [pid 5221] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5222] <... mount resumed>) = 0 [pid 5221] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... openat resumed>) = 3 [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5222] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5222] chdir("./file0" [pid 5067] close(3 [pid 5222] <... chdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5222] ioctl(4, LOOP_CLR_FD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5223] munmap(0x7f241a43b000, 2097152 [pid 5222] <... ioctl resumed>) = 0 [pid 5223] <... munmap resumed>) = 0 [pid 5222] close(4 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5227 [pid 5223] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5222] <... close resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5227 attached [pid 5223] <... openat resumed>) = 4 [pid 5222] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5227] chdir("./12" [pid 5223] ioctl(4, LOOP_SET_FD, 3 [ 84.385713][ T5226] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5222] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5227] <... chdir resumed>) = 0 [pid 5223] <... ioctl resumed>) = 0 [pid 5222] unlink("./file1" [pid 5065] lstat("./12/file0", [pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5227] <... prctl resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5227] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5227] <... setpgid resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5222] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5227] <... openat resumed>) = 3 [pid 5222] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] fstat(4, [pid 5227] write(3, "1000", 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5227] <... write resumed>) = 4 [pid 5065] getdents64(4, [pid 5227] close(3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5227] <... close resumed>) = 0 [pid 5223] close(3 [pid 5065] getdents64(4, [pid 5227] symlink("/dev/binderfs", "./binderfs" [pid 5223] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5227] <... symlink resumed>) = 0 [pid 5223] mkdir("./file0", 0777 [pid 5065] close(4 [pid 5227] memfd_create("syzkaller", 0 [pid 5223] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [ 84.427390][ T5223] loop3: detected capacity change from 0 to 4096 [pid 5227] <... memfd_create resumed>) = 3 [pid 5223] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] rmdir("./12/file0" [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5227] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./12") = 0 [pid 5065] mkdir("./13", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5228 ./strace-static-x86_64: Process 5228 attached [pid 5228] chdir("./13") = 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5223] <... mount resumed>) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5228] <... openat resumed>) = 3 [pid 5223] <... openat resumed>) = 3 [pid 5228] write(3, "1000", 4 [pid 5223] chdir("./file0" [pid 5228] <... write resumed>) = 4 [pid 5223] <... chdir resumed>) = 0 [pid 5228] close(3 [pid 5223] ioctl(4, LOOP_CLR_FD [pid 5228] <... close resumed>) = 0 [pid 5223] <... ioctl resumed>) = 0 [pid 5228] symlink("/dev/binderfs", "./binderfs" [pid 5223] close(4 [pid 5228] <... symlink resumed>) = 0 [pid 5223] <... close resumed>) = 0 [pid 5228] memfd_create("syzkaller", 0 [pid 5223] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5228] <... memfd_create resumed>) = 3 [pid 5223] <... openat resumed>) = 4 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5223] unlink("./file1" [pid 5228] <... mmap resumed>) = 0x7f241a43b000 [ 84.548042][ T5229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5227] <... write resumed>) = 2097152 [pid 5223] <... unlink resumed>) = 0 [pid 5223] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5227] munmap(0x7f241a43b000, 2097152) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5227] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5227] close(3) = 0 [pid 5220] <... pwritev resumed>) = 1114112 [pid 5227] mkdir("./file0", 0777 [pid 5220] exit_group(0 [pid 5227] <... mkdir resumed>) = 0 [pid 5220] <... exit_group resumed>) = ? [pid 5227] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5228] <... write resumed>) = 2097152 [ 84.713405][ T5227] loop4: detected capacity change from 0 to 4096 [pid 5228] munmap(0x7f241a43b000, 2097152) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5228] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5228] close(3) = 0 [pid 5228] mkdir("./file0", 0777 [pid 5227] <... mount resumed>) = 0 [pid 5227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5227] chdir("./file0") = 0 [pid 5227] ioctl(4, LOOP_CLR_FD [pid 5222] <... pwritev resumed>) = 1114112 [pid 5227] <... ioctl resumed>) = 0 [pid 5222] exit_group(0 [pid 5221] <... pwritev resumed>) = 1114112 [pid 5228] <... mkdir resumed>) = 0 [pid 5227] close(4 [pid 5222] <... exit_group resumed>) = ? [pid 5221] exit_group(0 [pid 5228] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5227] <... close resumed>) = 0 [ 84.789851][ T5228] loop2: detected capacity change from 0 to 4096 [ 84.796548][ T5230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5221] <... exit_group resumed>) = ? [pid 5227] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5220] +++ exited with 0 +++ [pid 5227] <... openat resumed>) = 4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5227] unlink("./file1") = 0 [pid 5227] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./12/binderfs") = 0 [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5223] <... pwritev resumed>) = 1114112 [pid 5223] exit_group(0) = ? [pid 5228] <... mount resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5228] chdir("./file0") = 0 [pid 5228] ioctl(4, LOOP_CLR_FD) = 0 [pid 5228] close(4 [pid 5222] +++ exited with 0 +++ [pid 5228] <... close resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5068] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./12/binderfs" [pid 5228] <... openat resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 5228] unlink("./file1" [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] <... unlink resumed>) = 0 [ 84.924903][ T5231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5228] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5221] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5064] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./12/binderfs", [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./12/binderfs" [pid 5063] lstat("./12/file0", [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5068] lstat("./12/file0", [pid 5063] fstat(4, [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5068] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5223] +++ exited with 0 +++ [pid 5068] fstat(4, [pid 5063] getdents64(4, [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5063] close(4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./12/file0" [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(4 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] fstat(3, [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5068] rmdir("./12/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./12/binderfs", [pid 5064] lstat("./12/file0", [pid 5063] close(3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] close(3 [pid 5066] unlink("./12/binderfs" [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./12" [pid 5068] rmdir("./12" [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5068] mkdir("./13", 0777 [pid 5064] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5064] fstat(4, [pid 5063] mkdir("./13", 0777 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5064] getdents64(4, [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5063] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] rmdir("./12/file0" [pid 5068] close(3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5232 [pid 5064] close(3 [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5233 ./strace-static-x86_64: Process 5232 attached [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./12") = 0 ./strace-static-x86_64: Process 5233 attached [pid 5064] mkdir("./13", 0777 [pid 5233] chdir("./13" [pid 5232] chdir("./13" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5233] <... chdir resumed>) = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5233] <... setpgid resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5232] <... chdir resumed>) = 0 [pid 5227] <... pwritev resumed>) = 1114112 [pid 5066] lstat("./12/file0", [pid 5064] <... openat resumed>) = 3 [pid 5233] <... openat resumed>) = 3 [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5227] exit_group(0 [pid 5233] write(3, "1000", 4 [pid 5232] <... prctl resumed>) = 0 [pid 5227] <... exit_group resumed>) = ? [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5233] <... write resumed>) = 4 [pid 5232] setpgid(0, 0 [pid 5233] close(3) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5232] <... setpgid resumed>) = 0 [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(3 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5232] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5232] write(3, "1000", 4) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] fstat(4, [pid 5232] close(3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5232] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5232] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5234 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5232] <... symlink resumed>) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5066] close(4./strace-static-x86_64: Process 5234 attached [pid 5234] chdir("./13" [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 5232] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] rmdir("./12/file0" [pid 5234] <... chdir resumed>) = 0 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5234] setpgid(0, 0) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... rmdir resumed>) = 0 [pid 5234] <... openat resumed>) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3) = 0 [pid 5234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5234] memfd_create("syzkaller", 0 [pid 5066] getdents64(3, [pid 5234] <... memfd_create resumed>) = 3 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5234] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] close(3) = 0 [pid 5066] rmdir("./12") = 0 [pid 5066] mkdir("./13", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5235 ./strace-static-x86_64: Process 5235 attached [pid 5235] chdir("./13") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5235] <... prctl resumed>) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5227] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5232] <... write resumed>) = 2097152 [pid 5067] unlink("./12/binderfs" [pid 5233] munmap(0x7f241a43b000, 2097152 [pid 5228] <... pwritev resumed>) = 1114112 [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] exit_group(0) = ? [pid 5233] <... munmap resumed>) = 0 [pid 5232] munmap(0x7f241a43b000, 2097152 [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5232] <... munmap resumed>) = 0 [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5232] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5234] <... write resumed>) = 2097152 [pid 5234] munmap(0x7f241a43b000, 2097152) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5233] <... ioctl resumed>) = 0 [pid 5232] <... openat resumed>) = 4 [pid 5233] close(3 [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5233] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5234] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5233] mkdir("./file0", 0777 [pid 5234] close(3) = 0 [pid 5234] mkdir("./file0", 0777 [pid 5233] <... mkdir resumed>) = 0 [pid 5233] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5234] <... mkdir resumed>) = 0 [pid 5067] rmdir("./12/file0") = 0 [pid 5234] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5232] <... ioctl resumed>) = 0 [pid 5067] getdents64(3, [pid 5232] close(3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5232] <... close resumed>) = 0 [pid 5067] close(3 [pid 5232] mkdir("./file0", 0777 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./12" [pid 5232] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5232] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] mkdir("./13", 0777 [pid 5235] <... write resumed>) = 2097152 [pid 5067] <... mkdir resumed>) = 0 [pid 5235] munmap(0x7f241a43b000, 2097152 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 85.407606][ T5233] loop0: detected capacity change from 0 to 4096 [ 85.413818][ T5234] loop1: detected capacity change from 0 to 4096 [ 85.423339][ T5232] loop5: detected capacity change from 0 to 4096 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5235] <... munmap resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5237 ./strace-static-x86_64: Process 5237 attached [pid 5237] chdir("./13" [pid 5235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5228] +++ exited with 0 +++ [pid 5237] <... chdir resumed>) = 0 [pid 5235] <... openat resumed>) = 4 [pid 5233] <... openat resumed>) = 3 [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5233] chdir("./file0" [pid 5237] <... prctl resumed>) = 0 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [pid 5234] <... mount resumed>) = 0 [pid 5233] <... chdir resumed>) = 0 [pid 5237] setpgid(0, 0 [pid 5234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5233] ioctl(4, LOOP_CLR_FD [pid 5237] <... setpgid resumed>) = 0 [pid 5234] <... openat resumed>) = 3 [pid 5233] <... ioctl resumed>) = 0 [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5234] chdir("./file0" [pid 5233] close(4 [pid 5237] <... openat resumed>) = 3 [pid 5234] <... chdir resumed>) = 0 [pid 5233] <... close resumed>) = 0 [pid 5237] write(3, "1000", 4 [pid 5234] ioctl(4, LOOP_CLR_FD [pid 5233] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5237] <... write resumed>) = 4 [pid 5234] <... ioctl resumed>) = 0 [pid 5233] <... openat resumed>) = 4 [pid 5237] close(3 [pid 5234] close(4 [pid 5233] unlink("./file1" [pid 5237] <... close resumed>) = 0 [pid 5234] <... close resumed>) = 0 [pid 5237] symlink("/dev/binderfs", "./binderfs" [pid 5234] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5237] <... symlink resumed>) = 0 [pid 5234] <... openat resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5237] memfd_create("syzkaller", 0 [pid 5234] unlink("./file1" [pid 5237] <... memfd_create resumed>) = 3 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5235] <... ioctl resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5235] close(3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5235] <... close resumed>) = 0 [pid 5235] mkdir("./file0", 0777) = 0 [pid 5065] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5232] <... mount resumed>) = 0 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] getdents64(3, [pid 5234] <... unlink resumed>) = 0 [pid 5233] <... unlink resumed>) = 0 [pid 5232] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5234] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5233] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5232] chdir("./file0" [pid 5065] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 85.472204][ T5236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.491673][ T5238] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.503352][ T5235] loop3: detected capacity change from 0 to 4096 [ 85.510036][ T5239] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] unlink("./13/binderfs" [pid 5235] <... mount resumed>) = 0 [pid 5232] <... chdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5232] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] <... openat resumed>) = 3 [pid 5232] <... ioctl resumed>) = 0 [pid 5235] chdir("./file0" [pid 5232] close(4 [pid 5235] <... chdir resumed>) = 0 [pid 5232] <... close resumed>) = 0 [pid 5235] ioctl(4, LOOP_CLR_FD [pid 5232] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5235] <... ioctl resumed>) = 0 [pid 5235] close(4 [pid 5232] <... openat resumed>) = 4 [pid 5235] <... close resumed>) = 0 [pid 5232] unlink("./file1" [pid 5235] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5235] unlink("./file1" [pid 5232] <... unlink resumed>) = 0 [pid 5232] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 85.547340][ T5240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./13/file0", [pid 5235] <... unlink resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./13/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./13") = 0 [pid 5065] mkdir("./14", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5241 ./strace-static-x86_64: Process 5241 attached [pid 5241] chdir("./14") = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5241] setpgid(0, 0) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5241] write(3, "1000", 4) = 4 [pid 5241] close(3) = 0 [pid 5237] <... write resumed>) = 2097152 [pid 5241] symlink("/dev/binderfs", "./binderfs" [pid 5237] munmap(0x7f241a43b000, 2097152 [pid 5241] <... symlink resumed>) = 0 [pid 5241] memfd_create("syzkaller", 0) = 3 [pid 5241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5237] <... munmap resumed>) = 0 [pid 5241] <... mmap resumed>) = 0x7f241a43b000 [pid 5237] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5237] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5237] close(3) = 0 [pid 5241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5237] mkdir("./file0", 0777) = 0 [ 85.718464][ T5237] loop4: detected capacity change from 0 to 4096 [pid 5237] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5237] chdir("./file0") = 0 [pid 5237] ioctl(4, LOOP_CLR_FD) = 0 [pid 5237] close(4) = 0 [ 85.779619][ T5242] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5237] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5237] unlink("./file1" [pid 5241] <... write resumed>) = 2097152 [pid 5237] <... unlink resumed>) = 0 [pid 5237] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5241] munmap(0x7f241a43b000, 2097152) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5241] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5241] close(3) = 0 [pid 5241] mkdir("./file0", 0777) = 0 [pid 5241] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5233] <... pwritev resumed>) = 1114112 [pid 5233] exit_group(0) = ? [ 85.927219][ T5241] loop2: detected capacity change from 0 to 4096 [pid 5234] <... pwritev resumed>) = 1114112 [pid 5232] <... pwritev resumed>) = 1114112 [pid 5234] exit_group(0 [pid 5232] exit_group(0 [pid 5234] <... exit_group resumed>) = ? [pid 5232] <... exit_group resumed>) = ? [pid 5235] <... pwritev resumed>) = 1114112 [pid 5235] exit_group(0) = ? [pid 5241] <... mount resumed>) = 0 [pid 5241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5241] chdir("./file0") = 0 [pid 5241] ioctl(4, LOOP_CLR_FD) = 0 [pid 5241] close(4) = 0 [pid 5241] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5241] unlink("./file1") = 0 [ 86.037002][ T5243] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5241] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5234] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5233] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5068] fstat(3, [pid 5066] fstat(3, [pid 5064] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5237] <... pwritev resumed>) = 1114112 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5237] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] <... exit_group resumed>) = ? [pid 5068] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./13/binderfs", [pid 5068] lstat("./13/binderfs", [pid 5066] lstat("./13/binderfs", [pid 5064] lstat("./13/binderfs", [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./13/binderfs" [pid 5068] unlink("./13/binderfs" [pid 5066] unlink("./13/binderfs" [pid 5064] unlink("./13/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./13/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] lstat("./13/file0", [pid 5068] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] fstat(4, [pid 5066] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5064] lstat("./13/file0", [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 4 [pid 5237] +++ exited with 0 +++ [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=13 /* 0.13 s */} --- [pid 5068] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5068] rmdir("./13/file0" [pid 5067] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./13/file0" [pid 5064] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(3, [pid 5067] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 5064] fstat(4, [pid 5063] getdents64(4, [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] fstat(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5063] close(4 [pid 5068] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] rmdir("./13" [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] rmdir("./13" [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] mkdir("./14", 0777 [pid 5067] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4 [pid 5063] rmdir("./13/file0" [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] lstat("./13/binderfs", [pid 5066] mkdir("./14", 0777 [pid 5064] rmdir("./13/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] unlink("./13/binderfs" [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5068] close(3 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] close(3 [pid 5068] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] rmdir("./13") = 0 [pid 5064] mkdir("./14", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./13" [pid 5066] close(3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5244 [pid 5066] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5245 ./strace-static-x86_64: Process 5245 attached [pid 5245] chdir("./14" [pid 5063] mkdir("./14", 0777 [pid 5245] <... chdir resumed>) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5246 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5245] <... prctl resumed>) = 0 [pid 5245] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 5245] <... setpgid resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(3 [pid 5245] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5245] write(3, "1000", 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] <... write resumed>) = 4 [pid 5245] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5247 [pid 5245] <... close resumed>) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5246 attached ./strace-static-x86_64: Process 5244 attached [pid 5245] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5247 attached ) = 3 [pid 5247] chdir("./14" [pid 5246] chdir("./14" [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] chdir("./14" [pid 5247] <... chdir resumed>) = 0 [pid 5246] <... chdir resumed>) = 0 [pid 5245] <... mmap resumed>) = 0x7f241a43b000 [pid 5244] <... chdir resumed>) = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5247] <... prctl resumed>) = 0 [pid 5246] <... prctl resumed>) = 0 [pid 5244] <... prctl resumed>) = 0 [pid 5247] setpgid(0, 0 [pid 5246] setpgid(0, 0 [pid 5244] setpgid(0, 0 [pid 5247] <... setpgid resumed>) = 0 [pid 5246] <... setpgid resumed>) = 0 [pid 5244] <... setpgid resumed>) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5247] write(3, "1000", 4 [pid 5246] <... openat resumed>) = 3 [pid 5247] <... write resumed>) = 4 [pid 5246] write(3, "1000", 4 [pid 5244] <... openat resumed>) = 3 [pid 5247] close(3 [pid 5246] <... write resumed>) = 4 [pid 5244] write(3, "1000", 4 [pid 5247] <... close resumed>) = 0 [pid 5246] close(3 [pid 5244] <... write resumed>) = 4 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5246] <... close resumed>) = 0 [pid 5244] close(3 [pid 5247] <... symlink resumed>) = 0 [pid 5246] symlink("/dev/binderfs", "./binderfs" [pid 5244] <... close resumed>) = 0 [pid 5247] memfd_create("syzkaller", 0 [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 5247] <... memfd_create resumed>) = 3 [pid 5246] <... symlink resumed>) = 0 [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] <... symlink resumed>) = 0 [pid 5246] memfd_create("syzkaller", 0 [pid 5247] <... mmap resumed>) = 0x7f241a43b000 [pid 5244] memfd_create("syzkaller", 0 [pid 5246] <... memfd_create resumed>) = 3 [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] <... memfd_create resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... mmap resumed>) = 0x7f241a43b000 [pid 5244] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] <... pwritev resumed>) = 1114112 [pid 5067] <... openat resumed>) = 4 [pid 5241] exit_group(0 [pid 5067] fstat(4, [pid 5241] <... exit_group resumed>) = ? [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./13/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./13" [pid 5247] <... write resumed>) = 2097152 [pid 5245] <... write resumed>) = 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./14", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5248 ./strace-static-x86_64: Process 5248 attached [pid 5248] chdir("./14") = 0 [pid 5245] munmap(0x7f241a43b000, 2097152 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5246] <... write resumed>) = 2097152 [pid 5245] <... munmap resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5248] <... prctl resumed>) = 0 [pid 5245] <... openat resumed>) = 4 [pid 5248] setpgid(0, 0) = 0 [pid 5245] ioctl(4, LOOP_SET_FD, 3 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... write resumed>) = 2097152 [pid 5246] munmap(0x7f241a43b000, 2097152 [pid 5248] <... openat resumed>) = 3 [pid 5244] munmap(0x7f241a43b000, 2097152 [pid 5248] write(3, "1000", 4 [pid 5247] munmap(0x7f241a43b000, 2097152 [pid 5248] <... write resumed>) = 4 [pid 5246] <... munmap resumed>) = 0 [pid 5248] close(3 [pid 5244] <... munmap resumed>) = 0 [pid 5246] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5248] <... close resumed>) = 0 [pid 5247] <... munmap resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5248] symlink("/dev/binderfs", "./binderfs" [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5246] <... openat resumed>) = 4 [pid 5248] <... symlink resumed>) = 0 [pid 5247] <... openat resumed>) = 4 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5248] memfd_create("syzkaller", 0 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... memfd_create resumed>) = 3 [pid 5246] <... ioctl resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5241] +++ exited with 0 +++ [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5246] close(3 [pid 5244] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... mmap resumed>) = 0x7f241a43b000 [pid 5246] <... close resumed>) = 0 [pid 5245] <... ioctl resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5245] close(3 [pid 5065] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] mkdir("./file0", 0777 [pid 5065] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5245] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] fstat(3, [pid 5246] mkdir("./file0", 0777 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./14/binderfs") = 0 [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] <... ioctl resumed>) = 0 [pid 5247] close(3) = 0 [pid 5246] <... mkdir resumed>) = 0 [pid 5244] <... ioctl resumed>) = 0 [pid 5246] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5244] close(3) = 0 [pid 5244] mkdir("./file0", 0777) = 0 [ 86.533530][ T5245] loop1: detected capacity change from 0 to 4096 [ 86.555420][ T5246] loop3: detected capacity change from 0 to 4096 [ 86.556118][ T5247] loop0: detected capacity change from 0 to 4096 [ 86.571041][ T5244] loop5: detected capacity change from 0 to 4096 [pid 5244] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5247] mkdir("./file0", 0777 [pid 5246] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [ 86.616185][ T5249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] <... mkdir resumed>) = 0 [pid 5246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5245] <... mount resumed>) = 0 [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5246] <... openat resumed>) = 3 [pid 5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5244] <... mount resumed>) = 0 [pid 5248] <... write resumed>) = 2097152 [pid 5246] chdir("./file0" [pid 5245] <... openat resumed>) = 3 [pid 5244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] lstat("./14/file0", [pid 5248] munmap(0x7f241a43b000, 2097152 [pid 5246] <... chdir resumed>) = 0 [pid 5245] chdir("./file0" [pid 5246] ioctl(4, LOOP_CLR_FD [pid 5245] <... chdir resumed>) = 0 [pid 5244] <... openat resumed>) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5248] <... munmap resumed>) = 0 [pid 5246] <... ioctl resumed>) = 0 [pid 5245] ioctl(4, LOOP_CLR_FD [pid 5244] chdir("./file0" [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5248] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5246] close(4 [pid 5245] <... ioctl resumed>) = 0 [pid 5244] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5248] <... openat resumed>) = 4 [pid 5246] <... close resumed>) = 0 [pid 5245] close(4) = 0 [pid 5245] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5245] unlink("./file1" [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5246] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5244] <... ioctl resumed>) = 0 [pid 5245] <... unlink resumed>) = 0 [ 86.670367][ T5250] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.687752][ T5251] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... openat resumed>) = 4 [pid 5246] <... openat resumed>) = 4 [pid 5245] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5244] close(4 [pid 5248] <... ioctl resumed>) = 0 [pid 5246] unlink("./file1" [pid 5065] fstat(4, [pid 5248] close(3 [pid 5244] <... close resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5248] <... close resumed>) = 0 [pid 5244] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5248] mkdir("./file0", 0777 [pid 5246] <... unlink resumed>) = 0 [pid 5244] unlink("./file1" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5248] <... mkdir resumed>) = 0 [pid 5246] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] getdents64(4, [pid 5248] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [ 86.729038][ T5248] loop4: detected capacity change from 0 to 4096 [pid 5065] rmdir("./14/file0") = 0 [pid 5247] <... mount resumed>) = 0 [pid 5065] getdents64(3, [pid 5247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5247] chdir("./file0" [pid 5065] close(3 [pid 5247] <... chdir resumed>) = 0 [pid 5244] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5247] ioctl(4, LOOP_CLR_FD [pid 5244] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] rmdir("./14" [pid 5248] <... mount resumed>) = 0 [pid 5247] <... ioctl resumed>) = 0 [pid 5248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5247] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5248] <... openat resumed>) = 3 [pid 5247] <... close resumed>) = 0 [pid 5247] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5247] unlink("./file1" [pid 5065] mkdir("./15", 0777) = 0 [pid 5248] chdir("./file0" [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5248] <... chdir resumed>) = 0 [pid 5248] ioctl(4, LOOP_CLR_FD [pid 5065] <... openat resumed>) = 3 [pid 5248] <... ioctl resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5248] close(4 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5248] <... close resumed>) = 0 [pid 5065] close(3 [pid 5248] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5247] <... unlink resumed>) = 0 [pid 5247] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5248] <... openat resumed>) = 4 [pid 5248] unlink("./file1" [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5254 ./strace-static-x86_64: Process 5254 attached [pid 5254] chdir("./15" [pid 5248] <... unlink resumed>) = 0 [ 86.777168][ T5252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.803313][ T5253] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5248] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5254] <... chdir resumed>) = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5254] memfd_create("syzkaller", 0) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5254] munmap(0x7f241a43b000, 2097152) = 0 [pid 5254] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5254] close(3) = 0 [pid 5254] mkdir("./file0", 0777) = 0 [pid 5244] <... pwritev resumed>) = 1114112 [pid 5254] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5244] exit_group(0) = ? [pid 5245] <... pwritev resumed>) = 1114112 [ 87.101786][ T5254] loop2: detected capacity change from 0 to 4096 [pid 5254] <... mount resumed>) = 0 [pid 5248] <... pwritev resumed>) = 1114112 [pid 5245] exit_group(0 [pid 5248] exit_group(0 [pid 5245] <... exit_group resumed>) = ? [pid 5254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5248] <... exit_group resumed>) = ? [pid 5254] <... openat resumed>) = 3 [pid 5254] chdir("./file0") = 0 [pid 5254] ioctl(4, LOOP_CLR_FD) = 0 [pid 5247] <... pwritev resumed>) = 1114112 [pid 5254] close(4 [pid 5247] exit_group(0 [pid 5254] <... close resumed>) = 0 [pid 5254] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5247] <... exit_group resumed>) = ? [ 87.152128][ T5255] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5246] <... pwritev resumed>) = 1114112 [pid 5246] exit_group(0) = ? [pid 5254] <... openat resumed>) = 4 [pid 5254] unlink("./file1") = 0 [pid 5254] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5244] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5068] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./14/binderfs") = 0 [pid 5068] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5247] +++ exited with 0 +++ [pid 5064] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} --- [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5248] +++ exited with 0 +++ [pid 5064] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5248, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./14/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5063] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5063] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5067] lstat("./14/binderfs", [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(3, [pid 5067] unlink("./14/binderfs" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... unlink resumed>) = 0 [pid 5063] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./14/binderfs", [pid 5068] <... umount2 resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./14/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./14/file0", [pid 5063] <... unlink resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5246] +++ exited with 0 +++ [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5068] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] fstat(3, [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5066] getdents64(3, [pid 5064] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./14/file0" [pid 5066] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./14/file0" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5066] lstat("./14/binderfs", [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] unlink("./14/binderfs" [pid 5068] rmdir("./14" [pid 5066] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./15", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] rmdir("./14") = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5256 [pid 5064] mkdir("./15", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5256 attached [pid 5064] close(3 [pid 5256] chdir("./15" [pid 5064] <... close resumed>) = 0 [pid 5256] <... chdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5257 [pid 5256] setpgid(0, 0) = 0 [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5257 attached ) = 3 [pid 5257] chdir("./15" [pid 5256] write(3, "1000", 4 [pid 5257] <... chdir resumed>) = 0 [pid 5256] <... write resumed>) = 4 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5256] close(3 [pid 5257] <... prctl resumed>) = 0 [pid 5256] <... close resumed>) = 0 [pid 5257] setpgid(0, 0 [pid 5256] symlink("/dev/binderfs", "./binderfs" [pid 5257] <... setpgid resumed>) = 0 [pid 5256] <... symlink resumed>) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5256] memfd_create("syzkaller", 0 [pid 5257] <... openat resumed>) = 3 [pid 5256] <... memfd_create resumed>) = 3 [pid 5257] write(3, "1000", 4 [pid 5256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] <... write resumed>) = 4 [pid 5256] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = 0 [pid 5257] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5257] <... close resumed>) = 0 [pid 5257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] memfd_create("syzkaller", 0) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./14/file0", [pid 5063] lstat("./14/file0", [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5066] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] getdents64(4, [pid 5063] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5066] getdents64(4, [pid 5063] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, [pid 5067] close(4 [pid 5066] close(4 [pid 5067] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./14/file0" [pid 5066] rmdir("./14/file0" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] close(3 [pid 5066] close(3 [pid 5063] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./14" [pid 5066] rmdir("./14" [pid 5063] close(4 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] mkdir("./15", 0777 [pid 5066] mkdir("./15", 0777 [pid 5063] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] rmdir("./14/file0" [pid 5067] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5254] <... pwritev resumed>) = 1114112 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 5254] exit_group(0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5254] <... exit_group resumed>) = ? [pid 5067] close(3 [pid 5066] close(3 [pid 5063] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5258 ./strace-static-x86_64: Process 5258 attached [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5259 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./14" [pid 5258] chdir("./15" [pid 5063] <... rmdir resumed>) = 0 [pid 5258] <... chdir resumed>) = 0 [pid 5063] mkdir("./15", 0777 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5258] <... setpgid resumed>) = 0 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5258] write(3, "1000", 4) = 4 [pid 5258] close(3) = 0 [pid 5258] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5259 attached ) = 0 [pid 5256] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5259] chdir("./15" [pid 5258] memfd_create("syzkaller", 0) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5259] <... chdir resumed>) = 0 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5258] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5259] <... prctl resumed>) = 0 [pid 5063] close(3 [pid 5259] setpgid(0, 0) = 0 [pid 5063] <... close resumed>) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5259] <... openat resumed>) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5260 [pid 5259] close(3) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5259] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5260 attached ) = 3 [pid 5260] chdir("./15" [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] <... write resumed>) = 2097152 [pid 5260] <... chdir resumed>) = 0 [pid 5259] <... mmap resumed>) = 0x7f241a43b000 [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] munmap(0x7f241a43b000, 2097152 [pid 5260] setpgid(0, 0 [pid 5256] <... munmap resumed>) = 0 [pid 5260] <... setpgid resumed>) = 0 [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5260] write(3, "1000", 4) = 4 [pid 5256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5260] close(3 [pid 5256] <... openat resumed>) = 4 [pid 5260] <... close resumed>) = 0 [pid 5256] ioctl(4, LOOP_SET_FD, 3 [pid 5260] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] munmap(0x7f241a43b000, 2097152 [pid 5260] memfd_create("syzkaller", 0 [pid 5257] <... munmap resumed>) = 0 [pid 5260] <... memfd_create resumed>) = 3 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5257] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5260] <... mmap resumed>) = 0x7f241a43b000 [pid 5257] <... openat resumed>) = 4 [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] <... ioctl resumed>) = 0 [pid 5254] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5256] close(3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5256] <... close resumed>) = 0 [pid 5256] mkdir("./file0", 0777) = 0 [pid 5256] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5257] close(3 [pid 5065] fstat(3, [pid 5257] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5257] mkdir("./file0", 0777 [pid 5065] getdents64(3, [pid 5257] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5257] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 87.666161][ T5256] loop5: detected capacity change from 0 to 4096 [ 87.700631][ T5257] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5259] <... write resumed>) = 2097152 [pid 5065] lstat("./15/binderfs", [pid 5259] munmap(0x7f241a43b000, 2097152 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5259] <... munmap resumed>) = 0 [pid 5065] unlink("./15/binderfs" [pid 5256] <... mount resumed>) = 0 [pid 5256] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5256] chdir("./file0") = 0 [pid 5256] ioctl(4, LOOP_CLR_FD) = 0 [pid 5256] close(4) = 0 [pid 5256] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5256] unlink("./file1" [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... umount2 resumed>) = 0 [pid 5259] <... openat resumed>) = 4 [pid 5257] <... mount resumed>) = 0 [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5258] <... write resumed>) = 2097152 [pid 5257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5258] munmap(0x7f241a43b000, 2097152 [pid 5257] <... openat resumed>) = 3 [ 87.751829][ T5261] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.783612][ T5262] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5258] <... munmap resumed>) = 0 [pid 5257] chdir("./file0") = 0 [pid 5257] ioctl(4, LOOP_CLR_FD [pid 5258] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5257] <... ioctl resumed>) = 0 [pid 5258] <... openat resumed>) = 4 [pid 5257] close(4 [pid 5258] ioctl(4, LOOP_SET_FD, 3 [pid 5257] <... close resumed>) = 0 [pid 5257] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5259] <... ioctl resumed>) = 0 [pid 5257] unlink("./file1" [pid 5259] close(3 [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] mkdir("./file0", 0777 [pid 5258] <... ioctl resumed>) = 0 [pid 5258] close(3) = 0 [pid 5259] <... mkdir resumed>) = 0 [pid 5258] mkdir("./file0", 0777 [pid 5065] lstat("./15/file0", [pid 5259] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5258] <... mkdir resumed>) = 0 [pid 5256] <... unlink resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5256] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 87.798923][ T5259] loop4: detected capacity change from 0 to 4096 [ 87.808195][ T5258] loop3: detected capacity change from 0 to 4096 [pid 5260] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5260] munmap(0x7f241a43b000, 2097152 [pid 5065] getdents64(4, [pid 5260] <... munmap resumed>) = 0 [pid 5257] <... unlink resumed>) = 0 [pid 5260] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5257] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5260] <... openat resumed>) = 4 [pid 5259] <... mount resumed>) = 0 [pid 5065] close(4 [pid 5260] ioctl(4, LOOP_SET_FD, 3 [pid 5259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5259] <... openat resumed>) = 3 [pid 5065] rmdir("./15/file0") = 0 [pid 5259] chdir("./file0" [pid 5065] getdents64(3, [pid 5259] <... chdir resumed>) = 0 [pid 5259] ioctl(4, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5259] <... ioctl resumed>) = 0 [pid 5259] close(4 [pid 5065] close(3 [pid 5259] <... close resumed>) = 0 [pid 5259] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./15") = 0 [pid 5259] <... openat resumed>) = 4 [pid 5065] mkdir("./16", 0777 [pid 5259] unlink("./file1" [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5259] <... unlink resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5260] <... ioctl resumed>) = 0 [pid 5259] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5260] close(3 [pid 5065] <... close resumed>) = 0 [pid 5260] <... close resumed>) = 0 [ 87.906848][ T5263] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.920894][ T5260] loop0: detected capacity change from 0 to 4096 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5258] <... mount resumed>) = 0 [pid 5258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5258] chdir("./file0") = 0 [pid 5258] ioctl(4, LOOP_CLR_FD [pid 5260] mkdir("./file0", 0777 [pid 5258] <... ioctl resumed>) = 0 [pid 5258] close(4) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5265 [pid 5260] <... mkdir resumed>) = 0 [pid 5258] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5260] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5258] unlink("./file1"./strace-static-x86_64: Process 5265 attached [pid 5265] chdir("./16") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 87.958653][ T5264] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5265] write(3, "1000", 4 [pid 5260] <... mount resumed>) = 0 [pid 5258] <... unlink resumed>) = 0 [pid 5265] <... write resumed>) = 4 [pid 5260] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5258] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5265] close(3 [pid 5260] <... openat resumed>) = 3 [pid 5265] <... close resumed>) = 0 [pid 5260] chdir("./file0" [pid 5265] symlink("/dev/binderfs", "./binderfs" [pid 5260] <... chdir resumed>) = 0 [pid 5265] <... symlink resumed>) = 0 [pid 5260] ioctl(4, LOOP_CLR_FD [pid 5265] memfd_create("syzkaller", 0) = 3 [pid 5260] <... ioctl resumed>) = 0 [pid 5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5260] close(4 [pid 5265] <... mmap resumed>) = 0x7f241a43b000 [pid 5260] <... close resumed>) = 0 [pid 5260] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 88.026651][ T5266] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5260] unlink("./file1") = 0 [pid 5260] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5256] <... pwritev resumed>) = 1114112 [pid 5256] exit_group(0) = ? [pid 5265] <... write resumed>) = 2097152 [pid 5265] munmap(0x7f241a43b000, 2097152) = 0 [pid 5265] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5265] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5265] close(3) = 0 [pid 5265] mkdir("./file0", 0777) = 0 [ 88.204002][ T5265] loop2: detected capacity change from 0 to 4096 [pid 5265] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5257] <... pwritev resumed>) = 1114112 [pid 5257] exit_group(0) = ? [pid 5256] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5265] <... mount resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5265] chdir("./file0" [pid 5068] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5265] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5265] ioctl(4, LOOP_CLR_FD [pid 5068] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5265] <... ioctl resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5265] close(4 [pid 5068] fstat(3, [pid 5265] <... close resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, [pid 5265] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5265] <... openat resumed>) = 4 [pid 5068] lstat("./15/binderfs", [pid 5265] unlink("./file1" [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./15/binderfs") = 0 [pid 5068] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... pwritev resumed>) = 1114112 [ 88.298045][ T5267] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5260] exit_group(0 [pid 5265] <... unlink resumed>) = 0 [pid 5260] <... exit_group resumed>) = ? [pid 5265] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5259] <... pwritev resumed>) = 1114112 [pid 5259] exit_group(0) = ? [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./15/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./15") = 0 [pid 5068] mkdir("./16", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5257] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... restart_syscall resumed>) = 0 [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5268 [pid 5064] <... openat resumed>) = 3 [pid 5258] <... pwritev resumed>) = 1114112 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] exit_group(0 [pid 5064] getdents64(3, [pid 5260] +++ exited with 0 +++ [pid 5258] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5268 attached [pid 5064] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] chdir("./16" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... chdir resumed>) = 0 [pid 5064] lstat("./15/binderfs", [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5268] <... prctl resumed>) = 0 [pid 5064] unlink("./15/binderfs" [pid 5268] setpgid(0, 0 [pid 5064] <... unlink resumed>) = 0 [pid 5268] <... setpgid resumed>) = 0 [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5268] <... openat resumed>) = 3 [pid 5268] write(3, "1000", 4 [pid 5063] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] <... write resumed>) = 4 [pid 5268] close(3) = 0 [pid 5268] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5268] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... memfd_create resumed>) = 3 [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5268] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5259] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] lstat("./15/file0", [pid 5063] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./15/binderfs" [pid 5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5258] +++ exited with 0 +++ [pid 5067] <... unlink resumed>) = 0 [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./15/binderfs", [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] unlink("./15/binderfs" [pid 5265] <... pwritev resumed>) = 1114112 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5265] exit_group(0 [pid 5066] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./15/file0") = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5066] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5265] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(3, [pid 5064] getdents64(4, [pid 5066] fstat(3, [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5064] <... close resumed>) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./15") = 0 [pid 5067] mkdir("./16", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] rmdir("./15/file0" [pid 5066] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5066] lstat("./15/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(3 [pid 5066] unlink("./15/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5064] rmdir("./15" [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./16", 0777 [pid 5067] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5269 ./strace-static-x86_64: Process 5269 attached [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5270 [pid 5269] chdir("./16") = 0 [pid 5269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5269] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5270 attached [pid 5270] chdir("./16" [pid 5269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5270] <... chdir resumed>) = 0 [pid 5269] write(3, "1000", 4 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5269] <... write resumed>) = 4 [pid 5268] <... write resumed>) = 2097152 [pid 5270] <... prctl resumed>) = 0 [pid 5269] close(3 [pid 5270] setpgid(0, 0 [pid 5269] <... close resumed>) = 0 [pid 5269] symlink("/dev/binderfs", "./binderfs" [pid 5270] <... setpgid resumed>) = 0 [pid 5269] <... symlink resumed>) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5269] memfd_create("syzkaller", 0 [pid 5270] <... openat resumed>) = 3 [pid 5269] <... memfd_create resumed>) = 3 [pid 5270] write(3, "1000", 4 [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5270] <... write resumed>) = 4 [pid 5269] <... mmap resumed>) = 0x7f241a43b000 [pid 5270] close(3 [pid 5066] <... umount2 resumed>) = 0 [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... close resumed>) = 0 [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./15/file0", [pid 5270] <... symlink resumed>) = 0 [pid 5270] memfd_create("syzkaller", 0 [pid 5066] lstat("./15/file0", [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5270] <... memfd_create resumed>) = 3 [pid 5268] munmap(0x7f241a43b000, 2097152 [pid 5265] +++ exited with 0 +++ [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5268] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5270] <... mmap resumed>) = 0x7f241a43b000 [pid 5268] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5063] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5268] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5268] ioctl(4, LOOP_SET_FD, 3 [pid 5063] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... restart_syscall resumed>) = 0 [pid 5063] getdents64(4, [pid 5066] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] fstat(4, [pid 5063] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5063] rmdir("./15/file0" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] fstat(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5066] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./15/file0" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] close(3 [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5268] <... ioctl resumed>) = 0 [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./15" [pid 5268] close(3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./16/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5268] <... close resumed>) = 0 [pid 5066] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] mkdir("./16", 0777 [pid 5270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5268] mkdir("./file0", 0777 [pid 5066] <... close resumed>) = 0 [pid 5065] unlink("./16/binderfs" [pid 5063] <... mkdir resumed>) = 0 [pid 5268] <... mkdir resumed>) = 0 [pid 5066] rmdir("./15" [pid 5065] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5268] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5066] mkdir("./16", 0777 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5271 [ 88.739801][ T5268] loop5: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5271 attached [pid 5271] chdir("./16") = 0 [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5271] <... write resumed>) = 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5271] close(3 [pid 5066] close(3 [pid 5271] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5271] <... symlink resumed>) = 0 [pid 5271] memfd_create("syzkaller", 0) = 3 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5273 [pid 5065] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5273 attached [pid 5273] chdir("./16") = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5268] <... mount resumed>) = 0 [pid 5273] write(3, "1000", 4 [pid 5268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5273] <... write resumed>) = 4 [pid 5268] <... openat resumed>) = 3 [pid 5273] close(3 [pid 5268] chdir("./file0" [pid 5273] <... close resumed>) = 0 [pid 5268] <... chdir resumed>) = 0 [pid 5273] symlink("/dev/binderfs", "./binderfs" [pid 5268] ioctl(4, LOOP_CLR_FD [pid 5273] <... symlink resumed>) = 0 [pid 5268] <... ioctl resumed>) = 0 [pid 5273] memfd_create("syzkaller", 0 [pid 5268] close(4 [pid 5273] <... memfd_create resumed>) = 3 [pid 5268] <... close resumed>) = 0 [pid 5273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5268] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5273] <... mmap resumed>) = 0x7f241a43b000 [pid 5268] <... openat resumed>) = 4 [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] unlink("./file1" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5270] <... write resumed>) = 2097152 [pid 5269] <... write resumed>) = 2097152 [ 88.837056][ T5272] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5270] munmap(0x7f241a43b000, 2097152 [pid 5269] munmap(0x7f241a43b000, 2097152 [pid 5270] <... munmap resumed>) = 0 [pid 5269] <... munmap resumed>) = 0 [pid 5268] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5270] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5269] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5268] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] fstat(4, [pid 5270] <... openat resumed>) = 4 [pid 5269] <... openat resumed>) = 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5270] ioctl(4, LOOP_SET_FD, 3 [pid 5269] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5270] <... ioctl resumed>) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./16/file0" [pid 5270] close(3 [pid 5269] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5270] <... close resumed>) = 0 [pid 5269] close(3 [pid 5065] getdents64(3, [pid 5270] mkdir("./file0", 0777 [pid 5269] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5273] <... write resumed>) = 2097152 [pid 5271] <... write resumed>) = 2097152 [pid 5270] <... mkdir resumed>) = 0 [pid 5269] mkdir("./file0", 0777 [pid 5065] close(3 [pid 5271] munmap(0x7f241a43b000, 2097152 [pid 5273] munmap(0x7f241a43b000, 2097152 [pid 5270] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5269] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5273] <... munmap resumed>) = 0 [pid 5065] rmdir("./16" [pid 5271] <... munmap resumed>) = 0 [pid 5271] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5269] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... rmdir resumed>) = 0 [ 88.917677][ T5270] loop1: detected capacity change from 0 to 4096 [ 88.924597][ T5269] loop4: detected capacity change from 0 to 4096 [pid 5065] mkdir("./17", 0777 [pid 5273] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5273] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5273] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5271] <... openat resumed>) = 4 [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5065] close(3) = 0 [pid 5273] <... ioctl resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5270] <... mount resumed>) = 0 [pid 5270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5270] chdir("./file0") = 0 [pid 5270] ioctl(4, LOOP_CLR_FD) = 0 [pid 5270] close(4) = 0 [pid 5270] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5273] close(3 [pid 5270] <... openat resumed>) = 4 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5275 [pid 5270] unlink("./file1" [pid 5271] <... ioctl resumed>) = 0 [pid 5271] close(3) = 0 [ 88.982602][ T5273] loop3: detected capacity change from 0 to 4096 [ 88.992017][ T5271] loop0: detected capacity change from 0 to 4096 [ 89.004155][ T5274] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5271] mkdir("./file0", 0777./strace-static-x86_64: Process 5275 attached [pid 5273] <... close resumed>) = 0 [pid 5273] mkdir("./file0", 0777 [pid 5271] <... mkdir resumed>) = 0 [pid 5269] <... mount resumed>) = 0 [pid 5271] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5273] <... mkdir resumed>) = 0 [pid 5269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5273] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5269] <... openat resumed>) = 3 [pid 5275] chdir("./17" [pid 5269] chdir("./file0") = 0 [pid 5269] ioctl(4, LOOP_CLR_FD [pid 5275] <... chdir resumed>) = 0 [pid 5269] <... ioctl resumed>) = 0 [pid 5275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5269] close(4 [pid 5275] <... prctl resumed>) = 0 [pid 5275] setpgid(0, 0 [pid 5269] <... close resumed>) = 0 [pid 5275] <... setpgid resumed>) = 0 [pid 5269] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5275] write(3, "1000", 4) = 4 [pid 5275] close(3 [pid 5269] <... openat resumed>) = 4 [pid 5275] <... close resumed>) = 0 [pid 5269] unlink("./file1" [pid 5275] symlink("/dev/binderfs", "./binderfs") = 0 [ 89.026768][ T5276] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5275] memfd_create("syzkaller", 0) = 3 [pid 5273] <... mount resumed>) = 0 [pid 5270] <... unlink resumed>) = 0 [pid 5270] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5275] <... mmap resumed>) = 0x7f241a43b000 [pid 5273] <... openat resumed>) = 3 [pid 5273] chdir("./file0" [pid 5269] <... unlink resumed>) = 0 [pid 5273] <... chdir resumed>) = 0 [pid 5271] <... mount resumed>) = 0 [pid 5269] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5273] ioctl(4, LOOP_CLR_FD [pid 5271] chdir("./file0") = 0 [pid 5271] ioctl(4, LOOP_CLR_FD) = 0 [pid 5271] close(4) = 0 [pid 5271] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5271] unlink("./file1" [pid 5273] <... ioctl resumed>) = 0 [pid 5273] close(4) = 0 [pid 5273] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5273] unlink("./file1" [ 89.073353][ T5277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.091430][ T5278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5273] <... unlink resumed>) = 0 [pid 5273] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5271] <... unlink resumed>) = 0 [pid 5271] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5275] <... write resumed>) = 2097152 [pid 5275] munmap(0x7f241a43b000, 2097152) = 0 [pid 5275] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5275] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5275] close(3) = 0 [pid 5275] mkdir("./file0", 0777) = 0 [ 89.229532][ T5275] loop2: detected capacity change from 0 to 4096 [pid 5275] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5275] chdir("./file0") = 0 [pid 5275] ioctl(4, LOOP_CLR_FD) = 0 [pid 5275] close(4) = 0 [pid 5275] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5275] unlink("./file1" [pid 5268] <... pwritev resumed>) = 1114112 [pid 5268] exit_group(0) = ? [ 89.298517][ T5279] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5275] <... unlink resumed>) = 0 [pid 5275] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5273] <... pwritev resumed>) = 1114112 [pid 5273] exit_group(0 [pid 5268] +++ exited with 0 +++ [pid 5273] <... exit_group resumed>) = ? [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./16/binderfs") = 0 [pid 5068] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] <... pwritev resumed>) = 1114112 [pid 5269] exit_group(0) = ? [pid 5273] +++ exited with 0 +++ [pid 5270] <... pwritev resumed>) = 1114112 [pid 5270] exit_group(0) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5273, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5269] +++ exited with 0 +++ [pid 5066] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5269, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] fstat(3, [pid 5067] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5067] fstat(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] lstat("./16/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] lstat("./16/binderfs", [pid 5066] unlink("./16/binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5067] unlink("./16/binderfs" [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5068] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] lstat("./16/file0", [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5068] rmdir("./16/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5271] <... pwritev resumed>) = 1114112 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, [pid 5271] exit_group(0 [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5271] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 5066] close(4 [pid 5270] +++ exited with 0 +++ [pid 5068] rmdir("./16" [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] rmdir("./16/file0" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5068] mkdir("./17", 0777 [pid 5275] <... pwritev resumed>) = 1114112 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5275] exit_group(0) = ? [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5067] lstat("./16/file0", [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./16" [pid 5064] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5271] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] fstat(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5063] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./17", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] fstat(4, [pid 5064] getdents64(3, [pid 5063] unlink("./16/binderfs") = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5280 attached [pid 5280] chdir("./17" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5280 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5280] <... chdir resumed>) = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] getdents64(4, [pid 5064] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5280] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] lstat("./16/binderfs", [pid 5067] close(4 [pid 5280] <... setpgid resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] unlink("./16/binderfs" [pid 5067] rmdir("./16/file0" [pid 5066] close(3 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5275] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5280] <... openat resumed>) = 3 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5280] <... write resumed>) = 4 [pid 5067] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5281 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5275, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5280] close(3 [pid 5067] <... close resumed>) = 0 [pid 5065] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] <... close resumed>) = 0 [pid 5067] rmdir("./16" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5280] <... symlink resumed>) = 0 [pid 5067] mkdir("./17", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] fstat(3, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] getdents64(3, ./strace-static-x86_64: Process 5281 attached [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5281] chdir("./17" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... chdir resumed>) = 0 [pid 5067] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... close resumed>) = 0 [pid 5065] lstat("./17/binderfs", [pid 5281] <... prctl resumed>) = 0 [pid 5280] memfd_create("syzkaller", 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5281] setpgid(0, 0 [pid 5280] <... memfd_create resumed>) = 3 [pid 5065] unlink("./17/binderfs" [pid 5281] <... setpgid resumed>) = 0 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5282 [pid 5065] <... unlink resumed>) = 0 [pid 5281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5280] <... mmap resumed>) = 0x7f241a43b000 [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5281] write(3, "1000", 4) = 4 [pid 5281] close(3./strace-static-x86_64: Process 5282 attached ) = 0 [pid 5282] chdir("./17" [pid 5281] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... chdir resumed>) = 0 [pid 5281] <... symlink resumed>) = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5281] memfd_create("syzkaller", 0 [pid 5282] <... prctl resumed>) = 0 [pid 5281] <... memfd_create resumed>) = 3 [pid 5282] setpgid(0, 0 [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] <... setpgid resumed>) = 0 [pid 5281] <... mmap resumed>) = 0x7f241a43b000 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] write(3, "1000", 4 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... write resumed>) = 4 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] <... close resumed>) = 0 [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./16/file0", [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5064] lstat("./16/file0", [pid 5282] <... symlink resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5282] memfd_create("syzkaller", 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... memfd_create resumed>) = 3 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 5063] fstat(4, [pid 5064] fstat(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5064] close(4 [pid 5063] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./16/file0" [pid 5063] rmdir("./16/file0" [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5065] lstat("./17/file0", [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5064] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3 [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./16" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 5063] rmdir("./16" [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, [pid 5064] mkdir("./17", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5064] <... mkdir resumed>) = 0 [pid 5063] mkdir("./17", 0777 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] close(4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5280] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5280] munmap(0x7f241a43b000, 2097152 [pid 5065] rmdir("./17/file0" [pid 5064] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5280] <... munmap resumed>) = 0 [pid 5065] getdents64(3, [pid 5280] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5280] <... openat resumed>) = 4 [pid 5065] close(3 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5283 [pid 5063] close(3 [pid 5280] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./17" [pid 5063] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./18", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5284 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5283 attached [pid 5281] <... write resumed>) = 2097152 [pid 5280] <... ioctl resumed>) = 0 [pid 5283] chdir("./17" [pid 5281] munmap(0x7f241a43b000, 2097152 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5285 [pid 5280] close(3./strace-static-x86_64: Process 5284 attached [pid 5284] chdir("./17" [pid 5283] <... chdir resumed>) = 0 [pid 5281] <... munmap resumed>) = 0 [pid 5280] <... close resumed>) = 0 ./strace-static-x86_64: Process 5285 attached [pid 5284] <... chdir resumed>) = 0 [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5281] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5280] mkdir("./file0", 0777 [pid 5285] chdir("./18" [pid 5284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5283] <... prctl resumed>) = 0 [pid 5281] <... openat resumed>) = 4 [pid 5285] <... chdir resumed>) = 0 [pid 5284] <... prctl resumed>) = 0 [pid 5283] setpgid(0, 0 [pid 5281] ioctl(4, LOOP_SET_FD, 3 [pid 5280] <... mkdir resumed>) = 0 [pid 5285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5284] setpgid(0, 0 [pid 5283] <... setpgid resumed>) = 0 [pid 5285] <... prctl resumed>) = 0 [pid 5284] <... setpgid resumed>) = 0 [pid 5282] <... write resumed>) = 2097152 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5285] setpgid(0, 0 [pid 5284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5281] <... ioctl resumed>) = 0 [pid 5280] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5285] <... setpgid resumed>) = 0 [pid 5284] <... openat resumed>) = 3 [pid 5283] <... openat resumed>) = 3 [pid 5281] close(3 [pid 5285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5284] write(3, "1000", 4 [pid 5283] write(3, "1000", 4 [pid 5285] <... openat resumed>) = 3 [pid 5284] <... write resumed>) = 4 [pid 5283] <... write resumed>) = 4 [pid 5281] <... close resumed>) = 0 [pid 5285] write(3, "1000", 4 [pid 5284] close(3 [pid 5283] close(3 [pid 5281] mkdir("./file0", 0777 [pid 5285] <... write resumed>) = 4 [pid 5284] <... close resumed>) = 0 [pid 5283] <... close resumed>) = 0 [pid 5285] close(3 [ 89.964566][ T5280] loop5: detected capacity change from 0 to 4096 [ 89.997144][ T5281] loop3: detected capacity change from 0 to 4096 [pid 5284] symlink("/dev/binderfs", "./binderfs" [pid 5283] symlink("/dev/binderfs", "./binderfs" [pid 5282] munmap(0x7f241a43b000, 2097152 [pid 5281] <... mkdir resumed>) = 0 [pid 5285] <... close resumed>) = 0 [pid 5284] <... symlink resumed>) = 0 [pid 5283] <... symlink resumed>) = 0 [pid 5282] <... munmap resumed>) = 0 [pid 5281] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5285] symlink("/dev/binderfs", "./binderfs" [pid 5284] memfd_create("syzkaller", 0 [pid 5282] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5285] <... symlink resumed>) = 0 [pid 5284] <... memfd_create resumed>) = 3 [pid 5282] <... openat resumed>) = 4 [pid 5285] memfd_create("syzkaller", 0 [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] ioctl(4, LOOP_SET_FD, 3 [pid 5285] <... memfd_create resumed>) = 3 [pid 5284] <... mmap resumed>) = 0x7f241a43b000 [pid 5283] memfd_create("syzkaller", 0 [pid 5282] <... ioctl resumed>) = 0 [pid 5280] <... mount resumed>) = 0 [pid 5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5283] <... memfd_create resumed>) = 3 [pid 5282] close(3 [ 90.025550][ T5286] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.035577][ T5282] loop4: detected capacity change from 0 to 4096 [pid 5280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5285] <... mmap resumed>) = 0x7f241a43b000 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] <... close resumed>) = 0 [pid 5280] <... openat resumed>) = 3 [pid 5285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5283] <... mmap resumed>) = 0x7f241a43b000 [pid 5282] mkdir("./file0", 0777 [pid 5281] <... mount resumed>) = 0 [pid 5280] chdir("./file0" [pid 5285] <... write resumed>) = 2097152 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5282] <... mkdir resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5280] <... chdir resumed>) = 0 [pid 5285] munmap(0x7f241a43b000, 2097152 [pid 5282] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5281] <... openat resumed>) = 3 [ 90.067677][ T5287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5280] ioctl(4, LOOP_CLR_FD [pid 5285] <... munmap resumed>) = 0 [pid 5281] chdir("./file0" [pid 5280] <... ioctl resumed>) = 0 [pid 5285] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5281] <... chdir resumed>) = 0 [pid 5280] close(4 [pid 5285] <... openat resumed>) = 4 [pid 5284] <... write resumed>) = 2097152 [pid 5281] ioctl(4, LOOP_CLR_FD [pid 5280] <... close resumed>) = 0 [pid 5285] ioctl(4, LOOP_SET_FD, 3 [pid 5284] munmap(0x7f241a43b000, 2097152 [pid 5281] <... ioctl resumed>) = 0 [pid 5280] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5284] <... munmap resumed>) = 0 [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5281] close(4 [pid 5280] <... openat resumed>) = 4 [pid 5285] <... ioctl resumed>) = 0 [pid 5284] <... openat resumed>) = 4 [pid 5283] <... write resumed>) = 2097152 [pid 5281] <... close resumed>) = 0 [pid 5280] unlink("./file1" [pid 5285] close(3 [pid 5284] ioctl(4, LOOP_SET_FD, 3 [pid 5283] munmap(0x7f241a43b000, 2097152 [pid 5282] <... mount resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5280] <... unlink resumed>) = 0 [pid 5285] <... close resumed>) = 0 [pid 5282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5282] chdir("./file0") = 0 [pid 5282] ioctl(4, LOOP_CLR_FD) = 0 [pid 5285] mkdir("./file0", 0777 [pid 5282] close(4 [pid 5283] <... munmap resumed>) = 0 [pid 5282] <... close resumed>) = 0 [pid 5280] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5285] <... mkdir resumed>) = 0 [pid 5282] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5285] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5283] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5282] <... openat resumed>) = 4 [pid 5281] <... openat resumed>) = 4 [pid 5283] <... openat resumed>) = 4 [pid 5282] unlink("./file1" [pid 5281] unlink("./file1" [ 90.137266][ T5285] loop2: detected capacity change from 0 to 4096 [ 90.158111][ T5288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.172005][ T5284] loop0: detected capacity change from 0 to 4096 [pid 5283] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5281] <... unlink resumed>) = 0 [pid 5281] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5282] <... unlink resumed>) = 0 [pid 5282] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5284] <... ioctl resumed>) = 0 [pid 5284] close(3) = 0 [pid 5283] close(3 [pid 5284] mkdir("./file0", 0777 [pid 5283] <... close resumed>) = 0 [pid 5284] <... mkdir resumed>) = 0 [pid 5283] mkdir("./file0", 0777 [pid 5284] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5283] <... mkdir resumed>) = 0 [ 90.198017][ T5283] loop1: detected capacity change from 0 to 4096 [pid 5283] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5285] <... mount resumed>) = 0 [pid 5285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5285] chdir("./file0") = 0 [pid 5285] ioctl(4, LOOP_CLR_FD) = 0 [pid 5285] close(4) = 0 [pid 5285] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 90.251828][ T5289] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5285] unlink("./file1" [pid 5284] <... mount resumed>) = 0 [pid 5283] <... mount resumed>) = 0 [pid 5285] <... unlink resumed>) = 0 [pid 5284] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5285] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5284] <... openat resumed>) = 3 [pid 5283] <... openat resumed>) = 3 [pid 5284] chdir("./file0" [pid 5283] chdir("./file0" [pid 5284] <... chdir resumed>) = 0 [pid 5283] <... chdir resumed>) = 0 [pid 5284] ioctl(4, LOOP_CLR_FD [pid 5283] ioctl(4, LOOP_CLR_FD [pid 5284] <... ioctl resumed>) = 0 [pid 5283] <... ioctl resumed>) = 0 [pid 5284] close(4 [pid 5283] close(4 [pid 5284] <... close resumed>) = 0 [pid 5283] <... close resumed>) = 0 [pid 5284] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [ 90.302438][ T5290] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.314815][ T5291] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5283] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5284] <... openat resumed>) = 4 [pid 5284] unlink("./file1" [pid 5283] <... openat resumed>) = 4 [pid 5283] unlink("./file1" [pid 5284] <... unlink resumed>) = 0 [pid 5284] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5283] <... unlink resumed>) = 0 [pid 5283] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5280] <... pwritev resumed>) = 1114112 [pid 5280] exit_group(0) = ? [pid 5285] <... pwritev resumed>) = 1114112 [pid 5285] exit_group(0) = ? [pid 5281] <... pwritev resumed>) = 1114112 [pid 5281] exit_group(0) = ? [pid 5282] <... pwritev resumed>) = 1114112 [pid 5282] exit_group(0) = ? [pid 5281] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5281, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./17/binderfs") = 0 [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5280] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5068] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] <... pwritev resumed>) = 1114112 [pid 5068] <... openat resumed>) = 3 [pid 5283] exit_group(0 [pid 5068] fstat(3, [pid 5283] <... exit_group resumed>) = ? [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./17/binderfs") = 0 [pid 5068] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5285] +++ exited with 0 +++ [pid 5284] <... pwritev resumed>) = 1114112 [pid 5282] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5285, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5284] exit_group(0 [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5066] lstat("./17/file0", [pid 5065] <... restart_syscall resumed>) = 0 [pid 5284] <... exit_group resumed>) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] fstat(4, [pid 5065] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(3, [pid 5066] getdents64(4, [pid 5065] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(3, [pid 5066] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] fstat(3, [pid 5067] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5067] lstat("./17/binderfs", [pid 5066] rmdir("./17/file0" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./17/binderfs" [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./18/binderfs", [pid 5064] <... openat resumed>) = 3 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] fstat(3, [pid 5066] <... close resumed>) = 0 [pid 5065] unlink("./18/binderfs" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] rmdir("./17" [pid 5064] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] mkdir("./18", 0777 [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] lstat("./17/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] unlink("./17/binderfs" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5292 ./strace-static-x86_64: Process 5292 attached [pid 5068] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5292] chdir("./18") = 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5292] <... prctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... openat resumed>) = 4 [pid 5292] <... openat resumed>) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5068] fstat(4, [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5292] memfd_create("syzkaller", 0) = 3 [pid 5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./17/file0" [pid 5065] <... umount2 resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] rmdir("./17") = 0 [pid 5065] <... openat resumed>) = 4 [pid 5068] mkdir("./18", 0777 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] rmdir("./18/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./18") = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] mkdir("./19", 0777 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... mkdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5293 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5294 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5293 attached [pid 5293] chdir("./18" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5294 attached [pid 5293] <... chdir resumed>) = 0 [pid 5067] lstat("./17/file0", [pid 5294] chdir("./19" [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5294] <... chdir resumed>) = 0 [pid 5293] <... prctl resumed>) = 0 [pid 5292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5293] setpgid(0, 0 [pid 5294] <... prctl resumed>) = 0 [pid 5293] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] setpgid(0, 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5294] <... setpgid resumed>) = 0 [pid 5293] <... openat resumed>) = 3 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5293] write(3, "1000", 4 [pid 5067] <... openat resumed>) = 4 [pid 5294] <... openat resumed>) = 3 [pid 5293] <... write resumed>) = 4 [pid 5067] fstat(4, [pid 5294] write(3, "1000", 4 [pid 5293] close(3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5294] <... write resumed>) = 4 [pid 5293] <... close resumed>) = 0 [pid 5294] close(3 [pid 5293] symlink("/dev/binderfs", "./binderfs" [pid 5294] <... close resumed>) = 0 [pid 5293] <... symlink resumed>) = 0 [pid 5284] +++ exited with 0 +++ [pid 5067] getdents64(4, [pid 5294] symlink("/dev/binderfs", "./binderfs" [pid 5293] memfd_create("syzkaller", 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5284, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5294] <... symlink resumed>) = 0 [pid 5293] <... memfd_create resumed>) = 3 [pid 5067] getdents64(4, [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] memfd_create("syzkaller", 0 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... memfd_create resumed>) = 3 [pid 5293] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] close(4 [pid 5064] lstat("./17/file0", [pid 5063] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... close resumed>) = 0 [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5064] <... openat resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(4, [pid 5063] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5292] <... write resumed>) = 2097152 [pid 5067] rmdir("./17/file0" [pid 5064] getdents64(4, [pid 5063] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] munmap(0x7f241a43b000, 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] lstat("./17/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(4 [pid 5063] unlink("./17/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] rmdir("./17/file0" [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5292] <... munmap resumed>) = 0 [pid 5067] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./17" [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] close(3 [pid 5064] mkdir("./18", 0777 [pid 5292] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5292] ioctl(4, LOOP_SET_FD, 3 [pid 5067] rmdir("./17" [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5295 ./strace-static-x86_64: Process 5295 attached [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./18", 0777 [pid 5295] chdir("./18" [pid 5067] <... mkdir resumed>) = 0 [pid 5295] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5292] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5295] <... prctl resumed>) = 0 [pid 5293] <... write resumed>) = 2097152 [pid 5292] close(3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 [pid 5295] close(3) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5292] <... close resumed>) = 0 [pid 5295] memfd_create("syzkaller", 0 [pid 5292] mkdir("./file0", 0777 [pid 5067] close(3 [pid 5295] <... memfd_create resumed>) = 3 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5292] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [ 91.065329][ T5292] loop3: detected capacity change from 0 to 4096 [pid 5295] <... mmap resumed>) = 0x7f241a43b000 [pid 5292] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5296 [pid 5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5294] <... write resumed>) = 2097152 [pid 5293] munmap(0x7f241a43b000, 2097152 [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5296 attached [pid 5293] <... munmap resumed>) = 0 [pid 5296] chdir("./18" [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... chdir resumed>) = 0 [pid 5294] munmap(0x7f241a43b000, 2097152 [pid 5293] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5293] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5294] <... munmap resumed>) = 0 [pid 5296] <... prctl resumed>) = 0 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5296] setpgid(0, 0 [pid 5294] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] lstat("./17/file0", [pid 5296] <... setpgid resumed>) = 0 [pid 5294] <... openat resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5296] write(3, "1000", 4 [pid 5294] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5296] <... write resumed>) = 4 [pid 5294] close(3 [pid 5293] <... ioctl resumed>) = 0 [pid 5292] <... mount resumed>) = 0 [pid 5063] rmdir("./17/file0" [pid 5296] close(3 [pid 5294] <... close resumed>) = 0 [pid 5293] close(3 [pid 5292] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5296] <... close resumed>) = 0 [pid 5294] mkdir("./file0", 0777 [pid 5293] <... close resumed>) = 0 [pid 5292] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5296] symlink("/dev/binderfs", "./binderfs" [pid 5294] <... mkdir resumed>) = 0 [pid 5293] mkdir("./file0", 0777 [pid 5292] chdir("./file0" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5296] <... symlink resumed>) = 0 [pid 5063] close(3 [pid 5296] memfd_create("syzkaller", 0 [pid 5294] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5293] <... mkdir resumed>) = 0 [pid 5292] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5296] <... memfd_create resumed>) = 3 [pid 5292] ioctl(4, LOOP_CLR_FD [pid 5063] rmdir("./17" [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5293] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5292] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5292] close(4 [pid 5063] mkdir("./18", 0777 [pid 5296] <... mmap resumed>) = 0x7f241a43b000 [pid 5295] <... write resumed>) = 2097152 [pid 5292] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [ 91.155591][ T5293] loop5: detected capacity change from 0 to 4096 [ 91.167381][ T5294] loop2: detected capacity change from 0 to 4096 [ 91.175621][ T5297] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5292] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] <... openat resumed>) = 3 [pid 5295] munmap(0x7f241a43b000, 2097152 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5300 [pid 5295] <... munmap resumed>) = 0 [pid 5293] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5300 attached [pid 5295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5294] <... mount resumed>) = 0 [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5292] <... openat resumed>) = 4 [pid 5300] chdir("./18" [pid 5295] <... openat resumed>) = 4 [pid 5294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5293] <... openat resumed>) = 3 [pid 5292] unlink("./file1" [pid 5300] <... chdir resumed>) = 0 [pid 5295] ioctl(4, LOOP_SET_FD, 3 [pid 5294] <... openat resumed>) = 3 [pid 5293] chdir("./file0" [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] chdir("./file0" [pid 5293] <... chdir resumed>) = 0 [pid 5292] <... unlink resumed>) = 0 [ 91.238914][ T5298] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.249996][ T5299] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5300] <... prctl resumed>) = 0 [pid 5294] <... chdir resumed>) = 0 [pid 5293] ioctl(4, LOOP_CLR_FD [pid 5292] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5300] setpgid(0, 0 [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5300] <... setpgid resumed>) = 0 [pid 5294] <... ioctl resumed>) = 0 [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] close(4 [pid 5300] <... openat resumed>) = 3 [pid 5294] <... close resumed>) = 0 [pid 5300] write(3, "1000", 4 [pid 5294] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5300] <... write resumed>) = 4 [pid 5293] <... ioctl resumed>) = 0 [pid 5300] close(3) = 0 [pid 5300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5300] memfd_create("syzkaller", 0) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5293] close(4 [pid 5300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5295] <... ioctl resumed>) = 0 [pid 5294] <... openat resumed>) = 4 [pid 5293] <... close resumed>) = 0 [pid 5295] close(3 [pid 5294] unlink("./file1" [pid 5293] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5295] <... close resumed>) = 0 [pid 5295] mkdir("./file0", 0777 [pid 5293] <... openat resumed>) = 4 [pid 5295] <... mkdir resumed>) = 0 [pid 5293] unlink("./file1" [pid 5295] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5294] <... unlink resumed>) = 0 [pid 5294] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5293] <... unlink resumed>) = 0 [ 91.279316][ T5295] loop1: detected capacity change from 0 to 4096 [pid 5293] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5296] <... write resumed>) = 2097152 [pid 5296] munmap(0x7f241a43b000, 2097152 [pid 5295] <... mount resumed>) = 0 [pid 5295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5296] <... munmap resumed>) = 0 [pid 5295] <... openat resumed>) = 3 [pid 5296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5295] chdir("./file0" [pid 5296] <... openat resumed>) = 4 [pid 5295] <... chdir resumed>) = 0 [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5295] ioctl(4, LOOP_CLR_FD) = 0 [pid 5295] close(4) = 0 [pid 5295] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5296] <... ioctl resumed>) = 0 [pid 5295] <... openat resumed>) = 4 [pid 5296] close(3 [pid 5295] unlink("./file1" [pid 5296] <... close resumed>) = 0 [pid 5296] mkdir("./file0", 0777) = 0 [ 91.371289][ T5301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.404574][ T5296] loop4: detected capacity change from 0 to 4096 [pid 5296] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5300] <... write resumed>) = 2097152 [pid 5295] <... unlink resumed>) = 0 [pid 5295] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5300] munmap(0x7f241a43b000, 2097152 [pid 5296] <... mount resumed>) = 0 [pid 5300] <... munmap resumed>) = 0 [pid 5300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5300] ioctl(4, LOOP_SET_FD, 3 [pid 5296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5296] chdir("./file0") = 0 [pid 5296] ioctl(4, LOOP_CLR_FD) = 0 [pid 5296] close(4) = 0 [pid 5296] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5296] unlink("./file1" [pid 5300] <... ioctl resumed>) = 0 [ 91.482455][ T5302] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.490741][ T5300] loop0: detected capacity change from 0 to 4096 [pid 5300] close(3) = 0 [pid 5300] mkdir("./file0", 0777) = 0 [pid 5300] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5296] <... unlink resumed>) = 0 [pid 5296] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5300] <... mount resumed>) = 0 [pid 5300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5300] chdir("./file0") = 0 [pid 5300] ioctl(4, LOOP_CLR_FD) = 0 [pid 5300] close(4) = 0 [pid 5300] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 91.602081][ T5303] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5300] unlink("./file1" [pid 5292] <... pwritev resumed>) = 1114112 [pid 5292] exit_group(0) = ? [pid 5300] <... unlink resumed>) = 0 [pid 5300] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5293] <... pwritev resumed>) = 1114112 [pid 5293] exit_group(0) = ? [pid 5294] <... pwritev resumed>) = 1114112 [pid 5294] exit_group(0 [pid 5292] +++ exited with 0 +++ [pid 5294] <... exit_group resumed>) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5066] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] +++ exited with 0 +++ [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(3, [pid 5066] lstat("./18/binderfs", [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] getdents64(3, [pid 5066] unlink("./18/binderfs" [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... unlink resumed>) = 0 [pid 5068] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./18/binderfs") = 0 [pid 5068] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./19/binderfs") = 0 [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] <... pwritev resumed>) = 1114112 [pid 5295] exit_group(0) = ? [pid 5296] <... pwritev resumed>) = 1114112 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5296] exit_group(0 [pid 5068] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./18/file0", [pid 5066] lstat("./18/file0", [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 5068] fstat(4, [pid 5066] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5068] getdents64(4, [pid 5066] fstat(4, [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5066] getdents64(4, [pid 5296] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] close(4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5296, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] getdents64(4, [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./18/file0" [pid 5066] close(4 [pid 5065] lstat("./19/file0", [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] rmdir("./18/file0" [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./18" [pid 5067] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./19", 0777 [pid 5067] fstat(3, [pid 5066] close(3 [pid 5065] <... openat resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5065] fstat(4, [pid 5068] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] rmdir("./18" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] close(3 [pid 5067] lstat("./18/binderfs", [pid 5066] mkdir("./19", 0777 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./18/binderfs") = 0 [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 ./strace-static-x86_64: Process 5304 attached [pid 5304] chdir("./19") = 0 [pid 5304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5304] setpgid(0, 0) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5304 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] rmdir("./19/file0" [pid 5304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5304] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] getdents64(3, [pid 5304] write(3, "1000", 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5304] <... write resumed>) = 4 [pid 5066] close(3 [pid 5065] close(3 [pid 5066] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] rmdir("./19" [pid 5304] close(3) = 0 [pid 5304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5305 [pid 5065] <... rmdir resumed>) = 0 [pid 5304] memfd_create("syzkaller", 0 [pid 5065] mkdir("./20", 0777 [pid 5304] <... memfd_create resumed>) = 3 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... mkdir resumed>) = 0 [pid 5295] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5305 attached ) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5305] chdir("./19" [pid 5067] <... umount2 resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5305] <... chdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5064] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5305] <... prctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5305] setpgid(0, 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5305] <... setpgid resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5306 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5305] <... openat resumed>) = 3 [pid 5300] <... pwritev resumed>) = 1114112 [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5305] write(3, "1000", 4 [pid 5300] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5306 attached [pid 5305] <... write resumed>) = 4 [pid 5300] <... exit_group resumed>) = ? [pid 5067] lstat("./18/file0", [pid 5064] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] chdir("./20" [pid 5305] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] <... chdir resumed>) = 0 [pid 5305] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./18/binderfs", [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5305] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5306] <... prctl resumed>) = 0 [pid 5305] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./18/binderfs" [pid 5306] setpgid(0, 0 [pid 5305] memfd_create("syzkaller", 0 [pid 5067] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5306] <... setpgid resumed>) = 0 [pid 5305] <... memfd_create resumed>) = 3 [pid 5304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... openat resumed>) = 4 [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] fstat(4, [pid 5306] <... openat resumed>) = 3 [pid 5306] write(3, "1000", 4) = 4 [pid 5306] close(3) = 0 [pid 5306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5306] memfd_create("syzkaller", 0) = 3 [pid 5305] <... mmap resumed>) = 0x7f241a43b000 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5306] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(4 [pid 5064] <... umount2 resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./18/file0" [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] lstat("./18/file0", [pid 5067] close(3 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./18" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./19", 0777 [pid 5064] <... openat resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] fstat(4, [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] getdents64(4, [pid 5067] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] close(4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./18/file0" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5307 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./18") = 0 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] mkdir("./19", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5300] +++ exited with 0 +++ [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5300, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5307 attached [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5307] chdir("./19" [pid 5063] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5307] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5308 [pid 5063] fstat(3, [pid 5307] <... prctl resumed>) = 0 [pid 5304] <... write resumed>) = 2097152 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5308 attached [pid 5307] setpgid(0, 0 [pid 5304] munmap(0x7f241a43b000, 2097152 [pid 5063] getdents64(3, [pid 5308] chdir("./19" [pid 5307] <... setpgid resumed>) = 0 [pid 5304] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5308] <... chdir resumed>) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5304] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5307] <... openat resumed>) = 3 [pid 5304] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5308] <... prctl resumed>) = 0 [pid 5307] write(3, "1000", 4 [pid 5304] ioctl(4, LOOP_SET_FD, 3 [pid 5063] lstat("./18/binderfs", [pid 5308] setpgid(0, 0 [pid 5307] <... write resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5308] <... setpgid resumed>) = 0 [pid 5307] close(3 [pid 5063] unlink("./18/binderfs" [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5307] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5308] <... openat resumed>) = 3 [pid 5307] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] write(3, "1000", 4 [pid 5307] <... symlink resumed>) = 0 [pid 5308] <... write resumed>) = 4 [pid 5307] memfd_create("syzkaller", 0 [pid 5308] close(3 [pid 5307] <... memfd_create resumed>) = 3 [pid 5308] <... close resumed>) = 0 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5308] symlink("/dev/binderfs", "./binderfs" [pid 5307] <... mmap resumed>) = 0x7f241a43b000 [pid 5305] <... write resumed>) = 2097152 [pid 5308] <... symlink resumed>) = 0 [pid 5306] <... write resumed>) = 2097152 [pid 5305] munmap(0x7f241a43b000, 2097152 [pid 5304] <... ioctl resumed>) = 0 [pid 5308] memfd_create("syzkaller", 0) = 3 [pid 5306] munmap(0x7f241a43b000, 2097152 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5305] <... munmap resumed>) = 0 [pid 5304] close(3 [pid 5308] <... mmap resumed>) = 0x7f241a43b000 [pid 5306] <... munmap resumed>) = 0 [pid 5305] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5304] <... close resumed>) = 0 [pid 5306] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5305] <... openat resumed>) = 4 [pid 5304] mkdir("./file0", 0777 [pid 5306] <... openat resumed>) = 4 [ 92.252938][ T5304] loop5: detected capacity change from 0 to 4096 [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5305] ioctl(4, LOOP_SET_FD, 3 [pid 5304] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5306] <... ioctl resumed>) = 0 [pid 5304] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5306] close(3 [pid 5305] <... ioctl resumed>) = 0 [pid 5306] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5306] mkdir("./file0", 0777 [pid 5305] close(3 [pid 5063] getdents64(4, [pid 5306] <... mkdir resumed>) = 0 [pid 5305] <... close resumed>) = 0 [pid 5306] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5305] mkdir("./file0", 0777 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5305] <... mkdir resumed>) = 0 [pid 5063] rmdir("./18/file0" [pid 5305] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... rmdir resumed>) = 0 [ 92.316872][ T5306] loop2: detected capacity change from 0 to 4096 [ 92.323867][ T5305] loop3: detected capacity change from 0 to 4096 [pid 5063] getdents64(3, [pid 5304] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 5304] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5304] chdir("./file0" [pid 5063] rmdir("./18" [pid 5308] <... write resumed>) = 2097152 [pid 5307] <... write resumed>) = 2097152 [pid 5304] <... chdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5304] ioctl(4, LOOP_CLR_FD [pid 5063] mkdir("./19", 0777 [pid 5304] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5304] close(4 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5306] <... mount resumed>) = 0 [pid 5304] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5304] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5306] <... openat resumed>) = 3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5306] chdir("./file0" [pid 5063] close(3 [pid 5306] <... chdir resumed>) = 0 [pid 5304] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5306] ioctl(4, LOOP_CLR_FD [pid 5304] unlink("./file1" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5306] <... ioctl resumed>) = 0 [pid 5306] close(4 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5311 [pid 5308] munmap(0x7f241a43b000, 2097152 [pid 5306] <... close resumed>) = 0 [pid 5306] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000./strace-static-x86_64: Process 5311 attached [pid 5311] chdir("./19") = 0 [pid 5306] <... openat resumed>) = 4 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5306] unlink("./file1" [pid 5311] <... prctl resumed>) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5311] write(3, "1000", 4) = 4 [pid 5311] close(3) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs" [pid 5307] munmap(0x7f241a43b000, 2097152 [pid 5311] <... symlink resumed>) = 0 [pid 5307] <... munmap resumed>) = 0 [pid 5304] <... unlink resumed>) = 0 [pid 5311] memfd_create("syzkaller", 0 [pid 5308] <... munmap resumed>) = 0 [pid 5304] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5311] <... memfd_create resumed>) = 3 [ 92.363731][ T5309] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.401040][ T5310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5307] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5307] <... openat resumed>) = 4 [pid 5311] <... mmap resumed>) = 0x7f241a43b000 [pid 5307] ioctl(4, LOOP_SET_FD, 3 [pid 5308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5307] <... ioctl resumed>) = 0 [pid 5307] close(3) = 0 [pid 5307] mkdir("./file0", 0777) = 0 [pid 5307] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5308] <... openat resumed>) = 4 [pid 5305] <... mount resumed>) = 0 [pid 5308] ioctl(4, LOOP_SET_FD, 3 [pid 5306] <... unlink resumed>) = 0 [pid 5305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5306] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5305] <... openat resumed>) = 3 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5305] chdir("./file0") = 0 [pid 5308] <... ioctl resumed>) = 0 [pid 5305] ioctl(4, LOOP_CLR_FD [pid 5308] close(3 [pid 5305] <... ioctl resumed>) = 0 [pid 5305] close(4 [pid 5308] <... close resumed>) = 0 [pid 5308] mkdir("./file0", 0777 [pid 5305] <... close resumed>) = 0 [pid 5305] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5308] <... mkdir resumed>) = 0 [pid 5305] <... openat resumed>) = 4 [pid 5308] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5305] unlink("./file1") = 0 [ 92.456714][ T5307] loop4: detected capacity change from 0 to 4096 [ 92.463798][ T5312] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.485242][ T5308] loop1: detected capacity change from 0 to 4096 [pid 5305] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5307] <... mount resumed>) = 0 [pid 5307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5307] chdir("./file0") = 0 [pid 5307] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] close(4) = 0 [pid 5307] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 92.537515][ T5313] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5307] unlink("./file1" [pid 5308] <... mount resumed>) = 0 [pid 5308] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5308] chdir("./file0" [pid 5311] <... write resumed>) = 2097152 [pid 5308] <... chdir resumed>) = 0 [pid 5308] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] munmap(0x7f241a43b000, 2097152 [pid 5308] close(4) = 0 [pid 5308] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5307] <... unlink resumed>) = 0 [pid 5307] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5308] <... openat resumed>) = 4 [pid 5311] <... munmap resumed>) = 0 [pid 5308] unlink("./file1" [pid 5311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 92.581217][ T5314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5311] ioctl(4, LOOP_SET_FD, 3 [pid 5308] <... unlink resumed>) = 0 [pid 5308] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5311] <... ioctl resumed>) = 0 [pid 5311] close(3) = 0 [pid 5311] mkdir("./file0", 0777) = 0 [ 92.641767][ T5311] loop0: detected capacity change from 0 to 4096 [pid 5311] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] chdir("./file0") = 0 [pid 5311] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(4) = 0 [pid 5311] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 92.725609][ T5315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5311] unlink("./file1") = 0 [pid 5311] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5304] <... pwritev resumed>) = 1114112 [pid 5304] exit_group(0) = ? [pid 5305] <... pwritev resumed>) = 1114112 [pid 5305] exit_group(0) = ? [pid 5306] <... pwritev resumed>) = 1114112 [pid 5306] exit_group(0) = ? [pid 5305] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5306] +++ exited with 0 +++ [pid 5304] +++ exited with 0 +++ [pid 5307] <... pwritev resumed>) = 1114112 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5304, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5307] exit_group(0) = ? [pid 5066] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5068] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./19/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] fstat(3, [pid 5068] unlink("./19/binderfs" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] fstat(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] lstat("./19/binderfs", [pid 5065] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./19/binderfs" [pid 5065] lstat("./20/binderfs", [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./20/binderfs") = 0 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] <... pwritev resumed>) = 1114112 [pid 5308] exit_group(0) = ? [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5311] <... pwritev resumed>) = 1114112 [pid 5311] exit_group(0) = ? [pid 5068] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./19/file0") = 0 [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./19") = 0 [pid 5307] +++ exited with 0 +++ [pid 5068] mkdir("./20", 0777) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... openat resumed>) = 3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5067] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5316 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./19/binderfs") = 0 [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5316 attached [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] chdir("./20" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... chdir resumed>) = 0 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0 [pid 5066] lstat("./19/file0", [pid 5316] <... setpgid resumed>) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] write(3, "1000", 4 [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... write resumed>) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./20/file0", [pid 5066] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5065] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5065] fstat(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(4) = 0 [pid 5065] getdents64(4, [pid 5066] rmdir("./19/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5311] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5308] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./19/binderfs") = 0 [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5308, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] close(3 [pid 5065] <... close resumed>) = 0 [pid 5064] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] rmdir("./20/file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./19" [pid 5065] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./19/file0", [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] fstat(3, [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./20", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] close(3 [pid 5067] <... openat resumed>) = 4 [pid 5064] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5066] <... openat resumed>) = 3 [pid 5065] rmdir("./20" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5064] lstat("./19/binderfs", [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./21", 0777 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./19/binderfs" [pid 5067] getdents64(4, [pid 5065] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] lstat("./19/file0", [pid 5067] rmdir("./19/file0") = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5317 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 5317 attached [pid 5067] rmdir("./19" [pid 5063] fstat(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] mkdir("./20", 0777 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5318 [pid 5063] getdents64(4, [pid 5067] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5317] chdir("./20" [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] getdents64(4, [pid 5317] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5318 attached [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5317] <... prctl resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5063] close(4 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5318] chdir("./21" [pid 5317] setpgid(0, 0 [pid 5067] close(3 [pid 5063] <... close resumed>) = 0 [pid 5318] <... chdir resumed>) = 0 [pid 5317] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5063] rmdir("./19/file0" [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5318] <... prctl resumed>) = 0 [pid 5317] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5318] setpgid(0, 0 [pid 5317] write(3, "1000", 4) = 4 [pid 5317] close(3 [pid 5318] <... setpgid resumed>) = 0 [pid 5317] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5319 [pid 5318] <... openat resumed>) = 3 [pid 5317] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5318] write(3, "1000", 4 [pid 5317] memfd_create("syzkaller", 0 [pid 5316] <... write resumed>) = 2097152 [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3./strace-static-x86_64: Process 5319 attached [pid 5318] <... write resumed>) = 4 [pid 5317] <... memfd_create resumed>) = 3 [pid 5316] munmap(0x7f241a43b000, 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5319] chdir("./20" [pid 5318] close(3 [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 5319] <... chdir resumed>) = 0 [pid 5317] <... mmap resumed>) = 0x7f241a43b000 [pid 5316] <... munmap resumed>) = 0 [pid 5064] lstat("./19/file0", [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5318] <... close resumed>) = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] rmdir("./19" [pid 5318] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5319] <... prctl resumed>) = 0 [pid 5316] <... openat resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5319] setpgid(0, 0 [pid 5318] <... symlink resumed>) = 0 [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./20", 0777 [pid 5319] <... setpgid resumed>) = 0 [pid 5318] memfd_create("syzkaller", 0 [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5319] write(3, "1000", 4) = 4 [pid 5319] close(3) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5319] memfd_create("syzkaller", 0) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5064] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5318] <... memfd_create resumed>) = 3 [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5316] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5316] close(3 [pid 5064] fstat(4, [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5318] <... mmap resumed>) = 0x7f241a43b000 [pid 5316] <... close resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5316] mkdir("./file0", 0777 [pid 5064] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5316] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5316] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] getdents64(4, [pid 5063] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] close(4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./19/file0" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5320 [ 93.391312][ T5316] loop5: detected capacity change from 0 to 4096 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5320 attached [pid 5064] close(3 [pid 5320] chdir("./20" [pid 5064] <... close resumed>) = 0 [pid 5320] <... chdir resumed>) = 0 [pid 5064] rmdir("./19" [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... rmdir resumed>) = 0 [pid 5320] <... prctl resumed>) = 0 [pid 5064] mkdir("./20", 0777 [pid 5320] setpgid(0, 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5320] <... setpgid resumed>) = 0 [pid 5317] <... write resumed>) = 2097152 [pid 5064] <... openat resumed>) = 3 [pid 5319] <... write resumed>) = 2097152 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] munmap(0x7f241a43b000, 2097152 [pid 5316] <... mount resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5320] <... openat resumed>) = 3 [pid 5319] munmap(0x7f241a43b000, 2097152 [pid 5318] <... write resumed>) = 2097152 [pid 5317] <... munmap resumed>) = 0 [pid 5316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5320] write(3, "1000", 4 [pid 5319] <... munmap resumed>) = 0 [pid 5318] munmap(0x7f241a43b000, 2097152 [pid 5316] <... openat resumed>) = 3 [pid 5064] close(3 [pid 5317] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5320] <... write resumed>) = 4 [pid 5319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5318] <... munmap resumed>) = 0 [pid 5316] chdir("./file0" [pid 5064] <... close resumed>) = 0 [pid 5319] <... openat resumed>) = 4 [pid 5318] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5320] close(3 [pid 5319] ioctl(4, LOOP_SET_FD, 3 [pid 5318] <... openat resumed>) = 4 [pid 5316] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5322 attached [pid 5320] <... close resumed>) = 0 [pid 5319] <... ioctl resumed>) = 0 [pid 5318] ioctl(4, LOOP_SET_FD, 3 [pid 5317] <... openat resumed>) = 4 [pid 5316] ioctl(4, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5322 [ 93.471308][ T5321] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.497671][ T5319] loop4: detected capacity change from 0 to 4096 [ 93.506387][ T5318] loop2: detected capacity change from 0 to 4096 [pid 5322] chdir("./20" [pid 5320] symlink("/dev/binderfs", "./binderfs" [pid 5319] close(3 [pid 5318] <... ioctl resumed>) = 0 [pid 5317] ioctl(4, LOOP_SET_FD, 3 [pid 5316] <... ioctl resumed>) = 0 [pid 5322] <... chdir resumed>) = 0 [pid 5320] <... symlink resumed>) = 0 [pid 5318] close(3) = 0 [pid 5318] mkdir("./file0", 0777) = 0 [pid 5318] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5319] <... close resumed>) = 0 [pid 5322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5319] mkdir("./file0", 0777 [pid 5317] <... ioctl resumed>) = 0 [pid 5316] close(4 [pid 5322] <... prctl resumed>) = 0 [pid 5320] memfd_create("syzkaller", 0 [pid 5319] <... mkdir resumed>) = 0 [pid 5316] <... close resumed>) = 0 [pid 5322] setpgid(0, 0 [pid 5320] <... memfd_create resumed>) = 3 [pid 5319] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5316] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5322] <... setpgid resumed>) = 0 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5317] close(3 [pid 5316] <... openat resumed>) = 4 [pid 5320] <... mmap resumed>) = 0x7f241a43b000 [pid 5322] <... openat resumed>) = 3 [pid 5317] <... close resumed>) = 0 [pid 5316] unlink("./file1" [pid 5322] write(3, "1000", 4 [pid 5316] <... unlink resumed>) = 0 [pid 5322] <... write resumed>) = 4 [pid 5317] mkdir("./file0", 0777 [ 93.526448][ T5317] loop3: detected capacity change from 0 to 4096 [pid 5316] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5322] close(3 [pid 5318] <... mount resumed>) = 0 [pid 5317] <... mkdir resumed>) = 0 [pid 5322] <... close resumed>) = 0 [pid 5318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5317] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5322] symlink("/dev/binderfs", "./binderfs" [pid 5318] <... openat resumed>) = 3 [pid 5322] <... symlink resumed>) = 0 [pid 5318] chdir("./file0" [pid 5322] memfd_create("syzkaller", 0 [pid 5318] <... chdir resumed>) = 0 [pid 5322] <... memfd_create resumed>) = 3 [pid 5318] ioctl(4, LOOP_CLR_FD [pid 5322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] <... ioctl resumed>) = 0 [pid 5317] <... mount resumed>) = 0 [pid 5322] <... mmap resumed>) = 0x7f241a43b000 [pid 5319] <... mount resumed>) = 0 [pid 5317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5318] close(4 [pid 5317] <... openat resumed>) = 3 [pid 5319] <... openat resumed>) = 3 [pid 5317] chdir("./file0" [pid 5319] chdir("./file0" [pid 5317] <... chdir resumed>) = 0 [pid 5319] <... chdir resumed>) = 0 [pid 5317] ioctl(4, LOOP_CLR_FD [pid 5319] ioctl(4, LOOP_CLR_FD [pid 5317] <... ioctl resumed>) = 0 [pid 5319] <... ioctl resumed>) = 0 [pid 5318] <... close resumed>) = 0 [pid 5317] close(4 [pid 5319] close(4 [pid 5317] <... close resumed>) = 0 [pid 5319] <... close resumed>) = 0 [pid 5317] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5319] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5317] <... openat resumed>) = 4 [pid 5319] <... openat resumed>) = 4 [pid 5318] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5317] unlink("./file1" [pid 5319] unlink("./file1" [pid 5318] <... openat resumed>) = 4 [ 93.568179][ T5323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.601876][ T5324] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5318] unlink("./file1") = 0 [pid 5318] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5320] <... write resumed>) = 2097152 [pid 5319] <... unlink resumed>) = 0 [pid 5319] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5320] munmap(0x7f241a43b000, 2097152 [pid 5322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5320] <... munmap resumed>) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 93.644864][ T5325] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5317] <... unlink resumed>) = 0 [pid 5320] <... openat resumed>) = 4 [pid 5317] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5320] close(3) = 0 [pid 5320] mkdir("./file0", 0777) = 0 [ 93.738610][ T5320] loop0: detected capacity change from 0 to 4096 [pid 5320] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5320] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./file0") = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5320] close(4) = 0 [ 93.796442][ T5326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5320] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5320] unlink("./file1") = 0 [pid 5320] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5322] <... write resumed>) = 2097152 [pid 5322] munmap(0x7f241a43b000, 2097152) = 0 [pid 5322] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5322] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5322] close(3) = 0 [pid 5318] <... pwritev resumed>) = 1114112 [pid 5318] exit_group(0 [pid 5316] <... pwritev resumed>) = 1114112 [pid 5322] mkdir("./file0", 0777 [pid 5318] <... exit_group resumed>) = ? [pid 5316] exit_group(0) = ? [pid 5322] <... mkdir resumed>) = 0 [ 93.899290][ T5322] loop1: detected capacity change from 0 to 4096 [pid 5322] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5322] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5322] chdir("./file0") = 0 [pid 5322] ioctl(4, LOOP_CLR_FD) = 0 [pid 5316] +++ exited with 0 +++ [pid 5322] close(4) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5322] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5322] <... openat resumed>) = 4 [pid 5068] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5322] unlink("./file1" [pid 5068] <... openat resumed>) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./20/binderfs") = 0 [ 94.022543][ T5327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5322] <... unlink resumed>) = 0 [pid 5322] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5318] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5318, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5065] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./21/binderfs" [pid 5319] <... pwritev resumed>) = 1114112 [pid 5065] <... unlink resumed>) = 0 [pid 5319] exit_group(0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] <... pwritev resumed>) = 1114112 [pid 5319] <... exit_group resumed>) = ? [pid 5317] exit_group(0 [pid 5068] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./20/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./20") = 0 [pid 5068] mkdir("./21", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5328 ./strace-static-x86_64: Process 5328 attached [pid 5328] chdir("./21") = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] setpgid(0, 0) = 0 [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5328] write(3, "1000", 4) = 4 [pid 5328] close(3) = 0 [pid 5328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5328] memfd_create("syzkaller", 0) = 3 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./21/file0" [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./21") = 0 [pid 5317] +++ exited with 0 +++ [pid 5065] mkdir("./22", 0777 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... mkdir resumed>) = 0 [pid 5320] <... pwritev resumed>) = 1114112 [pid 5319] +++ exited with 0 +++ [pid 5066] <... restart_syscall resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5320] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 5320] <... exit_group resumed>) = ? [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5329 [pid 5066] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] fstat(3, [pid 5067] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(3, [pid 5066] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./20/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] lstat("./20/binderfs", [pid 5067] unlink("./20/binderfs" [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] unlink("./20/binderfs" [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5329 attached [pid 5329] chdir("./22") = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] <... write resumed>) = 2097152 [pid 5328] munmap(0x7f241a43b000, 2097152 [pid 5329] setpgid(0, 0) = 0 [pid 5328] <... munmap resumed>) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5328] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5329] <... openat resumed>) = 3 [pid 5328] <... openat resumed>) = 4 [pid 5329] write(3, "1000", 4 [pid 5328] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5329] <... write resumed>) = 4 [pid 5329] close(3) = 0 [pid 5329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5329] memfd_create("syzkaller", 0 [pid 5322] <... pwritev resumed>) = 1114112 [pid 5322] exit_group(0) = ? [pid 5329] <... memfd_create resumed>) = 3 [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./20/file0", [pid 5328] <... ioctl resumed>) = 0 [pid 5067] lstat("./20/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5328] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... close resumed>) = 0 [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] mkdir("./file0", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 4 [pid 5328] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5067] fstat(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./20/file0" [pid 5067] rmdir("./20/file0" [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [ 94.396011][ T5328] loop5: detected capacity change from 0 to 4096 [pid 5066] getdents64(3, [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5320] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5067] close(3 [pid 5066] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./20" [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5067] rmdir("./20" [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] mkdir("./21", 0777 [pid 5067] mkdir("./21", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5063] fstat(3, [pid 5329] <... write resumed>) = 2097152 [pid 5067] close(3 [pid 5066] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5331 [pid 5063] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5332 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./20/binderfs") = 0 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5332 attached [pid 5329] munmap(0x7f241a43b000, 2097152 [pid 5322] +++ exited with 0 +++ [pid 5328] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5331 attached [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5322, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5331] chdir("./21") = 0 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5331] setpgid(0, 0 [pid 5332] chdir("./21" [pid 5331] <... setpgid resumed>) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5332] <... chdir resumed>) = 0 [pid 5331] <... openat resumed>) = 3 [pid 5329] <... munmap resumed>) = 0 [pid 5328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5331] write(3, "1000", 4 [pid 5329] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5328] <... openat resumed>) = 3 [pid 5332] <... prctl resumed>) = 0 [pid 5331] <... write resumed>) = 4 [pid 5328] chdir("./file0" [pid 5329] <... openat resumed>) = 4 [pid 5064] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] setpgid(0, 0 [pid 5331] close(3 [pid 5328] <... chdir resumed>) = 0 [pid 5329] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5332] <... setpgid resumed>) = 0 [pid 5331] <... close resumed>) = 0 [pid 5328] ioctl(4, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5331] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... openat resumed>) = 3 [pid 5331] <... symlink resumed>) = 0 [pid 5064] fstat(3, [pid 5331] memfd_create("syzkaller", 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5331] <... memfd_create resumed>) = 3 [pid 5328] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, [pid 5332] <... openat resumed>) = 3 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5328] close(4 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5332] write(3, "1000", 4 [pid 5331] <... mmap resumed>) = 0x7f241a43b000 [pid 5328] <... close resumed>) = 0 [pid 5064] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] <... write resumed>) = 4 [pid 5328] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5332] close(3 [pid 5064] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5332] <... close resumed>) = 0 [pid 5328] <... openat resumed>) = 4 [pid 5064] unlink("./20/binderfs" [pid 5332] symlink("/dev/binderfs", "./binderfs" [pid 5328] unlink("./file1" [pid 5064] <... unlink resumed>) = 0 [pid 5332] <... symlink resumed>) = 0 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] memfd_create("syzkaller", 0 [pid 5328] <... unlink resumed>) = 0 [pid 5332] <... memfd_create resumed>) = 3 [pid 5328] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5329] <... ioctl resumed>) = 0 [pid 5329] close(3) = 0 [pid 5329] mkdir("./file0", 0777) = 0 [ 94.510679][ T5330] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.531313][ T5329] loop2: detected capacity change from 0 to 4096 [pid 5329] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] fstat(4, [pid 5064] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5329] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5331] <... write resumed>) = 2097152 [pid 5329] chdir("./file0" [pid 5064] <... openat resumed>) = 4 [pid 5329] <... chdir resumed>) = 0 [pid 5064] fstat(4, [pid 5329] ioctl(4, LOOP_CLR_FD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5329] <... ioctl resumed>) = 0 [pid 5064] getdents64(4, [pid 5329] close(4 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5329] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5329] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5329] <... openat resumed>) = 4 [pid 5064] close(4 [pid 5329] unlink("./file1" [pid 5064] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] rmdir("./20/file0") = 0 [pid 5063] getdents64(4, [pid 5064] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5064] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] rmdir("./20" [pid 5063] rmdir("./20/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5331] munmap(0x7f241a43b000, 2097152 [pid 5064] mkdir("./21", 0777 [pid 5331] <... munmap resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(3, [pid 5064] <... openat resumed>) = 3 [pid 5331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5331] <... openat resumed>) = 4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [ 94.638146][ T5333] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.677469][ T5331] loop3: detected capacity change from 0 to 4096 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] rmdir("./20" [pid 5331] <... ioctl resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5334 [pid 5063] <... rmdir resumed>) = 0 [pid 5331] close(3 [pid 5063] mkdir("./21", 0777 [pid 5331] <... close resumed>) = 0 ./strace-static-x86_64: Process 5334 attached [pid 5329] <... unlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5334] chdir("./21" [pid 5331] mkdir("./file0", 0777 [pid 5329] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5334] <... chdir resumed>) = 0 [pid 5331] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5331] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5334] <... prctl resumed>) = 0 [pid 5334] setpgid(0, 0 [pid 5063] close(3 [pid 5334] <... setpgid resumed>) = 0 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5334] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5334] write(3, "1000", 4) = 4 [pid 5334] close(3) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5335 [pid 5334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5334] memfd_create("syzkaller", 0) = 3 [pid 5334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 ./strace-static-x86_64: Process 5335 attached [pid 5335] chdir("./21") = 0 [pid 5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5335] setpgid(0, 0) = 0 [pid 5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5335] write(3, "1000", 4 [pid 5332] <... write resumed>) = 2097152 [pid 5331] <... mount resumed>) = 0 [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5335] <... write resumed>) = 4 [pid 5332] munmap(0x7f241a43b000, 2097152 [pid 5331] <... openat resumed>) = 3 [pid 5331] chdir("./file0" [pid 5335] close(3 [pid 5331] <... chdir resumed>) = 0 [pid 5331] ioctl(4, LOOP_CLR_FD [pid 5335] <... close resumed>) = 0 [pid 5334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5332] <... munmap resumed>) = 0 [pid 5331] <... ioctl resumed>) = 0 [pid 5335] symlink("/dev/binderfs", "./binderfs" [pid 5332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5331] close(4) = 0 [pid 5331] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5335] <... symlink resumed>) = 0 [pid 5332] <... openat resumed>) = 4 [pid 5331] <... openat resumed>) = 4 [pid 5335] memfd_create("syzkaller", 0 [pid 5332] ioctl(4, LOOP_SET_FD, 3 [pid 5331] unlink("./file1" [pid 5335] <... memfd_create resumed>) = 3 [pid 5332] <... ioctl resumed>) = 0 [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5332] close(3) = 0 [pid 5332] mkdir("./file0", 0777 [pid 5331] <... unlink resumed>) = 0 [ 94.780812][ T5336] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.816195][ T5332] loop4: detected capacity change from 0 to 4096 [pid 5331] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5332] <... mkdir resumed>) = 0 [pid 5332] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5334] <... write resumed>) = 2097152 [pid 5334] munmap(0x7f241a43b000, 2097152) = 0 [pid 5334] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5334] ioctl(4, LOOP_SET_FD, 3 [pid 5332] <... mount resumed>) = 0 [pid 5332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5332] chdir("./file0") = 0 [pid 5332] ioctl(4, LOOP_CLR_FD [pid 5335] <... write resumed>) = 2097152 [pid 5334] <... ioctl resumed>) = 0 [pid 5335] munmap(0x7f241a43b000, 2097152 [pid 5334] close(3 [pid 5332] <... ioctl resumed>) = 0 [pid 5334] <... close resumed>) = 0 [pid 5334] mkdir("./file0", 0777) = 0 [pid 5334] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5335] <... munmap resumed>) = 0 [pid 5332] close(4 [ 94.913017][ T5334] loop1: detected capacity change from 0 to 4096 [ 94.913426][ T5337] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5332] <... close resumed>) = 0 [pid 5335] ioctl(4, LOOP_SET_FD, 3 [pid 5332] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5332] unlink("./file1") = 0 [pid 5332] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5335] <... ioctl resumed>) = 0 [pid 5335] close(3 [pid 5334] <... mount resumed>) = 0 [pid 5334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 94.982482][ T5335] loop0: detected capacity change from 0 to 4096 [pid 5334] chdir("./file0" [pid 5335] <... close resumed>) = 0 [pid 5334] <... chdir resumed>) = 0 [pid 5334] ioctl(4, LOOP_CLR_FD) = 0 [pid 5334] close(4 [pid 5335] mkdir("./file0", 0777 [pid 5334] <... close resumed>) = 0 [pid 5334] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5334] unlink("./file1" [pid 5335] <... mkdir resumed>) = 0 [ 95.026589][ T5338] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5335] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5329] <... pwritev resumed>) = 1114112 [pid 5335] <... mount resumed>) = 0 [pid 5329] exit_group(0) = ? [pid 5335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5335] chdir("./file0") = 0 [pid 5334] <... unlink resumed>) = 0 [pid 5334] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5335] ioctl(4, LOOP_CLR_FD) = 0 [pid 5328] <... pwritev resumed>) = 1114112 [pid 5328] exit_group(0) = ? [ 95.094880][ T5339] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5335] close(4) = 0 [pid 5335] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5335] unlink("./file1") = 0 [pid 5335] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5329] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5328] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5328, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5065] fstat(3, [pid 5068] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./22/binderfs", [pid 5068] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] unlink("./22/binderfs" [pid 5068] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5068] lstat("./21/binderfs", [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./21/binderfs") = 0 [pid 5068] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5331] <... pwritev resumed>) = 1114112 [pid 5331] exit_group(0 [pid 5065] <... umount2 resumed>) = 0 [pid 5331] <... exit_group resumed>) = ? [pid 5332] <... pwritev resumed>) = 1114112 [pid 5332] exit_group(0) = ? [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./21/file0") = 0 [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5065] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./21" [pid 5065] fstat(4, [pid 5068] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] mkdir("./22", 0777 [pid 5065] getdents64(4, [pid 5068] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./22/file0" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5068] close(3 [pid 5065] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./22" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./23", 0777 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5340 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5340 attached [pid 5340] chdir("./22" [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5341 [pid 5340] <... chdir resumed>) = 0 [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5340] setpgid(0, 0) = 0 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5340] write(3, "1000", 4) = 4 [pid 5340] close(3) = 0 [pid 5340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5340] memfd_create("syzkaller", 0) = 3 [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 ./strace-static-x86_64: Process 5341 attached [pid 5341] chdir("./23") = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5341] memfd_create("syzkaller", 0) = 3 [pid 5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5331] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5334] <... pwritev resumed>) = 1114112 [pid 5066] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5334] exit_group(0 [pid 5332] +++ exited with 0 +++ [pid 5334] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] <... write resumed>) = 2097152 [pid 5066] lstat("./21/binderfs", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5332, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] munmap(0x7f241a43b000, 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./21/binderfs" [pid 5067] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... munmap resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./21/binderfs", [pid 5341] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5341] <... openat resumed>) = 4 [pid 5341] ioctl(4, LOOP_SET_FD, 3 [pid 5067] unlink("./21/binderfs") = 0 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... ioctl resumed>) = 0 [pid 5341] close(3) = 0 [pid 5341] mkdir("./file0", 0777) = 0 [pid 5340] <... write resumed>) = 2097152 [pid 5341] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5340] munmap(0x7f241a43b000, 2097152) = 0 [pid 5340] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5340] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = 0 [ 95.537398][ T5341] loop2: detected capacity change from 0 to 4096 [ 95.565020][ T5340] loop5: detected capacity change from 0 to 4096 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5341] <... mount resumed>) = 0 [pid 5340] <... ioctl resumed>) = 0 [pid 5335] <... pwritev resumed>) = 1114112 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5340] close(3 [pid 5335] exit_group(0 [pid 5334] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] <... openat resumed>) = 3 [pid 5340] <... close resumed>) = 0 [pid 5335] <... exit_group resumed>) = ? [pid 5067] lstat("./21/file0", [pid 5066] <... openat resumed>) = 4 [pid 5341] chdir("./file0" [pid 5340] mkdir("./file0", 0777 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5334, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5341] <... chdir resumed>) = 0 [pid 5340] <... mkdir resumed>) = 0 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] ioctl(4, LOOP_CLR_FD [pid 5340] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] fstat(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] close(4 [pid 5067] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5341] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5064] fstat(3, [pid 5341] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(3, [pid 5341] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5341] unlink("./file1" [pid 5067] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5064] lstat("./21/binderfs", [pid 5067] <... close resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] rmdir("./21/file0" [pid 5064] unlink("./21/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] rmdir("./21/file0" [pid 5064] <... unlink resumed>) = 0 [ 95.609468][ T5342] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5067] close(3) = 0 [pid 5067] rmdir("./21") = 0 [pid 5067] mkdir("./22", 0777) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] close(3 [pid 5340] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] rmdir("./21" [pid 5340] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5340] chdir("./file0" [pid 5067] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5340] <... chdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./22", 0777 [pid 5340] ioctl(4, LOOP_CLR_FD [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5344 [pid 5066] <... mkdir resumed>) = 0 [pid 5340] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5340] close(4) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5340] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5344 attached [pid 5344] chdir("./22" [pid 5340] <... openat resumed>) = 4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5344] <... chdir resumed>) = 0 [pid 5340] unlink("./file1" [pid 5066] close(3 [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... close resumed>) = 0 [pid 5344] <... prctl resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5344] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5344] <... setpgid resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5345 [pid 5344] <... openat resumed>) = 3 [pid 5344] write(3, "1000", 4./strace-static-x86_64: Process 5345 attached ) = 4 [pid 5335] +++ exited with 0 +++ [pid 5344] close(3 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] chdir("./22" [pid 5344] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5345] <... chdir resumed>) = 0 [ 95.678284][ T5343] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5344] symlink("/dev/binderfs", "./binderfs" [pid 5340] <... unlink resumed>) = 0 [pid 5064] lstat("./21/file0", [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5344] <... symlink resumed>) = 0 [pid 5340] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5345] <... prctl resumed>) = 0 [pid 5344] memfd_create("syzkaller", 0 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] setpgid(0, 0 [pid 5344] <... memfd_create resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... setpgid resumed>) = 0 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5344] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... openat resumed>) = 3 [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] fstat(4, [pid 5063] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5345] write(3, "1000", 4 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5345] <... write resumed>) = 4 [pid 5064] getdents64(4, [pid 5063] fstat(3, [pid 5345] close(3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5345] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5063] getdents64(3, [pid 5345] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5345] <... symlink resumed>) = 0 [pid 5064] close(4 [pid 5063] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] memfd_create("syzkaller", 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5345] <... memfd_create resumed>) = 3 [pid 5064] rmdir("./21/file0" [pid 5063] lstat("./21/binderfs", [pid 5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5345] <... mmap resumed>) = 0x7f241a43b000 [pid 5064] getdents64(3, [pid 5063] unlink("./21/binderfs" [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] close(3 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./21") = 0 [pid 5064] mkdir("./22", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5346 ./strace-static-x86_64: Process 5346 attached [pid 5346] chdir("./22") = 0 [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5346] memfd_create("syzkaller", 0) = 3 [pid 5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5346] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5344] <... write resumed>) = 2097152 [pid 5063] rmdir("./21/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./21") = 0 [pid 5063] mkdir("./22", 0777 [pid 5344] munmap(0x7f241a43b000, 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 5345] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5345] munmap(0x7f241a43b000, 2097152 [pid 5344] <... munmap resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5345] <... munmap resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5345] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5344] <... openat resumed>) = 4 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5345] <... openat resumed>) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 5345] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5347 ./strace-static-x86_64: Process 5347 attached [pid 5347] chdir("./22" [pid 5345] <... ioctl resumed>) = 0 [pid 5347] <... chdir resumed>) = 0 [pid 5347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5347] setpgid(0, 0 [pid 5345] close(3 [pid 5347] <... setpgid resumed>) = 0 [pid 5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5344] <... ioctl resumed>) = 0 [pid 5347] <... openat resumed>) = 3 [pid 5345] <... close resumed>) = 0 [pid 5344] close(3 [pid 5347] write(3, "1000", 4 [pid 5345] mkdir("./file0", 0777 [pid 5344] <... close resumed>) = 0 [pid 5347] <... write resumed>) = 4 [pid 5344] mkdir("./file0", 0777 [pid 5347] close(3 [pid 5345] <... mkdir resumed>) = 0 [pid 5344] <... mkdir resumed>) = 0 [pid 5347] <... close resumed>) = 0 [pid 5344] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5345] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5347] memfd_create("syzkaller", 0) = 3 [pid 5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [ 95.964845][ T5344] loop4: detected capacity change from 0 to 4096 [ 95.976577][ T5345] loop3: detected capacity change from 0 to 4096 [pid 5347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5345] <... mount resumed>) = 0 [pid 5340] <... pwritev resumed>) = 1114112 [pid 5346] <... write resumed>) = 2097152 [pid 5346] munmap(0x7f241a43b000, 2097152 [pid 5345] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5340] exit_group(0 [pid 5345] <... openat resumed>) = 3 [pid 5340] <... exit_group resumed>) = ? [pid 5345] chdir("./file0") = 0 [pid 5345] ioctl(4, LOOP_CLR_FD) = 0 [pid 5345] close(4 [pid 5341] <... pwritev resumed>) = 1114112 [pid 5345] <... close resumed>) = 0 [pid 5346] <... munmap resumed>) = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5346] ioctl(4, LOOP_SET_FD, 3 [pid 5345] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5341] exit_group(0) = ? [ 96.038646][ T5348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.074792][ T5346] loop1: detected capacity change from 0 to 4096 [pid 5345] <... openat resumed>) = 4 [pid 5344] <... mount resumed>) = 0 [pid 5345] unlink("./file1" [pid 5344] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./file0" [pid 5345] <... unlink resumed>) = 0 [pid 5344] <... chdir resumed>) = 0 [pid 5345] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5344] ioctl(4, LOOP_CLR_FD) = 0 [pid 5344] close(4) = 0 [pid 5344] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5344] unlink("./file1" [pid 5346] <... ioctl resumed>) = 0 [ 96.081362][ T5349] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5346] close(3) = 0 [pid 5346] mkdir("./file0", 0777) = 0 [pid 5346] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5344] <... unlink resumed>) = 0 [pid 5344] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5347] <... write resumed>) = 2097152 [pid 5346] <... mount resumed>) = 0 [pid 5346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5346] chdir("./file0") = 0 [pid 5346] ioctl(4, LOOP_CLR_FD [pid 5347] munmap(0x7f241a43b000, 2097152 [pid 5346] <... ioctl resumed>) = 0 [pid 5340] +++ exited with 0 +++ [pid 5347] <... munmap resumed>) = 0 [pid 5346] close(4) = 0 [pid 5347] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5346] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5347] <... openat resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5340, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5347] ioctl(4, LOOP_SET_FD, 3 [pid 5346] <... openat resumed>) = 4 [pid 5068] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5346] unlink("./file1" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, [pid 5346] <... unlink resumed>) = 0 [pid 5346] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5341] +++ exited with 0 +++ [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./22/binderfs", [pid 5065] <... restart_syscall resumed>) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./22/binderfs") = 0 [pid 5065] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5347] close(3 [pid 5065] <... openat resumed>) = 3 [ 96.191529][ T5350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.221696][ T5347] loop0: detected capacity change from 0 to 4096 [pid 5347] <... close resumed>) = 0 [pid 5065] fstat(3, [pid 5347] mkdir("./file0", 0777 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5347] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5347] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./23/binderfs") = 0 [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5347] <... mount resumed>) = 0 [pid 5347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5347] chdir("./file0" [pid 5068] <... umount2 resumed>) = 0 [pid 5347] <... chdir resumed>) = 0 [pid 5347] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... close resumed>) = 0 [pid 5068] lstat("./22/file0", [pid 5347] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5347] <... openat resumed>) = 4 [pid 5068] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] unlink("./file1" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 5065] lstat("./23/file0", [pid 5068] fstat(4, [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, [pid 5065] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] fstat(4, [pid 5068] close(4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] rmdir("./22/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [ 96.338577][ T5351] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5068] close(3 [pid 5065] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./23/file0" [pid 5068] rmdir("./22" [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5347] <... unlink resumed>) = 0 [pid 5068] mkdir("./23", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5347] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] rmdir("./23" [pid 5345] <... pwritev resumed>) = 1114112 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... rmdir resumed>) = 0 [pid 5345] exit_group(0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./24", 0777 [pid 5345] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5352 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5353 ./strace-static-x86_64: Process 5353 attached ./strace-static-x86_64: Process 5352 attached [pid 5353] chdir("./24") = 0 [pid 5352] chdir("./23" [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5352] <... chdir resumed>) = 0 [pid 5353] <... prctl resumed>) = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5353] setpgid(0, 0 [pid 5352] <... prctl resumed>) = 0 [pid 5353] <... setpgid resumed>) = 0 [pid 5352] setpgid(0, 0 [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5352] <... setpgid resumed>) = 0 [pid 5353] <... openat resumed>) = 3 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5353] write(3, "1000", 4 [pid 5352] <... openat resumed>) = 3 [pid 5353] <... write resumed>) = 4 [pid 5352] write(3, "1000", 4 [pid 5353] close(3 [pid 5352] <... write resumed>) = 4 [pid 5353] <... close resumed>) = 0 [pid 5352] close(3 [pid 5353] symlink("/dev/binderfs", "./binderfs" [pid 5352] <... close resumed>) = 0 [pid 5353] <... symlink resumed>) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs" [pid 5353] memfd_create("syzkaller", 0 [pid 5352] <... symlink resumed>) = 0 [pid 5353] <... memfd_create resumed>) = 3 [pid 5352] memfd_create("syzkaller", 0 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5352] <... memfd_create resumed>) = 3 [pid 5353] <... mmap resumed>) = 0x7f241a43b000 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5344] <... pwritev resumed>) = 1114112 [pid 5344] exit_group(0) = ? [pid 5345] +++ exited with 0 +++ [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5345, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5066] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./22/binderfs") = 0 [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... write resumed>) = 2097152 [pid 5352] munmap(0x7f241a43b000, 2097152) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5344] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5353] <... write resumed>) = 2097152 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5353] munmap(0x7f241a43b000, 2097152 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5353] <... munmap resumed>) = 0 [pid 5067] lstat("./22/binderfs", [pid 5353] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5353] <... openat resumed>) = 4 [pid 5067] unlink("./22/binderfs" [ 96.629485][ T5352] loop5: detected capacity change from 0 to 4096 [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... unlink resumed>) = 0 [pid 5352] close(3 [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... close resumed>) = 0 [pid 5352] mkdir("./file0", 0777 [pid 5346] <... pwritev resumed>) = 1114112 [pid 5346] exit_group(0 [pid 5352] <... mkdir resumed>) = 0 [pid 5346] <... exit_group resumed>) = ? [pid 5352] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5353] <... ioctl resumed>) = 0 [pid 5353] close(3) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5353] mkdir("./file0", 0777) = 0 [pid 5353] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.672305][ T5353] loop2: detected capacity change from 0 to 4096 [pid 5066] lstat("./22/file0", [pid 5352] <... mount resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] chdir("./file0" [pid 5066] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5352] <... chdir resumed>) = 0 [pid 5352] ioctl(4, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5352] <... ioctl resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5352] close(4 [pid 5066] getdents64(4, [pid 5352] <... close resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5352] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5352] unlink("./file1" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./22/file0" [ 96.726954][ T5354] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5353] <... mount resumed>) = 0 [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5353] <... openat resumed>) = 3 [pid 5347] <... pwritev resumed>) = 1114112 [pid 5067] lstat("./22/file0", [pid 5066] close(3 [pid 5353] chdir("./file0" [pid 5347] exit_group(0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5353] <... chdir resumed>) = 0 [pid 5352] <... unlink resumed>) = 0 [pid 5347] <... exit_group resumed>) = ? [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5353] ioctl(4, LOOP_CLR_FD [pid 5352] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5353] <... ioctl resumed>) = 0 [pid 5353] close(4) = 0 [pid 5353] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./22") = 0 [pid 5067] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] mkdir("./23", 0777 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5353] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5353] unlink("./file1" [pid 5346] +++ exited with 0 +++ [pid 5067] getdents64(4, [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5067] close(4 [pid 5066] <... close resumed>) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... restart_syscall resumed>) = 0 [pid 5067] rmdir("./22/file0" [pid 5064] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5356 [pid 5064] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] <... openat resumed>) = 3 [ 96.771017][ T5355] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] close(3 [pid 5064] fstat(3, [pid 5067] <... close resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./22" [pid 5064] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5353] <... unlink resumed>) = 0 [pid 5067] mkdir("./23", 0777 [pid 5064] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5356 attached [pid 5353] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] chdir("./23" [pid 5064] lstat("./22/binderfs", [pid 5356] <... chdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] unlink("./22/binderfs" [pid 5356] <... prctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5356] setpgid(0, 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... setpgid resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(3 [pid 5356] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5356] write(3, "1000", 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5356] <... write resumed>) = 4 [pid 5356] close(3) = 0 [pid 5356] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5357 [pid 5356] <... symlink resumed>) = 0 [pid 5356] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5357 attached [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5357] chdir("./23" [pid 5356] <... mmap resumed>) = 0x7f241a43b000 [pid 5357] <... chdir resumed>) = 0 [pid 5357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5357] setpgid(0, 0) = 0 [pid 5357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5357] write(3, "1000", 4) = 4 [pid 5357] close(3) = 0 [pid 5357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5357] memfd_create("syzkaller", 0) = 3 [pid 5357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./22/file0") = 0 [pid 5347] +++ exited with 0 +++ [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5347, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5064] close(3) = 0 [pid 5064] rmdir("./22" [pid 5063] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] mkdir("./23", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] getdents64(3, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5357] <... write resumed>) = 2097152 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... write resumed>) = 2097152 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] munmap(0x7f241a43b000, 2097152 [pid 5064] close(3 [pid 5063] lstat("./22/binderfs", [pid 5356] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5356] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] unlink("./22/binderfs" [pid 5356] <... openat resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5356] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5358 attached [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5358 [pid 5358] chdir("./23") = 0 [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5357] munmap(0x7f241a43b000, 2097152 [pid 5358] <... prctl resumed>) = 0 [pid 5357] <... munmap resumed>) = 0 [pid 5358] setpgid(0, 0) = 0 [pid 5356] <... ioctl resumed>) = 0 [pid 5356] close(3) = 0 [pid 5356] mkdir("./file0", 0777 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5356] <... mkdir resumed>) = 0 [pid 5357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5358] <... openat resumed>) = 3 [pid 5358] write(3, "1000", 4 [pid 5357] ioctl(4, LOOP_SET_FD, 3 [pid 5358] <... write resumed>) = 4 [pid 5358] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5358] <... close resumed>) = 0 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5358] symlink("/dev/binderfs", "./binderfs" [pid 5352] <... pwritev resumed>) = 1114112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] <... ioctl resumed>) = 0 [pid 5358] <... symlink resumed>) = 0 [pid 5357] close(3 [pid 5063] lstat("./22/file0", [pid 5352] exit_group(0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5357] <... close resumed>) = 0 [pid 5358] memfd_create("syzkaller", 0 [pid 5357] mkdir("./file0", 0777 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... exit_group resumed>) = ? [ 97.038359][ T5356] loop3: detected capacity change from 0 to 4096 [ 97.073422][ T5357] loop4: detected capacity change from 0 to 4096 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] <... mkdir resumed>) = 0 [pid 5357] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5358] <... memfd_create resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... openat resumed>) = 4 [pid 5358] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./22/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./22") = 0 [pid 5063] mkdir("./23", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5357] <... mount resumed>) = 0 [pid 5356] <... mount resumed>) = 0 [pid 5063] close(3 [pid 5357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5357] <... openat resumed>) = 3 [pid 5356] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5357] chdir("./file0" [pid 5356] chdir("./file0" [pid 5357] <... chdir resumed>) = 0 [pid 5356] <... chdir resumed>) = 0 [pid 5357] ioctl(4, LOOP_CLR_FD [pid 5356] ioctl(4, LOOP_CLR_FD [pid 5357] <... ioctl resumed>) = 0 [pid 5356] <... ioctl resumed>) = 0 [pid 5357] close(4 [pid 5356] close(4 [pid 5357] <... close resumed>) = 0 [pid 5356] <... close resumed>) = 0 [pid 5357] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5356] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5357] <... openat resumed>) = 4 [pid 5356] <... openat resumed>) = 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5357] unlink("./file1" [pid 5356] unlink("./file1" [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5361 ./strace-static-x86_64: Process 5361 attached [pid 5356] <... unlink resumed>) = 0 [pid 5361] chdir("./23" [ 97.159454][ T5359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.161901][ T5360] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5356] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5361] <... chdir resumed>) = 0 [pid 5361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5361] setpgid(0, 0 [pid 5352] +++ exited with 0 +++ [pid 5361] <... setpgid resumed>) = 0 [pid 5358] <... write resumed>) = 2097152 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5358] munmap(0x7f241a43b000, 2097152 [pid 5353] <... pwritev resumed>) = 1114112 [pid 5361] write(3, "1000", 4 [pid 5068] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] <... write resumed>) = 4 [pid 5353] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5361] close(3 [pid 5353] <... exit_group resumed>) = ? [pid 5361] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5361] symlink("/dev/binderfs", "./binderfs" [pid 5068] fstat(3, [pid 5361] <... symlink resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5361] memfd_create("syzkaller", 0 [pid 5068] getdents64(3, [pid 5361] <... memfd_create resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5361] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./23/binderfs") = 0 [pid 5068] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5358] <... munmap resumed>) = 0 [pid 5358] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5358] ioctl(4, LOOP_SET_FD, 3 [pid 5357] <... unlink resumed>) = 0 [pid 5357] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5358] <... ioctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5358] close(3) = 0 [pid 5358] mkdir("./file0", 0777) = 0 [pid 5358] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5068] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.292113][ T5358] loop1: detected capacity change from 0 to 4096 [pid 5068] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./23/file0" [pid 5358] <... mount resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5358] chdir("./file0") = 0 [pid 5068] getdents64(3, [pid 5358] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5358] close(4 [pid 5068] close(3 [pid 5358] <... close resumed>) = 0 [pid 5358] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5068] <... close resumed>) = 0 [pid 5358] unlink("./file1" [pid 5068] rmdir("./23") = 0 [pid 5353] +++ exited with 0 +++ [pid 5068] mkdir("./24", 0777 [pid 5361] <... write resumed>) = 2097152 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5361] munmap(0x7f241a43b000, 2097152 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 97.389747][ T5362] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... openat resumed>) = 3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5065] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] fstat(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5363 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./24/binderfs") = 0 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] <... munmap resumed>) = 0 [pid 5358] <... unlink resumed>) = 0 [pid 5361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5358] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5361] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5363 attached [pid 5363] chdir("./24" [pid 5361] ioctl(4, LOOP_SET_FD, 3 [pid 5363] <... chdir resumed>) = 0 [pid 5361] <... ioctl resumed>) = 0 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5363] setpgid(0, 0) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5363] write(3, "1000", 4) = 4 [pid 5361] close(3 [pid 5363] close(3 [pid 5361] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5363] <... close resumed>) = 0 [pid 5363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5361] mkdir("./file0", 0777 [pid 5363] memfd_create("syzkaller", 0) = 3 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5361] <... mkdir resumed>) = 0 [pid 5356] <... pwritev resumed>) = 1114112 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5356] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5356] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./24/file0") = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./24") = 0 [pid 5065] mkdir("./25", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5364 [ 97.488833][ T5361] loop0: detected capacity change from 0 to 4096 [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5364 attached [pid 5364] chdir("./25") = 0 [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5364] setpgid(0, 0) = 0 [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5364] write(3, "1000", 4) = 4 [pid 5364] close(3) = 0 [pid 5364] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5364] memfd_create("syzkaller", 0) = 3 [pid 5364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5361] <... mount resumed>) = 0 [pid 5361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5361] chdir("./file0") = 0 [pid 5363] <... write resumed>) = 2097152 [pid 5361] ioctl(4, LOOP_CLR_FD) = 0 [pid 5361] close(4) = 0 [pid 5361] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 97.587972][ T5365] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5361] unlink("./file1") = 0 [pid 5361] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5363] munmap(0x7f241a43b000, 2097152 [pid 5364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5363] <... munmap resumed>) = 0 [pid 5363] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5356] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5356, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5363] close(3) = 0 [pid 5363] mkdir("./file0", 0777 [pid 5066] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5363] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5364] <... write resumed>) = 2097152 [pid 5066] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5364] munmap(0x7f241a43b000, 2097152 [pid 5066] unlink("./23/binderfs") = 0 [ 97.678753][ T5363] loop5: detected capacity change from 0 to 4096 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] <... munmap resumed>) = 0 [pid 5364] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5364] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5364] close(3) = 0 [pid 5364] mkdir("./file0", 0777) = 0 [pid 5364] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5363] <... mount resumed>) = 0 [pid 5363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5363] chdir("./file0") = 0 [pid 5363] ioctl(4, LOOP_CLR_FD) = 0 [pid 5363] close(4) = 0 [pid 5363] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5363] unlink("./file1" [pid 5364] <... mount resumed>) = 0 [pid 5364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5364] chdir("./file0") = 0 [pid 5364] ioctl(4, LOOP_CLR_FD) = 0 [pid 5364] close(4) = 0 [pid 5364] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 97.744124][ T5364] loop2: detected capacity change from 0 to 4096 [ 97.777360][ T5366] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5364] unlink("./file1" [pid 5363] <... unlink resumed>) = 0 [pid 5357] <... pwritev resumed>) = 1114112 [pid 5066] <... umount2 resumed>) = 0 [pid 5363] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5357] exit_group(0 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5357] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.801847][ T5367] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./23/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5364] <... unlink resumed>) = 0 [pid 5066] rmdir("./23" [pid 5364] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./24", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5368 [pid 5357] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5357, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5067] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5368 attached [pid 5067] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5358] <... pwritev resumed>) = 1114112 [pid 5067] lstat("./23/binderfs", [pid 5368] chdir("./24" [pid 5358] exit_group(0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5358] <... exit_group resumed>) = ? [pid 5067] unlink("./23/binderfs" [pid 5368] <... chdir resumed>) = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... unlink resumed>) = 0 [pid 5368] <... prctl resumed>) = 0 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] setpgid(0, 0) = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] memfd_create("syzkaller", 0) = 3 [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5358] +++ exited with 0 +++ [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5067] close(4) = 0 [pid 5067] rmdir("./23/file0") = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./23") = 0 [pid 5064] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./24", 0777) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5064] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5064] fstat(3, [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5369 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5369 attached [pid 5369] chdir("./24") = 0 [pid 5369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5369] setpgid(0, 0) = 0 [pid 5369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5368] <... write resumed>) = 2097152 [pid 5363] <... pwritev resumed>) = 1114112 [pid 5361] <... pwritev resumed>) = 1114112 [pid 5064] lstat("./23/binderfs", [pid 5369] <... openat resumed>) = 3 [pid 5368] munmap(0x7f241a43b000, 2097152 [pid 5363] exit_group(0 [pid 5361] exit_group(0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5369] write(3, "1000", 4 [pid 5368] <... munmap resumed>) = 0 [pid 5363] <... exit_group resumed>) = ? [pid 5361] <... exit_group resumed>) = ? [pid 5064] unlink("./23/binderfs" [pid 5369] <... write resumed>) = 4 [pid 5368] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5364] <... pwritev resumed>) = 1114112 [pid 5369] close(3 [pid 5364] exit_group(0 [pid 5369] <... close resumed>) = 0 [pid 5364] <... exit_group resumed>) = ? [pid 5369] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] <... openat resumed>) = 4 [pid 5064] <... unlink resumed>) = 0 [pid 5369] memfd_create("syzkaller", 0) = 3 [pid 5368] ioctl(4, LOOP_SET_FD, 3 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5368] <... ioctl resumed>) = 0 [pid 5368] close(3) = 0 [pid 5368] mkdir("./file0", 0777) = 0 [pid 5368] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5064] <... umount2 resumed>) = 0 [ 98.189347][ T5368] loop3: detected capacity change from 0 to 4096 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5368] <... mount resumed>) = 0 [pid 5064] fstat(4, [pid 5368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5368] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5368] chdir("./file0" [pid 5064] close(4) = 0 [pid 5064] rmdir("./23/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5368] <... chdir resumed>) = 0 [pid 5064] close(3 [pid 5368] ioctl(4, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5368] <... ioctl resumed>) = 0 [pid 5064] rmdir("./23" [pid 5368] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 5368] <... close resumed>) = 0 [pid 5064] mkdir("./24", 0777 [pid 5368] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5368] <... openat resumed>) = 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5368] unlink("./file1" [pid 5364] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5364, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5371 [pid 5065] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5371 attached [pid 5065] fstat(3, [pid 5371] chdir("./24" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5371] <... chdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5371] <... prctl resumed>) = 0 [ 98.256634][ T5370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5371] <... setpgid resumed>) = 0 [pid 5065] lstat("./25/binderfs", [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5371] <... openat resumed>) = 3 [pid 5065] unlink("./25/binderfs" [pid 5371] write(3, "1000", 4 [pid 5065] <... unlink resumed>) = 0 [pid 5371] <... write resumed>) = 4 [pid 5369] <... write resumed>) = 2097152 [pid 5363] +++ exited with 0 +++ [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] close(3 [pid 5369] munmap(0x7f241a43b000, 2097152 [pid 5371] <... close resumed>) = 0 [pid 5369] <... munmap resumed>) = 0 [pid 5368] <... unlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=11 /* 0.11 s */} --- [pid 5371] symlink("/dev/binderfs", "./binderfs" [pid 5368] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5371] <... symlink resumed>) = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5371] memfd_create("syzkaller", 0 [pid 5369] <... openat resumed>) = 4 [pid 5371] <... memfd_create resumed>) = 3 [pid 5369] ioctl(4, LOOP_SET_FD, 3 [pid 5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5371] <... mmap resumed>) = 0x7f241a43b000 [pid 5068] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5361] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5361, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5068] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./24/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] fstat(3, [pid 5068] unlink("./24/binderfs") = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5369] <... ioctl resumed>) = 0 [pid 5369] close(3) = 0 [pid 5369] mkdir("./file0", 0777 [pid 5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5369] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5369] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [ 98.334626][ T5369] loop4: detected capacity change from 0 to 4096 [pid 5063] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./23/binderfs") = 0 [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./24/file0", [pid 5065] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(4, [pid 5068] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5068] fstat(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5369] <... mount resumed>) = 0 [pid 5068] getdents64(4, [pid 5065] getdents64(4, [pid 5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5369] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 5369] chdir("./file0") = 0 [pid 5369] ioctl(4, LOOP_CLR_FD [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5369] <... ioctl resumed>) = 0 [pid 5068] close(4 [pid 5065] <... close resumed>) = 0 [pid 5369] close(4) = 0 [pid 5369] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5369] unlink("./file1" [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./25/file0" [pid 5068] rmdir("./24/file0" [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] <... write resumed>) = 2097152 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5065] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3 [pid 5065] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] fstat(4, [pid 5068] rmdir("./24" [pid 5065] rmdir("./25" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5068] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./23/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5068] mkdir("./25", 0777 [pid 5065] mkdir("./26", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./23" [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5371] munmap(0x7f241a43b000, 2097152 [pid 5068] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] mkdir("./24", 0777 [pid 5371] <... munmap resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] <... openat resumed>) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5371] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5371] <... openat resumed>) = 4 [pid 5068] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... openat resumed>) = 3 [ 98.465730][ T5372] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5371] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... close resumed>) = 0 [pid 5065] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5369] <... unlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5063] close(3 [pid 5369] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 5373 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5373] chdir("./25" [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5373 [pid 5373] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5374 [pid 5373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5375 [pid 5373] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5374 attached [pid 5373] setpgid(0, 0 [pid 5374] chdir("./24" [pid 5373] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5375 attached [pid 5374] <... chdir resumed>) = 0 [ 98.509469][ T5371] loop1: detected capacity change from 0 to 4096 [pid 5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5375] chdir("./26" [pid 5374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5373] <... openat resumed>) = 3 [pid 5374] <... prctl resumed>) = 0 [pid 5373] write(3, "1000", 4 [pid 5375] <... chdir resumed>) = 0 [pid 5375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5374] setpgid(0, 0 [pid 5373] <... write resumed>) = 4 [pid 5375] <... prctl resumed>) = 0 [pid 5374] <... setpgid resumed>) = 0 [pid 5373] close(3 [pid 5375] setpgid(0, 0 [pid 5373] <... close resumed>) = 0 [pid 5375] <... setpgid resumed>) = 0 [pid 5374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5373] symlink("/dev/binderfs", "./binderfs" [pid 5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5373] <... symlink resumed>) = 0 [pid 5375] <... openat resumed>) = 3 [pid 5374] <... openat resumed>) = 3 [pid 5373] memfd_create("syzkaller", 0 [pid 5375] write(3, "1000", 4 [pid 5374] write(3, "1000", 4 [pid 5373] <... memfd_create resumed>) = 3 [pid 5371] <... ioctl resumed>) = 0 [pid 5375] <... write resumed>) = 4 [pid 5374] <... write resumed>) = 4 [pid 5373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5371] close(3 [pid 5375] close(3 [pid 5374] close(3 [pid 5373] <... mmap resumed>) = 0x7f241a43b000 [pid 5371] <... close resumed>) = 0 [pid 5375] <... close resumed>) = 0 [pid 5374] <... close resumed>) = 0 [pid 5371] mkdir("./file0", 0777) = 0 [pid 5371] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5375] symlink("/dev/binderfs", "./binderfs" [pid 5374] symlink("/dev/binderfs", "./binderfs" [pid 5373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5375] <... symlink resumed>) = 0 [pid 5374] <... symlink resumed>) = 0 [pid 5375] memfd_create("syzkaller", 0 [pid 5374] memfd_create("syzkaller", 0 [pid 5371] <... mount resumed>) = 0 [pid 5375] <... memfd_create resumed>) = 3 [pid 5374] <... memfd_create resumed>) = 3 [pid 5375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5375] <... mmap resumed>) = 0x7f241a43b000 [pid 5374] <... mmap resumed>) = 0x7f241a43b000 [pid 5371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5371] chdir("./file0") = 0 [pid 5371] ioctl(4, LOOP_CLR_FD) = 0 [pid 5371] close(4 [pid 5375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5371] <... close resumed>) = 0 [pid 5368] <... pwritev resumed>) = 1114112 [ 98.631964][ T5376] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5371] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5368] exit_group(0) = ? [pid 5371] <... openat resumed>) = 4 [pid 5371] unlink("./file1") = 0 [pid 5371] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5375] <... write resumed>) = 2097152 [pid 5374] <... write resumed>) = 2097152 [pid 5373] <... write resumed>) = 2097152 [pid 5375] munmap(0x7f241a43b000, 2097152 [pid 5374] munmap(0x7f241a43b000, 2097152 [pid 5373] munmap(0x7f241a43b000, 2097152 [pid 5375] <... munmap resumed>) = 0 [pid 5373] <... munmap resumed>) = 0 [pid 5374] <... munmap resumed>) = 0 [pid 5373] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5375] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5374] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5375] <... openat resumed>) = 4 [pid 5374] <... openat resumed>) = 4 [pid 5373] <... openat resumed>) = 4 [pid 5375] ioctl(4, LOOP_SET_FD, 3 [pid 5374] ioctl(4, LOOP_SET_FD, 3 [pid 5373] ioctl(4, LOOP_SET_FD, 3 [pid 5375] <... ioctl resumed>) = 0 [pid 5373] <... ioctl resumed>) = 0 [pid 5374] <... ioctl resumed>) = 0 [pid 5373] close(3 [pid 5375] close(3 [pid 5374] close(3 [pid 5373] <... close resumed>) = 0 [pid 5375] <... close resumed>) = 0 [pid 5374] <... close resumed>) = 0 [pid 5373] mkdir("./file0", 0777 [pid 5375] mkdir("./file0", 0777 [pid 5374] mkdir("./file0", 0777 [pid 5373] <... mkdir resumed>) = 0 [pid 5375] <... mkdir resumed>) = 0 [pid 5374] <... mkdir resumed>) = 0 [pid 5373] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5375] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5374] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5368] +++ exited with 0 +++ [ 98.757997][ T5375] loop2: detected capacity change from 0 to 4096 [ 98.764685][ T5374] loop0: detected capacity change from 0 to 4096 [ 98.771418][ T5373] loop5: detected capacity change from 0 to 4096 [pid 5375] <... mount resumed>) = 0 [pid 5375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5368, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5375] <... openat resumed>) = 3 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5375] chdir("./file0" [pid 5066] <... restart_syscall resumed>) = 0 [pid 5375] <... chdir resumed>) = 0 [pid 5375] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5375] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5375] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... openat resumed>) = 3 [pid 5375] <... openat resumed>) = 4 [pid 5374] <... mount resumed>) = 0 [pid 5066] fstat(3, [pid 5375] unlink("./file1" [pid 5374] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5374] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5374] chdir("./file0" [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5374] <... chdir resumed>) = 0 [pid 5066] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5374] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5374] <... ioctl resumed>) = 0 [pid 5066] lstat("./24/binderfs", [pid 5374] close(4 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5374] <... close resumed>) = 0 [pid 5066] unlink("./24/binderfs" [pid 5374] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... unlink resumed>) = 0 [pid 5374] <... openat resumed>) = 4 [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5374] unlink("./file1" [pid 5373] <... mount resumed>) = 0 [pid 5373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5373] chdir("./file0" [pid 5369] <... pwritev resumed>) = 1114112 [pid 5373] <... chdir resumed>) = 0 [pid 5369] exit_group(0 [pid 5373] ioctl(4, LOOP_CLR_FD [pid 5369] <... exit_group resumed>) = ? [pid 5373] <... ioctl resumed>) = 0 [pid 5374] <... unlink resumed>) = 0 [pid 5374] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5373] close(4) = 0 [pid 5373] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 98.816843][ T5377] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.829540][ T5378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.843103][ T5379] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5373] unlink("./file1" [pid 5375] <... unlink resumed>) = 0 [pid 5375] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5373] <... unlink resumed>) = 0 [pid 5373] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5369] +++ exited with 0 +++ [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5369, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./24/binderfs") = 0 [pid 5066] lstat("./24/file0", [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./24/file0") = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./24") = 0 [pid 5066] mkdir("./25", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5380 ./strace-static-x86_64: Process 5380 attached [pid 5380] chdir("./25") = 0 [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5371] <... pwritev resumed>) = 1114112 [pid 5067] <... umount2 resumed>) = 0 [pid 5380] <... prctl resumed>) = 0 [pid 5380] setpgid(0, 0) = 0 [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5371] exit_group(0 [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] write(3, "1000", 4 [pid 5371] <... exit_group resumed>) = ? [pid 5380] <... write resumed>) = 4 [pid 5380] close(3) = 0 [pid 5380] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] memfd_create("syzkaller", 0) = 3 [pid 5380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5067] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./24/file0") = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(3) = 0 [pid 5067] rmdir("./24") = 0 [pid 5067] mkdir("./25", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5381 ./strace-static-x86_64: Process 5381 attached [pid 5381] chdir("./25") = 0 [pid 5381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5381] setpgid(0, 0) = 0 [pid 5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5381] write(3, "1000", 4) = 4 [pid 5381] close(3) = 0 [pid 5381] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5381] memfd_create("syzkaller", 0) = 3 [pid 5381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5380] <... write resumed>) = 2097152 [pid 5371] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5064] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] munmap(0x7f241a43b000, 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./24/binderfs", [pid 5380] <... munmap resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5380] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5064] unlink("./24/binderfs" [pid 5380] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] <... pwritev resumed>) = 1114112 [pid 5380] <... ioctl resumed>) = 0 [pid 5380] close(3) = 0 [pid 5380] mkdir("./file0", 0777 [pid 5375] exit_group(0) = ? [pid 5380] <... mkdir resumed>) = 0 [pid 5380] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5374] <... pwritev resumed>) = 1114112 [pid 5374] exit_group(0) = ? [ 99.250876][ T5380] loop3: detected capacity change from 0 to 4096 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./24/file0", [pid 5373] <... pwritev resumed>) = 1114112 [pid 5373] exit_group(0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5373] <... exit_group resumed>) = ? [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./24/file0") = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5381] <... write resumed>) = 2097152 [pid 5064] rmdir("./24" [pid 5381] munmap(0x7f241a43b000, 2097152 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./25", 0777 [pid 5381] <... munmap resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5381] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5381] <... openat resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5381] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5380] <... mount resumed>) = 0 [pid 5064] close(3 [pid 5380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5380] chdir("./file0") = 0 [pid 5380] ioctl(4, LOOP_CLR_FD) = 0 [pid 5380] close(4) = 0 [pid 5380] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5380] unlink("./file1" [pid 5064] <... close resumed>) = 0 [pid 5375] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5383 ./strace-static-x86_64: Process 5383 attached [pid 5383] chdir("./25") = 0 [pid 5380] <... unlink resumed>) = 0 [pid 5065] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5380] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5381] <... ioctl resumed>) = 0 [pid 5373] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] <... prctl resumed>) = 0 [pid 5381] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5373, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [ 99.370067][ T5381] loop4: detected capacity change from 0 to 4096 [ 99.376867][ T5382] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5383] setpgid(0, 0 [pid 5381] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5374] +++ exited with 0 +++ [pid 5383] <... setpgid resumed>) = 0 [pid 5381] mkdir("./file0", 0777 [pid 5065] fstat(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5374, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5381] <... mkdir resumed>) = 0 [pid 5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(3, [pid 5383] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5383] write(3, "1000", 4 [pid 5068] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] lstat("./26/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] <... write resumed>) = 4 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5065] unlink("./26/binderfs" [pid 5068] fstat(3, [pid 5383] close(3 [pid 5063] fstat(3, [pid 5065] <... unlink resumed>) = 0 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5383] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5063] getdents64(3, [pid 5383] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5383] <... symlink resumed>) = 0 [pid 5068] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./24/binderfs", [pid 5068] lstat("./25/binderfs", [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./24/binderfs" [pid 5068] unlink("./25/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5383] memfd_create("syzkaller", 0 [pid 5068] <... unlink resumed>) = 0 [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] <... memfd_create resumed>) = 3 [pid 5068] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5381] <... mount resumed>) = 0 [pid 5381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5381] chdir("./file0") = 0 [pid 5381] ioctl(4, LOOP_CLR_FD) = 0 [pid 5381] close(4 [pid 5383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5381] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5381] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... openat resumed>) = 4 [pid 5065] lstat("./26/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./25/file0", [ 99.517104][ T5384] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5381] unlink("./file1" [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] lstat("./24/file0", [pid 5068] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5381] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./25/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./25") = 0 [pid 5068] mkdir("./26", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5065] fstat(4, [pid 5063] <... openat resumed>) = 4 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5068] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5385 [pid 5065] getdents64(4, [pid 5063] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] close(4 [pid 5063] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5385 attached [pid 5065] rmdir("./26/file0" [pid 5063] close(4 [pid 5385] chdir("./26") = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5383] <... write resumed>) = 2097152 [pid 5065] getdents64(3, [pid 5385] <... prctl resumed>) = 0 [pid 5063] rmdir("./24/file0" [pid 5385] setpgid(0, 0 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5385] <... setpgid resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] close(3 [pid 5385] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5385] write(3, "1000", 4) = 4 [pid 5385] close(3 [pid 5065] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5385] <... close resumed>) = 0 [pid 5385] symlink("/dev/binderfs", "./binderfs" [pid 5065] rmdir("./26" [pid 5063] close(3 [pid 5385] <... symlink resumed>) = 0 [pid 5385] memfd_create("syzkaller", 0) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./27", 0777 [pid 5063] <... close resumed>) = 0 [pid 5385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] rmdir("./24" [pid 5383] munmap(0x7f241a43b000, 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] mkdir("./25", 0777 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5383] <... munmap resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5383] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5383] <... openat resumed>) = 4 [pid 5383] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5386 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5387 [pid 5383] <... ioctl resumed>) = 0 [pid 5383] close(3./strace-static-x86_64: Process 5386 attached [pid 5385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5383] <... close resumed>) = 0 ./strace-static-x86_64: Process 5387 attached [pid 5386] chdir("./27" [pid 5383] mkdir("./file0", 0777 [pid 5387] chdir("./25" [pid 5386] <... chdir resumed>) = 0 [pid 5383] <... mkdir resumed>) = 0 [pid 5381] <... pwritev resumed>) = 1114112 [pid 5387] <... chdir resumed>) = 0 [pid 5386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5381] exit_group(0 [pid 5387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5386] setpgid(0, 0 [pid 5383] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5381] <... exit_group resumed>) = ? [pid 5387] <... prctl resumed>) = 0 [pid 5386] <... setpgid resumed>) = 0 [pid 5387] setpgid(0, 0) = 0 [pid 5386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5380] <... pwritev resumed>) = 1114112 [pid 5387] <... openat resumed>) = 3 [pid 5386] <... openat resumed>) = 3 [pid 5387] write(3, "1000", 4 [pid 5380] exit_group(0 [pid 5387] <... write resumed>) = 4 [pid 5386] write(3, "1000", 4 [pid 5387] close(3) = 0 [ 99.711035][ T5383] loop1: detected capacity change from 0 to 4096 [pid 5387] symlink("/dev/binderfs", "./binderfs" [pid 5380] <... exit_group resumed>) = ? [pid 5387] <... symlink resumed>) = 0 [pid 5386] <... write resumed>) = 4 [pid 5387] memfd_create("syzkaller", 0 [pid 5386] close(3 [pid 5387] <... memfd_create resumed>) = 3 [pid 5386] <... close resumed>) = 0 [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5386] symlink("/dev/binderfs", "./binderfs" [pid 5387] <... mmap resumed>) = 0x7f241a43b000 [pid 5386] <... symlink resumed>) = 0 [pid 5386] memfd_create("syzkaller", 0) = 3 [pid 5386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5385] <... write resumed>) = 2097152 [pid 5385] munmap(0x7f241a43b000, 2097152 [pid 5383] <... mount resumed>) = 0 [pid 5383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5383] chdir("./file0" [pid 5385] <... munmap resumed>) = 0 [pid 5383] <... chdir resumed>) = 0 [pid 5385] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5383] ioctl(4, LOOP_CLR_FD [pid 5386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5385] <... openat resumed>) = 4 [pid 5383] <... ioctl resumed>) = 0 [pid 5385] ioctl(4, LOOP_SET_FD, 3 [pid 5383] close(4) = 0 [pid 5383] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5383] unlink("./file1") = 0 [pid 5383] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5385] <... ioctl resumed>) = 0 [pid 5385] close(3) = 0 [ 99.808393][ T5388] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.844305][ T5385] loop5: detected capacity change from 0 to 4096 [pid 5385] mkdir("./file0", 0777) = 0 [pid 5385] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5381] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5381, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5380] +++ exited with 0 +++ [pid 5067] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5380, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... restart_syscall resumed>) = 0 [pid 5387] <... write resumed>) = 2097152 [pid 5067] <... openat resumed>) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 5067] lstat("./25/binderfs", [pid 5066] fstat(3, [pid 5387] munmap(0x7f241a43b000, 2097152 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5067] unlink("./25/binderfs" [pid 5387] <... munmap resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... unlink resumed>) = 0 [pid 5387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... openat resumed>) = 4 [pid 5386] <... write resumed>) = 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./25/binderfs", [pid 5387] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./25/binderfs" [pid 5385] <... mount resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5385] chdir("./file0") = 0 [pid 5385] ioctl(4, LOOP_CLR_FD) = 0 [pid 5385] close(4) = 0 [pid 5385] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5386] munmap(0x7f241a43b000, 2097152) = 0 [pid 5386] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5386] ioctl(4, LOOP_SET_FD, 3 [pid 5387] <... ioctl resumed>) = 0 [pid 5387] close(3) = 0 [pid 5387] mkdir("./file0", 0777 [pid 5385] <... openat resumed>) = 4 [pid 5385] unlink("./file1" [pid 5387] <... mkdir resumed>) = 0 [pid 5387] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5386] <... ioctl resumed>) = 0 [pid 5386] close(3) = 0 [pid 5386] mkdir("./file0", 0777) = 0 [ 99.930181][ T5389] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.943332][ T5387] loop0: detected capacity change from 0 to 4096 [ 99.963798][ T5386] loop2: detected capacity change from 0 to 4096 [pid 5386] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5385] <... unlink resumed>) = 0 [pid 5385] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5387] <... mount resumed>) = 0 [pid 5387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5387] chdir("./file0") = 0 [pid 5387] ioctl(4, LOOP_CLR_FD) = 0 [pid 5387] close(4) = 0 [pid 5387] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5387] unlink("./file1" [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5066] lstat("./25/file0", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, [ 100.017774][ T5390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5386] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5386] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5386] chdir("./file0") = 0 [pid 5386] ioctl(4, LOOP_CLR_FD) = 0 [pid 5386] close(4 [pid 5387] <... unlink resumed>) = 0 [pid 5386] <... close resumed>) = 0 [pid 5067] close(4 [pid 5066] fstat(4, [pid 5387] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5386] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5067] <... close resumed>) = 0 [pid 5386] <... openat resumed>) = 4 [pid 5067] rmdir("./25/file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5386] unlink("./file1" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] close(4) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./25/file0" [pid 5067] rmdir("./25" [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] mkdir("./26", 0777 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] rmdir("./25" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./26", 0777 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5392 [pid 5066] <... openat resumed>) = 3 [ 100.062578][ T5391] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3./strace-static-x86_64: Process 5392 attached [pid 5392] chdir("./26" [pid 5066] <... close resumed>) = 0 [pid 5392] <... chdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5393 [pid 5392] setpgid(0, 0) = 0 [pid 5392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5393 attached ) = 3 [pid 5386] <... unlink resumed>) = 0 [pid 5393] chdir("./26" [pid 5392] write(3, "1000", 4 [pid 5386] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5393] <... chdir resumed>) = 0 [pid 5392] <... write resumed>) = 4 [pid 5392] close(3) = 0 [pid 5393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5392] symlink("/dev/binderfs", "./binderfs" [pid 5393] <... prctl resumed>) = 0 [pid 5392] <... symlink resumed>) = 0 [pid 5393] setpgid(0, 0 [pid 5392] memfd_create("syzkaller", 0 [pid 5393] <... setpgid resumed>) = 0 [pid 5392] <... memfd_create resumed>) = 3 [pid 5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5393] <... openat resumed>) = 3 [pid 5392] <... mmap resumed>) = 0x7f241a43b000 [pid 5393] write(3, "1000", 4) = 4 [pid 5393] close(3) = 0 [pid 5393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5393] memfd_create("syzkaller", 0) = 3 [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5383] <... pwritev resumed>) = 1114112 [pid 5383] exit_group(0) = ? [pid 5392] <... write resumed>) = 2097152 [pid 5392] munmap(0x7f241a43b000, 2097152) = 0 [pid 5393] <... write resumed>) = 2097152 [pid 5392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5393] munmap(0x7f241a43b000, 2097152 [pid 5392] <... openat resumed>) = 4 [pid 5392] ioctl(4, LOOP_SET_FD, 3 [pid 5393] <... munmap resumed>) = 0 [pid 5392] <... ioctl resumed>) = 0 [pid 5393] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5393] ioctl(4, LOOP_SET_FD, 3 [pid 5385] <... pwritev resumed>) = 1114112 [pid 5385] exit_group(0 [pid 5392] close(3) = 0 [pid 5392] mkdir("./file0", 0777 [pid 5385] <... exit_group resumed>) = ? [pid 5392] <... mkdir resumed>) = 0 [pid 5392] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5393] <... ioctl resumed>) = 0 [pid 5393] close(3) = 0 [pid 5393] mkdir("./file0", 0777) = 0 [ 100.379171][ T5392] loop4: detected capacity change from 0 to 4096 [ 100.391379][ T5393] loop3: detected capacity change from 0 to 4096 [pid 5393] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5383] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5383, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5064] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./25/binderfs") = 0 [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5392] <... mount resumed>) = 0 [pid 5392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5387] <... pwritev resumed>) = 1114112 [pid 5392] <... openat resumed>) = 3 [pid 5387] exit_group(0 [pid 5392] chdir("./file0" [pid 5387] <... exit_group resumed>) = ? [pid 5392] <... chdir resumed>) = 0 [pid 5392] ioctl(4, LOOP_CLR_FD) = 0 [pid 5392] close(4) = 0 [pid 5392] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5392] unlink("./file1" [pid 5393] <... mount resumed>) = 0 [pid 5393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5393] chdir("./file0") = 0 [pid 5393] ioctl(4, LOOP_CLR_FD) = 0 [pid 5393] close(4) = 0 [pid 5393] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 5393] unlink("./file1" [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [ 100.477082][ T5394] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.496591][ T5395] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./25/file0" [pid 5393] <... unlink resumed>) = 0 [pid 5392] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5392] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] getdents64(3, [pid 5393] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5386] <... pwritev resumed>) = 1114112 [pid 5385] +++ exited with 0 +++ [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5386] exit_group(0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5064] close(3 [pid 5386] <... exit_group resumed>) = ? [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./25") = 0 [pid 5064] mkdir("./26", 0777) = 0 [pid 5068] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5068] <... openat resumed>) = 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] fstat(3, [pid 5064] close(3 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5396 ./strace-static-x86_64: Process 5396 attached [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5396] chdir("./26" [pid 5068] unlink("./26/binderfs" [pid 5396] <... chdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5068] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5396] setpgid(0, 0) = 0 [pid 5387] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5387, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5396] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5396] write(3, "1000", 4 [pid 5063] unlink("./25/binderfs" [pid 5396] <... write resumed>) = 4 [pid 5396] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5396] <... close resumed>) = 0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5396] memfd_create("syzkaller", 0) = 3 [pid 5396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./26/file0") = 0 [pid 5068] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./26") = 0 [pid 5068] mkdir("./27", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5386] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5386, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5068] close(3 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... close resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5397 [pid 5065] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5397 attached [pid 5397] chdir("./27" [pid 5065] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] lstat("./27/binderfs", [pid 5397] <... prctl resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5397] setpgid(0, 0 [pid 5065] unlink("./27/binderfs" [pid 5397] <... setpgid resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5397] write(3, "1000", 4) = 4 [pid 5397] close(3) = 0 [pid 5397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5397] memfd_create("syzkaller", 0) = 3 [pid 5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5063] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./25/file0") = 0 [pid 5063] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./25") = 0 [pid 5063] mkdir("./26", 0777) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./27/file0", [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(3 [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5398 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./27/file0") = 0 [pid 5396] <... write resumed>) = 2097152 [pid 5065] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5396] munmap(0x7f241a43b000, 2097152./strace-static-x86_64: Process 5398 attached [pid 5065] close(3 [pid 5398] chdir("./26" [pid 5396] <... munmap resumed>) = 0 [pid 5398] <... chdir resumed>) = 0 [pid 5396] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5396] <... openat resumed>) = 4 [pid 5065] rmdir("./27" [pid 5398] <... prctl resumed>) = 0 [pid 5398] setpgid(0, 0) = 0 [pid 5398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5396] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5398] write(3, "1000", 4) = 4 [pid 5065] mkdir("./28", 0777 [pid 5398] close(3) = 0 [pid 5398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5398] memfd_create("syzkaller", 0 [pid 5397] <... write resumed>) = 2097152 [pid 5398] <... memfd_create resumed>) = 3 [pid 5398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5065] <... mkdir resumed>) = 0 [pid 5396] <... ioctl resumed>) = 0 [pid 5392] <... pwritev resumed>) = 1114112 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5397] munmap(0x7f241a43b000, 2097152 [pid 5396] close(3) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5392] exit_group(0 [pid 5396] mkdir("./file0", 0777 [pid 5392] <... exit_group resumed>) = ? [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5396] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5397] <... munmap resumed>) = 0 [pid 5397] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5397] ioctl(4, LOOP_SET_FD, 3 [pid 5396] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5065] close(3) = 0 [pid 5393] <... pwritev resumed>) = 1114112 [pid 5393] exit_group(0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5393] <... exit_group resumed>) = ? [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5399 ./strace-static-x86_64: Process 5399 attached [pid 5399] chdir("./28") = 0 [pid 5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5399] setpgid(0, 0) = 0 [ 100.914901][ T5396] loop1: detected capacity change from 0 to 4096 [ 100.951462][ T5397] loop5: detected capacity change from 0 to 4096 [pid 5398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5397] <... ioctl resumed>) = 0 [pid 5397] close(3) = 0 [pid 5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5397] mkdir("./file0", 0777 [pid 5399] <... openat resumed>) = 3 [pid 5397] <... mkdir resumed>) = 0 [pid 5396] <... mount resumed>) = 0 [pid 5399] write(3, "1000", 4 [pid 5396] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5397] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5396] <... openat resumed>) = 3 [pid 5399] <... write resumed>) = 4 [pid 5396] chdir("./file0" [pid 5392] +++ exited with 0 +++ [pid 5399] close(3 [pid 5396] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5392, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5399] <... close resumed>) = 0 [pid 5396] ioctl(4, LOOP_CLR_FD [pid 5399] symlink("/dev/binderfs", "./binderfs" [pid 5396] <... ioctl resumed>) = 0 [pid 5399] <... symlink resumed>) = 0 [pid 5396] close(4 [pid 5399] memfd_create("syzkaller", 0 [pid 5396] <... close resumed>) = 0 [pid 5396] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5399] <... memfd_create resumed>) = 3 [pid 5396] <... openat resumed>) = 4 [pid 5396] unlink("./file1" [pid 5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... mmap resumed>) = 0x7f241a43b000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./26/binderfs") = 0 [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5396] <... unlink resumed>) = 0 [ 101.003801][ T5400] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5396] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5397] <... mount resumed>) = 0 [pid 5397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5397] chdir("./file0") = 0 [pid 5397] ioctl(4, LOOP_CLR_FD [pid 5398] <... write resumed>) = 2097152 [pid 5397] <... ioctl resumed>) = 0 [pid 5397] close(4) = 0 [pid 5397] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5397] unlink("./file1" [pid 5398] munmap(0x7f241a43b000, 2097152 [pid 5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5398] <... munmap resumed>) = 0 [pid 5393] +++ exited with 0 +++ [pid 5398] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5393, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5398] <... openat resumed>) = 4 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [ 101.066347][ T5401] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5398] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5397] <... unlink resumed>) = 0 [pid 5397] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./26/binderfs", [pid 5067] lstat("./26/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5398] <... ioctl resumed>) = 0 [pid 5398] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] unlink("./26/binderfs" [pid 5398] <... close resumed>) = 0 [pid 5398] mkdir("./file0", 0777) = 0 [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5398] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 101.122666][ T5398] loop0: detected capacity change from 0 to 4096 [pid 5067] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5399] <... write resumed>) = 2097152 [pid 5067] <... openat resumed>) = 4 [pid 5399] munmap(0x7f241a43b000, 2097152 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5399] <... munmap resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5399] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] close(4) = 0 [pid 5067] rmdir("./26/file0" [pid 5399] <... openat resumed>) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 5399] ioctl(4, LOOP_SET_FD, 3 [pid 5067] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./26") = 0 [pid 5067] mkdir("./27", 0777) = 0 [pid 5398] <... mount resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5398] chdir("./file0") = 0 [pid 5398] ioctl(4, LOOP_CLR_FD) = 0 [pid 5398] close(4) = 0 [pid 5398] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5398] unlink("./file1" [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] lstat("./26/file0", [pid 5067] close(3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5403 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5066] close(4./strace-static-x86_64: Process 5403 attached ) = 0 [pid 5403] chdir("./27" [pid 5066] rmdir("./26/file0" [pid 5403] <... chdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] getdents64(3, [pid 5403] <... prctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5403] setpgid(0, 0 [pid 5066] close(3 [pid 5403] <... setpgid resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5399] <... ioctl resumed>) = 0 [pid 5066] rmdir("./26" [pid 5403] <... openat resumed>) = 3 [pid 5399] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 5403] write(3, "1000", 4 [pid 5399] <... close resumed>) = 0 [pid 5066] mkdir("./27", 0777 [pid 5403] <... write resumed>) = 4 [pid 5399] mkdir("./file0", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5403] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5403] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5403] symlink("/dev/binderfs", "./binderfs" [pid 5399] <... mkdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5403] <... symlink resumed>) = 0 [pid 5399] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5403] memfd_create("syzkaller", 0 [pid 5066] close(3 [pid 5403] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 101.215318][ T5399] loop2: detected capacity change from 0 to 4096 [ 101.231220][ T5402] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5403] <... mmap resumed>) = 0x7f241a43b000 [pid 5066] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5404 ./strace-static-x86_64: Process 5404 attached [pid 5404] chdir("./27") = 0 [pid 5404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5404] setpgid(0, 0) = 0 [pid 5404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5404] write(3, "1000", 4) = 4 [pid 5404] close(3) = 0 [pid 5404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5404] memfd_create("syzkaller", 0) = 3 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5398] <... unlink resumed>) = 0 [pid 5398] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5399] <... mount resumed>) = 0 [pid 5399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5399] chdir("./file0") = 0 [pid 5399] ioctl(4, LOOP_CLR_FD) = 0 [pid 5399] close(4) = 0 [pid 5399] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [ 101.356437][ T5405] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5399] unlink("./file1" [pid 5403] <... write resumed>) = 2097152 [pid 5399] <... unlink resumed>) = 0 [pid 5399] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5396] <... pwritev resumed>) = 1114112 [pid 5396] exit_group(0) = ? [pid 5403] munmap(0x7f241a43b000, 2097152) = 0 [pid 5403] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5403] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5403] close(3) = 0 [pid 5403] mkdir("./file0", 0777 [pid 5404] <... write resumed>) = 2097152 [pid 5403] <... mkdir resumed>) = 0 [pid 5403] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5404] munmap(0x7f241a43b000, 2097152) = 0 [pid 5404] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 101.472883][ T5403] loop4: detected capacity change from 0 to 4096 [pid 5404] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5404] close(3) = 0 [pid 5404] mkdir("./file0", 0777) = 0 [pid 5404] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5403] <... mount resumed>) = 0 [pid 5403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5403] chdir("./file0") = 0 [pid 5403] ioctl(4, LOOP_CLR_FD) = 0 [pid 5403] close(4) = 0 [pid 5403] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5403] unlink("./file1" [pid 5397] <... pwritev resumed>) = 1114112 [ 101.524357][ T5404] loop3: detected capacity change from 0 to 4096 [ 101.543593][ T5406] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5397] exit_group(0 [pid 5404] <... mount resumed>) = 0 [pid 5404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5397] <... exit_group resumed>) = ? [pid 5404] <... openat resumed>) = 3 [pid 5404] chdir("./file0") = 0 [pid 5403] <... unlink resumed>) = 0 [pid 5396] +++ exited with 0 +++ [pid 5404] ioctl(4, LOOP_CLR_FD [pid 5403] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5404] <... ioctl resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5396, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5404] close(4 [pid 5064] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5064] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 3 [pid 5404] unlink("./file1" [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./26/binderfs" [pid 5404] <... unlink resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [ 101.602908][ T5407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5404] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5398] <... pwritev resumed>) = 1114112 [pid 5398] exit_group(0) = ? [pid 5064] <... umount2 resumed>) = 0 [pid 5399] <... pwritev resumed>) = 1114112 [pid 5399] exit_group(0 [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5397, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5064] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(4, [pid 5068] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5399, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5068] fstat(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, [pid 5068] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] fstat(3, [pid 5064] close(4 [pid 5068] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5068] lstat("./27/binderfs", [pid 5064] rmdir("./26/file0" [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5068] unlink("./27/binderfs" [pid 5065] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5068] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./28/binderfs", [pid 5064] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] close(3 [pid 5065] unlink("./28/binderfs" [pid 5064] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5064] rmdir("./26" [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./27", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5408 [pid 5398] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5398, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5408 attached [pid 5063] getdents64(3, [pid 5408] chdir("./27" [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] lstat("./26/binderfs", [pid 5408] <... prctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./26/binderfs") = 0 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] setpgid(0, 0) = 0 [pid 5408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5408] write(3, "1000", 4) = 4 [pid 5408] close(3) = 0 [pid 5408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5408] memfd_create("syzkaller", 0) = 3 [pid 5408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] lstat("./27/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./28/file0", [pid 5068] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(4, [pid 5065] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] getdents64(4, [pid 5065] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5065] fstat(4, [pid 5068] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] close(4 [pid 5065] getdents64(4, [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./27/file0" [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5068] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5065] <... close resumed>) = 0 [pid 5408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... close resumed>) = 0 [pid 5065] rmdir("./28/file0" [pid 5063] <... umount2 resumed>) = 0 [pid 5068] rmdir("./27" [pid 5065] <... rmdir resumed>) = 0 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5068] mkdir("./28", 0777 [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5065] <... close resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] rmdir("./28" [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5065] mkdir("./29", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] lstat("./26/file0", [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5409 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5409 attached [pid 5065] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5409] chdir("./28" [pid 5065] <... close resumed>) = 0 [pid 5063] fstat(4, [pid 5409] <... chdir resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(4, [pid 5409] <... prctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5410 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5409] setpgid(0, 0 [pid 5063] getdents64(4, ./strace-static-x86_64: Process 5410 attached [pid 5409] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5410] chdir("./29" [pid 5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(4 [pid 5410] <... chdir resumed>) = 0 [pid 5409] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5409] write(3, "1000", 4 [pid 5063] rmdir("./26/file0" [pid 5410] <... prctl resumed>) = 0 [pid 5409] <... write resumed>) = 4 [pid 5403] <... pwritev resumed>) = 1114112 [pid 5063] <... rmdir resumed>) = 0 [pid 5410] setpgid(0, 0 [pid 5409] close(3 [pid 5408] <... write resumed>) = 2097152 [pid 5403] exit_group(0 [pid 5063] getdents64(3, [pid 5410] <... setpgid resumed>) = 0 [pid 5409] <... close resumed>) = 0 [pid 5403] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5409] symlink("/dev/binderfs", "./binderfs" [pid 5408] munmap(0x7f241a43b000, 2097152 [pid 5404] <... pwritev resumed>) = 1114112 [pid 5063] close(3 [pid 5410] <... openat resumed>) = 3 [pid 5409] <... symlink resumed>) = 0 [pid 5404] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5410] write(3, "1000", 4 [pid 5409] memfd_create("syzkaller", 0 [pid 5408] <... munmap resumed>) = 0 [pid 5404] <... exit_group resumed>) = ? [pid 5063] rmdir("./26" [pid 5410] <... write resumed>) = 4 [pid 5409] <... memfd_create resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5410] close(3 [pid 5409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] mkdir("./27", 0777 [pid 5410] <... close resumed>) = 0 [pid 5409] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... mkdir resumed>) = 0 [pid 5410] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5410] <... symlink resumed>) = 0 [pid 5408] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5410] memfd_create("syzkaller", 0 [pid 5408] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5410] <... memfd_create resumed>) = 3 [pid 5408] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3 [pid 5410] <... mmap resumed>) = 0x7f241a43b000 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5411 ./strace-static-x86_64: Process 5411 attached [pid 5411] chdir("./27") = 0 [pid 5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5411] setpgid(0, 0 [pid 5408] <... ioctl resumed>) = 0 [pid 5411] <... setpgid resumed>) = 0 [pid 5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5408] close(3 [pid 5411] <... openat resumed>) = 3 [pid 5408] <... close resumed>) = 0 [pid 5411] write(3, "1000", 4 [pid 5408] mkdir("./file0", 0777 [pid 5411] <... write resumed>) = 4 [pid 5411] close(3 [pid 5408] <... mkdir resumed>) = 0 [pid 5411] <... close resumed>) = 0 [pid 5408] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5411] memfd_create("syzkaller", 0) = 3 [pid 5410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 102.092756][ T5408] loop1: detected capacity change from 0 to 4096 [pid 5411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5403] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5408] <... mount resumed>) = 0 [pid 5067] lstat("./27/binderfs", [pid 5408] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5408] <... openat resumed>) = 3 [pid 5067] unlink("./27/binderfs" [pid 5408] chdir("./file0" [pid 5067] <... unlink resumed>) = 0 [pid 5408] <... chdir resumed>) = 0 [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5409] <... write resumed>) = 2097152 [pid 5408] ioctl(4, LOOP_CLR_FD) = 0 [pid 5408] close(4 [pid 5410] <... write resumed>) = 2097152 [ 102.178991][ T5412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5409] munmap(0x7f241a43b000, 2097152 [pid 5408] <... close resumed>) = 0 [pid 5404] +++ exited with 0 +++ [pid 5408] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5409] <... munmap resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5404, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5409] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5408] <... openat resumed>) = 4 [pid 5066] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5410] munmap(0x7f241a43b000, 2097152 [pid 5409] <... openat resumed>) = 4 [pid 5408] unlink("./file1" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5409] ioctl(4, LOOP_SET_FD, 3 [pid 5066] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5410] <... munmap resumed>) = 0 [pid 5409] <... ioctl resumed>) = 0 [pid 5408] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] lstat("./27/binderfs", [pid 5410] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./27/binderfs") = 0 [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./27/file0", [pid 5410] <... openat resumed>) = 4 [pid 5410] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5411] <... write resumed>) = 2097152 [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5409] close(3 [pid 5067] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5409] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5409] mkdir("./file0", 0777 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5409] <... mkdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5409] mount("/dev/loop5", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5411] munmap(0x7f241a43b000, 2097152 [pid 5067] close(4 [pid 5410] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5410] close(3 [pid 5067] rmdir("./27/file0" [pid 5411] <... munmap resumed>) = 0 [pid 5410] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5411] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5410] mkdir("./file0", 0777 [pid 5067] getdents64(3, [pid 5411] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5410] <... mkdir resumed>) = 0 [pid 5411] ioctl(4, LOOP_SET_FD, 3 [ 102.252585][ T5409] loop5: detected capacity change from 0 to 4096 [ 102.279792][ T5410] loop2: detected capacity change from 0 to 4096 [pid 5067] close(3 [pid 5410] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./27") = 0 [pid 5067] mkdir("./28", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = 0 [pid 5411] <... ioctl resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5411] close(3 [pid 5067] close(3 [pid 5411] <... close resumed>) = 0 [pid 5409] <... mount resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5411] mkdir("./file0", 0777 [pid 5409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5411] <... mkdir resumed>) = 0 [pid 5411] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5067] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5415 [ 102.318277][ T5411] loop0: detected capacity change from 0 to 4096 [ 102.344549][ T5413] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.358027][ T5414] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] lstat("./27/file0", [pid 5409] <... openat resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5410] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5415 attached [pid 5410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5409] chdir("./file0" [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5415] chdir("./28" [pid 5410] <... openat resumed>) = 3 [pid 5409] <... chdir resumed>) = 0 [pid 5415] <... chdir resumed>) = 0 [pid 5410] chdir("./file0" [pid 5409] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5410] <... chdir resumed>) = 0 [pid 5409] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5415] <... prctl resumed>) = 0 [pid 5410] ioctl(4, LOOP_CLR_FD [pid 5409] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5415] setpgid(0, 0 [pid 5410] <... ioctl resumed>) = 0 [pid 5409] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5415] <... setpgid resumed>) = 0 [pid 5410] close(4 [pid 5409] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5410] <... close resumed>) = 0 [pid 5415] <... openat resumed>) = 3 [pid 5415] write(3, "1000", 4 [pid 5410] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5409] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5415] <... write resumed>) = 4 [pid 5410] <... openat resumed>) = 4 [pid 5409] unlink("./file1" [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5415] close(3 [pid 5410] unlink("./file1" [pid 5415] <... close resumed>) = 0 [pid 5409] <... unlink resumed>) = 0 [pid 5066] getdents64(4, [pid 5415] symlink("/dev/binderfs", "./binderfs" [pid 5409] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5415] <... symlink resumed>) = 0 [pid 5410] <... unlink resumed>) = 0 [pid 5066] close(4 [pid 5415] memfd_create("syzkaller", 0 [pid 5410] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... close resumed>) = 0 [pid 5415] <... memfd_create resumed>) = 3 [pid 5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5066] rmdir("./27/file0") = 0 [pid 5066] getdents64(3, [pid 5411] <... mount resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] close(3 [pid 5411] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5411] chdir("./file0" [pid 5066] rmdir("./27" [pid 5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5411] <... chdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5411] ioctl(4, LOOP_CLR_FD [pid 5066] mkdir("./28", 0777 [pid 5411] <... ioctl resumed>) = 0 [pid 5411] close(4 [pid 5066] <... mkdir resumed>) = 0 [pid 5411] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5411] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5066] <... openat resumed>) = 3 [pid 5411] unlink("./file1" [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 102.438656][ T5416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5411] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5411] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559b05d0) = 5417 ./strace-static-x86_64: Process 5417 attached [pid 5417] chdir("./28") = 0 [pid 5417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5417] setpgid(0, 0) = 0 [pid 5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5417] write(3, "1000", 4) = 4 [pid 5417] close(3) = 0 [pid 5417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5417] memfd_create("syzkaller", 0) = 3 [pid 5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f241a43b000 [pid 5415] <... write resumed>) = 2097152 [pid 5415] munmap(0x7f241a43b000, 2097152) = 0 [pid 5415] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5415] ioctl(4, LOOP_SET_FD, 3 [pid 5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5415] <... ioctl resumed>) = 0 [pid 5415] close(3) = 0 [pid 5415] mkdir("./file0", 0777) = 0 [ 102.602033][ T5415] loop4: detected capacity change from 0 to 4096 [pid 5415] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS, "") = 0 [pid 5415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5415] chdir("./file0") = 0 [pid 5415] ioctl(4, LOOP_CLR_FD) = 0 [pid 5415] close(4) = 0 [pid 5415] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5415] unlink("./file1" [pid 5408] <... pwritev resumed>) = 1114112 [pid 5408] exit_group(0) = ? [pid 5415] <... unlink resumed>) = 0 [ 102.700636][ T5418] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5415] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5417] <... write resumed>) = 2097152 [pid 5417] munmap(0x7f241a43b000, 2097152) = 0 [pid 5417] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5417] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5417] close(3) = 0 [pid 5417] mkdir("./file0", 0777) = 0 [pid 5410] <... pwritev resumed>) = 1114112 [pid 5417] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS, "" [pid 5410] exit_group(0) = ? [ 102.775501][ T5417] loop3: detected capacity change from 0 to 4096 [pid 5409] <... pwritev resumed>) = 1114112 [pid 5409] exit_group(0 [pid 5417] <... mount resumed>) = 0 [pid 5409] <... exit_group resumed>) = ? [pid 5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5417] chdir("./file0") = 0 [pid 5417] ioctl(4, LOOP_CLR_FD) = 0 [pid 5417] close(4 [pid 5411] <... pwritev resumed>) = 1114112 [pid 5417] <... close resumed>) = 0 [pid 5411] exit_group(0 [pid 5410] +++ exited with 0 +++ [pid 5417] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5411] <... exit_group resumed>) = ? [pid 5417] <... openat resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5410, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5417] unlink("./file1" [pid 5065] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 102.863164][ T5419] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5417] <... unlink resumed>) = 0 [pid 5408] +++ exited with 0 +++ [pid 5065] <... openat resumed>) = 3 [pid 5417] pwritev(4, [{iov_base="\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xbb\xed\x45\x40\xf4\xee\xff\xe2\xd2\x54\xf6\x6d\x52\x82\x72\xad\x1e\xa2\xee\x4f\x2d\x98\x5c\x6b\x92\xb3\x23\xba\x22\x86\xac\x2a\x39\x77"..., iov_len=536871105}], 1, 0 [pid 5065] fstat(3, [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5408, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] lstat("./29/binderfs", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] unlink("./29/binderfs" [pid 5064] <... openat resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5064] fstat(3, [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./27/binderfs") = 0 [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5409] +++ exited with 0 +++ [pid 5411] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./29/file0", [pid 5068] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] fstat(3, [pid 5065] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5065] fstat(4, [pid 5063] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] lstat("./28/binderfs", [pid 5065] getdents64(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5068] unlink("./28/binderfs" [pid 5065] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555559b1620 /* 4 entries */, 32768) = 112 [pid 5068] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5063] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] rmdir("./29/file0" [pid 5063] unlink("./27/binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] rmdir("./29" [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./27/file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555559b1620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5065] mkdir("./30", 0777 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./27" [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] mkdir("./28", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5415] <... pwritev resumed>) = 1114112 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... umount2 resumed>) = 0 [pid 5064] close(3 [pid 5415] exit_group(0 [pid 5068] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5415] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5420 [pid 5065] <... clone resumed>, child_tidptr=0x5555559b05d0) = 5421 [pid 5068] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./27/file0", [pid 5068] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] fstat(4, [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5421 attached ./strace-static-x86_64: Process 5420 attached [pid 5068] getdents64(4, [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5421] chdir("./30" [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5420] chdir("./28" [pid 5063] getdents64(4, [pid 5421] <... chdir resumed>) = 0 [pid 5420] <... chdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(4, [pid 5063] close(4 [pid 5421] <... prctl resumed>) = 0 [pid 5420] <... prctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555559b9660 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5421] setpgid(0, 0 [pid 5420] setpgid(0, 0 [