./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1371709646

<...>
forked to background, child pid 4636
no interfaces have a carrier
[   36.112607][ T4637] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.139086][ T4637] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.179' (ECDSA) to the list of known hosts.
execve("./syz-executor1371709646", ["./syz-executor1371709646"], 0x7ffe7f54d810 /* 10 vars */) = 0
brk(NULL)                               = 0x555555db6000
brk(0x555555db6c40)                     = 0x555555db6c40
arch_prctl(ARCH_SET_FS, 0x555555db6300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1371709646", 4096) = 28
brk(0x555555dd7c40)                     = 0x555555dd7c40
brk(0x555555dd8000)                     = 0x555555dd8000
mprotect(0x7f2efb333000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid()                                = 5060
mkdir("./syzkaller.TpLyqQ", 0700)       = 0
chmod("./syzkaller.TpLyqQ", 0777)       = 0
chdir("./syzkaller.TpLyqQ")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5061
./strace-static-x86_64: Process 5061 attached
[pid  5061] chdir("./0")                = 0
[pid  5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5061] setpgid(0, 0)               = 0
[pid  5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5061] write(3, "1000", 4)         = 4
[pid  5061] close(3)                    = 0
[pid  5061] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5061] memfd_create("syzkaller", 0) = 3
[pid  5061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5061] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5061] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5061] close(3)                    = 0
[pid  5061] mkdir("./file0", 0777)      = 0
syzkaller login: [   61.654717][ T5061] loop0: detected capacity change from 0 to 4096
[   61.675170][ T5061] NILFS (loop0): invalid segment: Checksum error in segment payload
[   61.683326][ T5061] NILFS (loop0): trying rollback from an earlier position
[   61.699681][ T5061] NILFS (loop0): recovery complete
[pid  5061] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5061] chdir("./file0")            = 0
[pid  5061] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5061] close(4)                    = 0
[pid  5061] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5061] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   61.707753][ T5063] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   61.726404][   T27] audit: type=1800 audit(1676306749.488:2): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5061] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5061] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5061] exit_group(0)               = ?
[pid  5061] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5064
./strace-static-x86_64: Process 5064 attached
[pid  5064] chdir("./1")                = 0
[pid  5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5064] setpgid(0, 0)               = 0
[pid  5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5064] write(3, "1000", 4)         = 4
[pid  5064] close(3)                    = 0
[pid  5064] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5064] memfd_create("syzkaller", 0) = 3
[pid  5064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5064] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5064] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5064] close(3)                    = 0
[pid  5064] mkdir("./file0", 0777)      = 0
[   62.046459][ T5064] loop0: detected capacity change from 0 to 4096
[   62.063271][ T5064] NILFS (loop0): invalid segment: Checksum error in segment payload
[   62.071353][ T5064] NILFS (loop0): trying rollback from an earlier position
[   62.085511][ T5064] NILFS (loop0): recovery complete
[pid  5064] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5064] chdir("./file0")            = 0
[pid  5064] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5064] close(4)                    = 0
[pid  5064] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5064] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   62.091481][ T5065] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   62.115635][   T27] audit: type=1800 audit(1676306749.858:3): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5064] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5064] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5064] exit_group(0)               = ?
[pid  5064] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5066
./strace-static-x86_64: Process 5066 attached
[pid  5066] chdir("./2")                = 0
[pid  5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5066] setpgid(0, 0)               = 0
[pid  5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5066] write(3, "1000", 4)         = 4
[pid  5066] close(3)                    = 0
[pid  5066] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5066] memfd_create("syzkaller", 0) = 3
[pid  5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5066] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5066] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5066] close(3)                    = 0
[pid  5066] mkdir("./file0", 0777)      = 0
[   62.399318][ T5066] loop0: detected capacity change from 0 to 4096
[   62.416138][ T5066] NILFS (loop0): invalid segment: Checksum error in segment payload
[   62.424244][ T5066] NILFS (loop0): trying rollback from an earlier position
[   62.438128][ T5066] NILFS (loop0): recovery complete
[pid  5066] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5066] chdir("./file0")            = 0
[pid  5066] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5066] close(4)                    = 0
[pid  5066] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5066] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   62.444416][ T5067] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   62.461493][   T27] audit: type=1800 audit(1676306750.218:4): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5066] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5066] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5066] exit_group(0)               = ?
[pid  5066] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs")                  = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5068
./strace-static-x86_64: Process 5068 attached
[pid  5068] chdir("./3")                = 0
[pid  5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5068] setpgid(0, 0)               = 0
[pid  5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "1000", 4)         = 4
[pid  5068] close(3)                    = 0
[pid  5068] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5068] memfd_create("syzkaller", 0) = 3
[pid  5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5068] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5068] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5068] close(3)                    = 0
[pid  5068] mkdir("./file0", 0777)      = 0
[   62.769116][ T5068] loop0: detected capacity change from 0 to 4096
[   62.787020][ T5068] NILFS (loop0): invalid segment: Checksum error in segment payload
[   62.795031][ T5068] NILFS (loop0): trying rollback from an earlier position
[   62.809246][ T5068] NILFS (loop0): recovery complete
[pid  5068] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5068] chdir("./file0")            = 0
[pid  5068] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5068] close(4)                    = 0
[pid  5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5068] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   62.815799][ T5069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   62.836232][   T27] audit: type=1800 audit(1676306750.568:5): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5068] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5068] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5068] exit_group(0)               = ?
[pid  5068] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs")                  = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5070 attached
, child_tidptr=0x555555db65d0) = 5070
[pid  5070] chdir("./4")                = 0
[pid  5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5070] setpgid(0, 0)               = 0
[pid  5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5070] write(3, "1000", 4)         = 4
[pid  5070] close(3)                    = 0
[pid  5070] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5070] memfd_create("syzkaller", 0) = 3
[pid  5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5070] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5070] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5070] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5070] close(3)                    = 0
[pid  5070] mkdir("./file0", 0777)      = 0
[pid  5070] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5070] chdir("./file0")            = 0
[pid  5070] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5070] close(4)                    = 0
[   63.151502][ T5070] loop0: detected capacity change from 0 to 4096
[   63.170019][ T5070] NILFS (loop0): invalid segment: Checksum error in segment payload
[   63.178076][ T5070] NILFS (loop0): trying rollback from an earlier position
[   63.196050][ T5070] NILFS (loop0): recovery complete
[pid  5070] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5070] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   63.217964][ T5071] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   63.228782][   T27] audit: type=1800 audit(1676306750.978:6): pid=5070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5070] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5070] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5070] exit_group(0)               = ?
[pid  5070] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs")                  = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached
, child_tidptr=0x555555db65d0) = 5072
[pid  5072] chdir("./5")                = 0
[pid  5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5072] setpgid(0, 0)               = 0
[pid  5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5072] write(3, "1000", 4)         = 4
[pid  5072] close(3)                    = 0
[pid  5072] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5072] memfd_create("syzkaller", 0) = 3
[pid  5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5072] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5072] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5072] close(3)                    = 0
[pid  5072] mkdir("./file0", 0777)      = 0
[   63.540217][ T5072] loop0: detected capacity change from 0 to 4096
[   63.558601][ T5072] NILFS (loop0): invalid segment: Checksum error in segment payload
[   63.566690][ T5072] NILFS (loop0): trying rollback from an earlier position
[   63.580800][ T5072] NILFS (loop0): recovery complete
[pid  5072] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5072] chdir("./file0")            = 0
[pid  5072] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5072] close(4)                    = 0
[pid  5072] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5072] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   63.587517][ T5073] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   63.607295][   T27] audit: type=1800 audit(1676306751.368:7): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5072] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5072] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5072] exit_group(0)               = ?
[pid  5072] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs")                  = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5074
./strace-static-x86_64: Process 5074 attached
[pid  5074] chdir("./6")                = 0
[pid  5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5074] setpgid(0, 0)               = 0
[pid  5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5074] write(3, "1000", 4)         = 4
[pid  5074] close(3)                    = 0
[pid  5074] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5074] memfd_create("syzkaller", 0) = 3
[pid  5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5074] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5074] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5074] close(3)                    = 0
[pid  5074] mkdir("./file0", 0777)      = 0
[pid  5074] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[   63.936274][ T5074] loop0: detected capacity change from 0 to 4096
[   63.952847][ T5074] NILFS (loop0): invalid segment: Checksum error in segment payload
[   63.960956][ T5074] NILFS (loop0): trying rollback from an earlier position
[   63.976139][ T5074] NILFS (loop0): recovery complete
[pid  5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5074] chdir("./file0")            = 0
[pid  5074] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5074] close(4)                    = 0
[   63.982342][ T5075] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5074] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5074] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   64.017906][   T27] audit: type=1800 audit(1676306751.778:8): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5074] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5074] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5074] exit_group(0)               = ?
[pid  5074] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./6/binderfs")                  = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5076 attached
, child_tidptr=0x555555db65d0) = 5076
[pid  5076] chdir("./7")                = 0
[pid  5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5076] setpgid(0, 0)               = 0
[pid  5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5076] write(3, "1000", 4)         = 4
[pid  5076] close(3)                    = 0
[pid  5076] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5076] memfd_create("syzkaller", 0) = 3
[pid  5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5076] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5076] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5076] close(3)                    = 0
[pid  5076] mkdir("./file0", 0777)      = 0
[   64.343958][ T5076] loop0: detected capacity change from 0 to 4096
[   64.361142][ T5076] NILFS (loop0): invalid segment: Checksum error in segment payload
[   64.369221][ T5076] NILFS (loop0): trying rollback from an earlier position
[   64.383766][ T5076] NILFS (loop0): recovery complete
[pid  5076] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5076] chdir("./file0")            = 0
[pid  5076] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5076] close(4)                    = 0
[pid  5076] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5076] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   64.390480][ T5077] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   64.394549][   T27] audit: type=1800 audit(1676306752.148:9): pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5076] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5076] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5076] exit_group(0)               = ?
[pid  5076] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./7/binderfs")                  = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5078
./strace-static-x86_64: Process 5078 attached
[pid  5078] chdir("./8")                = 0
[pid  5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5078] setpgid(0, 0)               = 0
[pid  5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "1000", 4)         = 4
[pid  5078] close(3)                    = 0
[pid  5078] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5078] memfd_create("syzkaller", 0) = 3
[pid  5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5078] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5078] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5078] close(3)                    = 0
[pid  5078] mkdir("./file0", 0777)      = 0
[   64.756861][ T5078] loop0: detected capacity change from 0 to 4096
[   64.775033][ T5078] NILFS (loop0): invalid segment: Checksum error in segment payload
[   64.783109][ T5078] NILFS (loop0): trying rollback from an earlier position
[   64.797593][ T5078] NILFS (loop0): recovery complete
[pid  5078] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5078] chdir("./file0")            = 0
[pid  5078] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5078] close(4)                    = 0
[pid  5078] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5078] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   64.804946][ T5079] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   64.828187][   T27] audit: type=1800 audit(1676306752.588:10): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5078] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5078] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5078] exit_group(0)               = ?
[pid  5078] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./8/binderfs")                  = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./8/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached
, child_tidptr=0x555555db65d0) = 5080
[pid  5080] chdir("./9")                = 0
[pid  5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5080] setpgid(0, 0)               = 0
[pid  5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5080] write(3, "1000", 4)         = 4
[pid  5080] close(3)                    = 0
[pid  5080] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5080] memfd_create("syzkaller", 0) = 3
[pid  5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5080] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5080] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5080] close(3)                    = 0
[pid  5080] mkdir("./file0", 0777)      = 0
[   65.138491][ T5080] loop0: detected capacity change from 0 to 4096
[   65.154395][ T5080] NILFS (loop0): invalid segment: Checksum error in segment payload
[   65.162528][ T5080] NILFS (loop0): trying rollback from an earlier position
[   65.176265][ T5080] NILFS (loop0): recovery complete
[pid  5080] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5080] chdir("./file0")            = 0
[pid  5080] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5080] close(4)                    = 0
[   65.183211][ T5081] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5080] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   65.212303][   T27] audit: type=1800 audit(1676306752.968:11): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5080] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5080] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5080] exit_group(0)               = ?
[pid  5080] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./9/binderfs")                  = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file0")                      = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5082
./strace-static-x86_64: Process 5082 attached
[pid  5082] chdir("./10")               = 0
[pid  5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5082] setpgid(0, 0)               = 0
[pid  5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5082] write(3, "1000", 4)         = 4
[pid  5082] close(3)                    = 0
[pid  5082] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5082] memfd_create("syzkaller", 0) = 3
[pid  5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5082] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5082] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5082] close(3)                    = 0
[pid  5082] mkdir("./file0", 0777)      = 0
[   65.551035][ T5082] loop0: detected capacity change from 0 to 4096
[   65.568241][ T5082] NILFS (loop0): invalid segment: Checksum error in segment payload
[   65.576341][ T5082] NILFS (loop0): trying rollback from an earlier position
[   65.590682][ T5082] NILFS (loop0): recovery complete
[pid  5082] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5082] chdir("./file0")            = 0
[pid  5082] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5082] close(4)                    = 0
[pid  5082] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5082] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   65.597785][ T5083] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5082] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5082] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5082] exit_group(0)               = ?
[pid  5082] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./10/binderfs")                 = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./10/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./10")                           = 0
mkdir("./11", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5084 attached
, child_tidptr=0x555555db65d0) = 5084
[pid  5084] chdir("./11")               = 0
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5084] setpgid(0, 0)               = 0
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5084] write(3, "1000", 4)         = 4
[pid  5084] close(3)                    = 0
[pid  5084] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5084] memfd_create("syzkaller", 0) = 3
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5084] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5084] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5084] close(3)                    = 0
[pid  5084] mkdir("./file0", 0777)      = 0
[   65.949486][ T5084] loop0: detected capacity change from 0 to 4096
[   65.965885][ T5084] NILFS (loop0): invalid segment: Checksum error in segment payload
[   65.973977][ T5084] NILFS (loop0): trying rollback from an earlier position
[   65.990343][ T5084] NILFS (loop0): recovery complete
[pid  5084] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5084] chdir("./file0")            = 0
[pid  5084] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5084] close(4)                    = 0
[pid  5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5084] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   65.996686][ T5085] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5084] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5084] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5084] exit_group(0)               = ?
[pid  5084] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./11/binderfs")                 = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./11/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./11")                           = 0
mkdir("./12", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5086
./strace-static-x86_64: Process 5086 attached
[pid  5086] chdir("./12")               = 0
[pid  5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5086] setpgid(0, 0)               = 0
[pid  5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5086] write(3, "1000", 4)         = 4
[pid  5086] close(3)                    = 0
[pid  5086] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5086] memfd_create("syzkaller", 0) = 3
[pid  5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5086] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5086] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5086] close(3)                    = 0
[pid  5086] mkdir("./file0", 0777)      = 0
[   66.364294][ T5086] loop0: detected capacity change from 0 to 4096
[   66.384260][ T5086] NILFS (loop0): invalid segment: Checksum error in segment payload
[   66.392505][ T5086] NILFS (loop0): trying rollback from an earlier position
[   66.408418][ T5086] NILFS (loop0): recovery complete
[pid  5086] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5086] chdir("./file0")            = 0
[pid  5086] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5086] close(4)                    = 0
[pid  5086] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5086] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   66.420129][ T5087] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5086] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5086] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5086] exit_group(0)               = ?
[pid  5086] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./12/binderfs")                 = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./12/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./12")                           = 0
mkdir("./13", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached
 <unfinished ...>
[pid  5088] chdir("./13")               = 0
[pid  5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5088] setpgid(0, 0)               = 0
[pid  5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5088
[pid  5088] <... openat resumed>)       = 3
[pid  5088] write(3, "1000", 4)         = 4
[pid  5088] close(3)                    = 0
[pid  5088] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5088] memfd_create("syzkaller", 0) = 3
[pid  5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5088] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5088] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5088] close(3)                    = 0
[pid  5088] mkdir("./file0", 0777)      = 0
[   66.833613][ T5088] loop0: detected capacity change from 0 to 4096
[   66.851890][ T5088] NILFS (loop0): invalid segment: Checksum error in segment payload
[   66.860065][ T5088] NILFS (loop0): trying rollback from an earlier position
[   66.875153][ T5088] NILFS (loop0): recovery complete
[pid  5088] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5088] chdir("./file0")            = 0
[pid  5088] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5088] close(4)                    = 0
[pid  5088] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5088] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   66.881482][ T5089] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   66.895632][   T27] kauditd_printk_skb: 3 callbacks suppressed
[   66.895647][   T27] audit: type=1800 audit(1676306754.648:15): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5088] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5088] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5088] exit_group(0)               = ?
[pid  5088] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./13/binderfs")                 = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./13/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./13")                           = 0
mkdir("./14", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5090
./strace-static-x86_64: Process 5090 attached
[pid  5090] chdir("./14")               = 0
[pid  5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5090] setpgid(0, 0)               = 0
[pid  5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "1000", 4)         = 4
[pid  5090] close(3)                    = 0
[pid  5090] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5090] memfd_create("syzkaller", 0) = 3
[pid  5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5090] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5090] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5090] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5090] close(3)                    = 0
[pid  5090] mkdir("./file0", 0777)      = 0
[   67.230547][ T5090] loop0: detected capacity change from 0 to 4096
[   67.249671][ T5090] NILFS (loop0): invalid segment: Checksum error in segment payload
[   67.257789][ T5090] NILFS (loop0): trying rollback from an earlier position
[   67.271874][ T5090] NILFS (loop0): recovery complete
[pid  5090] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5090] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5090] chdir("./file0")            = 0
[pid  5090] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5090] close(4)                    = 0
[pid  5090] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5090] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   67.278048][ T5091] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   67.304717][   T27] audit: type=1800 audit(1676306755.058:16): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5090] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5090] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5090] exit_group(0)               = ?
[pid  5090] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./14/binderfs")                 = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./14/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./14")                           = 0
mkdir("./15", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5092
./strace-static-x86_64: Process 5092 attached
[pid  5092] chdir("./15")               = 0
[pid  5092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5092] setpgid(0, 0)               = 0
[pid  5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5092] write(3, "1000", 4)         = 4
[pid  5092] close(3)                    = 0
[pid  5092] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5092] memfd_create("syzkaller", 0) = 3
[pid  5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5092] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5092] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5092] close(3)                    = 0
[pid  5092] mkdir("./file0", 0777)      = 0
[   67.630997][ T5092] loop0: detected capacity change from 0 to 4096
[   67.650987][ T5092] NILFS (loop0): invalid segment: Checksum error in segment payload
[   67.659166][ T5092] NILFS (loop0): trying rollback from an earlier position
[   67.673431][ T5092] NILFS (loop0): recovery complete
[pid  5092] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5092] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5092] chdir("./file0")            = 0
[pid  5092] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5092] close(4)                    = 0
[pid  5092] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5092] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   67.679664][ T5093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   67.693744][   T27] audit: type=1800 audit(1676306755.448:17): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5092] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5092] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5092] exit_group(0)               = ?
[pid  5092] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./15/binderfs")                 = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./15/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./15")                           = 0
mkdir("./16", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5094
./strace-static-x86_64: Process 5094 attached
[pid  5094] chdir("./16")               = 0
[pid  5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5094] setpgid(0, 0)               = 0
[pid  5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5094] write(3, "1000", 4)         = 4
[pid  5094] close(3)                    = 0
[pid  5094] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5094] memfd_create("syzkaller", 0) = 3
[pid  5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5094] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5094] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5094] close(3)                    = 0
[pid  5094] mkdir("./file0", 0777)      = 0
[   68.040207][ T5094] loop0: detected capacity change from 0 to 4096
[   68.058443][ T5094] NILFS (loop0): invalid segment: Checksum error in segment payload
[   68.066669][ T5094] NILFS (loop0): trying rollback from an earlier position
[   68.081490][ T5094] NILFS (loop0): recovery complete
[pid  5094] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5094] chdir("./file0")            = 0
[pid  5094] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5094] close(4)                    = 0
[pid  5094] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5094] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   68.087705][ T5095] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.100775][   T27] audit: type=1800 audit(1676306755.858:18): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5094] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5094] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5094] exit_group(0)               = ?
[pid  5094] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./16/binderfs")                 = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./16/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./16")                           = 0
mkdir("./17", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5096
./strace-static-x86_64: Process 5096 attached
[pid  5096] chdir("./17")               = 0
[pid  5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5096] setpgid(0, 0)               = 0
[pid  5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5096] write(3, "1000", 4)         = 4
[pid  5096] close(3)                    = 0
[pid  5096] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5096] memfd_create("syzkaller", 0) = 3
[pid  5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5096] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5096] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5096] close(3)                    = 0
[pid  5096] mkdir("./file0", 0777)      = 0
[   68.417219][ T5096] loop0: detected capacity change from 0 to 4096
[   68.433236][ T5096] NILFS (loop0): invalid segment: Checksum error in segment payload
[   68.441363][ T5096] NILFS (loop0): trying rollback from an earlier position
[   68.456883][ T5096] NILFS (loop0): recovery complete
[pid  5096] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5096] chdir("./file0")            = 0
[pid  5096] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5096] close(4)                    = 0
[pid  5096] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5096] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   68.463064][ T5097] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.477410][   T27] audit: type=1800 audit(1676306756.238:19): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5096] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5096] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5096] exit_group(0)               = ?
[pid  5096] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./17/binderfs")                 = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./17/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./17")                           = 0
mkdir("./18", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5098
./strace-static-x86_64: Process 5098 attached
[pid  5098] chdir("./18")               = 0
[pid  5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5098] setpgid(0, 0)               = 0
[pid  5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5098] write(3, "1000", 4)         = 4
[pid  5098] close(3)                    = 0
[pid  5098] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5098] memfd_create("syzkaller", 0) = 3
[pid  5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5098] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5098] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5098] close(3)                    = 0
[pid  5098] mkdir("./file0", 0777)      = 0
[   68.785054][ T5098] loop0: detected capacity change from 0 to 4096
[   68.802225][ T5098] NILFS (loop0): invalid segment: Checksum error in segment payload
[   68.810262][ T5098] NILFS (loop0): trying rollback from an earlier position
[   68.824610][ T5098] NILFS (loop0): recovery complete
[pid  5098] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5098] chdir("./file0")            = 0
[pid  5098] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5098] close(4)                    = 0
[pid  5098] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5098] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   68.830569][ T5099] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.834627][   T27] audit: type=1800 audit(1676306756.598:20): pid=5098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5098] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5098] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5098] exit_group(0)               = ?
[pid  5098] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./18/binderfs")                 = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./18/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./18")                           = 0
mkdir("./19", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5100
./strace-static-x86_64: Process 5100 attached
[pid  5100] chdir("./19")               = 0
[pid  5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5100] setpgid(0, 0)               = 0
[pid  5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5100] write(3, "1000", 4)         = 4
[pid  5100] close(3)                    = 0
[pid  5100] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5100] memfd_create("syzkaller", 0) = 3
[pid  5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5100] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5100] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5100] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5100] close(3)                    = 0
[pid  5100] mkdir("./file0", 0777)      = 0
[   69.150400][ T5100] loop0: detected capacity change from 0 to 4096
[   69.168303][ T5100] NILFS (loop0): invalid segment: Checksum error in segment payload
[   69.176409][ T5100] NILFS (loop0): trying rollback from an earlier position
[   69.191062][ T5100] NILFS (loop0): recovery complete
[pid  5100] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5100] chdir("./file0")            = 0
[pid  5100] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5100] close(4)                    = 0
[pid  5100] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5100] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   69.197017][ T5101] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.216322][   T27] audit: type=1800 audit(1676306756.968:21): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5100] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5100] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5100] exit_group(0)               = ?
[pid  5100] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./19/binderfs")                 = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./19/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./19")                           = 0
mkdir("./20", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5102
./strace-static-x86_64: Process 5102 attached
[pid  5102] chdir("./20")               = 0
[pid  5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5102] setpgid(0, 0)               = 0
[pid  5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5102] write(3, "1000", 4)         = 4
[pid  5102] close(3)                    = 0
[pid  5102] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5102] memfd_create("syzkaller", 0) = 3
[pid  5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5102] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5102] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5102] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5102] close(3)                    = 0
[pid  5102] mkdir("./file0", 0777)      = 0
[   69.521645][ T5102] loop0: detected capacity change from 0 to 4096
[   69.537841][ T5102] NILFS (loop0): invalid segment: Checksum error in segment payload
[   69.545851][ T5102] NILFS (loop0): trying rollback from an earlier position
[   69.560236][ T5102] NILFS (loop0): recovery complete
[pid  5102] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5102] chdir("./file0")            = 0
[pid  5102] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5102] close(4)                    = 0
[pid  5102] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5102] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   69.566575][ T5103] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.582384][   T27] audit: type=1800 audit(1676306757.338:22): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5102] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5102] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5102] exit_group(0)               = ?
[pid  5102] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./20/binderfs")                 = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./20/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./20")                           = 0
mkdir("./21", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5104
./strace-static-x86_64: Process 5104 attached
[pid  5104] chdir("./21")               = 0
[pid  5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5104] setpgid(0, 0)               = 0
[pid  5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5104] write(3, "1000", 4)         = 4
[pid  5104] close(3)                    = 0
[pid  5104] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5104] memfd_create("syzkaller", 0) = 3
[pid  5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5104] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5104] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5104] close(3)                    = 0
[pid  5104] mkdir("./file0", 0777)      = 0
[   69.901420][ T5104] loop0: detected capacity change from 0 to 4096
[   69.917912][ T5104] NILFS (loop0): invalid segment: Checksum error in segment payload
[   69.925912][ T5104] NILFS (loop0): trying rollback from an earlier position
[   69.940239][ T5104] NILFS (loop0): recovery complete
[pid  5104] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5104] chdir("./file0")            = 0
[pid  5104] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5104] close(4)                    = 0
[pid  5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5104] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   69.947054][ T5105] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.969634][   T27] audit: type=1800 audit(1676306757.728:23): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5104] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5104] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5104] exit_group(0)               = ?
[pid  5104] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./21/binderfs")                 = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./21/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./21")                           = 0
mkdir("./22", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5106
./strace-static-x86_64: Process 5106 attached
[pid  5106] chdir("./22")               = 0
[pid  5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5106] setpgid(0, 0)               = 0
[pid  5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5106] write(3, "1000", 4)         = 4
[pid  5106] close(3)                    = 0
[pid  5106] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5106] memfd_create("syzkaller", 0) = 3
[pid  5106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5106] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5106] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5106] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5106] close(3)                    = 0
[pid  5106] mkdir("./file0", 0777)      = 0
[   70.267900][ T5106] loop0: detected capacity change from 0 to 4096
[   70.284473][ T5106] NILFS (loop0): invalid segment: Checksum error in segment payload
[   70.292570][ T5106] NILFS (loop0): trying rollback from an earlier position
[   70.306447][ T5106] NILFS (loop0): recovery complete
[pid  5106] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5106] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5106] chdir("./file0")            = 0
[pid  5106] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5106] close(4)                    = 0
[pid  5106] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5106] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   70.312179][ T5107] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.319096][   T27] audit: type=1800 audit(1676306758.078:24): pid=5106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5106] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5106] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5106] exit_group(0)               = ?
[pid  5106] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./22/binderfs")                 = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./22/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./22")                           = 0
mkdir("./23", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached
, child_tidptr=0x555555db65d0) = 5108
[pid  5108] chdir("./23")               = 0
[pid  5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5108] setpgid(0, 0)               = 0
[pid  5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5108] write(3, "1000", 4)         = 4
[pid  5108] close(3)                    = 0
[pid  5108] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5108] memfd_create("syzkaller", 0) = 3
[pid  5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5108] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5108] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5108] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5108] close(3)                    = 0
[pid  5108] mkdir("./file0", 0777)      = 0
[pid  5108] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[   70.658598][ T5108] loop0: detected capacity change from 0 to 4096
[   70.674452][ T5108] NILFS (loop0): invalid segment: Checksum error in segment payload
[   70.682506][ T5108] NILFS (loop0): trying rollback from an earlier position
[   70.696700][ T5108] NILFS (loop0): recovery complete
[pid  5108] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5108] chdir("./file0")            = 0
[pid  5108] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5108] close(4)                    = 0
[pid  5108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5108] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   70.702509][ T5109] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5108] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5108] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5108] exit_group(0)               = ?
[pid  5108] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./23/binderfs")                 = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./23/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./23")                           = 0
mkdir("./24", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5110
./strace-static-x86_64: Process 5110 attached
[pid  5110] chdir("./24")               = 0
[pid  5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5110] setpgid(0, 0)               = 0
[pid  5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5110] write(3, "1000", 4)         = 4
[pid  5110] close(3)                    = 0
[pid  5110] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5110] memfd_create("syzkaller", 0) = 3
[pid  5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5110] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5110] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5110] close(3)                    = 0
[pid  5110] mkdir("./file0", 0777)      = 0
[pid  5110] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[   71.009622][ T5110] loop0: detected capacity change from 0 to 4096
[   71.024799][ T5110] NILFS (loop0): invalid segment: Checksum error in segment payload
[   71.032861][ T5110] NILFS (loop0): trying rollback from an earlier position
[   71.050103][ T5110] NILFS (loop0): recovery complete
[pid  5110] chdir("./file0")            = 0
[pid  5110] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5110] close(4)                    = 0
[pid  5110] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5110] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   71.056104][ T5111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5110] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5110] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5110] exit_group(0)               = ?
[pid  5110] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./24/binderfs")                 = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./24/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./24")                           = 0
mkdir("./25", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5112
./strace-static-x86_64: Process 5112 attached
[pid  5112] chdir("./25")               = 0
[pid  5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5112] setpgid(0, 0)               = 0
[pid  5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5112] write(3, "1000", 4)         = 4
[pid  5112] close(3)                    = 0
[pid  5112] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5112] memfd_create("syzkaller", 0) = 3
[pid  5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5112] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5112] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5112] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5112] close(3)                    = 0
[pid  5112] mkdir("./file0", 0777)      = 0
[   71.365641][ T5112] loop0: detected capacity change from 0 to 4096
[   71.382323][ T5112] NILFS (loop0): invalid segment: Checksum error in segment payload
[   71.390366][ T5112] NILFS (loop0): trying rollback from an earlier position
[   71.404277][ T5112] NILFS (loop0): recovery complete
[pid  5112] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5112] chdir("./file0")            = 0
[pid  5112] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5112] close(4)                    = 0
[pid  5112] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5112] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   71.410386][ T5113] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5112] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5112] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5112] exit_group(0)               = ?
[pid  5112] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./25/binderfs")                 = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./25/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./25")                           = 0
mkdir("./26", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5114
./strace-static-x86_64: Process 5114 attached
[pid  5114] chdir("./26")               = 0
[pid  5114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5114] setpgid(0, 0)               = 0
[pid  5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5114] write(3, "1000", 4)         = 4
[pid  5114] close(3)                    = 0
[pid  5114] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5114] memfd_create("syzkaller", 0) = 3
[pid  5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5114] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5114] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5114] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5114] close(3)                    = 0
[pid  5114] mkdir("./file0", 0777)      = 0
[   71.722371][ T5114] loop0: detected capacity change from 0 to 4096
[   71.744570][ T5114] NILFS (loop0): invalid segment: Checksum error in segment payload
[   71.752826][ T5114] NILFS (loop0): trying rollback from an earlier position
[pid  5114] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5114] chdir("./file0")            = 0
[pid  5114] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5114] close(4)                    = 0
[pid  5114] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5114] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   71.768202][ T5114] NILFS (loop0): recovery complete
[   71.774459][ T5115] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5114] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5114] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5114] exit_group(0)               = ?
[pid  5114] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} ---
umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./26/binderfs")                 = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./26/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./26")                           = 0
mkdir("./27", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5116
./strace-static-x86_64: Process 5116 attached
[pid  5116] chdir("./27")               = 0
[pid  5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5116] setpgid(0, 0)               = 0
[pid  5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5116] write(3, "1000", 4)         = 4
[pid  5116] close(3)                    = 0
[pid  5116] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5116] memfd_create("syzkaller", 0) = 3
[pid  5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5116] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5116] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5116] close(3)                    = 0
[pid  5116] mkdir("./file0", 0777)      = 0
[   72.074508][ T5116] loop0: detected capacity change from 0 to 4096
[   72.090020][ T5116] NILFS (loop0): invalid segment: Checksum error in segment payload
[   72.098465][ T5116] NILFS (loop0): trying rollback from an earlier position
[   72.111642][ T5116] NILFS (loop0): recovery complete
[pid  5116] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5116] chdir("./file0")            = 0
[pid  5116] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5116] close(4)                    = 0
[pid  5116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5116] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   72.117789][ T5117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.137878][   T27] kauditd_printk_skb: 4 callbacks suppressed
[   72.137887][   T27] audit: type=1800 audit(1676306759.898:29): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5116] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5116] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5116] exit_group(0)               = ?
[pid  5116] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./27/binderfs")                 = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./27/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./27")                           = 0
mkdir("./28", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5118
./strace-static-x86_64: Process 5118 attached
[pid  5118] chdir("./28")               = 0
[pid  5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5118] setpgid(0, 0)               = 0
[pid  5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5118] write(3, "1000", 4)         = 4
[pid  5118] close(3)                    = 0
[pid  5118] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5118] memfd_create("syzkaller", 0) = 3
[pid  5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5118] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5118] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5118] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5118] close(3)                    = 0
[pid  5118] mkdir("./file0", 0777)      = 0
[   72.477163][ T5118] loop0: detected capacity change from 0 to 4096
[   72.493692][ T5118] NILFS (loop0): invalid segment: Checksum error in segment payload
[   72.501815][ T5118] NILFS (loop0): trying rollback from an earlier position
[   72.516101][ T5118] NILFS (loop0): recovery complete
[pid  5118] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5118] chdir("./file0")            = 0
[pid  5118] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5118] close(4)                    = 0
[   72.522143][ T5119] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5118] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5118] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   72.548275][   T27] audit: type=1800 audit(1676306760.308:30): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5118] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5118] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5118] exit_group(0)               = ?
[pid  5118] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./28/binderfs")                 = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./28/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./28")                           = 0
mkdir("./29", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5120
./strace-static-x86_64: Process 5120 attached
[pid  5120] chdir("./29")               = 0
[pid  5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5120] setpgid(0, 0)               = 0
[pid  5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5120] write(3, "1000", 4)         = 4
[pid  5120] close(3)                    = 0
[pid  5120] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5120] memfd_create("syzkaller", 0) = 3
[pid  5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5120] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5120] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5120] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5120] close(3)                    = 0
[pid  5120] mkdir("./file0", 0777)      = 0
[   72.834828][ T5120] loop0: detected capacity change from 0 to 4096
[   72.851096][ T5120] NILFS (loop0): invalid segment: Checksum error in segment payload
[   72.859303][ T5120] NILFS (loop0): trying rollback from an earlier position
[   72.873295][ T5120] NILFS (loop0): recovery complete
[pid  5120] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5120] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5120] chdir("./file0")            = 0
[pid  5120] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5120] close(4)                    = 0
[pid  5120] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5120] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   72.879540][ T5121] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.895203][   T27] audit: type=1800 audit(1676306760.648:31): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5120] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5120] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5120] exit_group(0)               = ?
[pid  5120] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./29/binderfs")                 = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./29/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./29")                           = 0
mkdir("./30", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5122
./strace-static-x86_64: Process 5122 attached
[pid  5122] chdir("./30")               = 0
[pid  5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5122] setpgid(0, 0)               = 0
[pid  5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5122] write(3, "1000", 4)         = 4
[pid  5122] close(3)                    = 0
[pid  5122] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5122] memfd_create("syzkaller", 0) = 3
[pid  5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5122] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5122] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5122] close(3)                    = 0
[pid  5122] mkdir("./file0", 0777)      = 0
[   73.214450][ T5122] loop0: detected capacity change from 0 to 4096
[   73.232301][ T5122] NILFS (loop0): invalid segment: Checksum error in segment payload
[   73.240399][ T5122] NILFS (loop0): trying rollback from an earlier position
[   73.254272][ T5122] NILFS (loop0): recovery complete
[pid  5122] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5122] chdir("./file0")            = 0
[pid  5122] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5122] close(4)                    = 0
[pid  5122] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5122] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   73.260145][ T5123] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.277090][   T27] audit: type=1800 audit(1676306761.028:32): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5122] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5122] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5122] exit_group(0)               = ?
[pid  5122] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./30/binderfs")                 = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./30/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./30")                           = 0
mkdir("./31", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5124
./strace-static-x86_64: Process 5124 attached
[pid  5124] chdir("./31")               = 0
[pid  5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5124] setpgid(0, 0)               = 0
[pid  5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5124] write(3, "1000", 4)         = 4
[pid  5124] close(3)                    = 0
[pid  5124] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5124] memfd_create("syzkaller", 0) = 3
[pid  5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5124] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5124] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5124] close(3)                    = 0
[pid  5124] mkdir("./file0", 0777)      = 0
[   73.569342][ T5124] loop0: detected capacity change from 0 to 4096
[   73.587640][ T5124] NILFS (loop0): invalid segment: Checksum error in segment payload
[   73.595651][ T5124] NILFS (loop0): trying rollback from an earlier position
[   73.609696][ T5124] NILFS (loop0): recovery complete
[pid  5124] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5124] chdir("./file0")            = 0
[pid  5124] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5124] close(4)                    = 0
[pid  5124] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5124] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   73.616012][ T5125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.630359][   T27] audit: type=1800 audit(1676306761.388:33): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5124] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5124] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5124] exit_group(0)               = ?
[pid  5124] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./31/binderfs")                 = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./31/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./31")                           = 0
mkdir("./32", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5126
./strace-static-x86_64: Process 5126 attached
[pid  5126] chdir("./32")               = 0
[pid  5126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5126] setpgid(0, 0)               = 0
[pid  5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5126] write(3, "1000", 4)         = 4
[pid  5126] close(3)                    = 0
[pid  5126] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5126] memfd_create("syzkaller", 0) = 3
[pid  5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5126] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5126] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5126] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5126] close(3)                    = 0
[pid  5126] mkdir("./file0", 0777)      = 0
[   73.942568][ T5126] loop0: detected capacity change from 0 to 4096
[   73.959474][ T5126] NILFS (loop0): invalid segment: Checksum error in segment payload
[   73.967533][ T5126] NILFS (loop0): trying rollback from an earlier position
[   73.981588][ T5126] NILFS (loop0): recovery complete
[pid  5126] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5126] chdir("./file0")            = 0
[pid  5126] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5126] close(4)                    = 0
[pid  5126] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5126] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   73.987495][ T5127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.010056][   T27] audit: type=1800 audit(1676306761.768:34): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5126] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5126] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5126] exit_group(0)               = ?
[pid  5126] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./32/binderfs")                 = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./32/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./32")                           = 0
mkdir("./33", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5128
./strace-static-x86_64: Process 5128 attached
[pid  5128] chdir("./33")               = 0
[pid  5128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5128] setpgid(0, 0)               = 0
[pid  5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5128] write(3, "1000", 4)         = 4
[pid  5128] close(3)                    = 0
[pid  5128] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5128] memfd_create("syzkaller", 0) = 3
[pid  5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5128] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5128] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5128] close(3)                    = 0
[pid  5128] mkdir("./file0", 0777)      = 0
[   74.327197][ T5128] loop0: detected capacity change from 0 to 4096
[   74.354730][ T5128] NILFS (loop0): invalid segment: Checksum error in segment payload
[   74.363226][ T5128] NILFS (loop0): trying rollback from an earlier position
[pid  5128] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5128] chdir("./file0")            = 0
[pid  5128] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5128] close(4)                    = 0
[pid  5128] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5128] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   74.377041][ T5128] NILFS (loop0): recovery complete
[   74.382941][ T5129] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.398455][   T27] audit: type=1800 audit(1676306762.158:35): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5128] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5128] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5128] exit_group(0)               = ?
[pid  5128] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5128, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./33/binderfs")                 = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./33/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./33")                           = 0
mkdir("./34", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5130
./strace-static-x86_64: Process 5130 attached
[pid  5130] chdir("./34")               = 0
[pid  5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5130] setpgid(0, 0)               = 0
[pid  5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5130] write(3, "1000", 4)         = 4
[pid  5130] close(3)                    = 0
[pid  5130] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5130] memfd_create("syzkaller", 0) = 3
[pid  5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5130] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5130] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5130] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5130] close(3)                    = 0
[pid  5130] mkdir("./file0", 0777)      = 0
[   74.699089][ T5130] loop0: detected capacity change from 0 to 4096
[   74.718200][ T5130] NILFS (loop0): invalid segment: Checksum error in segment payload
[   74.726287][ T5130] NILFS (loop0): trying rollback from an earlier position
[   74.740470][ T5130] NILFS (loop0): recovery complete
[pid  5130] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5130] chdir("./file0")            = 0
[pid  5130] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5130] close(4)                    = 0
[pid  5130] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5130] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   74.746826][ T5131] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.768285][   T27] audit: type=1800 audit(1676306762.528:36): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5130] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5130] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5130] exit_group(0)               = ?
[pid  5130] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} ---
umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./34/binderfs")                 = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./34/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./34")                           = 0
mkdir("./35", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5132 attached
, child_tidptr=0x555555db65d0) = 5132
[pid  5132] chdir("./35")               = 0
[pid  5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5132] setpgid(0, 0)               = 0
[pid  5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5132] write(3, "1000", 4)         = 4
[pid  5132] close(3)                    = 0
[pid  5132] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5132] memfd_create("syzkaller", 0) = 3
[pid  5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5132] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5132] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5132] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5132] close(3)                    = 0
[pid  5132] mkdir("./file0", 0777)      = 0
[   75.100341][ T5132] loop0: detected capacity change from 0 to 4096
[   75.116870][ T5132] NILFS (loop0): invalid segment: Checksum error in segment payload
[   75.124901][ T5132] NILFS (loop0): trying rollback from an earlier position
[   75.138925][ T5132] NILFS (loop0): recovery complete
[pid  5132] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5132] chdir("./file0")            = 0
[pid  5132] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5132] close(4)                    = 0
[pid  5132] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5132] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   75.144864][ T5133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.166010][   T27] audit: type=1800 audit(1676306762.908:37): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5132] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5132] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5132] exit_group(0)               = ?
[pid  5132] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./35/binderfs")                 = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./35/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./35")                           = 0
mkdir("./36", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5134 attached
 <unfinished ...>
[pid  5134] chdir("./36")               = 0
[pid  5134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5134] setpgid(0, 0 <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5134
[pid  5134] <... setpgid resumed>)      = 0
[pid  5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5134] write(3, "1000", 4)         = 4
[pid  5134] close(3)                    = 0
[pid  5134] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5134] memfd_create("syzkaller", 0) = 3
[pid  5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5134] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5134] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5134] close(3)                    = 0
[pid  5134] mkdir("./file0", 0777)      = 0
[   75.455891][ T5134] loop0: detected capacity change from 0 to 4096
[   75.473186][ T5134] NILFS (loop0): invalid segment: Checksum error in segment payload
[   75.481759][ T5134] NILFS (loop0): trying rollback from an earlier position
[   75.496417][ T5134] NILFS (loop0): recovery complete
[pid  5134] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5134] chdir("./file0")            = 0
[pid  5134] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5134] close(4)                    = 0
[pid  5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5134] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   75.502375][ T5135] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.538426][   T27] audit: type=1800 audit(1676306763.298:38): pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5134] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5134] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5134] exit_group(0)               = ?
[pid  5134] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./36/binderfs")                 = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./36/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./36")                           = 0
mkdir("./37", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5136
./strace-static-x86_64: Process 5136 attached
[pid  5136] chdir("./37")               = 0
[pid  5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5136] setpgid(0, 0)               = 0
[pid  5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5136] write(3, "1000", 4)         = 4
[pid  5136] close(3)                    = 0
[pid  5136] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5136] memfd_create("syzkaller", 0) = 3
[pid  5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5136] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5136] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5136] close(3)                    = 0
[pid  5136] mkdir("./file0", 0777)      = 0
[   75.830551][ T5136] loop0: detected capacity change from 0 to 4096
[   75.848758][ T5136] NILFS (loop0): invalid segment: Checksum error in segment payload
[   75.856850][ T5136] NILFS (loop0): trying rollback from an earlier position
[   75.870852][ T5136] NILFS (loop0): recovery complete
[pid  5136] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5136] chdir("./file0")            = 0
[pid  5136] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5136] close(4)                    = 0
[pid  5136] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5136] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   75.877256][ T5137] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.068042][  T898] cfg80211: failed to load regulatory.db
[pid  5136] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5136] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5136] exit_group(0)               = ?
[pid  5136] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./37/binderfs")                 = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./37/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./37")                           = 0
mkdir("./38", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5138
./strace-static-x86_64: Process 5138 attached
[pid  5138] chdir("./38")               = 0
[pid  5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5138] setpgid(0, 0)               = 0
[pid  5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5138] write(3, "1000", 4)         = 4
[pid  5138] close(3)                    = 0
[pid  5138] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5138] memfd_create("syzkaller", 0) = 3
[pid  5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5138] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5138] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5138] close(3)                    = 0
[pid  5138] mkdir("./file0", 0777)      = 0
[   76.251044][ T5138] loop0: detected capacity change from 0 to 4096
[   76.273569][ T5138] NILFS (loop0): invalid segment: Checksum error in segment payload
[   76.282074][ T5138] NILFS (loop0): trying rollback from an earlier position
[pid  5138] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5138] chdir("./file0")            = 0
[pid  5138] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5138] close(4)                    = 0
[pid  5138] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5138] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   76.299575][ T5138] NILFS (loop0): recovery complete
[   76.307136][ T5139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5138] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5138] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5138] exit_group(0)               = ?
[pid  5138] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./38/binderfs")                 = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./38/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./38")                           = 0
mkdir("./39", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5140
./strace-static-x86_64: Process 5140 attached
[pid  5140] chdir("./39")               = 0
[pid  5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5140] setpgid(0, 0)               = 0
[pid  5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5140] write(3, "1000", 4)         = 4
[pid  5140] close(3)                    = 0
[pid  5140] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5140] memfd_create("syzkaller", 0) = 3
[pid  5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5140] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5140] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5140] close(3)                    = 0
[pid  5140] mkdir("./file0", 0777)      = 0
[   76.747417][ T5140] loop0: detected capacity change from 0 to 4096
[   76.773250][ T5140] NILFS (loop0): invalid segment: Checksum error in segment payload
[   76.781799][ T5140] NILFS (loop0): trying rollback from an earlier position
[pid  5140] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5140] chdir("./file0")            = 0
[pid  5140] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5140] close(4)                    = 0
[pid  5140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5140] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   76.801133][ T5140] NILFS (loop0): recovery complete
[   76.808444][ T5141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5140] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5140] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5140] exit_group(0)               = ?
[pid  5140] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} ---
umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./39/binderfs")                 = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./39/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./39")                           = 0
mkdir("./40", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5142 attached
 <unfinished ...>
[pid  5142] chdir("./40" <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5142
[pid  5142] <... chdir resumed>)        = 0
[pid  5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5142] setpgid(0, 0)               = 0
[pid  5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5142] write(3, "1000", 4)         = 4
[pid  5142] close(3)                    = 0
[pid  5142] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5142] memfd_create("syzkaller", 0) = 3
[pid  5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5142] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5142] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5142] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5142] close(3)                    = 0
[pid  5142] mkdir("./file0", 0777)      = 0
[pid  5142] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5142] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[   77.128319][ T5142] loop0: detected capacity change from 0 to 4096
[   77.144940][ T5142] NILFS (loop0): invalid segment: Checksum error in segment payload
[   77.153005][ T5142] NILFS (loop0): trying rollback from an earlier position
[   77.166588][ T5142] NILFS (loop0): recovery complete
[pid  5142] chdir("./file0")            = 0
[pid  5142] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5142] close(4)                    = 0
[pid  5142] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5142] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   77.173033][ T5143] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.184803][   T27] kauditd_printk_skb: 3 callbacks suppressed
[   77.184814][   T27] audit: type=1800 audit(1676306764.948:42): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5142] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5142] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5142] exit_group(0)               = ?
[pid  5142] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./40/binderfs")                 = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./40/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./40")                           = 0
mkdir("./41", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5144
./strace-static-x86_64: Process 5144 attached
[pid  5144] chdir("./41")               = 0
[pid  5144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5144] setpgid(0, 0)               = 0
[pid  5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5144] write(3, "1000", 4)         = 4
[pid  5144] close(3)                    = 0
[pid  5144] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5144] memfd_create("syzkaller", 0) = 3
[pid  5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5144] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5144] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5144] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5144] close(3)                    = 0
[pid  5144] mkdir("./file0", 0777)      = 0
[   77.481723][ T5144] loop0: detected capacity change from 0 to 4096
[   77.497097][ T5144] NILFS (loop0): invalid segment: Checksum error in segment payload
[   77.505121][ T5144] NILFS (loop0): trying rollback from an earlier position
[   77.519157][ T5144] NILFS (loop0): recovery complete
[pid  5144] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5144] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5144] chdir("./file0")            = 0
[pid  5144] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5144] close(4)                    = 0
[pid  5144] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5144] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   77.525075][ T5145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.549465][   T27] audit: type=1800 audit(1676306765.308:43): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5144] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5144] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5144] exit_group(0)               = ?
[pid  5144] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5144, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./41/binderfs")                 = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./41/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./41")                           = 0
mkdir("./42", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5146 attached
, child_tidptr=0x555555db65d0) = 5146
[pid  5146] chdir("./42")               = 0
[pid  5146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5146] setpgid(0, 0)               = 0
[pid  5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5146] write(3, "1000", 4)         = 4
[pid  5146] close(3)                    = 0
[pid  5146] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5146] memfd_create("syzkaller", 0) = 3
[pid  5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5146] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5146] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5146] close(3)                    = 0
[pid  5146] mkdir("./file0", 0777)      = 0
[   77.835213][ T5146] loop0: detected capacity change from 0 to 4096
[   77.851383][ T5146] NILFS (loop0): invalid segment: Checksum error in segment payload
[   77.859467][ T5146] NILFS (loop0): trying rollback from an earlier position
[   77.873184][ T5146] NILFS (loop0): recovery complete
[pid  5146] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5146] chdir("./file0")            = 0
[pid  5146] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5146] close(4)                    = 0
[pid  5146] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5146] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   77.878981][ T5147] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.899354][   T27] audit: type=1800 audit(1676306765.658:44): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5146] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5146] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5146] exit_group(0)               = ?
[pid  5146] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./42/binderfs")                 = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./42/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./42")                           = 0
mkdir("./43", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5148
./strace-static-x86_64: Process 5148 attached
[pid  5148] chdir("./43")               = 0
[pid  5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5148] setpgid(0, 0)               = 0
[pid  5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5148] write(3, "1000", 4)         = 4
[pid  5148] close(3)                    = 0
[pid  5148] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5148] memfd_create("syzkaller", 0) = 3
[pid  5148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5148] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5148] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5148] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5148] close(3)                    = 0
[pid  5148] mkdir("./file0", 0777)      = 0
[   78.189841][ T5148] loop0: detected capacity change from 0 to 4096
[   78.207836][ T5148] NILFS (loop0): invalid segment: Checksum error in segment payload
[   78.215948][ T5148] NILFS (loop0): trying rollback from an earlier position
[   78.230185][ T5148] NILFS (loop0): recovery complete
[pid  5148] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5148] chdir("./file0")            = 0
[pid  5148] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5148] close(4)                    = 0
[pid  5148] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5148] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   78.236213][ T5149] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.259349][   T27] audit: type=1800 audit(1676306766.018:45): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5148] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5148] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5148] exit_group(0)               = ?
[pid  5148] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5148, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./43/binderfs")                 = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./43/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./43")                           = 0
mkdir("./44", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5150
./strace-static-x86_64: Process 5150 attached
[pid  5150] chdir("./44")               = 0
[pid  5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5150] setpgid(0, 0)               = 0
[pid  5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5150] write(3, "1000", 4)         = 4
[pid  5150] close(3)                    = 0
[pid  5150] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5150] memfd_create("syzkaller", 0) = 3
[pid  5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5150] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5150] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5150] close(3)                    = 0
[pid  5150] mkdir("./file0", 0777)      = 0
[   78.567611][ T5150] loop0: detected capacity change from 0 to 4096
[   78.584478][ T5150] NILFS (loop0): invalid segment: Checksum error in segment payload
[   78.592577][ T5150] NILFS (loop0): trying rollback from an earlier position
[   78.607110][ T5150] NILFS (loop0): recovery complete
[pid  5150] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5150] chdir("./file0")            = 0
[pid  5150] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5150] close(4)                    = 0
[pid  5150] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5150] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   78.613421][ T5151] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.617010][   T27] audit: type=1800 audit(1676306766.368:46): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5150] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5150] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5150] exit_group(0)               = ?
[pid  5150] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5150, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./44/binderfs")                 = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./44/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./44")                           = 0
mkdir("./45", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5152
./strace-static-x86_64: Process 5152 attached
[pid  5152] chdir("./45")               = 0
[pid  5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5152] setpgid(0, 0)               = 0
[pid  5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5152] write(3, "1000", 4)         = 4
[pid  5152] close(3)                    = 0
[pid  5152] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5152] memfd_create("syzkaller", 0) = 3
[pid  5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5152] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5152] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5152] close(3)                    = 0
[pid  5152] mkdir("./file0", 0777)      = 0
[   78.909006][ T5152] loop0: detected capacity change from 0 to 4096
[   78.923035][ T5152] NILFS (loop0): invalid segment: Checksum error in segment payload
[   78.931331][ T5152] NILFS (loop0): trying rollback from an earlier position
[   78.944512][ T5152] NILFS (loop0): recovery complete
[pid  5152] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5152] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5152] chdir("./file0")            = 0
[pid  5152] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5152] close(4)                    = 0
[pid  5152] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5152] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   78.950472][ T5153] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.962526][   T27] audit: type=1800 audit(1676306766.718:47): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5152] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5152] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5152] exit_group(0)               = ?
[pid  5152] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./45/binderfs")                 = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./45/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./45")                           = 0
mkdir("./46", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5154
./strace-static-x86_64: Process 5154 attached
[pid  5154] chdir("./46")               = 0
[pid  5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5154] setpgid(0, 0)               = 0
[pid  5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5154] write(3, "1000", 4)         = 4
[pid  5154] close(3)                    = 0
[pid  5154] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5154] memfd_create("syzkaller", 0) = 3
[pid  5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5154] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5154] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5154] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5154] close(3)                    = 0
[pid  5154] mkdir("./file0", 0777)      = 0
[   79.257289][ T5154] loop0: detected capacity change from 0 to 4096
[   79.274040][ T5154] NILFS (loop0): invalid segment: Checksum error in segment payload
[   79.282099][ T5154] NILFS (loop0): trying rollback from an earlier position
[   79.295884][ T5154] NILFS (loop0): recovery complete
[pid  5154] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5154] chdir("./file0")            = 0
[pid  5154] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5154] close(4)                    = 0
[   79.302045][ T5155] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5154] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   79.332886][   T27] audit: type=1800 audit(1676306767.088:48): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5154] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5154] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5154] exit_group(0)               = ?
[pid  5154] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./46/binderfs")                 = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./46/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./46")                           = 0
mkdir("./47", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5156
./strace-static-x86_64: Process 5156 attached
[pid  5156] chdir("./47")               = 0
[pid  5156] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5156] setpgid(0, 0)               = 0
[pid  5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5156] write(3, "1000", 4)         = 4
[pid  5156] close(3)                    = 0
[pid  5156] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5156] memfd_create("syzkaller", 0) = 3
[pid  5156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5156] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5156] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5156] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5156] close(3)                    = 0
[pid  5156] mkdir("./file0", 0777)      = 0
[   79.615390][ T5156] loop0: detected capacity change from 0 to 4096
[   79.631183][ T5156] NILFS (loop0): invalid segment: Checksum error in segment payload
[   79.639226][ T5156] NILFS (loop0): trying rollback from an earlier position
[   79.653596][ T5156] NILFS (loop0): recovery complete
[pid  5156] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5156] chdir("./file0")            = 0
[pid  5156] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5156] close(4)                    = 0
[pid  5156] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5156] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   79.659864][ T5157] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   79.679082][   T27] audit: type=1800 audit(1676306767.438:49): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5156] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5156] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5156] exit_group(0)               = ?
[pid  5156] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./47/binderfs")                 = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./47/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./47")                           = 0
mkdir("./48", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5158
./strace-static-x86_64: Process 5158 attached
[pid  5158] chdir("./48")               = 0
[pid  5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5158] setpgid(0, 0)               = 0
[pid  5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5158] write(3, "1000", 4)         = 4
[pid  5158] close(3)                    = 0
[pid  5158] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5158] memfd_create("syzkaller", 0) = 3
[pid  5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5158] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5158] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5158] close(3)                    = 0
[pid  5158] mkdir("./file0", 0777)      = 0
[   79.985994][ T5158] loop0: detected capacity change from 0 to 4096
[   80.000810][ T5158] NILFS (loop0): invalid segment: Checksum error in segment payload
[   80.008898][ T5158] NILFS (loop0): trying rollback from an earlier position
[   80.022635][ T5158] NILFS (loop0): recovery complete
[pid  5158] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5158] chdir("./file0")            = 0
[pid  5158] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5158] close(4)                    = 0
[pid  5158] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5158] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   80.028511][ T5159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.054829][   T27] audit: type=1800 audit(1676306767.808:50): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5158] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5158] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5158] exit_group(0)               = ?
[pid  5158] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./48/binderfs")                 = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./48/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./48")                           = 0
mkdir("./49", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5160 attached
, child_tidptr=0x555555db65d0) = 5160
[pid  5160] chdir("./49")               = 0
[pid  5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5160] setpgid(0, 0)               = 0
[pid  5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5160] write(3, "1000", 4)         = 4
[pid  5160] close(3)                    = 0
[pid  5160] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5160] memfd_create("syzkaller", 0) = 3
[pid  5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5160] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5160] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5160] close(3)                    = 0
[pid  5160] mkdir("./file0", 0777)      = 0
[   80.345356][ T5160] loop0: detected capacity change from 0 to 4096
[   80.362775][ T5160] NILFS (loop0): invalid segment: Checksum error in segment payload
[   80.370849][ T5160] NILFS (loop0): trying rollback from an earlier position
[   80.384923][ T5160] NILFS (loop0): recovery complete
[pid  5160] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5160] chdir("./file0")            = 0
[pid  5160] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5160] close(4)                    = 0
[pid  5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5160] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   80.391085][ T5161] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.410485][   T27] audit: type=1800 audit(1676306768.168:51): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5160] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5160] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5160] exit_group(0)               = ?
[pid  5160] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./49/binderfs")                 = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./49/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./49")                           = 0
mkdir("./50", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5162 attached
, child_tidptr=0x555555db65d0) = 5162
[pid  5162] chdir("./50")               = 0
[pid  5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5162] setpgid(0, 0)               = 0
[pid  5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5162] write(3, "1000", 4)         = 4
[pid  5162] close(3)                    = 0
[pid  5162] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5162] memfd_create("syzkaller", 0) = 3
[pid  5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5162] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5162] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5162] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5162] close(3)                    = 0
[pid  5162] mkdir("./file0", 0777)      = 0
[pid  5162] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5162] chdir("./file0")            = 0
[pid  5162] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5162] close(4)                    = 0
[pid  5162] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5162] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   80.704116][ T5162] loop0: detected capacity change from 0 to 4096
[   80.720840][ T5162] NILFS (loop0): invalid segment: Checksum error in segment payload
[   80.728888][ T5162] NILFS (loop0): trying rollback from an earlier position
[   80.742064][ T5162] NILFS (loop0): recovery complete
[   80.748184][ T5163] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5162] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5162] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5162] exit_group(0)               = ?
[pid  5162] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./50/binderfs")                 = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./50/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./50")                           = 0
mkdir("./51", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5164
./strace-static-x86_64: Process 5164 attached
[pid  5164] chdir("./51")               = 0
[pid  5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5164] setpgid(0, 0)               = 0
[pid  5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5164] write(3, "1000", 4)         = 4
[pid  5164] close(3)                    = 0
[pid  5164] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5164] memfd_create("syzkaller", 0) = 3
[pid  5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5164] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5164] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5164] close(3)                    = 0
[pid  5164] mkdir("./file0", 0777)      = 0
[   81.061155][ T5164] loop0: detected capacity change from 0 to 4096
[   81.080998][ T5164] NILFS (loop0): invalid segment: Checksum error in segment payload
[   81.089315][ T5164] NILFS (loop0): trying rollback from an earlier position
[   81.103584][ T5164] NILFS (loop0): recovery complete
[pid  5164] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5164] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5164] chdir("./file0")            = 0
[pid  5164] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5164] close(4)                    = 0
[pid  5164] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5164] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   81.109672][ T5165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5164] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5164] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5164] exit_group(0)               = ?
[pid  5164] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./51/binderfs")                 = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./51/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./51")                           = 0
mkdir("./52", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5166 attached
 <unfinished ...>
[pid  5166] chdir("./52")               = 0
[pid  5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5166
[pid  5166] setpgid(0, 0)               = 0
[pid  5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5166] write(3, "1000", 4)         = 4
[pid  5166] close(3)                    = 0
[pid  5166] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5166] memfd_create("syzkaller", 0) = 3
[pid  5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5166] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5166] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5166] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5166] close(3)                    = 0
[pid  5166] mkdir("./file0", 0777)      = 0
[   81.420526][ T5166] loop0: detected capacity change from 0 to 4096
[   81.437148][ T5166] NILFS (loop0): invalid segment: Checksum error in segment payload
[   81.445226][ T5166] NILFS (loop0): trying rollback from an earlier position
[   81.459891][ T5166] NILFS (loop0): recovery complete
[pid  5166] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5166] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5166] chdir("./file0")            = 0
[pid  5166] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5166] close(4)                    = 0
[pid  5166] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5166] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   81.465692][ T5167] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5166] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5166] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5166] exit_group(0)               = ?
[pid  5166] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./52/binderfs")                 = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./52/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./52")                           = 0
mkdir("./53", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5168
./strace-static-x86_64: Process 5168 attached
[pid  5168] chdir("./53")               = 0
[pid  5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5168] setpgid(0, 0)               = 0
[pid  5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5168] write(3, "1000", 4)         = 4
[pid  5168] close(3)                    = 0
[pid  5168] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5168] memfd_create("syzkaller", 0) = 3
[pid  5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5168] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5168] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5168] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5168] close(3)                    = 0
[pid  5168] mkdir("./file0", 0777)      = 0
[   81.803624][ T5168] loop0: detected capacity change from 0 to 4096
[   81.820113][ T5168] NILFS (loop0): invalid segment: Checksum error in segment payload
[   81.828302][ T5168] NILFS (loop0): trying rollback from an earlier position
[   81.844426][ T5168] NILFS (loop0): recovery complete
[pid  5168] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5168] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5168] chdir("./file0")            = 0
[pid  5168] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5168] close(4)                    = 0
[pid  5168] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5168] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   81.850223][ T5169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5168] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5168] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5168] exit_group(0)               = ?
[pid  5168] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./53/binderfs")                 = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./53/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./53")                           = 0
mkdir("./54", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5170 attached
 <unfinished ...>
[pid  5170] chdir("./54")               = 0
[pid  5170] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5170
[pid  5170] <... prctl resumed>)        = 0
[pid  5170] setpgid(0, 0)               = 0
[pid  5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5170] write(3, "1000", 4)         = 4
[pid  5170] close(3)                    = 0
[pid  5170] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5170] memfd_create("syzkaller", 0) = 3
[pid  5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5170] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5170] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5170] close(3)                    = 0
[pid  5170] mkdir("./file0", 0777)      = 0
[   82.142612][ T5170] loop0: detected capacity change from 0 to 4096
[   82.159571][ T5170] NILFS (loop0): invalid segment: Checksum error in segment payload
[   82.167654][ T5170] NILFS (loop0): trying rollback from an earlier position
[   82.181148][ T5170] NILFS (loop0): recovery complete
[pid  5170] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5170] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5170] chdir("./file0")            = 0
[pid  5170] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5170] close(4)                    = 0
[pid  5170] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5170] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   82.187159][ T5171] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.209040][   T27] kauditd_printk_skb: 4 callbacks suppressed
[   82.209052][   T27] audit: type=1800 audit(1676306769.968:56): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5170] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5170] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5170] exit_group(0)               = ?
[pid  5170] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./54/binderfs")                 = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./54/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./54")                           = 0
mkdir("./55", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5172
./strace-static-x86_64: Process 5172 attached
[pid  5172] chdir("./55")               = 0
[pid  5172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5172] setpgid(0, 0)               = 0
[pid  5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5172] write(3, "1000", 4)         = 4
[pid  5172] close(3)                    = 0
[pid  5172] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5172] memfd_create("syzkaller", 0) = 3
[pid  5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5172] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5172] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5172] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5172] close(3)                    = 0
[pid  5172] mkdir("./file0", 0777)      = 0
[   82.509841][ T5172] loop0: detected capacity change from 0 to 4096
[   82.526503][ T5172] NILFS (loop0): invalid segment: Checksum error in segment payload
[   82.534537][ T5172] NILFS (loop0): trying rollback from an earlier position
[   82.549010][ T5172] NILFS (loop0): recovery complete
[pid  5172] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5172] chdir("./file0")            = 0
[pid  5172] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5172] close(4)                    = 0
[pid  5172] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5172] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   82.555196][ T5174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.563592][   T27] audit: type=1800 audit(1676306770.318:57): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5172] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5172] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5172] exit_group(0)               = ?
[pid  5172] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./55/binderfs")                 = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./55/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./55")                           = 0
mkdir("./56", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5175
./strace-static-x86_64: Process 5175 attached
[pid  5175] chdir("./56")               = 0
[pid  5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5175] setpgid(0, 0)               = 0
[pid  5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5175] write(3, "1000", 4)         = 4
[pid  5175] close(3)                    = 0
[pid  5175] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5175] memfd_create("syzkaller", 0) = 3
[pid  5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5175] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5175] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5175] close(3)                    = 0
[pid  5175] mkdir("./file0", 0777)      = 0
[   82.845176][ T5175] loop0: detected capacity change from 0 to 4096
[   82.861651][ T5175] NILFS (loop0): invalid segment: Checksum error in segment payload
[   82.869792][ T5175] NILFS (loop0): trying rollback from an earlier position
[   82.884184][ T5175] NILFS (loop0): recovery complete
[pid  5175] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5175] chdir("./file0")            = 0
[pid  5175] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5175] close(4)                    = 0
[pid  5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5175] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   82.890022][ T5176] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.894154][   T27] audit: type=1800 audit(1676306770.658:58): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5175] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5175] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5175] exit_group(0)               = ?
[pid  5175] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./56/binderfs")                 = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./56/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./56")                           = 0
mkdir("./57", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5177
./strace-static-x86_64: Process 5177 attached
[pid  5177] chdir("./57")               = 0
[pid  5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5177] setpgid(0, 0)               = 0
[pid  5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5177] write(3, "1000", 4)         = 4
[pid  5177] close(3)                    = 0
[pid  5177] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5177] memfd_create("syzkaller", 0) = 3
[pid  5177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5177] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5177] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5177] close(3)                    = 0
[pid  5177] mkdir("./file0", 0777)      = 0
[   83.223825][ T5177] loop0: detected capacity change from 0 to 4096
[   83.239796][ T5177] NILFS (loop0): invalid segment: Checksum error in segment payload
[   83.247903][ T5177] NILFS (loop0): trying rollback from an earlier position
[   83.262527][ T5177] NILFS (loop0): recovery complete
[pid  5177] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5177] chdir("./file0")            = 0
[pid  5177] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5177] close(4)                    = 0
[pid  5177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5177] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   83.268508][ T5178] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   83.286340][   T27] audit: type=1800 audit(1676306771.038:59): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5177] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5177] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5177] exit_group(0)               = ?
[pid  5177] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./57/binderfs")                 = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./57/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./57")                           = 0
mkdir("./58", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5179
./strace-static-x86_64: Process 5179 attached
[pid  5179] chdir("./58")               = 0
[pid  5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5179] setpgid(0, 0)               = 0
[pid  5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5179] write(3, "1000", 4)         = 4
[pid  5179] close(3)                    = 0
[pid  5179] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5179] memfd_create("syzkaller", 0) = 3
[pid  5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5179] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5179] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5179] close(3)                    = 0
[pid  5179] mkdir("./file0", 0777)      = 0
[   83.608891][ T5179] loop0: detected capacity change from 0 to 4096
[   83.625516][ T5179] NILFS (loop0): invalid segment: Checksum error in segment payload
[   83.633973][ T5179] NILFS (loop0): trying rollback from an earlier position
[   83.648796][ T5179] NILFS (loop0): recovery complete
[pid  5179] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5179] chdir("./file0")            = 0
[pid  5179] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5179] close(4)                    = 0
[pid  5179] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5179] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   83.655168][ T5180] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   83.679052][   T27] audit: type=1800 audit(1676306771.438:60): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5179] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5179] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5179] exit_group(0)               = ?
[pid  5179] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./58/binderfs")                 = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./58/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./58")                           = 0
mkdir("./59", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5181
./strace-static-x86_64: Process 5181 attached
[pid  5181] chdir("./59")               = 0
[pid  5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5181] setpgid(0, 0)               = 0
[pid  5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5181] write(3, "1000", 4)         = 4
[pid  5181] close(3)                    = 0
[pid  5181] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5181] memfd_create("syzkaller", 0) = 3
[pid  5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5181] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5181] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5181] close(3)                    = 0
[pid  5181] mkdir("./file0", 0777)      = 0
[   84.007939][ T5181] loop0: detected capacity change from 0 to 4096
[   84.025373][ T5181] NILFS (loop0): invalid segment: Checksum error in segment payload
[   84.033435][ T5181] NILFS (loop0): trying rollback from an earlier position
[   84.048117][ T5181] NILFS (loop0): recovery complete
[pid  5181] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5181] chdir("./file0")            = 0
[pid  5181] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5181] close(4)                    = 0
[pid  5181] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5181] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   84.054312][ T5182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.070736][   T27] audit: type=1800 audit(1676306771.828:61): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5181] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5181] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5181] exit_group(0)               = ?
[pid  5181] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./59/binderfs")                 = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./59/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./59")                           = 0
mkdir("./60", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5183
./strace-static-x86_64: Process 5183 attached
[pid  5183] chdir("./60")               = 0
[pid  5183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5183] setpgid(0, 0)               = 0
[pid  5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5183] write(3, "1000", 4)         = 4
[pid  5183] close(3)                    = 0
[pid  5183] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5183] memfd_create("syzkaller", 0) = 3
[pid  5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5183] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5183] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5183] close(3)                    = 0
[pid  5183] mkdir("./file0", 0777)      = 0
[pid  5183] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[   84.388878][ T5183] loop0: detected capacity change from 0 to 4096
[   84.404240][ T5183] NILFS (loop0): invalid segment: Checksum error in segment payload
[   84.412437][ T5183] NILFS (loop0): trying rollback from an earlier position
[   84.426769][ T5183] NILFS (loop0): recovery complete
[pid  5183] chdir("./file0")            = 0
[pid  5183] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5183] close(4)                    = 0
[pid  5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5183] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   84.433320][ T5184] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.446612][   T27] audit: type=1800 audit(1676306772.208:62): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5183] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5183] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5183] exit_group(0)               = ?
[pid  5183] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./60/binderfs")                 = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./60/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./60")                           = 0
mkdir("./61", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5185
./strace-static-x86_64: Process 5185 attached
[pid  5185] chdir("./61")               = 0
[pid  5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5185] setpgid(0, 0)               = 0
[pid  5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5185] write(3, "1000", 4)         = 4
[pid  5185] close(3)                    = 0
[pid  5185] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5185] memfd_create("syzkaller", 0) = 3
[pid  5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5185] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5185] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5185] close(3)                    = 0
[pid  5185] mkdir("./file0", 0777)      = 0
[   84.751699][ T5185] loop0: detected capacity change from 0 to 4096
[   84.767756][ T5185] NILFS (loop0): invalid segment: Checksum error in segment payload
[   84.775811][ T5185] NILFS (loop0): trying rollback from an earlier position
[   84.790498][ T5185] NILFS (loop0): recovery complete
[pid  5185] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5185] chdir("./file0")            = 0
[pid  5185] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5185] close(4)                    = 0
[pid  5185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5185] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   84.796642][ T5186] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.811889][   T27] audit: type=1800 audit(1676306772.568:63): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5185] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5185] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5185] exit_group(0)               = ?
[pid  5185] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./61/binderfs")                 = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./61/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./61")                           = 0
mkdir("./62", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5187
./strace-static-x86_64: Process 5187 attached
[pid  5187] chdir("./62")               = 0
[pid  5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5187] setpgid(0, 0)               = 0
[pid  5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5187] write(3, "1000", 4)         = 4
[pid  5187] close(3)                    = 0
[pid  5187] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5187] memfd_create("syzkaller", 0) = 3
[pid  5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5187] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5187] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5187] close(3)                    = 0
[pid  5187] mkdir("./file0", 0777)      = 0
[pid  5187] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5187] chdir("./file0")            = 0
[pid  5187] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5187] close(4)                    = 0
[   85.121302][ T5187] loop0: detected capacity change from 0 to 4096
[   85.137068][ T5187] NILFS (loop0): invalid segment: Checksum error in segment payload
[   85.145113][ T5187] NILFS (loop0): trying rollback from an earlier position
[   85.158940][ T5187] NILFS (loop0): recovery complete
[pid  5187] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5187] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   85.165194][ T5188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.173611][   T27] audit: type=1800 audit(1676306772.918:64): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5187] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5187] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5187] exit_group(0)               = ?
[pid  5187] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./62/binderfs")                 = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./62/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./62")                           = 0
mkdir("./63", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5189
./strace-static-x86_64: Process 5189 attached
[pid  5189] chdir("./63")               = 0
[pid  5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5189] setpgid(0, 0)               = 0
[pid  5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5189] write(3, "1000", 4)         = 4
[pid  5189] close(3)                    = 0
[pid  5189] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5189] memfd_create("syzkaller", 0) = 3
[pid  5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5189] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5189] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5189] close(3)                    = 0
[pid  5189] mkdir("./file0", 0777)      = 0
[   85.484322][ T5189] loop0: detected capacity change from 0 to 4096
[   85.501828][ T5189] NILFS (loop0): invalid segment: Checksum error in segment payload
[   85.509924][ T5189] NILFS (loop0): trying rollback from an earlier position
[   85.523528][ T5189] NILFS (loop0): recovery complete
[pid  5189] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5189] chdir("./file0")            = 0
[pid  5189] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5189] close(4)                    = 0
[pid  5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5189] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   85.529823][ T5190] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.548369][   T27] audit: type=1800 audit(1676306773.308:65): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5189] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5189] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5189] exit_group(0)               = ?
[pid  5189] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5189, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./63/binderfs")                 = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./63/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./63")                           = 0
mkdir("./64", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5191
./strace-static-x86_64: Process 5191 attached
[pid  5191] chdir("./64")               = 0
[pid  5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5191] setpgid(0, 0)               = 0
[pid  5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5191] write(3, "1000", 4)         = 4
[pid  5191] close(3)                    = 0
[pid  5191] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5191] memfd_create("syzkaller", 0) = 3
[pid  5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5191] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5191] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5191] close(3)                    = 0
[pid  5191] mkdir("./file0", 0777)      = 0
[   85.860029][ T5191] loop0: detected capacity change from 0 to 4096
[   85.879035][ T5191] NILFS (loop0): invalid segment: Checksum error in segment payload
[   85.887139][ T5191] NILFS (loop0): trying rollback from an earlier position
[   85.901998][ T5191] NILFS (loop0): recovery complete
[pid  5191] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5191] chdir("./file0")            = 0
[pid  5191] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5191] close(4)                    = 0
[pid  5191] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5191] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   85.908393][ T5192] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5191] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5191] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5191] exit_group(0)               = ?
[pid  5191] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./64/binderfs")                 = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./64/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./64")                           = 0
mkdir("./65", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5193
./strace-static-x86_64: Process 5193 attached
[pid  5193] chdir("./65")               = 0
[pid  5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5193] setpgid(0, 0)               = 0
[pid  5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5193] write(3, "1000", 4)         = 4
[pid  5193] close(3)                    = 0
[pid  5193] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5193] memfd_create("syzkaller", 0) = 3
[pid  5193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5193] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5193] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5193] close(3)                    = 0
[pid  5193] mkdir("./file0", 0777)      = 0
[   86.202077][ T5193] loop0: detected capacity change from 0 to 4096
[   86.218422][ T5193] NILFS (loop0): invalid segment: Checksum error in segment payload
[   86.226552][ T5193] NILFS (loop0): trying rollback from an earlier position
[   86.240784][ T5193] NILFS (loop0): recovery complete
[pid  5193] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5193] chdir("./file0")            = 0
[pid  5193] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5193] close(4)                    = 0
[pid  5193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5193] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   86.247396][ T5194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5193] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5193] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5193] exit_group(0)               = ?
[pid  5193] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./65/binderfs")                 = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./65/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./65")                           = 0
mkdir("./66", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5195
./strace-static-x86_64: Process 5195 attached
[pid  5195] chdir("./66")               = 0
[pid  5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5195] setpgid(0, 0)               = 0
[pid  5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5195] write(3, "1000", 4)         = 4
[pid  5195] close(3)                    = 0
[pid  5195] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5195] memfd_create("syzkaller", 0) = 3
[pid  5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5195] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5195] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5195] close(3)                    = 0
[pid  5195] mkdir("./file0", 0777)      = 0
[   86.531078][ T5195] loop0: detected capacity change from 0 to 4096
[   86.547640][ T5195] NILFS (loop0): invalid segment: Checksum error in segment payload
[   86.555704][ T5195] NILFS (loop0): trying rollback from an earlier position
[   86.571118][ T5195] NILFS (loop0): recovery complete
[pid  5195] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5195] chdir("./file0")            = 0
[pid  5195] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5195] close(4)                    = 0
[pid  5195] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5195] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   86.577046][ T5196] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5195] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5195] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5195] exit_group(0)               = ?
[pid  5195] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./66/binderfs")                 = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./66/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./66")                           = 0
mkdir("./67", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5197 attached
 <unfinished ...>
[pid  5197] chdir("./67")               = 0
[pid  5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5197] setpgid(0, 0 <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5197
[pid  5197] <... setpgid resumed>)      = 0
[pid  5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5197] write(3, "1000", 4)         = 4
[pid  5197] close(3)                    = 0
[pid  5197] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5197] memfd_create("syzkaller", 0) = 3
[pid  5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5197] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5197] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5197] close(3)                    = 0
[pid  5197] mkdir("./file0", 0777)      = 0
[   86.875990][ T5197] loop0: detected capacity change from 0 to 4096
[   86.893033][ T5197] NILFS (loop0): invalid segment: Checksum error in segment payload
[   86.901136][ T5197] NILFS (loop0): trying rollback from an earlier position
[   86.918470][ T5197] NILFS (loop0): recovery complete
[pid  5197] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5197] chdir("./file0")            = 0
[pid  5197] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5197] close(4)                    = 0
[pid  5197] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5197] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   86.924333][ T5198] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5197] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5197] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5197] exit_group(0)               = ?
[pid  5197] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./67/binderfs")                 = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./67/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./67")                           = 0
mkdir("./68", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5199
./strace-static-x86_64: Process 5199 attached
[pid  5199] chdir("./68")               = 0
[pid  5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5199] setpgid(0, 0)               = 0
[pid  5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5199] write(3, "1000", 4)         = 4
[pid  5199] close(3)                    = 0
[pid  5199] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5199] memfd_create("syzkaller", 0) = 3
[pid  5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5199] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5199] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5199] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5199] close(3)                    = 0
[pid  5199] mkdir("./file0", 0777)      = 0
[   87.237956][ T5199] loop0: detected capacity change from 0 to 4096
[   87.255369][ T5199] NILFS (loop0): invalid segment: Checksum error in segment payload
[   87.263445][ T5199] NILFS (loop0): trying rollback from an earlier position
[   87.277102][ T5199] NILFS (loop0): recovery complete
[pid  5199] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5199] chdir("./file0")            = 0
[pid  5199] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5199] close(4)                    = 0
[pid  5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5199] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   87.283197][ T5200] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.296569][   T27] kauditd_printk_skb: 4 callbacks suppressed
[   87.296581][   T27] audit: type=1800 audit(1676306775.038:70): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5199] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5199] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5199] exit_group(0)               = ?
[pid  5199] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./68/binderfs")                 = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./68/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./68")                           = 0
mkdir("./69", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5201
./strace-static-x86_64: Process 5201 attached
[pid  5201] chdir("./69")               = 0
[pid  5201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5201] setpgid(0, 0)               = 0
[pid  5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5201] write(3, "1000", 4)         = 4
[pid  5201] close(3)                    = 0
[pid  5201] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5201] memfd_create("syzkaller", 0) = 3
[pid  5201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5201] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5201] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5201] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5201] close(3)                    = 0
[pid  5201] mkdir("./file0", 0777)      = 0
[pid  5201] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5201] chdir("./file0")            = 0
[   87.607671][ T5201] loop0: detected capacity change from 0 to 4096
[   87.623866][ T5201] NILFS (loop0): invalid segment: Checksum error in segment payload
[   87.631964][ T5201] NILFS (loop0): trying rollback from an earlier position
[   87.646482][ T5201] NILFS (loop0): recovery complete
[pid  5201] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5201] close(4)                    = 0
[pid  5201] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5201] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   87.655432][ T5202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.667640][   T27] audit: type=1800 audit(1676306775.428:71): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5201] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5201] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5201] exit_group(0)               = ?
[pid  5201] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5201, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./69/binderfs")                 = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./69/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./69")                           = 0
mkdir("./70", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5203
./strace-static-x86_64: Process 5203 attached
[pid  5203] chdir("./70")               = 0
[pid  5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5203] setpgid(0, 0)               = 0
[pid  5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5203] write(3, "1000", 4)         = 4
[pid  5203] close(3)                    = 0
[pid  5203] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5203] memfd_create("syzkaller", 0) = 3
[pid  5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5203] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5203] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5203] close(3)                    = 0
[pid  5203] mkdir("./file0", 0777)      = 0
[pid  5203] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[   87.966401][ T5203] loop0: detected capacity change from 0 to 4096
[   87.982824][ T5203] NILFS (loop0): invalid segment: Checksum error in segment payload
[   87.990945][ T5203] NILFS (loop0): trying rollback from an earlier position
[   88.006727][ T5203] NILFS (loop0): recovery complete
[pid  5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5203] chdir("./file0")            = 0
[pid  5203] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5203] close(4)                    = 0
[pid  5203] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5203] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   88.013037][ T5204] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.031768][   T27] audit: type=1800 audit(1676306775.788:72): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5203] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5203] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5203] exit_group(0)               = ?
[pid  5203] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./70/binderfs")                 = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./70/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./70")                           = 0
mkdir("./71", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5205
./strace-static-x86_64: Process 5205 attached
[pid  5205] chdir("./71")               = 0
[pid  5205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5205] setpgid(0, 0)               = 0
[pid  5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5205] write(3, "1000", 4)         = 4
[pid  5205] close(3)                    = 0
[pid  5205] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5205] memfd_create("syzkaller", 0) = 3
[pid  5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5205] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5205] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5205] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5205] close(3)                    = 0
[pid  5205] mkdir("./file0", 0777)      = 0
[   88.320083][ T5205] loop0: detected capacity change from 0 to 4096
[   88.335858][ T5205] NILFS (loop0): invalid segment: Checksum error in segment payload
[   88.344068][ T5205] NILFS (loop0): trying rollback from an earlier position
[   88.358078][ T5205] NILFS (loop0): recovery complete
[pid  5205] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5205] chdir("./file0")            = 0
[pid  5205] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5205] close(4)                    = 0
[pid  5205] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5205] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   88.364478][ T5206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.389127][   T27] audit: type=1800 audit(1676306776.148:73): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5205] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5205] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5205] exit_group(0)               = ?
[pid  5205] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./71/binderfs")                 = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./71/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./71")                           = 0
mkdir("./72", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5207
./strace-static-x86_64: Process 5207 attached
[pid  5207] chdir("./72")               = 0
[pid  5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5207] setpgid(0, 0)               = 0
[pid  5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5207] write(3, "1000", 4)         = 4
[pid  5207] close(3)                    = 0
[pid  5207] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5207] memfd_create("syzkaller", 0) = 3
[pid  5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5207] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5207] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5207] close(3)                    = 0
[pid  5207] mkdir("./file0", 0777)      = 0
[   88.673251][ T5207] loop0: detected capacity change from 0 to 4096
[   88.689792][ T5207] NILFS (loop0): invalid segment: Checksum error in segment payload
[   88.697909][ T5207] NILFS (loop0): trying rollback from an earlier position
[   88.711315][ T5207] NILFS (loop0): recovery complete
[pid  5207] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5207] chdir("./file0")            = 0
[pid  5207] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5207] close(4)                    = 0
[pid  5207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5207] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   88.717586][ T5208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.728504][   T27] audit: type=1800 audit(1676306776.478:74): pid=5207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5207] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5207] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5207] exit_group(0)               = ?
[pid  5207] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./72/binderfs")                 = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./72/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./72")                           = 0
mkdir("./73", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5209
./strace-static-x86_64: Process 5209 attached
[pid  5209] chdir("./73")               = 0
[pid  5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5209] setpgid(0, 0)               = 0
[pid  5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5209] write(3, "1000", 4)         = 4
[pid  5209] close(3)                    = 0
[pid  5209] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5209] memfd_create("syzkaller", 0) = 3
[pid  5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5209] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5209] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5209] close(3)                    = 0
[pid  5209] mkdir("./file0", 0777)      = 0
[   89.023647][ T5209] loop0: detected capacity change from 0 to 4096
[   89.041305][ T5209] NILFS (loop0): invalid segment: Checksum error in segment payload
[   89.049427][ T5209] NILFS (loop0): trying rollback from an earlier position
[   89.063376][ T5209] NILFS (loop0): recovery complete
[pid  5209] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5209] chdir("./file0")            = 0
[pid  5209] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5209] close(4)                    = 0
[pid  5209] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5209] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   89.069815][ T5210] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.086264][   T27] audit: type=1800 audit(1676306776.838:75): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5209] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5209] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5209] exit_group(0)               = ?
[pid  5209] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./73/binderfs")                 = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./73/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./73")                           = 0
mkdir("./74", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5211
./strace-static-x86_64: Process 5211 attached
[pid  5211] chdir("./74")               = 0
[pid  5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5211] setpgid(0, 0)               = 0
[pid  5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5211] write(3, "1000", 4)         = 4
[pid  5211] close(3)                    = 0
[pid  5211] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5211] memfd_create("syzkaller", 0) = 3
[pid  5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5211] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5211] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5211] close(3)                    = 0
[pid  5211] mkdir("./file0", 0777)      = 0
[   89.382100][ T5211] loop0: detected capacity change from 0 to 4096
[   89.398619][ T5211] NILFS (loop0): invalid segment: Checksum error in segment payload
[   89.406694][ T5211] NILFS (loop0): trying rollback from an earlier position
[   89.420466][ T5211] NILFS (loop0): recovery complete
[pid  5211] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5211] chdir("./file0")            = 0
[pid  5211] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5211] close(4)                    = 0
[pid  5211] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5211] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   89.426609][ T5212] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.442695][   T27] audit: type=1800 audit(1676306777.198:76): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5211] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5211] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5211] exit_group(0)               = ?
[pid  5211] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./74/binderfs")                 = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./74/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./74")                           = 0
mkdir("./75", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5213
./strace-static-x86_64: Process 5213 attached
[pid  5213] chdir("./75")               = 0
[pid  5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5213] setpgid(0, 0)               = 0
[pid  5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5213] write(3, "1000", 4)         = 4
[pid  5213] close(3)                    = 0
[pid  5213] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5213] memfd_create("syzkaller", 0) = 3
[pid  5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5213] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5213] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5213] close(3)                    = 0
[pid  5213] mkdir("./file0", 0777)      = 0
[   89.744158][ T5213] loop0: detected capacity change from 0 to 4096
[   89.760347][ T5213] NILFS (loop0): invalid segment: Checksum error in segment payload
[   89.768387][ T5213] NILFS (loop0): trying rollback from an earlier position
[   89.782601][ T5213] NILFS (loop0): recovery complete
[pid  5213] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5213] chdir("./file0")            = 0
[pid  5213] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5213] close(4)                    = 0
[pid  5213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5213] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   89.788366][ T5214] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.811481][   T27] audit: type=1800 audit(1676306777.568:77): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5213] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5213] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5213] exit_group(0)               = ?
[pid  5213] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./75/binderfs")                 = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./75/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./75")                           = 0
mkdir("./76", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5215
./strace-static-x86_64: Process 5215 attached
[pid  5215] chdir("./76")               = 0
[pid  5215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5215] setpgid(0, 0)               = 0
[pid  5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5215] write(3, "1000", 4)         = 4
[pid  5215] close(3)                    = 0
[pid  5215] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5215] memfd_create("syzkaller", 0) = 3
[pid  5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5215] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5215] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5215] close(3)                    = 0
[pid  5215] mkdir("./file0", 0777)      = 0
[   90.120914][ T5215] loop0: detected capacity change from 0 to 4096
[   90.138334][ T5215] NILFS (loop0): invalid segment: Checksum error in segment payload
[   90.146545][ T5215] NILFS (loop0): trying rollback from an earlier position
[   90.160917][ T5215] NILFS (loop0): recovery complete
[pid  5215] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5215] chdir("./file0")            = 0
[pid  5215] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5215] close(4)                    = 0
[pid  5215] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5215] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   90.167451][ T5216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.181956][   T27] audit: type=1800 audit(1676306777.948:78): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5215] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5215] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5215] exit_group(0)               = ?
[pid  5215] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./76/binderfs")                 = 0
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./76/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./76")                           = 0
mkdir("./77", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5217
./strace-static-x86_64: Process 5217 attached
[pid  5217] chdir("./77")               = 0
[pid  5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5217] setpgid(0, 0)               = 0
[pid  5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5217] write(3, "1000", 4)         = 4
[pid  5217] close(3)                    = 0
[pid  5217] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5217] memfd_create("syzkaller", 0) = 3
[pid  5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5217] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5217] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5217] close(3)                    = 0
[pid  5217] mkdir("./file0", 0777)      = 0
[   90.489898][ T5217] loop0: detected capacity change from 0 to 4096
[   90.509738][ T5217] NILFS (loop0): invalid segment: Checksum error in segment payload
[   90.517812][ T5217] NILFS (loop0): trying rollback from an earlier position
[   90.531726][ T5217] NILFS (loop0): recovery complete
[pid  5217] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5217] chdir("./file0")            = 0
[pid  5217] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5217] close(4)                    = 0
[pid  5217] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5217] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   90.538132][ T5218] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.541668][   T27] audit: type=1800 audit(1676306778.298:79): pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5217] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5217] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5217] exit_group(0)               = ?
[pid  5217] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./77/binderfs")                 = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./77/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./77")                           = 0
mkdir("./78", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5219
./strace-static-x86_64: Process 5219 attached
[pid  5219] chdir("./78")               = 0
[pid  5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5219] setpgid(0, 0)               = 0
[pid  5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5219] write(3, "1000", 4)         = 4
[pid  5219] close(3)                    = 0
[pid  5219] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5219] memfd_create("syzkaller", 0) = 3
[pid  5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5219] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5219] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5219] close(3)                    = 0
[pid  5219] mkdir("./file0", 0777)      = 0
[   90.842835][ T5219] loop0: detected capacity change from 0 to 4096
[   90.858670][ T5219] NILFS (loop0): invalid segment: Checksum error in segment payload
[   90.866738][ T5219] NILFS (loop0): trying rollback from an earlier position
[   90.880108][ T5219] NILFS (loop0): recovery complete
[pid  5219] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5219] chdir("./file0")            = 0
[pid  5219] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5219] close(4)                    = 0
[pid  5219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5219] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   90.885961][ T5220] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5219] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5219] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5219] exit_group(0)               = ?
[pid  5219] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5219, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./78/binderfs")                 = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./78/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./78")                           = 0
mkdir("./79", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5221
./strace-static-x86_64: Process 5221 attached
[pid  5221] chdir("./79")               = 0
[pid  5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5221] setpgid(0, 0)               = 0
[pid  5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5221] write(3, "1000", 4)         = 4
[pid  5221] close(3)                    = 0
[pid  5221] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5221] memfd_create("syzkaller", 0) = 3
[pid  5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5221] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5221] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5221] close(3)                    = 0
[pid  5221] mkdir("./file0", 0777)      = 0
[   91.188024][ T5221] loop0: detected capacity change from 0 to 4096
[   91.206072][ T5221] NILFS (loop0): invalid segment: Checksum error in segment payload
[   91.214162][ T5221] NILFS (loop0): trying rollback from an earlier position
[   91.228259][ T5221] NILFS (loop0): recovery complete
[pid  5221] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5221] chdir("./file0")            = 0
[pid  5221] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5221] close(4)                    = 0
[pid  5221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5221] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   91.234397][ T5222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5221] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5221] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5221] exit_group(0)               = ?
[pid  5221] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./79/binderfs")                 = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./79/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./79")                           = 0
mkdir("./80", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5223
./strace-static-x86_64: Process 5223 attached
[pid  5223] chdir("./80")               = 0
[pid  5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5223] setpgid(0, 0)               = 0
[pid  5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5223] write(3, "1000", 4)         = 4
[pid  5223] close(3)                    = 0
[pid  5223] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5223] memfd_create("syzkaller", 0) = 3
[pid  5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5223] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5223] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5223] close(3)                    = 0
[pid  5223] mkdir("./file0", 0777)      = 0
[   91.540482][ T5223] loop0: detected capacity change from 0 to 4096
[   91.556561][ T5223] NILFS (loop0): invalid segment: Checksum error in segment payload
[   91.564575][ T5223] NILFS (loop0): trying rollback from an earlier position
[   91.578832][ T5223] NILFS (loop0): recovery complete
[pid  5223] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5223] chdir("./file0")            = 0
[pid  5223] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5223] close(4)                    = 0
[pid  5223] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5223] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   91.584716][ T5224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5223] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5223] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5223] exit_group(0)               = ?
[pid  5223] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./80/binderfs")                 = 0
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./80/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./80")                           = 0
mkdir("./81", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5225
./strace-static-x86_64: Process 5225 attached
[pid  5225] chdir("./81")               = 0
[pid  5225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5225] setpgid(0, 0)               = 0
[pid  5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5225] write(3, "1000", 4)         = 4
[pid  5225] close(3)                    = 0
[pid  5225] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5225] memfd_create("syzkaller", 0) = 3
[pid  5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5225] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5225] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5225] close(3)                    = 0
[pid  5225] mkdir("./file0", 0777)      = 0
[pid  5225] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5225] chdir("./file0")            = 0
[pid  5225] ioctl(4, LOOP_CLR_FD)       = 0
[   91.883717][ T5225] loop0: detected capacity change from 0 to 4096
[   91.900398][ T5225] NILFS (loop0): invalid segment: Checksum error in segment payload
[   91.908524][ T5225] NILFS (loop0): trying rollback from an earlier position
[   91.923038][ T5225] NILFS (loop0): recovery complete
[pid  5225] close(4)                    = 0
[pid  5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5225] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   91.929442][ T5226] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5225] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5225] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5225] exit_group(0)               = ?
[pid  5225] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./81/binderfs")                 = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./81/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./81")                           = 0
mkdir("./82", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5227
./strace-static-x86_64: Process 5227 attached
[pid  5227] chdir("./82")               = 0
[pid  5227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5227] setpgid(0, 0)               = 0
[pid  5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5227] write(3, "1000", 4)         = 4
[pid  5227] close(3)                    = 0
[pid  5227] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5227] memfd_create("syzkaller", 0) = 3
[pid  5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5227] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5227] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5227] close(3)                    = 0
[pid  5227] mkdir("./file0", 0777)      = 0
[   92.242907][ T5227] loop0: detected capacity change from 0 to 4096
[   92.260000][ T5227] NILFS (loop0): invalid segment: Checksum error in segment payload
[   92.268054][ T5227] NILFS (loop0): trying rollback from an earlier position
[   92.281256][ T5227] NILFS (loop0): recovery complete
[pid  5227] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5227] chdir("./file0")            = 0
[pid  5227] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5227] close(4)                    = 0
[pid  5227] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5227] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   92.287589][ T5228] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.308311][   T27] kauditd_printk_skb: 4 callbacks suppressed
[   92.308345][   T27] audit: type=1800 audit(1676306780.068:84): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5227] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5227] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5227] exit_group(0)               = ?
[pid  5227] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./82/binderfs")                 = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./82/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./82")                           = 0
mkdir("./83", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5229
./strace-static-x86_64: Process 5229 attached
[pid  5229] chdir("./83")               = 0
[pid  5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5229] setpgid(0, 0)               = 0
[pid  5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5229] write(3, "1000", 4)         = 4
[pid  5229] close(3)                    = 0
[pid  5229] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5229] memfd_create("syzkaller", 0) = 3
[pid  5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5229] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5229] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5229] close(3)                    = 0
[pid  5229] mkdir("./file0", 0777)      = 0
[pid  5229] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[   92.616128][ T5229] loop0: detected capacity change from 0 to 4096
[   92.632025][ T5229] NILFS (loop0): invalid segment: Checksum error in segment payload
[   92.640073][ T5229] NILFS (loop0): trying rollback from an earlier position
[   92.653004][ T5229] NILFS (loop0): recovery complete
[pid  5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5229] chdir("./file0")            = 0
[pid  5229] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5229] close(4)                    = 0
[pid  5229] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5229] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   92.659555][ T5230] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.682024][   T27] audit: type=1800 audit(1676306780.438:85): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5229] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5229] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5229] exit_group(0)               = ?
[pid  5229] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./83/binderfs")                 = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./83/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./83")                           = 0
mkdir("./84", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5231
./strace-static-x86_64: Process 5231 attached
[pid  5231] chdir("./84")               = 0
[pid  5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5231] setpgid(0, 0)               = 0
[pid  5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5231] write(3, "1000", 4)         = 4
[pid  5231] close(3)                    = 0
[pid  5231] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5231] memfd_create("syzkaller", 0) = 3
[pid  5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5231] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5231] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5231] close(3)                    = 0
[pid  5231] mkdir("./file0", 0777)      = 0
[   92.960971][ T5231] loop0: detected capacity change from 0 to 4096
[   92.980601][ T5231] NILFS (loop0): invalid segment: Checksum error in segment payload
[   92.988728][ T5231] NILFS (loop0): trying rollback from an earlier position
[   93.002829][ T5231] NILFS (loop0): recovery complete
[pid  5231] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5231] chdir("./file0")            = 0
[pid  5231] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5231] close(4)                    = 0
[pid  5231] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5231] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   93.009273][ T5232] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.027709][   T27] audit: type=1800 audit(1676306780.788:86): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5231] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5231] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5231] exit_group(0)               = ?
[pid  5231] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./84/binderfs")                 = 0
umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./84/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./84/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./84/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./84/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./84")                           = 0
mkdir("./85", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5233
./strace-static-x86_64: Process 5233 attached
[pid  5233] chdir("./85")               = 0
[pid  5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5233] setpgid(0, 0)               = 0
[pid  5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5233] write(3, "1000", 4)         = 4
[pid  5233] close(3)                    = 0
[pid  5233] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5233] memfd_create("syzkaller", 0) = 3
[pid  5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5233] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5233] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5233] close(3)                    = 0
[pid  5233] mkdir("./file0", 0777)      = 0
[   93.332469][ T5233] loop0: detected capacity change from 0 to 4096
[   93.349766][ T5233] NILFS (loop0): invalid segment: Checksum error in segment payload
[   93.357832][ T5233] NILFS (loop0): trying rollback from an earlier position
[   93.371157][ T5233] NILFS (loop0): recovery complete
[pid  5233] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5233] chdir("./file0")            = 0
[pid  5233] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5233] close(4)                    = 0
[pid  5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5233] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   93.377496][ T5234] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.392716][   T27] audit: type=1800 audit(1676306781.158:87): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5233] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5233] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5233] exit_group(0)               = ?
[pid  5233] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./85/binderfs")                 = 0
umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./85/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./85/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./85/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./85/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./85")                           = 0
mkdir("./86", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5235
./strace-static-x86_64: Process 5235 attached
[pid  5235] chdir("./86")               = 0
[pid  5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5235] setpgid(0, 0)               = 0
[pid  5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5235] write(3, "1000", 4)         = 4
[pid  5235] close(3)                    = 0
[pid  5235] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5235] memfd_create("syzkaller", 0) = 3
[pid  5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5235] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5235] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5235] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5235] close(3)                    = 0
[pid  5235] mkdir("./file0", 0777)      = 0
[pid  5235] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5235] chdir("./file0")            = 0
[   93.706092][ T5235] loop0: detected capacity change from 0 to 4096
[   93.723389][ T5235] NILFS (loop0): invalid segment: Checksum error in segment payload
[   93.731569][ T5235] NILFS (loop0): trying rollback from an earlier position
[   93.745870][ T5235] NILFS (loop0): recovery complete
[pid  5235] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5235] close(4)                    = 0
[pid  5235] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5235] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   93.753442][ T5236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.773523][   T27] audit: type=1800 audit(1676306781.518:88): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5235] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5235] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5235] exit_group(0)               = ?
[pid  5235] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./86/binderfs")                 = 0
umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./86/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./86/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./86/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./86/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./86")                           = 0
mkdir("./87", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5237
./strace-static-x86_64: Process 5237 attached
[pid  5237] chdir("./87")               = 0
[pid  5237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5237] setpgid(0, 0)               = 0
[pid  5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5237] write(3, "1000", 4)         = 4
[pid  5237] close(3)                    = 0
[pid  5237] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5237] memfd_create("syzkaller", 0) = 3
[pid  5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5237] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5237] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5237] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5237] close(3)                    = 0
[pid  5237] mkdir("./file0", 0777)      = 0
[   94.081179][ T5237] loop0: detected capacity change from 0 to 4096
[   94.098083][ T5237] NILFS (loop0): invalid segment: Checksum error in segment payload
[   94.106216][ T5237] NILFS (loop0): trying rollback from an earlier position
[   94.121371][ T5237] NILFS (loop0): recovery complete
[pid  5237] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5237] chdir("./file0")            = 0
[pid  5237] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5237] close(4)                    = 0
[pid  5237] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5237] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   94.127261][ T5238] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.146503][   T27] audit: type=1800 audit(1676306781.908:89): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5237] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5237] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5237] exit_group(0)               = ?
[pid  5237] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./87/binderfs")                 = 0
umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./87/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./87/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./87/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./87/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./87")                           = 0
mkdir("./88", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5239
./strace-static-x86_64: Process 5239 attached
[pid  5239] chdir("./88")               = 0
[pid  5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5239] setpgid(0, 0)               = 0
[pid  5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5239] write(3, "1000", 4)         = 4
[pid  5239] close(3)                    = 0
[pid  5239] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5239] memfd_create("syzkaller", 0) = 3
[pid  5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5239] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5239] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5239] close(3)                    = 0
[pid  5239] mkdir("./file0", 0777)      = 0
[pid  5239] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[   94.452459][ T5239] loop0: detected capacity change from 0 to 4096
[   94.468873][ T5239] NILFS (loop0): invalid segment: Checksum error in segment payload
[   94.476981][ T5239] NILFS (loop0): trying rollback from an earlier position
[   94.492520][ T5239] NILFS (loop0): recovery complete
[pid  5239] chdir("./file0")            = 0
[pid  5239] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5239] close(4)                    = 0
[pid  5239] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5239] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   94.498618][ T5240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.529352][   T27] audit: type=1800 audit(1676306782.288:90): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5239] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5239] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5239] exit_group(0)               = ?
[pid  5239] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./88/binderfs")                 = 0
umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./88/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./88/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./88/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./88/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./88")                           = 0
mkdir("./89", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5241
./strace-static-x86_64: Process 5241 attached
[pid  5241] chdir("./89")               = 0
[pid  5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5241] setpgid(0, 0)               = 0
[pid  5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5241] write(3, "1000", 4)         = 4
[pid  5241] close(3)                    = 0
[pid  5241] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5241] memfd_create("syzkaller", 0) = 3
[pid  5241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5241] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5241] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5241] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5241] close(3)                    = 0
[pid  5241] mkdir("./file0", 0777)      = 0
[   94.820865][ T5241] loop0: detected capacity change from 0 to 4096
[   94.837641][ T5241] NILFS (loop0): invalid segment: Checksum error in segment payload
[   94.845717][ T5241] NILFS (loop0): trying rollback from an earlier position
[   94.860650][ T5241] NILFS (loop0): recovery complete
[pid  5241] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5241] chdir("./file0")            = 0
[pid  5241] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5241] close(4)                    = 0
[pid  5241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5241] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   94.866905][ T5242] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.886213][   T27] audit: type=1800 audit(1676306782.628:91): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5241] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5241] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5241] exit_group(0)               = ?
[pid  5241] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./89/binderfs")                 = 0
umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./89/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./89/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./89/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./89/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./89")                           = 0
mkdir("./90", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5243
./strace-static-x86_64: Process 5243 attached
[pid  5243] chdir("./90")               = 0
[pid  5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5243] setpgid(0, 0)               = 0
[pid  5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5243] write(3, "1000", 4)         = 4
[pid  5243] close(3)                    = 0
[pid  5243] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5243] memfd_create("syzkaller", 0) = 3
[pid  5243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5243] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5243] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5243] close(3)                    = 0
[pid  5243] mkdir("./file0", 0777)      = 0
[pid  5243] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[   95.177855][ T5243] loop0: detected capacity change from 0 to 4096
[   95.195232][ T5243] NILFS (loop0): invalid segment: Checksum error in segment payload
[   95.203292][ T5243] NILFS (loop0): trying rollback from an earlier position
[   95.217407][ T5243] NILFS (loop0): recovery complete
[pid  5243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5243] chdir("./file0")            = 0
[pid  5243] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5243] close(4)                    = 0
[pid  5243] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5243] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   95.223423][ T5244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.241119][   T27] audit: type=1800 audit(1676306782.998:92): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5243] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5243] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5243] exit_group(0)               = ?
[pid  5243] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./90/binderfs")                 = 0
umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./90/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./90/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./90/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./90/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./90")                           = 0
mkdir("./91", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5245
./strace-static-x86_64: Process 5245 attached
[pid  5245] chdir("./91")               = 0
[pid  5245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5245] setpgid(0, 0)               = 0
[pid  5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5245] write(3, "1000", 4)         = 4
[pid  5245] close(3)                    = 0
[pid  5245] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5245] memfd_create("syzkaller", 0) = 3
[pid  5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5245] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5245] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5245] close(3)                    = 0
[pid  5245] mkdir("./file0", 0777)      = 0
[   95.539729][ T5245] loop0: detected capacity change from 0 to 4096
[   95.556668][ T5245] NILFS (loop0): invalid segment: Checksum error in segment payload
[   95.564735][ T5245] NILFS (loop0): trying rollback from an earlier position
[   95.579160][ T5245] NILFS (loop0): recovery complete
[pid  5245] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5245] chdir("./file0")            = 0
[pid  5245] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5245] close(4)                    = 0
[pid  5245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5245] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   95.585008][ T5246] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.616742][   T27] audit: type=1800 audit(1676306783.378:93): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5245] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5245] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5245] exit_group(0)               = ?
[pid  5245] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./91/binderfs")                 = 0
umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./91/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./91/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./91/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./91/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./91")                           = 0
mkdir("./92", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5247
./strace-static-x86_64: Process 5247 attached
[pid  5247] chdir("./92")               = 0
[pid  5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5247] setpgid(0, 0)               = 0
[pid  5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5247] write(3, "1000", 4)         = 4
[pid  5247] close(3)                    = 0
[pid  5247] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5247] memfd_create("syzkaller", 0) = 3
[pid  5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5247] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5247] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5247] close(3)                    = 0
[pid  5247] mkdir("./file0", 0777)      = 0
[pid  5247] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[   95.887482][ T5247] loop0: detected capacity change from 0 to 4096
[   95.905384][ T5247] NILFS (loop0): invalid segment: Checksum error in segment payload
[   95.913430][ T5247] NILFS (loop0): trying rollback from an earlier position
[   95.926737][ T5247] NILFS (loop0): recovery complete
[pid  5247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5247] chdir("./file0")            = 0
[pid  5247] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5247] close(4)                    = 0
[pid  5247] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5247] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   95.932485][ T5248] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5247] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5247] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5247] exit_group(0)               = ?
[pid  5247] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./92/binderfs")                 = 0
umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./92/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./92/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./92/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./92/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./92")                           = 0
mkdir("./93", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5249
./strace-static-x86_64: Process 5249 attached
[pid  5249] chdir("./93")               = 0
[pid  5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5249] setpgid(0, 0)               = 0
[pid  5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5249] write(3, "1000", 4)         = 4
[pid  5249] close(3)                    = 0
[pid  5249] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5249] memfd_create("syzkaller", 0) = 3
[pid  5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5249] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5249] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5249] close(3)                    = 0
[pid  5249] mkdir("./file0", 0777)      = 0
[   96.237759][ T5249] loop0: detected capacity change from 0 to 4096
[   96.253649][ T5249] NILFS (loop0): invalid segment: Checksum error in segment payload
[   96.262002][ T5249] NILFS (loop0): trying rollback from an earlier position
[   96.277501][ T5249] NILFS (loop0): recovery complete
[pid  5249] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5249] chdir("./file0")            = 0
[pid  5249] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5249] close(4)                    = 0
[pid  5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5249] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   96.283338][ T5250] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5249] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5249] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5249] exit_group(0)               = ?
[pid  5249] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./93/binderfs")                 = 0
umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./93/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./93/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./93/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./93/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./93")                           = 0
mkdir("./94", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5251
./strace-static-x86_64: Process 5251 attached
[pid  5251] chdir("./94")               = 0
[pid  5251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5251] setpgid(0, 0)               = 0
[pid  5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5251] write(3, "1000", 4)         = 4
[pid  5251] close(3)                    = 0
[pid  5251] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5251] memfd_create("syzkaller", 0) = 3
[pid  5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5251] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5251] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5251] close(3)                    = 0
[pid  5251] mkdir("./file0", 0777)      = 0
[   96.578538][ T5251] loop0: detected capacity change from 0 to 4096
[   96.596257][ T5251] NILFS (loop0): invalid segment: Checksum error in segment payload
[   96.604264][ T5251] NILFS (loop0): trying rollback from an earlier position
[   96.618634][ T5251] NILFS (loop0): recovery complete
[pid  5251] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5251] chdir("./file0")            = 0
[pid  5251] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5251] close(4)                    = 0
[pid  5251] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5251] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   96.624625][ T5252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5251] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5251] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5251] exit_group(0)               = ?
[pid  5251] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./94/binderfs")                 = 0
umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./94/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./94/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./94/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./94/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./94")                           = 0
mkdir("./95", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5253
./strace-static-x86_64: Process 5253 attached
[pid  5253] chdir("./95")               = 0
[pid  5253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5253] setpgid(0, 0)               = 0
[pid  5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5253] write(3, "1000", 4)         = 4
[pid  5253] close(3)                    = 0
[pid  5253] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5253] memfd_create("syzkaller", 0) = 3
[pid  5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5253] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5253] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5253] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5253] close(3)                    = 0
[pid  5253] mkdir("./file0", 0777)      = 0
[   96.932724][ T5253] loop0: detected capacity change from 0 to 4096
[   96.949672][ T5253] NILFS (loop0): invalid segment: Checksum error in segment payload
[   96.957790][ T5253] NILFS (loop0): trying rollback from an earlier position
[   96.971398][ T5253] NILFS (loop0): recovery complete
[pid  5253] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5253] chdir("./file0")            = 0
[pid  5253] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5253] close(4)                    = 0
[pid  5253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5253] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   96.977244][ T5254] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5253] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5253] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5253] exit_group(0)               = ?
[pid  5253] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5253, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./95/binderfs")                 = 0
umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./95/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./95/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./95/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./95/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./95")                           = 0
mkdir("./96", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5255 attached
, child_tidptr=0x555555db65d0) = 5255
[pid  5255] chdir("./96")               = 0
[pid  5255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5255] setpgid(0, 0)               = 0
[pid  5255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5255] write(3, "1000", 4)         = 4
[pid  5255] close(3)                    = 0
[pid  5255] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5255] memfd_create("syzkaller", 0) = 3
[pid  5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5255] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5255] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5255] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5255] close(3)                    = 0
[pid  5255] mkdir("./file0", 0777)      = 0
[   97.268626][ T5255] loop0: detected capacity change from 0 to 4096
[   97.285470][ T5255] NILFS (loop0): invalid segment: Checksum error in segment payload
[   97.293642][ T5255] NILFS (loop0): trying rollback from an earlier position
[   97.307119][ T5255] NILFS (loop0): recovery complete
[pid  5255] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5255] chdir("./file0")            = 0
[pid  5255] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5255] close(4)                    = 0
[pid  5255] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5255] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   97.313769][ T5256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.337654][   T27] kauditd_printk_skb: 4 callbacks suppressed
[   97.337665][   T27] audit: type=1800 audit(1676306785.098:98): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5255] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5255] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5255] exit_group(0)               = ?
[pid  5255] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5255, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./96/binderfs")                 = 0
umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./96/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./96/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./96/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./96/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./96")                           = 0
mkdir("./97", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5257
./strace-static-x86_64: Process 5257 attached
[pid  5257] chdir("./97")               = 0
[pid  5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5257] setpgid(0, 0)               = 0
[pid  5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5257] write(3, "1000", 4)         = 4
[pid  5257] close(3)                    = 0
[pid  5257] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5257] memfd_create("syzkaller", 0) = 3
[pid  5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5257] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5257] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5257] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5257] close(3)                    = 0
[pid  5257] mkdir("./file0", 0777)      = 0
[   97.634862][ T5257] loop0: detected capacity change from 0 to 4096
[   97.652510][ T5257] NILFS (loop0): invalid segment: Checksum error in segment payload
[   97.660590][ T5257] NILFS (loop0): trying rollback from an earlier position
[   97.674252][ T5257] NILFS (loop0): recovery complete
[pid  5257] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5257] chdir("./file0")            = 0
[pid  5257] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5257] close(4)                    = 0
[pid  5257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5257] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   97.680460][ T5258] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.683884][   T27] audit: type=1800 audit(1676306785.448:99): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5257] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5257] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5257] exit_group(0)               = ?
[pid  5257] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./97/binderfs")                 = 0
umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./97/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./97/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./97/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./97/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./97")                           = 0
mkdir("./98", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5259
./strace-static-x86_64: Process 5259 attached
[pid  5259] chdir("./98")               = 0
[pid  5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5259] setpgid(0, 0)               = 0
[pid  5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5259] write(3, "1000", 4)         = 4
[pid  5259] close(3)                    = 0
[pid  5259] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5259] memfd_create("syzkaller", 0) = 3
[pid  5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5259] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5259] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5259] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5259] close(3)                    = 0
[pid  5259] mkdir("./file0", 0777)      = 0
[   97.980667][ T5259] loop0: detected capacity change from 0 to 4096
[   97.997862][ T5259] NILFS (loop0): invalid segment: Checksum error in segment payload
[   98.005917][ T5259] NILFS (loop0): trying rollback from an earlier position
[   98.020341][ T5259] NILFS (loop0): recovery complete
[pid  5259] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5259] chdir("./file0")            = 0
[pid  5259] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5259] close(4)                    = 0
[pid  5259] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5259] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   98.026531][ T5260] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.047969][   T27] audit: type=1800 audit(1676306785.808:100): pid=5259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5259] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5259] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5259] exit_group(0)               = ?
[pid  5259] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./98/binderfs")                 = 0
umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./98/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./98/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./98/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./98/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./98")                           = 0
mkdir("./99", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5261
./strace-static-x86_64: Process 5261 attached
[pid  5261] chdir("./99")               = 0
[pid  5261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5261] setpgid(0, 0)               = 0
[pid  5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5261] write(3, "1000", 4)         = 4
[pid  5261] close(3)                    = 0
[pid  5261] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5261] memfd_create("syzkaller", 0) = 3
[pid  5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5261] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5261] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5261] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5261] close(3)                    = 0
[pid  5261] mkdir("./file0", 0777)      = 0
[   98.374457][ T5261] loop0: detected capacity change from 0 to 4096
[   98.392215][ T5261] NILFS (loop0): invalid segment: Checksum error in segment payload
[   98.400315][ T5261] NILFS (loop0): trying rollback from an earlier position
[   98.414333][ T5261] NILFS (loop0): recovery complete
[pid  5261] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5261] chdir("./file0")            = 0
[pid  5261] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5261] close(4)                    = 0
[pid  5261] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5261] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   98.420240][ T5262] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.436280][   T27] audit: type=1800 audit(1676306786.188:101): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5261] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5261] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5261] exit_group(0)               = ?
[pid  5261] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./99/binderfs")                 = 0
umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./99/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./99/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./99/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./99/file0")                     = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./99")                           = 0
mkdir("./100", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5263 attached
, child_tidptr=0x555555db65d0) = 5263
[pid  5263] chdir("./100")              = 0
[pid  5263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5263] setpgid(0, 0)               = 0
[pid  5263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5263] write(3, "1000", 4)         = 4
[pid  5263] close(3)                    = 0
[pid  5263] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5263] memfd_create("syzkaller", 0) = 3
[pid  5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5263] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5263] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5263] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5263] close(3)                    = 0
[pid  5263] mkdir("./file0", 0777)      = 0
[   98.728916][ T5263] loop0: detected capacity change from 0 to 4096
[   98.744994][ T5263] NILFS (loop0): invalid segment: Checksum error in segment payload
[   98.753151][ T5263] NILFS (loop0): trying rollback from an earlier position
[   98.767214][ T5263] NILFS (loop0): recovery complete
[pid  5263] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5263] chdir("./file0")            = 0
[pid  5263] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5263] close(4)                    = 0
[pid  5263] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5263] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   98.773034][ T5264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.789529][   T27] audit: type=1800 audit(1676306786.548:102): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5263] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5263] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5263] exit_group(0)               = ?
[pid  5263] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5263, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./100/binderfs")                = 0
umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./100/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./100/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./100/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./100/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./100")                          = 0
mkdir("./101", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5265
./strace-static-x86_64: Process 5265 attached
[pid  5265] chdir("./101")              = 0
[pid  5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5265] setpgid(0, 0)               = 0
[pid  5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5265] write(3, "1000", 4)         = 4
[pid  5265] close(3)                    = 0
[pid  5265] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5265] memfd_create("syzkaller", 0) = 3
[pid  5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5265] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5265] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5265] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5265] close(3)                    = 0
[pid  5265] mkdir("./file0", 0777)      = 0
[   99.073925][ T5265] loop0: detected capacity change from 0 to 4096
[   99.089650][ T5265] NILFS (loop0): invalid segment: Checksum error in segment payload
[   99.097756][ T5265] NILFS (loop0): trying rollback from an earlier position
[   99.110760][ T5265] NILFS (loop0): recovery complete
[pid  5265] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5265] chdir("./file0")            = 0
[pid  5265] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5265] close(4)                    = 0
[pid  5265] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5265] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   99.116623][ T5266] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.145332][   T27] audit: type=1800 audit(1676306786.898:103): pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5265] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5265] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5265] exit_group(0)               = ?
[pid  5265] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./101/binderfs")                = 0
umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./101/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./101/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./101/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./101/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./101")                          = 0
mkdir("./102", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5268
./strace-static-x86_64: Process 5268 attached
[pid  5268] chdir("./102")              = 0
[pid  5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5268] setpgid(0, 0)               = 0
[pid  5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5268] write(3, "1000", 4)         = 4
[pid  5268] close(3)                    = 0
[pid  5268] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5268] memfd_create("syzkaller", 0) = 3
[pid  5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5268] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5268] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5268] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5268] close(3)                    = 0
[pid  5268] mkdir("./file0", 0777)      = 0
[pid  5268] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[   99.437162][ T5268] loop0: detected capacity change from 0 to 4096
[   99.455018][ T5268] NILFS (loop0): invalid segment: Checksum error in segment payload
[   99.463126][ T5268] NILFS (loop0): trying rollback from an earlier position
[   99.477519][ T5268] NILFS (loop0): recovery complete
[pid  5268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5268] chdir("./file0")            = 0
[pid  5268] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5268] close(4)                    = 0
[pid  5268] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5268] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   99.483350][ T5269] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.499599][   T27] audit: type=1800 audit(1676306787.258:104): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5268] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5268] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5268] exit_group(0)               = ?
[pid  5268] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./102/binderfs")                = 0
umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./102/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./102/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./102/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./102/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./102")                          = 0
mkdir("./103", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5271
./strace-static-x86_64: Process 5271 attached
[pid  5271] chdir("./103")              = 0
[pid  5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5271] setpgid(0, 0)               = 0
[pid  5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5271] write(3, "1000", 4)         = 4
[pid  5271] close(3)                    = 0
[pid  5271] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5271] memfd_create("syzkaller", 0) = 3
[pid  5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5271] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5271] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5271] close(3)                    = 0
[pid  5271] mkdir("./file0", 0777)      = 0
[pid  5271] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5271] chdir("./file0")            = 0
[pid  5271] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5271] close(4)                    = 0
[   99.799654][ T5271] loop0: detected capacity change from 0 to 4096
[   99.817090][ T5271] NILFS (loop0): invalid segment: Checksum error in segment payload
[   99.825187][ T5271] NILFS (loop0): trying rollback from an earlier position
[   99.839331][ T5271] NILFS (loop0): recovery complete
[pid  5271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5271] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[   99.845302][ T5272] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.852016][   T27] audit: type=1800 audit(1676306787.608:105): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5271] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5271] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5271] exit_group(0)               = ?
[pid  5271] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./103/binderfs")                = 0
umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./103/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./103/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./103/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./103/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./103")                          = 0
mkdir("./104", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5273
./strace-static-x86_64: Process 5273 attached
[pid  5273] chdir("./104")              = 0
[pid  5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5273] setpgid(0, 0)               = 0
[pid  5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5273] write(3, "1000", 4)         = 4
[pid  5273] close(3)                    = 0
[pid  5273] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5273] memfd_create("syzkaller", 0) = 3
[pid  5273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5273] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5273] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5273] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5273] close(3)                    = 0
[pid  5273] mkdir("./file0", 0777)      = 0
[  100.142291][ T5273] loop0: detected capacity change from 0 to 4096
[  100.157928][ T5273] NILFS (loop0): invalid segment: Checksum error in segment payload
[  100.166034][ T5273] NILFS (loop0): trying rollback from an earlier position
[  100.180347][ T5273] NILFS (loop0): recovery complete
[pid  5273] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5273] chdir("./file0")            = 0
[pid  5273] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5273] close(4)                    = 0
[pid  5273] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5273] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  100.186123][ T5274] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.199388][   T27] audit: type=1800 audit(1676306787.958:106): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5273] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5273] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5273] exit_group(0)               = ?
[pid  5273] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5273, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./104/binderfs")                = 0
umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./104/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./104/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./104/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./104/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./104")                          = 0
mkdir("./105", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5275
./strace-static-x86_64: Process 5275 attached
[pid  5275] chdir("./105")              = 0
[pid  5275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5275] setpgid(0, 0)               = 0
[pid  5275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5275] write(3, "1000", 4)         = 4
[pid  5275] close(3)                    = 0
[pid  5275] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5275] memfd_create("syzkaller", 0) = 3
[pid  5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5275] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5275] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5275] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5275] close(3)                    = 0
[pid  5275] mkdir("./file0", 0777)      = 0
[  100.482529][ T5275] loop0: detected capacity change from 0 to 4096
[  100.499366][ T5275] NILFS (loop0): invalid segment: Checksum error in segment payload
[  100.507454][ T5275] NILFS (loop0): trying rollback from an earlier position
[  100.520961][ T5275] NILFS (loop0): recovery complete
[pid  5275] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5275] chdir("./file0")            = 0
[pid  5275] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5275] close(4)                    = 0
[pid  5275] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5275] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  100.527268][ T5276] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.546207][   T27] audit: type=1800 audit(1676306788.288:107): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5275] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5275] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5275] exit_group(0)               = ?
[pid  5275] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5275, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./105/binderfs")                = 0
umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./105/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./105/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./105/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./105/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./105")                          = 0
mkdir("./106", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5278
./strace-static-x86_64: Process 5278 attached
[pid  5278] chdir("./106")              = 0
[pid  5278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5278] setpgid(0, 0)               = 0
[pid  5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5278] write(3, "1000", 4)         = 4
[pid  5278] close(3)                    = 0
[pid  5278] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5278] memfd_create("syzkaller", 0) = 3
[pid  5278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5278] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5278] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5278] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5278] close(3)                    = 0
[pid  5278] mkdir("./file0", 0777)      = 0
[  100.842231][ T5278] loop0: detected capacity change from 0 to 4096
[  100.859247][ T5278] NILFS (loop0): invalid segment: Checksum error in segment payload
[  100.867274][ T5278] NILFS (loop0): trying rollback from an earlier position
[  100.881082][ T5278] NILFS (loop0): recovery complete
[pid  5278] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5278] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5278] chdir("./file0")            = 0
[pid  5278] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5278] close(4)                    = 0
[pid  5278] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5278] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  100.886921][ T5279] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5278] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5278] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5278] exit_group(0)               = ?
[pid  5278] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./106/binderfs")                = 0
umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./106/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./106/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./106/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./106/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./106")                          = 0
mkdir("./107", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5280
./strace-static-x86_64: Process 5280 attached
[pid  5280] chdir("./107")              = 0
[pid  5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5280] setpgid(0, 0)               = 0
[pid  5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5280] write(3, "1000", 4)         = 4
[pid  5280] close(3)                    = 0
[pid  5280] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5280] memfd_create("syzkaller", 0) = 3
[pid  5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5280] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5280] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5280] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5280] close(3)                    = 0
[pid  5280] mkdir("./file0", 0777)      = 0
[pid  5280] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5280] chdir("./file0")            = 0
[pid  5280] ioctl(4, LOOP_CLR_FD)       = 0
[  101.195686][ T5280] loop0: detected capacity change from 0 to 4096
[  101.212678][ T5280] NILFS (loop0): invalid segment: Checksum error in segment payload
[  101.220871][ T5280] NILFS (loop0): trying rollback from an earlier position
[  101.234706][ T5280] NILFS (loop0): recovery complete
[pid  5280] close(4)                    = 0
[pid  5280] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5280] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  101.241204][ T5281] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5280] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5280] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5280] exit_group(0)               = ?
[pid  5280] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./107/binderfs")                = 0
umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./107/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./107/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./107/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./107/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./107")                          = 0
mkdir("./108", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5282 attached
, child_tidptr=0x555555db65d0) = 5282
[pid  5282] chdir("./108")              = 0
[pid  5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5282] setpgid(0, 0)               = 0
[pid  5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5282] write(3, "1000", 4)         = 4
[pid  5282] close(3)                    = 0
[pid  5282] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5282] memfd_create("syzkaller", 0) = 3
[pid  5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5282] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5282] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5282] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5282] close(3)                    = 0
[pid  5282] mkdir("./file0", 0777)      = 0
[  101.534607][ T5282] loop0: detected capacity change from 0 to 4096
[  101.551425][ T5282] NILFS (loop0): invalid segment: Checksum error in segment payload
[  101.559531][ T5282] NILFS (loop0): trying rollback from an earlier position
[pid  5282] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5282] chdir("./file0")            = 0
[pid  5282] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5282] close(4)                    = 0
[pid  5282] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5282] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  101.580027][ T5282] NILFS (loop0): recovery complete
[  101.586931][ T5284] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5282] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5282] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5282] exit_group(0)               = ?
[pid  5282] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./108/binderfs")                = 0
umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./108/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./108/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./108/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./108/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./108")                          = 0
mkdir("./109", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5285
./strace-static-x86_64: Process 5285 attached
[pid  5285] chdir("./109")              = 0
[pid  5285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5285] setpgid(0, 0)               = 0
[pid  5285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5285] write(3, "1000", 4)         = 4
[pid  5285] close(3)                    = 0
[pid  5285] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5285] memfd_create("syzkaller", 0) = 3
[pid  5285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5285] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5285] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5285] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5285] close(3)                    = 0
[pid  5285] mkdir("./file0", 0777)      = 0
[  101.902199][ T5285] loop0: detected capacity change from 0 to 4096
[  101.918795][ T5285] NILFS (loop0): invalid segment: Checksum error in segment payload
[  101.926900][ T5285] NILFS (loop0): trying rollback from an earlier position
[  101.940626][ T5285] NILFS (loop0): recovery complete
[pid  5285] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5285] chdir("./file0")            = 0
[pid  5285] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5285] close(4)                    = 0
[pid  5285] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5285] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  101.946769][ T5286] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5285] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5285] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5285] exit_group(0)               = ?
[pid  5285] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5285, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./109/binderfs")                = 0
umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./109/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./109/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./109/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./109/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./109")                          = 0
mkdir("./110", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5288
./strace-static-x86_64: Process 5288 attached
[pid  5288] chdir("./110")              = 0
[pid  5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5288] setpgid(0, 0)               = 0
[pid  5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5288] write(3, "1000", 4)         = 4
[pid  5288] close(3)                    = 0
[pid  5288] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5288] memfd_create("syzkaller", 0) = 3
[pid  5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5288] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5288] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5288] close(3)                    = 0
[pid  5288] mkdir("./file0", 0777)      = 0
[  102.292611][ T5288] loop0: detected capacity change from 0 to 4096
[  102.308938][ T5288] NILFS (loop0): invalid segment: Checksum error in segment payload
[  102.317008][ T5288] NILFS (loop0): trying rollback from an earlier position
[  102.330527][ T5288] NILFS (loop0): recovery complete
[pid  5288] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5288] chdir("./file0")            = 0
[pid  5288] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5288] close(4)                    = 0
[pid  5288] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5288] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  102.337270][ T5290] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.358330][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  102.358343][   T27] audit: type=1800 audit(1676306790.118:112): pid=5288 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5288] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5288] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5288] exit_group(0)               = ?
[pid  5288] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./110/binderfs")                = 0
umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./110/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./110/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./110/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./110/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./110")                          = 0
mkdir("./111", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5291 attached
 <unfinished ...>
[pid  5291] chdir("./111")              = 0
[pid  5291] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5291] setpgid(0, 0)               = 0
[pid  5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5291
[pid  5291] write(3, "1000", 4)         = 4
[pid  5291] close(3)                    = 0
[pid  5291] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5291] memfd_create("syzkaller", 0) = 3
[pid  5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5291] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5291] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5291] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5291] close(3)                    = 0
[pid  5291] mkdir("./file0", 0777)      = 0
[  102.651981][ T5291] loop0: detected capacity change from 0 to 4096
[  102.667914][ T5291] NILFS (loop0): invalid segment: Checksum error in segment payload
[  102.675907][ T5291] NILFS (loop0): trying rollback from an earlier position
[  102.691431][ T5291] NILFS (loop0): recovery complete
[pid  5291] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5291] chdir("./file0")            = 0
[pid  5291] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5291] close(4)                    = 0
[pid  5291] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5291] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  102.697795][ T5292] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.724590][   T27] audit: type=1800 audit(1676306790.478:113): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5291] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5291] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5291] exit_group(0)               = ?
[pid  5291] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5291, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./111/binderfs")                = 0
umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./111/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./111/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./111/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./111/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./111")                          = 0
mkdir("./112", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5293
./strace-static-x86_64: Process 5293 attached
[pid  5293] chdir("./112")              = 0
[pid  5293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5293] setpgid(0, 0)               = 0
[pid  5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5293] write(3, "1000", 4)         = 4
[pid  5293] close(3)                    = 0
[pid  5293] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5293] memfd_create("syzkaller", 0) = 3
[pid  5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5293] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5293] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5293] close(3)                    = 0
[pid  5293] mkdir("./file0", 0777)      = 0
[  102.999890][ T5293] loop0: detected capacity change from 0 to 4096
[  103.015980][ T5293] NILFS (loop0): invalid segment: Checksum error in segment payload
[  103.024333][ T5293] NILFS (loop0): trying rollback from an earlier position
[  103.038084][ T5293] NILFS (loop0): recovery complete
[pid  5293] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5293] chdir("./file0")            = 0
[pid  5293] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5293] close(4)                    = 0
[pid  5293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5293] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  103.044068][ T5294] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.059069][   T27] audit: type=1800 audit(1676306790.818:114): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5293] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5293] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5293] exit_group(0)               = ?
[pid  5293] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./112/binderfs")                = 0
umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./112/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./112/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./112/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./112/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./112")                          = 0
mkdir("./113", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5295 attached
, child_tidptr=0x555555db65d0) = 5295
[pid  5295] chdir("./113")              = 0
[pid  5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5295] setpgid(0, 0)               = 0
[pid  5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5295] write(3, "1000", 4)         = 4
[pid  5295] close(3)                    = 0
[pid  5295] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5295] memfd_create("syzkaller", 0) = 3
[pid  5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5295] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5295] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5295] close(3)                    = 0
[pid  5295] mkdir("./file0", 0777)      = 0
[pid  5295] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  103.358246][ T5295] loop0: detected capacity change from 0 to 4096
[  103.372958][ T5295] NILFS (loop0): invalid segment: Checksum error in segment payload
[  103.381061][ T5295] NILFS (loop0): trying rollback from an earlier position
[  103.394645][ T5295] NILFS (loop0): recovery complete
[pid  5295] chdir("./file0")            = 0
[pid  5295] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5295] close(4)                    = 0
[pid  5295] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5295] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  103.401077][ T5296] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.428238][   T27] audit: type=1800 audit(1676306791.188:115): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5295] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5295] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5295] exit_group(0)               = ?
[pid  5295] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./113/binderfs")                = 0
umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./113/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./113/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./113/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./113/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./113")                          = 0
mkdir("./114", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5297
./strace-static-x86_64: Process 5297 attached
[pid  5297] chdir("./114")              = 0
[pid  5297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5297] setpgid(0, 0)               = 0
[pid  5297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5297] write(3, "1000", 4)         = 4
[pid  5297] close(3)                    = 0
[pid  5297] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5297] memfd_create("syzkaller", 0) = 3
[pid  5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5297] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5297] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5297] close(3)                    = 0
[pid  5297] mkdir("./file0", 0777)      = 0
[  103.731084][ T5297] loop0: detected capacity change from 0 to 4096
[  103.747038][ T5297] NILFS (loop0): invalid segment: Checksum error in segment payload
[  103.755047][ T5297] NILFS (loop0): trying rollback from an earlier position
[  103.768785][ T5297] NILFS (loop0): recovery complete
[pid  5297] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5297] chdir("./file0")            = 0
[pid  5297] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5297] close(4)                    = 0
[pid  5297] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5297] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  103.775001][ T5298] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.787671][   T27] audit: type=1800 audit(1676306791.548:116): pid=5297 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5297] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5297] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5297] exit_group(0)               = ?
[pid  5297] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5297, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./114/binderfs")                = 0
umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./114/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./114/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./114/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./114/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./114")                          = 0
mkdir("./115", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5299
./strace-static-x86_64: Process 5299 attached
[pid  5299] chdir("./115")              = 0
[pid  5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5299] setpgid(0, 0)               = 0
[pid  5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5299] write(3, "1000", 4)         = 4
[pid  5299] close(3)                    = 0
[pid  5299] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5299] memfd_create("syzkaller", 0) = 3
[pid  5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5299] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5299] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5299] close(3)                    = 0
[pid  5299] mkdir("./file0", 0777)      = 0
[  104.082568][ T5299] loop0: detected capacity change from 0 to 4096
[  104.097474][ T5299] NILFS (loop0): invalid segment: Checksum error in segment payload
[  104.105567][ T5299] NILFS (loop0): trying rollback from an earlier position
[  104.121083][ T5299] NILFS (loop0): recovery complete
[pid  5299] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5299] chdir("./file0")            = 0
[pid  5299] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5299] close(4)                    = 0
[pid  5299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5299] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  104.127166][ T5300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.147801][   T27] audit: type=1800 audit(1676306791.908:117): pid=5299 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5299] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5299] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5299] exit_group(0)               = ?
[pid  5299] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./115/binderfs")                = 0
umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./115/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./115/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./115/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./115/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./115")                          = 0
mkdir("./116", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5301
./strace-static-x86_64: Process 5301 attached
[pid  5301] chdir("./116")              = 0
[pid  5301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5301] setpgid(0, 0)               = 0
[pid  5301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5301] write(3, "1000", 4)         = 4
[pid  5301] close(3)                    = 0
[pid  5301] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5301] memfd_create("syzkaller", 0) = 3
[pid  5301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5301] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5301] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5301] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5301] close(3)                    = 0
[pid  5301] mkdir("./file0", 0777)      = 0
[  104.435190][ T5301] loop0: detected capacity change from 0 to 4096
[  104.452872][ T5301] NILFS (loop0): invalid segment: Checksum error in segment payload
[  104.461025][ T5301] NILFS (loop0): trying rollback from an earlier position
[  104.474336][ T5301] NILFS (loop0): recovery complete
[pid  5301] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5301] chdir("./file0")            = 0
[pid  5301] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5301] close(4)                    = 0
[pid  5301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5301] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  104.481063][ T5302] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.502259][   T27] audit: type=1800 audit(1676306792.258:118): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5301] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5301] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5301] exit_group(0)               = ?
[pid  5301] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5301, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./116/binderfs")                = 0
umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./116/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./116/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./116/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./116/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./116")                          = 0
mkdir("./117", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5303
./strace-static-x86_64: Process 5303 attached
[pid  5303] chdir("./117")              = 0
[pid  5303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5303] setpgid(0, 0)               = 0
[pid  5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5303] write(3, "1000", 4)         = 4
[pid  5303] close(3)                    = 0
[pid  5303] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5303] memfd_create("syzkaller", 0) = 3
[pid  5303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5303] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5303] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5303] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5303] close(3)                    = 0
[pid  5303] mkdir("./file0", 0777)      = 0
[pid  5303] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5303] chdir("./file0")            = 0
[pid  5303] ioctl(4, LOOP_CLR_FD)       = 0
[  104.779592][ T5303] loop0: detected capacity change from 0 to 4096
[  104.793931][ T5303] NILFS (loop0): invalid segment: Checksum error in segment payload
[  104.802050][ T5303] NILFS (loop0): trying rollback from an earlier position
[  104.816836][ T5303] NILFS (loop0): recovery complete
[pid  5303] close(4)                    = 0
[pid  5303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5303] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  104.823073][ T5304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.839408][   T27] audit: type=1800 audit(1676306792.598:119): pid=5303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5303] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5303] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5303] exit_group(0)               = ?
[pid  5303] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./117/binderfs")                = 0
umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./117/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./117/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./117/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./117/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./117")                          = 0
mkdir("./118", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5305
./strace-static-x86_64: Process 5305 attached
[pid  5305] chdir("./118")              = 0
[pid  5305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5305] setpgid(0, 0)               = 0
[pid  5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5305] write(3, "1000", 4)         = 4
[pid  5305] close(3)                    = 0
[pid  5305] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5305] memfd_create("syzkaller", 0) = 3
[pid  5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5305] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5305] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5305] close(3)                    = 0
[pid  5305] mkdir("./file0", 0777)      = 0
[  105.137424][ T5305] loop0: detected capacity change from 0 to 4096
[  105.155228][ T5305] NILFS (loop0): invalid segment: Checksum error in segment payload
[  105.163579][ T5305] NILFS (loop0): trying rollback from an earlier position
[  105.177873][ T5305] NILFS (loop0): recovery complete
[pid  5305] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5305] chdir("./file0")            = 0
[pid  5305] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5305] close(4)                    = 0
[pid  5305] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5305] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  105.183912][ T5306] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.200925][   T27] audit: type=1800 audit(1676306792.958:120): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5305] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5305] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5305] exit_group(0)               = ?
[pid  5305] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./118/binderfs")                = 0
umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./118/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./118/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./118/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./118/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./118")                          = 0
mkdir("./119", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5307
./strace-static-x86_64: Process 5307 attached
[pid  5307] chdir("./119")              = 0
[pid  5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5307] setpgid(0, 0)               = 0
[pid  5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5307] write(3, "1000", 4)         = 4
[pid  5307] close(3)                    = 0
[pid  5307] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5307] memfd_create("syzkaller", 0) = 3
[pid  5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5307] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5307] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5307] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5307] close(3)                    = 0
[pid  5307] mkdir("./file0", 0777)      = 0
[  105.495040][ T5307] loop0: detected capacity change from 0 to 4096
[  105.520967][ T5307] NILFS (loop0): invalid segment: Checksum error in segment payload
[  105.529001][ T5307] NILFS (loop0): trying rollback from an earlier position
[pid  5307] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5307] chdir("./file0")            = 0
[pid  5307] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5307] close(4)                    = 0
[pid  5307] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5307] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  105.542370][ T5307] NILFS (loop0): recovery complete
[  105.548546][ T5308] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.574222][   T27] audit: type=1800 audit(1676306793.328:121): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5307] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5307] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5307] exit_group(0)               = ?
[pid  5307] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./119/binderfs")                = 0
umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./119/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./119/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./119/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./119/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./119")                          = 0
mkdir("./120", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5309
./strace-static-x86_64: Process 5309 attached
[pid  5309] chdir("./120")              = 0
[pid  5309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5309] setpgid(0, 0)               = 0
[pid  5309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5309] write(3, "1000", 4)         = 4
[pid  5309] close(3)                    = 0
[pid  5309] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5309] memfd_create("syzkaller", 0) = 3
[pid  5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5309] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5309] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5309] close(3)                    = 0
[pid  5309] mkdir("./file0", 0777)      = 0
[  105.871835][ T5309] loop0: detected capacity change from 0 to 4096
[  105.888086][ T5309] NILFS (loop0): invalid segment: Checksum error in segment payload
[  105.896315][ T5309] NILFS (loop0): trying rollback from an earlier position
[  105.910355][ T5309] NILFS (loop0): recovery complete
[pid  5309] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5309] chdir("./file0")            = 0
[pid  5309] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5309] close(4)                    = 0
[pid  5309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5309] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  105.916539][ T5310] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5309] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5309] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5309] exit_group(0)               = ?
[pid  5309] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5309, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./120/binderfs")                = 0
umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./120/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./120/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./120/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./120/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./120")                          = 0
mkdir("./121", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5311 attached
, child_tidptr=0x555555db65d0) = 5311
[pid  5311] chdir("./121")              = 0
[pid  5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5311] setpgid(0, 0)               = 0
[pid  5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5311] write(3, "1000", 4)         = 4
[pid  5311] close(3)                    = 0
[pid  5311] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5311] memfd_create("syzkaller", 0) = 3
[pid  5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5311] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5311] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5311] close(3)                    = 0
[pid  5311] mkdir("./file0", 0777)      = 0
[  106.224270][ T5311] loop0: detected capacity change from 0 to 4096
[  106.240490][ T5311] NILFS (loop0): invalid segment: Checksum error in segment payload
[  106.248535][ T5311] NILFS (loop0): trying rollback from an earlier position
[  106.262503][ T5311] NILFS (loop0): recovery complete
[pid  5311] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5311] chdir("./file0")            = 0
[pid  5311] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5311] close(4)                    = 0
[pid  5311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5311] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  106.268336][ T5312] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5311] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5311] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5311] exit_group(0)               = ?
[pid  5311] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./121/binderfs")                = 0
umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./121/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./121/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./121/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./121/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./121")                          = 0
mkdir("./122", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5313
./strace-static-x86_64: Process 5313 attached
[pid  5313] chdir("./122")              = 0
[pid  5313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5313] setpgid(0, 0)               = 0
[pid  5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5313] write(3, "1000", 4)         = 4
[pid  5313] close(3)                    = 0
[pid  5313] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5313] memfd_create("syzkaller", 0) = 3
[pid  5313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5313] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5313] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5313] close(3)                    = 0
[pid  5313] mkdir("./file0", 0777)      = 0
[  106.585749][ T5313] loop0: detected capacity change from 0 to 4096
[  106.602068][ T5313] NILFS (loop0): invalid segment: Checksum error in segment payload
[  106.610116][ T5313] NILFS (loop0): trying rollback from an earlier position
[  106.623652][ T5313] NILFS (loop0): recovery complete
[pid  5313] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5313] chdir("./file0")            = 0
[pid  5313] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5313] close(4)                    = 0
[pid  5313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5313] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  106.630227][ T5314] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5313] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5313] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5313] exit_group(0)               = ?
[pid  5313] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5313, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./122", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./122/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./122/binderfs")                = 0
umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./122/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./122/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./122/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./122/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./122")                          = 0
mkdir("./123", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5315
./strace-static-x86_64: Process 5315 attached
[pid  5315] chdir("./123")              = 0
[pid  5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5315] setpgid(0, 0)               = 0
[pid  5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5315] write(3, "1000", 4)         = 4
[pid  5315] close(3)                    = 0
[pid  5315] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5315] memfd_create("syzkaller", 0) = 3
[pid  5315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5315] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5315] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5315] close(3)                    = 0
[pid  5315] mkdir("./file0", 0777)      = 0
[  106.920859][ T5315] loop0: detected capacity change from 0 to 4096
[  106.940048][ T5315] NILFS (loop0): invalid segment: Checksum error in segment payload
[  106.948133][ T5315] NILFS (loop0): trying rollback from an earlier position
[  106.962650][ T5315] NILFS (loop0): recovery complete
[pid  5315] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5315] chdir("./file0")            = 0
[pid  5315] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5315] close(4)                    = 0
[pid  5315] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5315] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  106.969163][ T5316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5315] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5315] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5315] exit_group(0)               = ?
[pid  5315] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./123", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./123/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./123/binderfs")                = 0
umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./123/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./123/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./123/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./123/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./123")                          = 0
mkdir("./124", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5317 attached
, child_tidptr=0x555555db65d0) = 5317
[pid  5317] chdir("./124")              = 0
[pid  5317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5317] setpgid(0, 0)               = 0
[pid  5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5317] write(3, "1000", 4)         = 4
[pid  5317] close(3)                    = 0
[pid  5317] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5317] memfd_create("syzkaller", 0) = 3
[pid  5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5317] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5317] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5317] close(3)                    = 0
[pid  5317] mkdir("./file0", 0777)      = 0
[  107.296060][ T5317] loop0: detected capacity change from 0 to 4096
[  107.314185][ T5317] NILFS (loop0): invalid segment: Checksum error in segment payload
[  107.322261][ T5317] NILFS (loop0): trying rollback from an earlier position
[  107.337059][ T5317] NILFS (loop0): recovery complete
[pid  5317] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5317] chdir("./file0")            = 0
[pid  5317] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5317] close(4)                    = 0
[pid  5317] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5317] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  107.343401][ T5318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5317] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5317] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5317] exit_group(0)               = ?
[pid  5317] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./124", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./124/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./124/binderfs")                = 0
umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./124/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./124/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./124/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./124/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./124")                          = 0
mkdir("./125", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5319
./strace-static-x86_64: Process 5319 attached
[pid  5319] chdir("./125")              = 0
[pid  5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5319] setpgid(0, 0)               = 0
[pid  5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5319] write(3, "1000", 4)         = 4
[pid  5319] close(3)                    = 0
[pid  5319] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5319] memfd_create("syzkaller", 0) = 3
[pid  5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5319] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5319] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5319] close(3)                    = 0
[pid  5319] mkdir("./file0", 0777)      = 0
[  107.651528][ T5319] loop0: detected capacity change from 0 to 4096
[  107.669353][ T5319] NILFS (loop0): invalid segment: Checksum error in segment payload
[  107.677381][ T5319] NILFS (loop0): trying rollback from an earlier position
[  107.691109][ T5319] NILFS (loop0): recovery complete
[pid  5319] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5319] chdir("./file0")            = 0
[pid  5319] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5319] close(4)                    = 0
[pid  5319] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5319] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  107.697548][ T5320] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.709337][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  107.709348][   T27] audit: type=1800 audit(1676306795.478:127): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5319] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5319] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5319] exit_group(0)               = ?
[pid  5319] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./125", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./125/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./125/binderfs")                = 0
umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./125/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./125/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./125/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./125/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./125")                          = 0
mkdir("./126", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5321
./strace-static-x86_64: Process 5321 attached
[pid  5321] chdir("./126")              = 0
[pid  5321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5321] setpgid(0, 0)               = 0
[pid  5321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5321] write(3, "1000", 4)         = 4
[pid  5321] close(3)                    = 0
[pid  5321] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5321] memfd_create("syzkaller", 0) = 3
[pid  5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5321] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5321] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5321] close(3)                    = 0
[pid  5321] mkdir("./file0", 0777)      = 0
[  108.005387][ T5321] loop0: detected capacity change from 0 to 4096
[  108.024109][ T5321] NILFS (loop0): invalid segment: Checksum error in segment payload
[  108.032296][ T5321] NILFS (loop0): trying rollback from an earlier position
[  108.046917][ T5321] NILFS (loop0): recovery complete
[pid  5321] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5321] chdir("./file0")            = 0
[pid  5321] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5321] close(4)                    = 0
[pid  5321] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5321] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  108.053399][ T5322] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.078568][   T27] audit: type=1800 audit(1676306795.838:128): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5321] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5321] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5321] exit_group(0)               = ?
[pid  5321] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5321, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./126", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./126/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./126/binderfs")                = 0
umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./126/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./126/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./126/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./126/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./126")                          = 0
mkdir("./127", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5323
./strace-static-x86_64: Process 5323 attached
[pid  5323] chdir("./127")              = 0
[pid  5323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5323] setpgid(0, 0)               = 0
[pid  5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5323] write(3, "1000", 4)         = 4
[pid  5323] close(3)                    = 0
[pid  5323] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5323] memfd_create("syzkaller", 0) = 3
[pid  5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5323] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5323] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5323] close(3)                    = 0
[pid  5323] mkdir("./file0", 0777)      = 0
[  108.383653][ T5323] loop0: detected capacity change from 0 to 4096
[  108.401301][ T5323] NILFS (loop0): invalid segment: Checksum error in segment payload
[  108.409406][ T5323] NILFS (loop0): trying rollback from an earlier position
[  108.424008][ T5323] NILFS (loop0): recovery complete
[pid  5323] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5323] chdir("./file0")            = 0
[pid  5323] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5323] close(4)                    = 0
[pid  5323] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5323] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  108.430108][ T5324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.454534][   T27] audit: type=1800 audit(1676306796.198:129): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5323] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5323] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5323] exit_group(0)               = ?
[pid  5323] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./127", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./127/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./127/binderfs")                = 0
umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./127/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./127/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./127/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./127/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./127")                          = 0
mkdir("./128", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5325 attached
, child_tidptr=0x555555db65d0) = 5325
[pid  5325] chdir("./128")              = 0
[pid  5325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5325] setpgid(0, 0)               = 0
[pid  5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5325] write(3, "1000", 4)         = 4
[pid  5325] close(3)                    = 0
[pid  5325] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5325] memfd_create("syzkaller", 0) = 3
[pid  5325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5325] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5325] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5325] close(3)                    = 0
[pid  5325] mkdir("./file0", 0777)      = 0
[  108.755096][ T5325] loop0: detected capacity change from 0 to 4096
[  108.772973][ T5325] NILFS (loop0): invalid segment: Checksum error in segment payload
[  108.781031][ T5325] NILFS (loop0): trying rollback from an earlier position
[  108.795554][ T5325] NILFS (loop0): recovery complete
[pid  5325] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5325] chdir("./file0")            = 0
[pid  5325] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5325] close(4)                    = 0
[pid  5325] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5325] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  108.801859][ T5326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.816222][   T27] audit: type=1800 audit(1676306796.568:130): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5325] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5325] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5325] exit_group(0)               = ?
[pid  5325] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./128", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./128/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./128/binderfs")                = 0
umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./128/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./128/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./128/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./128/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./128")                          = 0
mkdir("./129", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5327
./strace-static-x86_64: Process 5327 attached
[pid  5327] chdir("./129")              = 0
[pid  5327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5327] setpgid(0, 0)               = 0
[pid  5327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5327] write(3, "1000", 4)         = 4
[pid  5327] close(3)                    = 0
[pid  5327] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5327] memfd_create("syzkaller", 0) = 3
[pid  5327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5327] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5327] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5327] close(3)                    = 0
[pid  5327] mkdir("./file0", 0777)      = 0
[  109.089785][ T5327] loop0: detected capacity change from 0 to 4096
[  109.105661][ T5327] NILFS (loop0): invalid segment: Checksum error in segment payload
[  109.113793][ T5327] NILFS (loop0): trying rollback from an earlier position
[  109.128106][ T5327] NILFS (loop0): recovery complete
[pid  5327] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5327] chdir("./file0")            = 0
[pid  5327] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5327] close(4)                    = 0
[pid  5327] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5327] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  109.134164][ T5328] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.149023][   T27] audit: type=1800 audit(1676306796.908:131): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5327] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5327] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5327] exit_group(0)               = ?
[pid  5327] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5327, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./129", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./129/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./129/binderfs")                = 0
umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./129/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./129/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./129/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./129/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./129")                          = 0
mkdir("./130", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5329
./strace-static-x86_64: Process 5329 attached
[pid  5329] chdir("./130")              = 0
[pid  5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5329] setpgid(0, 0)               = 0
[pid  5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5329] write(3, "1000", 4)         = 4
[pid  5329] close(3)                    = 0
[pid  5329] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5329] memfd_create("syzkaller", 0) = 3
[pid  5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5329] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5329] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5329] close(3)                    = 0
[pid  5329] mkdir("./file0", 0777)      = 0
[  109.434324][ T5329] loop0: detected capacity change from 0 to 4096
[  109.450332][ T5329] NILFS (loop0): invalid segment: Checksum error in segment payload
[  109.458393][ T5329] NILFS (loop0): trying rollback from an earlier position
[  109.472324][ T5329] NILFS (loop0): recovery complete
[pid  5329] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5329] chdir("./file0")            = 0
[pid  5329] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5329] close(4)                    = 0
[pid  5329] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5329] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  109.478142][ T5330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.498394][   T27] audit: type=1800 audit(1676306797.258:132): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5329] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5329] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5329] exit_group(0)               = ?
[pid  5329] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./130", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./130/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./130/binderfs")                = 0
umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./130/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./130/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./130/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./130/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./130")                          = 0
mkdir("./131", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5331 attached
, child_tidptr=0x555555db65d0) = 5331
[pid  5331] chdir("./131")              = 0
[pid  5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5331] setpgid(0, 0)               = 0
[pid  5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5331] write(3, "1000", 4)         = 4
[pid  5331] close(3)                    = 0
[pid  5331] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5331] memfd_create("syzkaller", 0) = 3
[pid  5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5331] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5331] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5331] close(3)                    = 0
[pid  5331] mkdir("./file0", 0777)      = 0
[pid  5331] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  109.799698][ T5331] loop0: detected capacity change from 0 to 4096
[  109.816528][ T5331] NILFS (loop0): invalid segment: Checksum error in segment payload
[  109.824551][ T5331] NILFS (loop0): trying rollback from an earlier position
[  109.842115][ T5331] NILFS (loop0): recovery complete
[pid  5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5331] chdir("./file0")            = 0
[pid  5331] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5331] close(4)                    = 0
[pid  5331] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5331] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  109.848311][ T5332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.878599][   T27] audit: type=1800 audit(1676306797.638:133): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5331] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5331] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5331] exit_group(0)               = ?
[pid  5331] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./131", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./131/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./131/binderfs")                = 0
umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./131/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./131/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./131/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./131/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./131")                          = 0
mkdir("./132", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5333
./strace-static-x86_64: Process 5333 attached
[pid  5333] chdir("./132")              = 0
[pid  5333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5333] setpgid(0, 0)               = 0
[pid  5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5333] write(3, "1000", 4)         = 4
[pid  5333] close(3)                    = 0
[pid  5333] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5333] memfd_create("syzkaller", 0) = 3
[pid  5333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5333] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5333] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5333] close(3)                    = 0
[pid  5333] mkdir("./file0", 0777)      = 0
[  110.139922][ T5333] loop0: detected capacity change from 0 to 4096
[  110.154744][ T5333] NILFS (loop0): invalid segment: Checksum error in segment payload
[  110.162871][ T5333] NILFS (loop0): trying rollback from an earlier position
[  110.175747][ T5333] NILFS (loop0): recovery complete
[pid  5333] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5333] chdir("./file0")            = 0
[pid  5333] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5333] close(4)                    = 0
[pid  5333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5333] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  110.181731][ T5334] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.185502][   T27] audit: type=1800 audit(1676306797.948:134): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5333] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5333] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5333] exit_group(0)               = ?
[pid  5333] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5333, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./132", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./132/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./132/binderfs")                = 0
umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./132/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./132/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./132/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./132/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./132")                          = 0
mkdir("./133", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5335
./strace-static-x86_64: Process 5335 attached
[pid  5335] chdir("./133")              = 0
[pid  5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5335] setpgid(0, 0)               = 0
[pid  5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5335] write(3, "1000", 4)         = 4
[pid  5335] close(3)                    = 0
[pid  5335] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5335] memfd_create("syzkaller", 0) = 3
[pid  5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5335] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5335] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5335] close(3)                    = 0
[pid  5335] mkdir("./file0", 0777)      = 0
[pid  5335] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5335] chdir("./file0")            = 0
[pid  5335] ioctl(4, LOOP_CLR_FD)       = 0
[  110.488741][ T5335] loop0: detected capacity change from 0 to 4096
[  110.503812][ T5335] NILFS (loop0): invalid segment: Checksum error in segment payload
[  110.511902][ T5335] NILFS (loop0): trying rollback from an earlier position
[  110.525461][ T5335] NILFS (loop0): recovery complete
[pid  5335] close(4)                    = 0
[pid  5335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5335] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  110.531947][ T5336] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.551329][   T27] audit: type=1800 audit(1676306798.308:135): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5335] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5335] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5335] exit_group(0)               = ?
[pid  5335] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./133", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./133/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./133/binderfs")                = 0
umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./133/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./133/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./133/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./133/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./133")                          = 0
mkdir("./134", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5337
./strace-static-x86_64: Process 5337 attached
[pid  5337] chdir("./134")              = 0
[pid  5337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5337] setpgid(0, 0)               = 0
[pid  5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5337] write(3, "1000", 4)         = 4
[pid  5337] close(3)                    = 0
[pid  5337] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5337] memfd_create("syzkaller", 0) = 3
[pid  5337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5337] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5337] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5337] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5337] close(3)                    = 0
[pid  5337] mkdir("./file0", 0777)      = 0
[  110.845718][ T5337] loop0: detected capacity change from 0 to 4096
[  110.865018][ T5337] NILFS (loop0): invalid segment: Checksum error in segment payload
[  110.873267][ T5337] NILFS (loop0): trying rollback from an earlier position
[  110.888005][ T5337] NILFS (loop0): recovery complete
[pid  5337] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5337] chdir("./file0")            = 0
[pid  5337] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5337] close(4)                    = 0
[pid  5337] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5337] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  110.894015][ T5338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.919129][   T27] audit: type=1800 audit(1676306798.678:136): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5337] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5337] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5337] exit_group(0)               = ?
[pid  5337] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5337, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./134", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./134/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./134/binderfs")                = 0
umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./134/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./134/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./134/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./134/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./134")                          = 0
mkdir("./135", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5339
./strace-static-x86_64: Process 5339 attached
[pid  5339] chdir("./135")              = 0
[pid  5339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5339] setpgid(0, 0)               = 0
[pid  5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5339] write(3, "1000", 4)         = 4
[pid  5339] close(3)                    = 0
[pid  5339] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5339] memfd_create("syzkaller", 0) = 3
[pid  5339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5339] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5339] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5339] close(3)                    = 0
[pid  5339] mkdir("./file0", 0777)      = 0
[  111.198796][ T5339] loop0: detected capacity change from 0 to 4096
[  111.215708][ T5339] NILFS (loop0): invalid segment: Checksum error in segment payload
[  111.223909][ T5339] NILFS (loop0): trying rollback from an earlier position
[  111.237988][ T5339] NILFS (loop0): recovery complete
[pid  5339] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5339] chdir("./file0")            = 0
[pid  5339] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5339] close(4)                    = 0
[pid  5339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5339] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  111.243751][ T5340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5339] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5339] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5339] exit_group(0)               = ?
[pid  5339] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5339, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./135", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./135/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./135/binderfs")                = 0
umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./135/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./135/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./135/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./135/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./135")                          = 0
mkdir("./136", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5341
./strace-static-x86_64: Process 5341 attached
[pid  5341] chdir("./136")              = 0
[pid  5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5341] setpgid(0, 0)               = 0
[pid  5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5341] write(3, "1000", 4)         = 4
[pid  5341] close(3)                    = 0
[pid  5341] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5341] memfd_create("syzkaller", 0) = 3
[pid  5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5341] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5341] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5341] close(3)                    = 0
[pid  5341] mkdir("./file0", 0777)      = 0
[  111.535749][ T5341] loop0: detected capacity change from 0 to 4096
[  111.551812][ T5341] NILFS (loop0): invalid segment: Checksum error in segment payload
[  111.559888][ T5341] NILFS (loop0): trying rollback from an earlier position
[  111.573986][ T5341] NILFS (loop0): recovery complete
[pid  5341] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5341] chdir("./file0")            = 0
[pid  5341] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5341] close(4)                    = 0
[pid  5341] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5341] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  111.580153][ T5342] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5341] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5341] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5341] exit_group(0)               = ?
[pid  5341] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./136", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./136/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./136/binderfs")                = 0
umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./136/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./136/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./136/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./136/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./136")                          = 0
mkdir("./137", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5343 attached
, child_tidptr=0x555555db65d0) = 5343
[pid  5343] chdir("./137")              = 0
[pid  5343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5343] setpgid(0, 0)               = 0
[pid  5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5343] write(3, "1000", 4)         = 4
[pid  5343] close(3)                    = 0
[pid  5343] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5343] memfd_create("syzkaller", 0) = 3
[pid  5343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5343] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5343] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5343] close(3)                    = 0
[pid  5343] mkdir("./file0", 0777)      = 0
[  111.871259][ T5343] loop0: detected capacity change from 0 to 4096
[  111.899861][ T5343] NILFS (loop0): invalid segment: Checksum error in segment payload
[  111.908048][ T5343] NILFS (loop0): trying rollback from an earlier position
[pid  5343] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5343] chdir("./file0")            = 0
[pid  5343] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5343] close(4)                    = 0
[pid  5343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5343] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  111.924834][ T5343] NILFS (loop0): recovery complete
[  111.931048][ T5344] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5343] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5343] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5343] exit_group(0)               = ?
[pid  5343] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5343, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./137", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./137/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./137/binderfs")                = 0
umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./137/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./137/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./137/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./137/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./137")                          = 0
mkdir("./138", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5345
./strace-static-x86_64: Process 5345 attached
[pid  5345] chdir("./138")              = 0
[pid  5345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5345] setpgid(0, 0)               = 0
[pid  5345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5345] write(3, "1000", 4)         = 4
[pid  5345] close(3)                    = 0
[pid  5345] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5345] memfd_create("syzkaller", 0) = 3
[pid  5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5345] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5345] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5345] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5345] close(3)                    = 0
[pid  5345] mkdir("./file0", 0777)      = 0
[  112.215590][ T5345] loop0: detected capacity change from 0 to 4096
[  112.232540][ T5345] NILFS (loop0): invalid segment: Checksum error in segment payload
[  112.240620][ T5345] NILFS (loop0): trying rollback from an earlier position
[  112.255747][ T5345] NILFS (loop0): recovery complete
[pid  5345] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5345] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5345] chdir("./file0")            = 0
[pid  5345] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5345] close(4)                    = 0
[pid  5345] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5345] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  112.261823][ T5346] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5345] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5345] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5345] exit_group(0)               = ?
[pid  5345] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5345, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./138", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./138/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./138/binderfs")                = 0
umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./138/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./138/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./138/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./138/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./138")                          = 0
mkdir("./139", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5347
./strace-static-x86_64: Process 5347 attached
[pid  5347] chdir("./139")              = 0
[pid  5347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5347] setpgid(0, 0)               = 0
[pid  5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5347] write(3, "1000", 4)         = 4
[pid  5347] close(3)                    = 0
[pid  5347] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5347] memfd_create("syzkaller", 0) = 3
[pid  5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5347] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5347] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5347] close(3)                    = 0
[pid  5347] mkdir("./file0", 0777)      = 0
[  112.546936][ T5347] loop0: detected capacity change from 0 to 4096
[  112.562242][ T5347] NILFS (loop0): invalid segment: Checksum error in segment payload
[  112.570444][ T5347] NILFS (loop0): trying rollback from an earlier position
[  112.586249][ T5347] NILFS (loop0): recovery complete
[pid  5347] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5347] chdir("./file0")            = 0
[pid  5347] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5347] close(4)                    = 0
[pid  5347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5347] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  112.592404][ T5348] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5347] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5347] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5347] exit_group(0)               = ?
[pid  5347] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5347, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./139", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./139/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./139/binderfs")                = 0
umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./139/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./139/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./139/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./139/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./139")                          = 0
mkdir("./140", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5349
./strace-static-x86_64: Process 5349 attached
[pid  5349] chdir("./140")              = 0
[pid  5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5349] setpgid(0, 0)               = 0
[pid  5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5349] write(3, "1000", 4)         = 4
[pid  5349] close(3)                    = 0
[pid  5349] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5349] memfd_create("syzkaller", 0) = 3
[pid  5349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5349] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5349] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5349] close(3)                    = 0
[pid  5349] mkdir("./file0", 0777)      = 0
[  112.893759][ T5349] loop0: detected capacity change from 0 to 4096
[  112.909500][ T5349] NILFS (loop0): invalid segment: Checksum error in segment payload
[  112.917676][ T5349] NILFS (loop0): trying rollback from an earlier position
[  112.932034][ T5349] NILFS (loop0): recovery complete
[pid  5349] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5349] chdir("./file0")            = 0
[pid  5349] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5349] close(4)                    = 0
[pid  5349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5349] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  112.938494][ T5350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.958889][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  112.958902][   T27] audit: type=1800 audit(1676306800.718:142): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5349] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5349] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5349] exit_group(0)               = ?
[pid  5349] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5349, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./140", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./140/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./140/binderfs")                = 0
umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./140/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./140/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./140/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./140/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./140")                          = 0
mkdir("./141", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5351
./strace-static-x86_64: Process 5351 attached
[pid  5351] chdir("./141")              = 0
[pid  5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5351] setpgid(0, 0)               = 0
[pid  5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5351] write(3, "1000", 4)         = 4
[pid  5351] close(3)                    = 0
[pid  5351] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5351] memfd_create("syzkaller", 0) = 3
[pid  5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5351] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5351] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5351] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5351] close(3)                    = 0
[pid  5351] mkdir("./file0", 0777)      = 0
[  113.248926][ T5351] loop0: detected capacity change from 0 to 4096
[  113.267530][ T5351] NILFS (loop0): invalid segment: Checksum error in segment payload
[  113.275581][ T5351] NILFS (loop0): trying rollback from an earlier position
[  113.290813][ T5351] NILFS (loop0): recovery complete
[pid  5351] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5351] chdir("./file0")            = 0
[pid  5351] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5351] close(4)                    = 0
[pid  5351] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5351] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  113.296940][ T5352] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.318577][   T27] audit: type=1800 audit(1676306801.078:143): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5351] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5351] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5351] exit_group(0)               = ?
[pid  5351] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./141", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./141/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./141/binderfs")                = 0
umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./141/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./141/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./141/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./141/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./141")                          = 0
mkdir("./142", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5353
./strace-static-x86_64: Process 5353 attached
[pid  5353] chdir("./142")              = 0
[pid  5353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5353] setpgid(0, 0)               = 0
[pid  5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5353] write(3, "1000", 4)         = 4
[pid  5353] close(3)                    = 0
[pid  5353] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5353] memfd_create("syzkaller", 0) = 3
[pid  5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5353] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5353] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5353] close(3)                    = 0
[pid  5353] mkdir("./file0", 0777)      = 0
[pid  5353] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5353] chdir("./file0")            = 0
[pid  5353] ioctl(4, LOOP_CLR_FD)       = 0
[  113.602094][ T5353] loop0: detected capacity change from 0 to 4096
[  113.619103][ T5353] NILFS (loop0): invalid segment: Checksum error in segment payload
[  113.627156][ T5353] NILFS (loop0): trying rollback from an earlier position
[  113.641012][ T5353] NILFS (loop0): recovery complete
[pid  5353] close(4)                    = 0
[pid  5353] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5353] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  113.647120][ T5354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.662253][   T27] audit: type=1800 audit(1676306801.428:144): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5353] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5353] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5353] exit_group(0)               = ?
[pid  5353] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./142", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./142/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./142/binderfs")                = 0
umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./142/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./142/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./142/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./142/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./142")                          = 0
mkdir("./143", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5355
./strace-static-x86_64: Process 5355 attached
[pid  5355] chdir("./143")              = 0
[pid  5355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5355] setpgid(0, 0)               = 0
[pid  5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5355] write(3, "1000", 4)         = 4
[pid  5355] close(3)                    = 0
[pid  5355] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5355] memfd_create("syzkaller", 0) = 3
[pid  5355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5355] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5355] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5355] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5355] close(3)                    = 0
[pid  5355] mkdir("./file0", 0777)      = 0
[pid  5355] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  113.955885][ T5355] loop0: detected capacity change from 0 to 4096
[  113.972773][ T5355] NILFS (loop0): invalid segment: Checksum error in segment payload
[  113.980853][ T5355] NILFS (loop0): trying rollback from an earlier position
[  113.995281][ T5355] NILFS (loop0): recovery complete
[pid  5355] chdir("./file0")            = 0
[pid  5355] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5355] close(4)                    = 0
[pid  5355] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5355] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  114.001142][ T5356] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.018839][   T27] audit: type=1800 audit(1676306801.778:145): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5355] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5355] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5355] exit_group(0)               = ?
[pid  5355] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5355, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./143", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./143/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./143/binderfs")                = 0
umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./143/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./143/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./143/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./143/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./143")                          = 0
mkdir("./144", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5357
./strace-static-x86_64: Process 5357 attached
[pid  5357] chdir("./144")              = 0
[pid  5357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5357] setpgid(0, 0)               = 0
[pid  5357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5357] write(3, "1000", 4)         = 4
[pid  5357] close(3)                    = 0
[pid  5357] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5357] memfd_create("syzkaller", 0) = 3
[pid  5357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5357] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5357] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5357] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5357] close(3)                    = 0
[pid  5357] mkdir("./file0", 0777)      = 0
[  114.330282][ T5357] loop0: detected capacity change from 0 to 4096
[  114.347638][ T5357] NILFS (loop0): invalid segment: Checksum error in segment payload
[  114.355706][ T5357] NILFS (loop0): trying rollback from an earlier position
[  114.369949][ T5357] NILFS (loop0): recovery complete
[pid  5357] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5357] chdir("./file0")            = 0
[pid  5357] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5357] close(4)                    = 0
[pid  5357] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5357] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  114.375830][ T5358] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.393032][   T27] audit: type=1800 audit(1676306802.148:146): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5357] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5357] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5357] exit_group(0)               = ?
[pid  5357] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5357, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./144", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./144/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./144/binderfs")                = 0
umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./144/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./144/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./144/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./144/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./144")                          = 0
mkdir("./145", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5359 attached
 <unfinished ...>
[pid  5359] chdir("./145")              = 0
[pid  5359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5359] setpgid(0, 0)               = 0
[pid  5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5359] write(3, "1000", 4)         = 4
[pid  5359] close(3)                    = 0
[pid  5359] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5359] memfd_create("syzkaller", 0) = 3
[pid  5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5359
[pid  5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5359] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5359] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5359] close(3)                    = 0
[pid  5359] mkdir("./file0", 0777)      = 0
[  114.699787][ T5359] loop0: detected capacity change from 0 to 4096
[  114.720170][ T5359] NILFS (loop0): invalid segment: Checksum error in segment payload
[  114.728279][ T5359] NILFS (loop0): trying rollback from an earlier position
[  114.742853][ T5359] NILFS (loop0): recovery complete
[pid  5359] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5359] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5359] chdir("./file0")            = 0
[pid  5359] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5359] close(4)                    = 0
[pid  5359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5359] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  114.748924][ T5360] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.780060][   T27] audit: type=1800 audit(1676306802.538:147): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5359] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5359] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5359] exit_group(0)               = ?
[pid  5359] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5359, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./145", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./145/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./145/binderfs")                = 0
umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./145/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./145/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./145/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./145/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./145")                          = 0
mkdir("./146", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5361
./strace-static-x86_64: Process 5361 attached
[pid  5361] chdir("./146")              = 0
[pid  5361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5361] setpgid(0, 0)               = 0
[pid  5361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5361] write(3, "1000", 4)         = 4
[pid  5361] close(3)                    = 0
[pid  5361] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5361] memfd_create("syzkaller", 0) = 3
[pid  5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5361] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5361] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5361] close(3)                    = 0
[pid  5361] mkdir("./file0", 0777)      = 0
[  115.058462][ T5361] loop0: detected capacity change from 0 to 4096
[  115.073129][ T5361] NILFS (loop0): invalid segment: Checksum error in segment payload
[  115.081358][ T5361] NILFS (loop0): trying rollback from an earlier position
[  115.096375][ T5361] NILFS (loop0): recovery complete
[pid  5361] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5361] chdir("./file0")            = 0
[pid  5361] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5361] close(4)                    = 0
[pid  5361] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5361] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  115.102370][ T5362] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.111770][   T27] audit: type=1800 audit(1676306802.868:148): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5361] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5361] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5361] exit_group(0)               = ?
[pid  5361] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5361, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./146", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./146/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./146/binderfs")                = 0
umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./146/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./146/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./146/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./146/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./146")                          = 0
mkdir("./147", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5363
./strace-static-x86_64: Process 5363 attached
[pid  5363] chdir("./147")              = 0
[pid  5363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5363] setpgid(0, 0)               = 0
[pid  5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5363] write(3, "1000", 4)         = 4
[pid  5363] close(3)                    = 0
[pid  5363] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5363] memfd_create("syzkaller", 0) = 3
[pid  5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5363] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5363] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5363] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5363] close(3)                    = 0
[pid  5363] mkdir("./file0", 0777)      = 0
[  115.384469][ T5363] loop0: detected capacity change from 0 to 4096
[  115.403314][ T5363] NILFS (loop0): invalid segment: Checksum error in segment payload
[  115.411413][ T5363] NILFS (loop0): trying rollback from an earlier position
[  115.425907][ T5363] NILFS (loop0): recovery complete
[pid  5363] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5363] chdir("./file0")            = 0
[pid  5363] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5363] close(4)                    = 0
[pid  5363] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5363] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  115.432389][ T5364] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.448413][   T27] audit: type=1800 audit(1676306803.208:149): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5363] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5363] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5363] exit_group(0)               = ?
[pid  5363] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./147", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./147/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./147/binderfs")                = 0
umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./147/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./147/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./147/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./147/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./147")                          = 0
mkdir("./148", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5365 attached
 <unfinished ...>
[pid  5365] chdir("./148")              = 0
[pid  5365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5365] setpgid(0, 0)               = 0
[pid  5365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5365] write(3, "1000", 4)         = 4
[pid  5365] close(3)                    = 0
[pid  5365] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5365
[pid  5365] memfd_create("syzkaller", 0) = 3
[pid  5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5365] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5365] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5365] close(3)                    = 0
[pid  5365] mkdir("./file0", 0777)      = 0
[  115.740330][ T5365] loop0: detected capacity change from 0 to 4096
[  115.759664][ T5365] NILFS (loop0): invalid segment: Checksum error in segment payload
[  115.767770][ T5365] NILFS (loop0): trying rollback from an earlier position
[  115.784229][ T5365] NILFS (loop0): recovery complete
[pid  5365] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5365] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5365] chdir("./file0")            = 0
[pid  5365] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5365] close(4)                    = 0
[pid  5365] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5365] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  115.790854][ T5366] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.806233][   T27] audit: type=1800 audit(1676306803.548:150): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5365] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5365] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5365] exit_group(0)               = ?
[pid  5365] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5365, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./148", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./148/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./148/binderfs")                = 0
umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./148/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./148/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./148/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./148/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./148")                          = 0
mkdir("./149", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5367
./strace-static-x86_64: Process 5367 attached
[pid  5367] chdir("./149")              = 0
[pid  5367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5367] setpgid(0, 0)               = 0
[pid  5367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5367] write(3, "1000", 4)         = 4
[pid  5367] close(3)                    = 0
[pid  5367] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5367] memfd_create("syzkaller", 0) = 3
[pid  5367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5367] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5367] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5367] close(3)                    = 0
[pid  5367] mkdir("./file0", 0777)      = 0
[  116.102265][ T5367] loop0: detected capacity change from 0 to 4096
[  116.127487][ T5367] NILFS (loop0): invalid segment: Checksum error in segment payload
[  116.135523][ T5367] NILFS (loop0): trying rollback from an earlier position
[pid  5367] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5367] chdir("./file0")            = 0
[pid  5367] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5367] close(4)                    = 0
[pid  5367] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5367] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  116.149502][ T5367] NILFS (loop0): recovery complete
[  116.155400][ T5368] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.176279][   T27] audit: type=1800 audit(1676306803.908:151): pid=5367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5367] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5367] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5367] exit_group(0)               = ?
[pid  5367] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5367, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./149/binderfs")                = 0
umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./149/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./149/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./149/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./149/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./149")                          = 0
mkdir("./150", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5369
./strace-static-x86_64: Process 5369 attached
[pid  5369] chdir("./150")              = 0
[pid  5369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5369] setpgid(0, 0)               = 0
[pid  5369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5369] write(3, "1000", 4)         = 4
[pid  5369] close(3)                    = 0
[pid  5369] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5369] memfd_create("syzkaller", 0) = 3
[pid  5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5369] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5369] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5369] close(3)                    = 0
[pid  5369] mkdir("./file0", 0777)      = 0
[pid  5369] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5369] chdir("./file0")            = 0
[pid  5369] ioctl(4, LOOP_CLR_FD)       = 0
[  116.436705][ T5369] loop0: detected capacity change from 0 to 4096
[  116.452683][ T5369] NILFS (loop0): invalid segment: Checksum error in segment payload
[  116.461075][ T5369] NILFS (loop0): trying rollback from an earlier position
[  116.476595][ T5369] NILFS (loop0): recovery complete
[pid  5369] close(4)                    = 0
[pid  5369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5369] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  116.482578][ T5370] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5369] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5369] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5369] exit_group(0)               = ?
[pid  5369] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5369, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./150/binderfs")                = 0
umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./150/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./150/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./150/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./150/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./150")                          = 0
mkdir("./151", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5371
./strace-static-x86_64: Process 5371 attached
[pid  5371] chdir("./151")              = 0
[pid  5371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5371] setpgid(0, 0)               = 0
[pid  5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5371] write(3, "1000", 4)         = 4
[pid  5371] close(3)                    = 0
[pid  5371] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5371] memfd_create("syzkaller", 0) = 3
[pid  5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5371] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5371] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5371] close(3)                    = 0
[pid  5371] mkdir("./file0", 0777)      = 0
[pid  5371] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  116.760236][ T5371] loop0: detected capacity change from 0 to 4096
[  116.775905][ T5371] NILFS (loop0): invalid segment: Checksum error in segment payload
[  116.784217][ T5371] NILFS (loop0): trying rollback from an earlier position
[  116.798138][ T5371] NILFS (loop0): recovery complete
[pid  5371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5371] chdir("./file0")            = 0
[pid  5371] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5371] close(4)                    = 0
[pid  5371] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5371] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  116.804310][ T5372] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5371] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5371] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5371] exit_group(0)               = ?
[pid  5371] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./151/binderfs")                = 0
umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./151/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./151/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./151/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./151/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./151")                          = 0
mkdir("./152", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5373
./strace-static-x86_64: Process 5373 attached
[pid  5373] chdir("./152")              = 0
[pid  5373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5373] setpgid(0, 0)               = 0
[pid  5373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5373] write(3, "1000", 4)         = 4
[pid  5373] close(3)                    = 0
[pid  5373] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5373] memfd_create("syzkaller", 0) = 3
[pid  5373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5373] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5373] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5373] close(3)                    = 0
[pid  5373] mkdir("./file0", 0777)      = 0
[  117.089938][ T5373] loop0: detected capacity change from 0 to 4096
[  117.115734][ T5373] NILFS (loop0): invalid segment: Checksum error in segment payload
[  117.123835][ T5373] NILFS (loop0): trying rollback from an earlier position
[pid  5373] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5373] chdir("./file0")            = 0
[pid  5373] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5373] close(4)                    = 0
[pid  5373] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5373] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  117.139907][ T5373] NILFS (loop0): recovery complete
[  117.145950][ T5374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5373] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5373] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5373] exit_group(0)               = ?
[pid  5373] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5373, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./152/binderfs")                = 0
umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./152/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./152/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./152/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./152/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./152")                          = 0
mkdir("./153", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5375
./strace-static-x86_64: Process 5375 attached
[pid  5375] chdir("./153")              = 0
[pid  5375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5375] setpgid(0, 0)               = 0
[pid  5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5375] write(3, "1000", 4)         = 4
[pid  5375] close(3)                    = 0
[pid  5375] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5375] memfd_create("syzkaller", 0) = 3
[pid  5375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5375] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5375] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5375] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5375] close(3)                    = 0
[pid  5375] mkdir("./file0", 0777)      = 0
[  117.425791][ T5375] loop0: detected capacity change from 0 to 4096
[  117.442813][ T5375] NILFS (loop0): invalid segment: Checksum error in segment payload
[  117.450893][ T5375] NILFS (loop0): trying rollback from an earlier position
[  117.464091][ T5375] NILFS (loop0): recovery complete
[pid  5375] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5375] chdir("./file0")            = 0
[pid  5375] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5375] close(4)                    = 0
[pid  5375] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5375] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  117.470323][ T5376] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5375] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5375] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5375] exit_group(0)               = ?
[pid  5375] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./153/binderfs")                = 0
umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./153/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./153/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./153/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./153/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./153")                          = 0
mkdir("./154", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5377
./strace-static-x86_64: Process 5377 attached
[pid  5377] chdir("./154")              = 0
[pid  5377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5377] setpgid(0, 0)               = 0
[pid  5377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5377] write(3, "1000", 4)         = 4
[pid  5377] close(3)                    = 0
[pid  5377] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5377] memfd_create("syzkaller", 0) = 3
[pid  5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5377] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5377] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5377] close(3)                    = 0
[pid  5377] mkdir("./file0", 0777)      = 0
[  117.761508][ T5377] loop0: detected capacity change from 0 to 4096
[  117.778619][ T5377] NILFS (loop0): invalid segment: Checksum error in segment payload
[  117.786642][ T5377] NILFS (loop0): trying rollback from an earlier position
[  117.801208][ T5377] NILFS (loop0): recovery complete
[pid  5377] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5377] chdir("./file0")            = 0
[pid  5377] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5377] close(4)                    = 0
[pid  5377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5377] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  117.807109][ T5378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5377] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5377] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5377] exit_group(0)               = ?
[pid  5377] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5377, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./154/binderfs")                = 0
umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./154/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./154/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./154/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./154/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./154")                          = 0
mkdir("./155", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5379 attached
 <unfinished ...>
[pid  5379] chdir("./155")              = 0
[pid  5379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5379] setpgid(0, 0)               = 0
[pid  5379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5379] write(3, "1000", 4)         = 4
[pid  5379] close(3)                    = 0
[pid  5379] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5379] memfd_create("syzkaller", 0) = 3
[pid  5379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5379
[pid  5379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5379] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5379] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5379] close(3)                    = 0
[pid  5379] mkdir("./file0", 0777)      = 0
[  118.126383][ T5379] loop0: detected capacity change from 0 to 4096
[  118.142537][ T5379] NILFS (loop0): invalid segment: Checksum error in segment payload
[  118.150604][ T5379] NILFS (loop0): trying rollback from an earlier position
[  118.163541][ T5379] NILFS (loop0): recovery complete
[pid  5379] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5379] chdir("./file0")            = 0
[pid  5379] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5379] close(4)                    = 0
[pid  5379] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[  118.169381][ T5380] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5379] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  118.207530][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  118.207542][   T27] audit: type=1800 audit(1676306805.968:157): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5379] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5379] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5379] exit_group(0)               = ?
[pid  5379] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5379, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./155/binderfs")                = 0
umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./155/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./155/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./155/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./155/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./155")                          = 0
mkdir("./156", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5381
./strace-static-x86_64: Process 5381 attached
[pid  5381] chdir("./156")              = 0
[pid  5381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5381] setpgid(0, 0)               = 0
[pid  5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5381] write(3, "1000", 4)         = 4
[pid  5381] close(3)                    = 0
[pid  5381] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5381] memfd_create("syzkaller", 0) = 3
[pid  5381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5381] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5381] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5381] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5381] close(3)                    = 0
[pid  5381] mkdir("./file0", 0777)      = 0
[  118.486016][ T5381] loop0: detected capacity change from 0 to 4096
[  118.503342][ T5381] NILFS (loop0): invalid segment: Checksum error in segment payload
[  118.511429][ T5381] NILFS (loop0): trying rollback from an earlier position
[  118.525839][ T5381] NILFS (loop0): recovery complete
[pid  5381] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5381] chdir("./file0")            = 0
[pid  5381] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5381] close(4)                    = 0
[pid  5381] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5381] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  118.532293][ T5382] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.566223][   T27] audit: type=1800 audit(1676306806.318:158): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5381] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5381] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5381] exit_group(0)               = ?
[pid  5381] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5381, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./156/binderfs")                = 0
umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./156/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./156/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./156/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./156/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./156")                          = 0
mkdir("./157", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5383
./strace-static-x86_64: Process 5383 attached
[pid  5383] chdir("./157")              = 0
[pid  5383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5383] setpgid(0, 0)               = 0
[pid  5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5383] write(3, "1000", 4)         = 4
[pid  5383] close(3)                    = 0
[pid  5383] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5383] memfd_create("syzkaller", 0) = 3
[pid  5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5383] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5383] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5383] close(3)                    = 0
[pid  5383] mkdir("./file0", 0777)      = 0
[  118.839202][ T5383] loop0: detected capacity change from 0 to 4096
[  118.854636][ T5383] NILFS (loop0): invalid segment: Checksum error in segment payload
[  118.862761][ T5383] NILFS (loop0): trying rollback from an earlier position
[  118.876412][ T5383] NILFS (loop0): recovery complete
[pid  5383] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5383] chdir("./file0")            = 0
[pid  5383] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5383] close(4)                    = 0
[pid  5383] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5383] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  118.882218][ T5384] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.906375][   T27] audit: type=1800 audit(1676306806.648:159): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5383] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5383] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5383] exit_group(0)               = ?
[pid  5383] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5383, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./157/binderfs")                = 0
umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./157/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./157/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./157/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./157/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./157")                          = 0
mkdir("./158", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5385
./strace-static-x86_64: Process 5385 attached
[pid  5385] chdir("./158")              = 0
[pid  5385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5385] setpgid(0, 0)               = 0
[pid  5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5385] write(3, "1000", 4)         = 4
[pid  5385] close(3)                    = 0
[pid  5385] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5385] memfd_create("syzkaller", 0) = 3
[pid  5385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5385] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5385] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5385] close(3)                    = 0
[pid  5385] mkdir("./file0", 0777)      = 0
[  119.163674][ T5385] loop0: detected capacity change from 0 to 4096
[  119.182922][ T5385] NILFS (loop0): invalid segment: Checksum error in segment payload
[  119.191055][ T5385] NILFS (loop0): trying rollback from an earlier position
[  119.205742][ T5385] NILFS (loop0): recovery complete
[pid  5385] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5385] chdir("./file0")            = 0
[pid  5385] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5385] close(4)                    = 0
[pid  5385] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5385] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  119.212036][ T5386] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.229563][   T27] audit: type=1800 audit(1676306806.988:160): pid=5385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5385] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5385] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5385] exit_group(0)               = ?
[pid  5385] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./158/binderfs")                = 0
umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./158/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./158/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./158/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./158/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./158")                          = 0
mkdir("./159", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5387
./strace-static-x86_64: Process 5387 attached
[pid  5387] chdir("./159")              = 0
[pid  5387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5387] setpgid(0, 0)               = 0
[pid  5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5387] write(3, "1000", 4)         = 4
[pid  5387] close(3)                    = 0
[pid  5387] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5387] memfd_create("syzkaller", 0) = 3
[pid  5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5387] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5387] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5387] close(3)                    = 0
[pid  5387] mkdir("./file0", 0777)      = 0
[  119.517037][ T5387] loop0: detected capacity change from 0 to 4096
[  119.532762][ T5387] NILFS (loop0): invalid segment: Checksum error in segment payload
[  119.540919][ T5387] NILFS (loop0): trying rollback from an earlier position
[  119.555157][ T5387] NILFS (loop0): recovery complete
[pid  5387] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5387] chdir("./file0")            = 0
[pid  5387] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5387] close(4)                    = 0
[  119.561271][ T5388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5387] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  119.588697][   T27] audit: type=1800 audit(1676306807.348:161): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5387] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5387] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5387] exit_group(0)               = ?
[pid  5387] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5387, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./159/binderfs")                = 0
umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./159/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./159/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./159/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./159/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./159")                          = 0
mkdir("./160", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5389
./strace-static-x86_64: Process 5389 attached
[pid  5389] chdir("./160")              = 0
[pid  5389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5389] setpgid(0, 0)               = 0
[pid  5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5389] write(3, "1000", 4)         = 4
[pid  5389] close(3)                    = 0
[pid  5389] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5389] memfd_create("syzkaller", 0) = 3
[pid  5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5389] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5389] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5389] close(3)                    = 0
[pid  5389] mkdir("./file0", 0777)      = 0
[  119.884542][ T5389] loop0: detected capacity change from 0 to 4096
[  119.901436][ T5389] NILFS (loop0): invalid segment: Checksum error in segment payload
[  119.909567][ T5389] NILFS (loop0): trying rollback from an earlier position
[  119.923744][ T5389] NILFS (loop0): recovery complete
[pid  5389] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5389] chdir("./file0")            = 0
[pid  5389] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5389] close(4)                    = 0
[pid  5389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5389] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  119.930252][ T5390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.947867][   T27] audit: type=1800 audit(1676306807.708:162): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5389] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5389] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5389] exit_group(0)               = ?
[pid  5389] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5389, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./160/binderfs")                = 0
umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./160/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./160/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./160/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./160/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./160")                          = 0
mkdir("./161", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5391
./strace-static-x86_64: Process 5391 attached
[pid  5391] chdir("./161")              = 0
[pid  5391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5391] setpgid(0, 0)               = 0
[pid  5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5391] write(3, "1000", 4)         = 4
[pid  5391] close(3)                    = 0
[pid  5391] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5391] memfd_create("syzkaller", 0) = 3
[pid  5391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5391] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5391] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5391] close(3)                    = 0
[pid  5391] mkdir("./file0", 0777)      = 0
[  120.249086][ T5391] loop0: detected capacity change from 0 to 4096
[  120.264921][ T5391] NILFS (loop0): invalid segment: Checksum error in segment payload
[  120.272984][ T5391] NILFS (loop0): trying rollback from an earlier position
[  120.286663][ T5391] NILFS (loop0): recovery complete
[pid  5391] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5391] chdir("./file0")            = 0
[pid  5391] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5391] close(4)                    = 0
[pid  5391] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5391] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  120.292351][ T5392] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.308316][   T27] audit: type=1800 audit(1676306808.068:163): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5391] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5391] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5391] exit_group(0)               = ?
[pid  5391] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5391, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./161/binderfs")                = 0
umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./161/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./161/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./161/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./161/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./161")                          = 0
mkdir("./162", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5393
./strace-static-x86_64: Process 5393 attached
[pid  5393] chdir("./162")              = 0
[pid  5393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5393] setpgid(0, 0)               = 0
[pid  5393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5393] write(3, "1000", 4)         = 4
[pid  5393] close(3)                    = 0
[pid  5393] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5393] memfd_create("syzkaller", 0) = 3
[pid  5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5393] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5393] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5393] close(3)                    = 0
[pid  5393] mkdir("./file0", 0777)      = 0
[  120.600993][ T5393] loop0: detected capacity change from 0 to 4096
[  120.618873][ T5393] NILFS (loop0): invalid segment: Checksum error in segment payload
[  120.626977][ T5393] NILFS (loop0): trying rollback from an earlier position
[  120.640378][ T5393] NILFS (loop0): recovery complete
[pid  5393] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5393] chdir("./file0")            = 0
[pid  5393] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5393] close(4)                    = 0
[pid  5393] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5393] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  120.646982][ T5394] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.676213][   T27] audit: type=1800 audit(1676306808.428:164): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5393] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5393] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5393] exit_group(0)               = ?
[pid  5393] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5393, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./162/binderfs")                = 0
umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./162/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./162/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./162/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./162/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./162")                          = 0
mkdir("./163", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5395
./strace-static-x86_64: Process 5395 attached
[pid  5395] chdir("./163")              = 0
[pid  5395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5395] setpgid(0, 0)               = 0
[pid  5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5395] write(3, "1000", 4)         = 4
[pid  5395] close(3)                    = 0
[pid  5395] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5395] memfd_create("syzkaller", 0) = 3
[pid  5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5395] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5395] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5395] close(3)                    = 0
[pid  5395] mkdir("./file0", 0777)      = 0
[pid  5395] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5395] chdir("./file0")            = 0
[  120.939685][ T5395] loop0: detected capacity change from 0 to 4096
[  120.955036][ T5395] NILFS (loop0): invalid segment: Checksum error in segment payload
[  120.963107][ T5395] NILFS (loop0): trying rollback from an earlier position
[  120.977123][ T5395] NILFS (loop0): recovery complete
[pid  5395] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5395] close(4)                    = 0
[pid  5395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5395] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  120.983093][ T5396] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.993127][   T27] audit: type=1800 audit(1676306808.748:165): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5395] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5395] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5395] exit_group(0)               = ?
[pid  5395] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5395, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./163/binderfs")                = 0
umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./163/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./163/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./163/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./163/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./163")                          = 0
mkdir("./164", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5397
./strace-static-x86_64: Process 5397 attached
[pid  5397] chdir("./164")              = 0
[pid  5397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5397] setpgid(0, 0)               = 0
[pid  5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5397] write(3, "1000", 4)         = 4
[pid  5397] close(3)                    = 0
[pid  5397] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5397] memfd_create("syzkaller", 0) = 3
[pid  5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5397] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5397] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5397] close(3)                    = 0
[pid  5397] mkdir("./file0", 0777)      = 0
[  121.302292][ T5397] loop0: detected capacity change from 0 to 4096
[  121.319674][ T5397] NILFS (loop0): invalid segment: Checksum error in segment payload
[  121.327739][ T5397] NILFS (loop0): trying rollback from an earlier position
[  121.340741][ T5397] NILFS (loop0): recovery complete
[pid  5397] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5397] chdir("./file0")            = 0
[pid  5397] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5397] close(4)                    = 0
[pid  5397] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5397] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  121.346614][ T5398] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.362310][   T27] audit: type=1800 audit(1676306809.118:166): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5397] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5397] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5397] exit_group(0)               = ?
[pid  5397] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5397, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./164/binderfs")                = 0
umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./164/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./164/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./164/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./164/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./164")                          = 0
mkdir("./165", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5399
./strace-static-x86_64: Process 5399 attached
[pid  5399] chdir("./165")              = 0
[pid  5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5399] setpgid(0, 0)               = 0
[pid  5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5399] write(3, "1000", 4)         = 4
[pid  5399] close(3)                    = 0
[pid  5399] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5399] memfd_create("syzkaller", 0) = 3
[pid  5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5399] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5399] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5399] close(3)                    = 0
[pid  5399] mkdir("./file0", 0777)      = 0
[  121.650654][ T5399] loop0: detected capacity change from 0 to 4096
[  121.668067][ T5399] NILFS (loop0): invalid segment: Checksum error in segment payload
[  121.676125][ T5399] NILFS (loop0): trying rollback from an earlier position
[  121.691340][ T5399] NILFS (loop0): recovery complete
[pid  5399] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5399] chdir("./file0")            = 0
[pid  5399] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5399] close(4)                    = 0
[pid  5399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5399] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  121.697597][ T5400] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5399] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5399] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5399] exit_group(0)               = ?
[pid  5399] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5399, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./165/binderfs")                = 0
umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./165/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./165/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./165/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./165/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./165")                          = 0
mkdir("./166", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5401
./strace-static-x86_64: Process 5401 attached
[pid  5401] chdir("./166")              = 0
[pid  5401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5401] setpgid(0, 0)               = 0
[pid  5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5401] write(3, "1000", 4)         = 4
[pid  5401] close(3)                    = 0
[pid  5401] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5401] memfd_create("syzkaller", 0) = 3
[pid  5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5401] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5401] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5401] close(3)                    = 0
[pid  5401] mkdir("./file0", 0777)      = 0
[  122.012779][ T5401] loop0: detected capacity change from 0 to 4096
[  122.029839][ T5401] NILFS (loop0): invalid segment: Checksum error in segment payload
[  122.037914][ T5401] NILFS (loop0): trying rollback from an earlier position
[  122.052028][ T5401] NILFS (loop0): recovery complete
[pid  5401] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5401] chdir("./file0")            = 0
[pid  5401] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5401] close(4)                    = 0
[pid  5401] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5401] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  122.058117][ T5402] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5401] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5401] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5401] exit_group(0)               = ?
[pid  5401] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./166/binderfs")                = 0
umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./166/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./166/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./166/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./166/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./166")                          = 0
mkdir("./167", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5403
./strace-static-x86_64: Process 5403 attached
[pid  5403] chdir("./167")              = 0
[pid  5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5403] setpgid(0, 0)               = 0
[pid  5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5403] write(3, "1000", 4)         = 4
[pid  5403] close(3)                    = 0
[pid  5403] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5403] memfd_create("syzkaller", 0) = 3
[pid  5403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5403] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5403] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5403] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5403] close(3)                    = 0
[pid  5403] mkdir("./file0", 0777)      = 0
[  122.372517][ T5403] loop0: detected capacity change from 0 to 4096
[  122.392068][ T5403] NILFS (loop0): invalid segment: Checksum error in segment payload
[  122.400159][ T5403] NILFS (loop0): trying rollback from an earlier position
[  122.414169][ T5403] NILFS (loop0): recovery complete
[pid  5403] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5403] chdir("./file0")            = 0
[pid  5403] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5403] close(4)                    = 0
[pid  5403] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5403] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  122.420444][ T5404] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5403] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5403] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5403] exit_group(0)               = ?
[pid  5403] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./167/binderfs")                = 0
umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./167/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./167/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./167/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./167/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./167")                          = 0
mkdir("./168", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5405 attached
, child_tidptr=0x555555db65d0) = 5405
[pid  5405] chdir("./168")              = 0
[pid  5405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5405] setpgid(0, 0)               = 0
[pid  5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5405] write(3, "1000", 4)         = 4
[pid  5405] close(3)                    = 0
[pid  5405] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5405] memfd_create("syzkaller", 0) = 3
[pid  5405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5405] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5405] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5405] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5405] close(3)                    = 0
[pid  5405] mkdir("./file0", 0777)      = 0
[  122.704721][ T5405] loop0: detected capacity change from 0 to 4096
[  122.721003][ T5405] NILFS (loop0): invalid segment: Checksum error in segment payload
[  122.729043][ T5405] NILFS (loop0): trying rollback from an earlier position
[  122.742432][ T5405] NILFS (loop0): recovery complete
[pid  5405] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5405] chdir("./file0")            = 0
[pid  5405] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5405] close(4)                    = 0
[pid  5405] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5405] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  122.748674][ T5406] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5405] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5405] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5405] exit_group(0)               = ?
[pid  5405] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./168/binderfs")                = 0
umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./168/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./168/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./168/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./168/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./168")                          = 0
mkdir("./169", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5407
./strace-static-x86_64: Process 5407 attached
[pid  5407] chdir("./169")              = 0
[pid  5407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5407] setpgid(0, 0)               = 0
[pid  5407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5407] write(3, "1000", 4)         = 4
[pid  5407] close(3)                    = 0
[pid  5407] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5407] memfd_create("syzkaller", 0) = 3
[pid  5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5407] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5407] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5407] close(3)                    = 0
[pid  5407] mkdir("./file0", 0777)      = 0
[  123.050936][ T5407] loop0: detected capacity change from 0 to 4096
[  123.066929][ T5407] NILFS (loop0): invalid segment: Checksum error in segment payload
[  123.074928][ T5407] NILFS (loop0): trying rollback from an earlier position
[  123.088643][ T5407] NILFS (loop0): recovery complete
[pid  5407] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5407] chdir("./file0")            = 0
[pid  5407] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5407] close(4)                    = 0
[pid  5407] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5407] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  123.094441][ T5408] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5407] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5407] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5407] exit_group(0)               = ?
[pid  5407] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5407, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./169/binderfs")                = 0
umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./169/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./169/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./169/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./169/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./169")                          = 0
mkdir("./170", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5409
./strace-static-x86_64: Process 5409 attached
[pid  5409] chdir("./170")              = 0
[pid  5409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5409] setpgid(0, 0)               = 0
[pid  5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5409] write(3, "1000", 4)         = 4
[pid  5409] close(3)                    = 0
[pid  5409] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5409] memfd_create("syzkaller", 0) = 3
[pid  5409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5409] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5409] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5409] close(3)                    = 0
[pid  5409] mkdir("./file0", 0777)      = 0
[pid  5409] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  123.377120][ T5409] loop0: detected capacity change from 0 to 4096
[  123.392088][ T5409] NILFS (loop0): invalid segment: Checksum error in segment payload
[  123.400227][ T5409] NILFS (loop0): trying rollback from an earlier position
[  123.414243][ T5409] NILFS (loop0): recovery complete
[pid  5409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5409] chdir("./file0")            = 0
[pid  5409] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5409] close(4)                    = 0
[pid  5409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5409] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  123.421130][ T5410] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.434986][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  123.434997][   T27] audit: type=1800 audit(1676306811.198:172): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5409] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5409] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5409] exit_group(0)               = ?
[pid  5409] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./170/binderfs")                = 0
umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./170/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./170/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./170/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./170/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./170")                          = 0
mkdir("./171", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5411
./strace-static-x86_64: Process 5411 attached
[pid  5411] chdir("./171")              = 0
[pid  5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5411] setpgid(0, 0)               = 0
[pid  5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5411] write(3, "1000", 4)         = 4
[pid  5411] close(3)                    = 0
[pid  5411] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5411] memfd_create("syzkaller", 0) = 3
[pid  5411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5411] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5411] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5411] close(3)                    = 0
[pid  5411] mkdir("./file0", 0777)      = 0
[pid  5411] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  123.725967][ T5411] loop0: detected capacity change from 0 to 4096
[  123.742338][ T5411] NILFS (loop0): invalid segment: Checksum error in segment payload
[  123.750483][ T5411] NILFS (loop0): trying rollback from an earlier position
[  123.764443][ T5411] NILFS (loop0): recovery complete
[pid  5411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5411] chdir("./file0")            = 0
[pid  5411] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5411] close(4)                    = 0
[pid  5411] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5411] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  123.770850][ T5412] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.786981][   T27] audit: type=1800 audit(1676306811.548:173): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5411] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5411] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5411] exit_group(0)               = ?
[pid  5411] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./171/binderfs")                = 0
umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./171/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./171/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./171/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./171/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./171")                          = 0
mkdir("./172", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5413
./strace-static-x86_64: Process 5413 attached
[pid  5413] chdir("./172")              = 0
[pid  5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5413] setpgid(0, 0)               = 0
[pid  5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5413] write(3, "1000", 4)         = 4
[pid  5413] close(3)                    = 0
[pid  5413] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5413] memfd_create("syzkaller", 0) = 3
[pid  5413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5413] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5413] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5413] close(3)                    = 0
[pid  5413] mkdir("./file0", 0777)      = 0
[  124.080406][ T5413] loop0: detected capacity change from 0 to 4096
[  124.100779][ T5413] NILFS (loop0): invalid segment: Checksum error in segment payload
[  124.108892][ T5413] NILFS (loop0): trying rollback from an earlier position
[  124.124146][ T5413] NILFS (loop0): recovery complete
[pid  5413] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5413] chdir("./file0")            = 0
[pid  5413] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5413] close(4)                    = 0
[pid  5413] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5413] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  124.130060][ T5414] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.143534][   T27] audit: type=1800 audit(1676306811.908:174): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5413] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5413] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5413] exit_group(0)               = ?
[pid  5413] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./172/binderfs")                = 0
umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./172/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./172/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./172/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./172/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./172")                          = 0
mkdir("./173", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5415
./strace-static-x86_64: Process 5415 attached
[pid  5415] chdir("./173")              = 0
[pid  5415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5415] setpgid(0, 0)               = 0
[pid  5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5415] write(3, "1000", 4)         = 4
[pid  5415] close(3)                    = 0
[pid  5415] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5415] memfd_create("syzkaller", 0) = 3
[pid  5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5415] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5415] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5415] close(3)                    = 0
[pid  5415] mkdir("./file0", 0777)      = 0
[  124.454928][ T5415] loop0: detected capacity change from 0 to 4096
[  124.471546][ T5415] NILFS (loop0): invalid segment: Checksum error in segment payload
[  124.479708][ T5415] NILFS (loop0): trying rollback from an earlier position
[  124.495784][ T5415] NILFS (loop0): recovery complete
[pid  5415] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5415] chdir("./file0")            = 0
[pid  5415] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5415] close(4)                    = 0
[pid  5415] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5415] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  124.502156][ T5416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.515856][   T27] audit: type=1800 audit(1676306812.278:175): pid=5415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5415] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5415] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5415] exit_group(0)               = ?
[pid  5415] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./173/binderfs")                = 0
umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./173/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./173/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./173/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./173/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./173")                          = 0
mkdir("./174", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5417 attached
, child_tidptr=0x555555db65d0) = 5417
[pid  5417] chdir("./174")              = 0
[pid  5417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5417] setpgid(0, 0)               = 0
[pid  5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5417] write(3, "1000", 4)         = 4
[pid  5417] close(3)                    = 0
[pid  5417] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5417] memfd_create("syzkaller", 0) = 3
[pid  5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5417] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5417] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5417] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5417] close(3)                    = 0
[pid  5417] mkdir("./file0", 0777)      = 0
[pid  5417] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5417] chdir("./file0")            = 0
[  124.809031][ T5417] loop0: detected capacity change from 0 to 4096
[  124.824814][ T5417] NILFS (loop0): invalid segment: Checksum error in segment payload
[  124.832875][ T5417] NILFS (loop0): trying rollback from an earlier position
[  124.847102][ T5417] NILFS (loop0): recovery complete
[pid  5417] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5417] close(4)                    = 0
[pid  5417] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5417] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  124.853076][ T5418] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.876208][   T27] audit: type=1800 audit(1676306812.608:176): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5417] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5417] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5417] exit_group(0)               = ?
[pid  5417] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5417, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./174/binderfs")                = 0
umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./174/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./174/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./174/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./174/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./174")                          = 0
mkdir("./175", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5419
./strace-static-x86_64: Process 5419 attached
[pid  5419] chdir("./175")              = 0
[pid  5419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5419] setpgid(0, 0)               = 0
[pid  5419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5419] write(3, "1000", 4)         = 4
[pid  5419] close(3)                    = 0
[pid  5419] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5419] memfd_create("syzkaller", 0) = 3
[pid  5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5419] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5419] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5419] close(3)                    = 0
[pid  5419] mkdir("./file0", 0777)      = 0
[  125.154988][ T5419] loop0: detected capacity change from 0 to 4096
[  125.169580][ T5419] NILFS (loop0): invalid segment: Checksum error in segment payload
[  125.177632][ T5419] NILFS (loop0): trying rollback from an earlier position
[  125.189947][ T5419] NILFS (loop0): recovery complete
[pid  5419] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5419] chdir("./file0")            = 0
[pid  5419] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5419] close(4)                    = 0
[pid  5419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5419] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  125.195781][ T5420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.200584][   T27] audit: type=1800 audit(1676306812.958:177): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5419] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5419] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5419] exit_group(0)               = ?
[pid  5419] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5419, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./175/binderfs")                = 0
umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./175/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./175/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./175/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./175/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./175")                          = 0
mkdir("./176", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5421
./strace-static-x86_64: Process 5421 attached
[pid  5421] chdir("./176")              = 0
[pid  5421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5421] setpgid(0, 0)               = 0
[pid  5421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5421] write(3, "1000", 4)         = 4
[pid  5421] close(3)                    = 0
[pid  5421] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5421] memfd_create("syzkaller", 0) = 3
[pid  5421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5421] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5421] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5421] close(3)                    = 0
[pid  5421] mkdir("./file0", 0777)      = 0
[pid  5421] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5421] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5421] chdir("./file0")            = 0
[pid  5421] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5421] close(4)                    = 0
[  125.495182][ T5421] loop0: detected capacity change from 0 to 4096
[  125.511874][ T5421] NILFS (loop0): invalid segment: Checksum error in segment payload
[  125.519941][ T5421] NILFS (loop0): trying rollback from an earlier position
[  125.533269][ T5421] NILFS (loop0): recovery complete
[pid  5421] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5421] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  125.539420][ T5422] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.551761][   T27] audit: type=1800 audit(1676306813.318:178): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5421] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5421] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5421] exit_group(0)               = ?
[pid  5421] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5421, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./176/binderfs")                = 0
umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./176/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./176/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./176/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./176/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./176")                          = 0
mkdir("./177", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5423
./strace-static-x86_64: Process 5423 attached
[pid  5423] chdir("./177")              = 0
[pid  5423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5423] setpgid(0, 0)               = 0
[pid  5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5423] write(3, "1000", 4)         = 4
[pid  5423] close(3)                    = 0
[pid  5423] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5423] memfd_create("syzkaller", 0) = 3
[pid  5423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5423] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5423] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5423] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5423] close(3)                    = 0
[pid  5423] mkdir("./file0", 0777)      = 0
[  125.821073][ T5423] loop0: detected capacity change from 0 to 4096
[  125.839267][ T5423] NILFS (loop0): invalid segment: Checksum error in segment payload
[  125.847303][ T5423] NILFS (loop0): trying rollback from an earlier position
[  125.863216][ T5423] NILFS (loop0): recovery complete
[pid  5423] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5423] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5423] chdir("./file0")            = 0
[pid  5423] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5423] close(4)                    = 0
[pid  5423] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5423] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  125.869544][ T5424] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.886405][   T27] audit: type=1800 audit(1676306813.648:179): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5423] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5423] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5423] exit_group(0)               = ?
[pid  5423] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5423, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./177/binderfs")                = 0
umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./177/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./177/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./177/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./177/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./177")                          = 0
mkdir("./178", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5425
./strace-static-x86_64: Process 5425 attached
[pid  5425] chdir("./178")              = 0
[pid  5425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5425] setpgid(0, 0)               = 0
[pid  5425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5425] write(3, "1000", 4)         = 4
[pid  5425] close(3)                    = 0
[pid  5425] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5425] memfd_create("syzkaller", 0) = 3
[pid  5425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5425] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5425] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5425] close(3)                    = 0
[pid  5425] mkdir("./file0", 0777)      = 0
[  126.192782][ T5425] loop0: detected capacity change from 0 to 4096
[  126.209411][ T5425] NILFS (loop0): invalid segment: Checksum error in segment payload
[  126.217468][ T5425] NILFS (loop0): trying rollback from an earlier position
[  126.230923][ T5425] NILFS (loop0): recovery complete
[pid  5425] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5425] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5425] chdir("./file0")            = 0
[pid  5425] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5425] close(4)                    = 0
[pid  5425] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5425] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  126.237242][ T5426] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.258425][   T27] audit: type=1800 audit(1676306814.018:180): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5425] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5425] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5425] exit_group(0)               = ?
[pid  5425] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5425, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./178/binderfs")                = 0
umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./178/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./178/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./178/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./178/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./178")                          = 0
mkdir("./179", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5427
./strace-static-x86_64: Process 5427 attached
[pid  5427] chdir("./179")              = 0
[pid  5427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5427] setpgid(0, 0)               = 0
[pid  5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5427] write(3, "1000", 4)         = 4
[pid  5427] close(3)                    = 0
[pid  5427] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5427] memfd_create("syzkaller", 0) = 3
[pid  5427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5427] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5427] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5427] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5427] close(3)                    = 0
[pid  5427] mkdir("./file0", 0777)      = 0
[  126.532908][ T5427] loop0: detected capacity change from 0 to 4096
[  126.551844][ T5427] NILFS (loop0): invalid segment: Checksum error in segment payload
[  126.559957][ T5427] NILFS (loop0): trying rollback from an earlier position
[  126.573570][ T5427] NILFS (loop0): recovery complete
[pid  5427] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5427] chdir("./file0")            = 0
[pid  5427] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5427] close(4)                    = 0
[pid  5427] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5427] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  126.579975][ T5428] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.587552][   T27] audit: type=1800 audit(1676306814.348:181): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5427] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5427] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5427] exit_group(0)               = ?
[pid  5427] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5427, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./179/binderfs")                = 0
umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./179/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./179/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./179/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./179/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./179")                          = 0
mkdir("./180", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5429
./strace-static-x86_64: Process 5429 attached
[pid  5429] chdir("./180")              = 0
[pid  5429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5429] setpgid(0, 0)               = 0
[pid  5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5429] write(3, "1000", 4)         = 4
[pid  5429] close(3)                    = 0
[pid  5429] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5429] memfd_create("syzkaller", 0) = 3
[pid  5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5429] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5429] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5429] close(3)                    = 0
[pid  5429] mkdir("./file0", 0777)      = 0
[  126.864106][ T5429] loop0: detected capacity change from 0 to 4096
[  126.881066][ T5429] NILFS (loop0): invalid segment: Checksum error in segment payload
[  126.889096][ T5429] NILFS (loop0): trying rollback from an earlier position
[  126.902928][ T5429] NILFS (loop0): recovery complete
[pid  5429] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5429] chdir("./file0")            = 0
[pid  5429] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5429] close(4)                    = 0
[pid  5429] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5429] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  126.909736][ T5430] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5429] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5429] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5429] exit_group(0)               = ?
[pid  5429] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5429, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./180/binderfs")                = 0
umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./180/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./180/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./180/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./180/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./180")                          = 0
mkdir("./181", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5431
./strace-static-x86_64: Process 5431 attached
[pid  5431] chdir("./181")              = 0
[pid  5431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5431] setpgid(0, 0)               = 0
[pid  5431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5431] write(3, "1000", 4)         = 4
[pid  5431] close(3)                    = 0
[pid  5431] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5431] memfd_create("syzkaller", 0) = 3
[pid  5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5431] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5431] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5431] close(3)                    = 0
[pid  5431] mkdir("./file0", 0777)      = 0
[  127.202458][ T5431] loop0: detected capacity change from 0 to 4096
[  127.218352][ T5431] NILFS (loop0): invalid segment: Checksum error in segment payload
[  127.226406][ T5431] NILFS (loop0): trying rollback from an earlier position
[  127.239737][ T5431] NILFS (loop0): recovery complete
[pid  5431] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5431] chdir("./file0")            = 0
[pid  5431] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5431] close(4)                    = 0
[pid  5431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5431] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  127.245706][ T5432] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5431] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5431] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5431] exit_group(0)               = ?
[pid  5431] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5431, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./181/binderfs")                = 0
umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./181/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./181/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./181/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./181/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./181")                          = 0
mkdir("./182", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5433
./strace-static-x86_64: Process 5433 attached
[pid  5433] chdir("./182")              = 0
[pid  5433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5433] setpgid(0, 0)               = 0
[pid  5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5433] write(3, "1000", 4)         = 4
[pid  5433] close(3)                    = 0
[pid  5433] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5433] memfd_create("syzkaller", 0) = 3
[pid  5433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5433] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5433] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5433] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5433] close(3)                    = 0
[pid  5433] mkdir("./file0", 0777)      = 0
[  127.534268][ T5433] loop0: detected capacity change from 0 to 4096
[  127.549628][ T5433] NILFS (loop0): invalid segment: Checksum error in segment payload
[  127.557669][ T5433] NILFS (loop0): trying rollback from an earlier position
[  127.571212][ T5433] NILFS (loop0): recovery complete
[pid  5433] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5433] chdir("./file0")            = 0
[pid  5433] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5433] close(4)                    = 0
[pid  5433] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5433] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  127.577652][ T5434] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5433] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5433] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5433] exit_group(0)               = ?
[pid  5433] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5433, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./182/binderfs")                = 0
umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./182/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./182/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./182/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./182/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./182")                          = 0
mkdir("./183", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5435
./strace-static-x86_64: Process 5435 attached
[pid  5435] chdir("./183")              = 0
[pid  5435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5435] setpgid(0, 0)               = 0
[pid  5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5435] write(3, "1000", 4)         = 4
[pid  5435] close(3)                    = 0
[pid  5435] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5435] memfd_create("syzkaller", 0) = 3
[pid  5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5435] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5435] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5435] close(3)                    = 0
[pid  5435] mkdir("./file0", 0777)      = 0
[  127.869029][ T5435] loop0: detected capacity change from 0 to 4096
[  127.894785][ T5435] NILFS (loop0): invalid segment: Checksum error in segment payload
[  127.902829][ T5435] NILFS (loop0): trying rollback from an earlier position
[pid  5435] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5435] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5435] chdir("./file0")            = 0
[pid  5435] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5435] close(4)                    = 0
[pid  5435] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5435] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  127.916874][ T5435] NILFS (loop0): recovery complete
[  127.927057][ T5436] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5435] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5435] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5435] exit_group(0)               = ?
[pid  5435] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5435, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./183/binderfs")                = 0
umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./183/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./183/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./183/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./183/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./183")                          = 0
mkdir("./184", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5437
./strace-static-x86_64: Process 5437 attached
[pid  5437] chdir("./184")              = 0
[pid  5437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5437] setpgid(0, 0)               = 0
[pid  5437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5437] write(3, "1000", 4)         = 4
[pid  5437] close(3)                    = 0
[pid  5437] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5437] memfd_create("syzkaller", 0) = 3
[pid  5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5437] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5437] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5437] close(3)                    = 0
[pid  5437] mkdir("./file0", 0777)      = 0
[  128.229501][ T5437] loop0: detected capacity change from 0 to 4096
[  128.248274][ T5437] NILFS (loop0): invalid segment: Checksum error in segment payload
[  128.256335][ T5437] NILFS (loop0): trying rollback from an earlier position
[  128.270975][ T5437] NILFS (loop0): recovery complete
[pid  5437] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5437] chdir("./file0")            = 0
[pid  5437] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5437] close(4)                    = 0
[pid  5437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5437] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  128.277255][ T5438] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5437] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5437] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5437] exit_group(0)               = ?
[pid  5437] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5437, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./184/binderfs")                = 0
umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./184/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./184/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./184/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./184/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./184")                          = 0
mkdir("./185", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5439
./strace-static-x86_64: Process 5439 attached
[pid  5439] chdir("./185")              = 0
[pid  5439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5439] setpgid(0, 0)               = 0
[pid  5439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5439] write(3, "1000", 4)         = 4
[pid  5439] close(3)                    = 0
[pid  5439] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5439] memfd_create("syzkaller", 0) = 3
[pid  5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5439] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5439] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5439] close(3)                    = 0
[pid  5439] mkdir("./file0", 0777)      = 0
[  128.567288][ T5439] loop0: detected capacity change from 0 to 4096
[  128.584750][ T5439] NILFS (loop0): invalid segment: Checksum error in segment payload
[  128.592802][ T5439] NILFS (loop0): trying rollback from an earlier position
[  128.606896][ T5439] NILFS (loop0): recovery complete
[pid  5439] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5439] chdir("./file0")            = 0
[pid  5439] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5439] close(4)                    = 0
[pid  5439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5439] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  128.613192][ T5440] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.618962][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  128.618973][   T27] audit: type=1800 audit(1676306816.368:187): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5439] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5439] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5439] exit_group(0)               = ?
[pid  5439] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5439, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./185/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./185/binderfs")                = 0
umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./185/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./185/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./185/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./185/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./185")                          = 0
mkdir("./186", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5441
./strace-static-x86_64: Process 5441 attached
[pid  5441] chdir("./186")              = 0
[pid  5441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5441] setpgid(0, 0)               = 0
[pid  5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5441] write(3, "1000", 4)         = 4
[pid  5441] close(3)                    = 0
[pid  5441] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5441] memfd_create("syzkaller", 0) = 3
[pid  5441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5441] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5441] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5441] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5441] close(3)                    = 0
[pid  5441] mkdir("./file0", 0777)      = 0
[  128.904917][ T5441] loop0: detected capacity change from 0 to 4096
[  128.921903][ T5441] NILFS (loop0): invalid segment: Checksum error in segment payload
[  128.929997][ T5441] NILFS (loop0): trying rollback from an earlier position
[  128.943200][ T5441] NILFS (loop0): recovery complete
[pid  5441] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5441] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5441] chdir("./file0")            = 0
[pid  5441] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5441] close(4)                    = 0
[  128.949443][ T5442] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5441] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5441] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  128.977578][   T27] audit: type=1800 audit(1676306816.738:188): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5441] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5441] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5441] exit_group(0)               = ?
[pid  5441] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5441, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./186/binderfs")                = 0
umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./186/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./186/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./186/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./186/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./186")                          = 0
mkdir("./187", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5443
./strace-static-x86_64: Process 5443 attached
[pid  5443] chdir("./187")              = 0
[pid  5443] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5443] setpgid(0, 0)               = 0
[pid  5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5443] write(3, "1000", 4)         = 4
[pid  5443] close(3)                    = 0
[pid  5443] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5443] memfd_create("syzkaller", 0) = 3
[pid  5443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5443] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5443] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5443] close(3)                    = 0
[pid  5443] mkdir("./file0", 0777)      = 0
[  129.273893][ T5443] loop0: detected capacity change from 0 to 4096
[  129.291332][ T5443] NILFS (loop0): invalid segment: Checksum error in segment payload
[  129.299439][ T5443] NILFS (loop0): trying rollback from an earlier position
[  129.312681][ T5443] NILFS (loop0): recovery complete
[pid  5443] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5443] chdir("./file0")            = 0
[pid  5443] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5443] close(4)                    = 0
[pid  5443] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5443] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  129.318849][ T5444] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.335500][   T27] audit: type=1800 audit(1676306817.098:189): pid=5443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5443] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5443] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5443] exit_group(0)               = ?
[pid  5443] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5443, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./187/binderfs")                = 0
umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./187/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./187/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./187/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./187/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./187")                          = 0
mkdir("./188", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5445
./strace-static-x86_64: Process 5445 attached
[pid  5445] chdir("./188")              = 0
[pid  5445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5445] setpgid(0, 0)               = 0
[pid  5445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5445] write(3, "1000", 4)         = 4
[pid  5445] close(3)                    = 0
[pid  5445] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5445] memfd_create("syzkaller", 0) = 3
[pid  5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5445] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5445] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5445] close(3)                    = 0
[pid  5445] mkdir("./file0", 0777)      = 0
[  129.628076][ T5445] loop0: detected capacity change from 0 to 4096
[  129.644838][ T5445] NILFS (loop0): invalid segment: Checksum error in segment payload
[  129.652944][ T5445] NILFS (loop0): trying rollback from an earlier position
[  129.667053][ T5445] NILFS (loop0): recovery complete
[pid  5445] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5445] chdir("./file0")            = 0
[pid  5445] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5445] close(4)                    = 0
[pid  5445] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5445] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  129.672927][ T5446] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.696245][   T27] audit: type=1800 audit(1676306817.448:190): pid=5445 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5445] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5445] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5445] exit_group(0)               = ?
[pid  5445] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5445, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./188/binderfs")                = 0
umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./188/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./188/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./188/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./188/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./188")                          = 0
mkdir("./189", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5447 attached
 <unfinished ...>
[pid  5447] chdir("./189")              = 0
[pid  5447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5447] setpgid(0, 0)               = 0
[pid  5447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5447] write(3, "1000", 4)         = 4
[pid  5447] close(3)                    = 0
[pid  5447] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5447
[pid  5447] memfd_create("syzkaller", 0) = 3
[pid  5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5447] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5447] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5447] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5447] close(3)                    = 0
[pid  5447] mkdir("./file0", 0777)      = 0
[pid  5447] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  129.986533][ T5447] loop0: detected capacity change from 0 to 4096
[  130.002784][ T5447] NILFS (loop0): invalid segment: Checksum error in segment payload
[  130.010886][ T5447] NILFS (loop0): trying rollback from an earlier position
[  130.024218][ T5447] NILFS (loop0): recovery complete
[pid  5447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5447] chdir("./file0")            = 0
[pid  5447] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5447] close(4)                    = 0
[pid  5447] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5447] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  130.030606][ T5448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.043297][   T27] audit: type=1800 audit(1676306817.808:191): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5447] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5447] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5447] exit_group(0)               = ?
[pid  5447] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5447, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./189/binderfs")                = 0
umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./189/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./189/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./189/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./189/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./189")                          = 0
mkdir("./190", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5449
./strace-static-x86_64: Process 5449 attached
[pid  5449] chdir("./190")              = 0
[pid  5449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5449] setpgid(0, 0)               = 0
[pid  5449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5449] write(3, "1000", 4)         = 4
[pid  5449] close(3)                    = 0
[pid  5449] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5449] memfd_create("syzkaller", 0) = 3
[pid  5449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5449] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5449] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5449] close(3)                    = 0
[pid  5449] mkdir("./file0", 0777)      = 0
[  130.313263][ T5449] loop0: detected capacity change from 0 to 4096
[  130.329360][ T5449] NILFS (loop0): invalid segment: Checksum error in segment payload
[  130.337400][ T5449] NILFS (loop0): trying rollback from an earlier position
[  130.350815][ T5449] NILFS (loop0): recovery complete
[pid  5449] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5449] chdir("./file0")            = 0
[pid  5449] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5449] close(4)                    = 0
[pid  5449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5449] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  130.357064][ T5450] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.376249][   T27] audit: type=1800 audit(1676306818.138:192): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5449] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5449] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5449] exit_group(0)               = ?
[pid  5449] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5449, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./190/binderfs")                = 0
umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./190/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./190/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./190/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./190/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./190")                          = 0
mkdir("./191", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5451
./strace-static-x86_64: Process 5451 attached
[pid  5451] chdir("./191")              = 0
[pid  5451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5451] setpgid(0, 0)               = 0
[pid  5451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5451] write(3, "1000", 4)         = 4
[pid  5451] close(3)                    = 0
[pid  5451] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5451] memfd_create("syzkaller", 0) = 3
[pid  5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5451] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5451] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5451] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5451] close(3)                    = 0
[pid  5451] mkdir("./file0", 0777)      = 0
[  130.664162][ T5451] loop0: detected capacity change from 0 to 4096
[  130.680920][ T5451] NILFS (loop0): invalid segment: Checksum error in segment payload
[  130.688968][ T5451] NILFS (loop0): trying rollback from an earlier position
[  130.702327][ T5451] NILFS (loop0): recovery complete
[pid  5451] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5451] chdir("./file0")            = 0
[pid  5451] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5451] close(4)                    = 0
[pid  5451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5451] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  130.708380][ T5452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.723357][   T27] audit: type=1800 audit(1676306818.488:193): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5451] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5451] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5451] exit_group(0)               = ?
[pid  5451] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5451, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./191/binderfs")                = 0
umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./191/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./191/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./191/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./191/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./191")                          = 0
mkdir("./192", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5453
./strace-static-x86_64: Process 5453 attached
[pid  5453] chdir("./192")              = 0
[pid  5453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5453] setpgid(0, 0)               = 0
[pid  5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5453] write(3, "1000", 4)         = 4
[pid  5453] close(3)                    = 0
[pid  5453] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5453] memfd_create("syzkaller", 0) = 3
[pid  5453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5453] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5453] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5453] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5453] close(3)                    = 0
[pid  5453] mkdir("./file0", 0777)      = 0
[  131.018334][ T5453] loop0: detected capacity change from 0 to 4096
[  131.035392][ T5453] NILFS (loop0): invalid segment: Checksum error in segment payload
[  131.043476][ T5453] NILFS (loop0): trying rollback from an earlier position
[  131.057967][ T5453] NILFS (loop0): recovery complete
[pid  5453] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5453] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5453] chdir("./file0")            = 0
[pid  5453] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5453] close(4)                    = 0
[pid  5453] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5453] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  131.063824][ T5454] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.079684][   T27] audit: type=1800 audit(1676306818.838:194): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5453] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5453] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5453] exit_group(0)               = ?
[pid  5453] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5453, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./192/binderfs")                = 0
umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./192/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./192/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./192/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./192/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./192")                          = 0
mkdir("./193", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5455 attached
 <unfinished ...>
[pid  5455] chdir("./193")              = 0
[pid  5455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5455] setpgid(0, 0 <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5455
[pid  5455] <... setpgid resumed>)      = 0
[pid  5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5455] write(3, "1000", 4)         = 4
[pid  5455] close(3)                    = 0
[pid  5455] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5455] memfd_create("syzkaller", 0) = 3
[pid  5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5455] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5455] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5455] close(3)                    = 0
[pid  5455] mkdir("./file0", 0777)      = 0
[pid  5455] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5455] chdir("./file0")            = 0
[pid  5455] ioctl(4, LOOP_CLR_FD)       = 0
[  131.384504][ T5455] loop0: detected capacity change from 0 to 4096
[  131.401723][ T5455] NILFS (loop0): invalid segment: Checksum error in segment payload
[  131.409781][ T5455] NILFS (loop0): trying rollback from an earlier position
[  131.423718][ T5455] NILFS (loop0): recovery complete
[pid  5455] close(4)                    = 0
[pid  5455] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5455] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  131.429824][ T5456] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.438090][   T27] audit: type=1800 audit(1676306819.198:195): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5455] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5455] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5455] exit_group(0)               = ?
[pid  5455] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./193/binderfs")                = 0
umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./193/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./193/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./193/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./193/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./193")                          = 0
mkdir("./194", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5457
./strace-static-x86_64: Process 5457 attached
[pid  5457] chdir("./194")              = 0
[pid  5457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5457] setpgid(0, 0)               = 0
[pid  5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5457] write(3, "1000", 4)         = 4
[pid  5457] close(3)                    = 0
[pid  5457] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5457] memfd_create("syzkaller", 0) = 3
[pid  5457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5457] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5457] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5457] close(3)                    = 0
[pid  5457] mkdir("./file0", 0777)      = 0
[  131.738494][ T5457] loop0: detected capacity change from 0 to 4096
[  131.752663][ T5457] NILFS (loop0): invalid segment: Checksum error in segment payload
[  131.761244][ T5457] NILFS (loop0): trying rollback from an earlier position
[  131.775471][ T5457] NILFS (loop0): recovery complete
[pid  5457] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5457] chdir("./file0")            = 0
[pid  5457] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5457] close(4)                    = 0
[pid  5457] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5457] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  131.782517][ T5458] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.808718][   T27] audit: type=1800 audit(1676306819.568:196): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5457] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5457] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5457] exit_group(0)               = ?
[pid  5457] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./194/binderfs")                = 0
umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./194/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./194/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./194/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./194/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./194")                          = 0
mkdir("./195", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5459
./strace-static-x86_64: Process 5459 attached
[pid  5459] chdir("./195")              = 0
[pid  5459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5459] setpgid(0, 0)               = 0
[pid  5459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5459] write(3, "1000", 4)         = 4
[pid  5459] close(3)                    = 0
[pid  5459] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5459] memfd_create("syzkaller", 0) = 3
[pid  5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5459] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5459] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5459] close(3)                    = 0
[pid  5459] mkdir("./file0", 0777)      = 0
[pid  5459] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  132.112908][ T5459] loop0: detected capacity change from 0 to 4096
[  132.129582][ T5459] NILFS (loop0): invalid segment: Checksum error in segment payload
[  132.137719][ T5459] NILFS (loop0): trying rollback from an earlier position
[  132.152501][ T5459] NILFS (loop0): recovery complete
[pid  5459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5459] chdir("./file0")            = 0
[pid  5459] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5459] close(4)                    = 0
[pid  5459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5459] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  132.159400][ T5460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5459] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5459] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5459] exit_group(0)               = ?
[pid  5459] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5459, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./195/binderfs")                = 0
umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./195/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./195/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./195/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./195/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./195")                          = 0
mkdir("./196", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5461
./strace-static-x86_64: Process 5461 attached
[pid  5461] chdir("./196")              = 0
[pid  5461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5461] setpgid(0, 0)               = 0
[pid  5461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5461] write(3, "1000", 4)         = 4
[pid  5461] close(3)                    = 0
[pid  5461] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5461] memfd_create("syzkaller", 0) = 3
[pid  5461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5461] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5461] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5461] close(3)                    = 0
[pid  5461] mkdir("./file0", 0777)      = 0
[pid  5461] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5461] chdir("./file0")            = 0
[pid  5461] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5461] close(4)                    = 0
[  132.468620][ T5461] loop0: detected capacity change from 0 to 4096
[  132.485279][ T5461] NILFS (loop0): invalid segment: Checksum error in segment payload
[  132.493318][ T5461] NILFS (loop0): trying rollback from an earlier position
[  132.505986][ T5461] NILFS (loop0): recovery complete
[pid  5461] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5461] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  132.511797][ T5462] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5461] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5461] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5461] exit_group(0)               = ?
[pid  5461] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5461, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./196/binderfs")                = 0
umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./196/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./196/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./196/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./196/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./196")                          = 0
mkdir("./197", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5463
./strace-static-x86_64: Process 5463 attached
[pid  5463] chdir("./197")              = 0
[pid  5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5463] setpgid(0, 0)               = 0
[pid  5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5463] write(3, "1000", 4)         = 4
[pid  5463] close(3)                    = 0
[pid  5463] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5463] memfd_create("syzkaller", 0) = 3
[pid  5463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5463] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5463] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5463] close(3)                    = 0
[pid  5463] mkdir("./file0", 0777)      = 0
[  132.773585][ T5463] loop0: detected capacity change from 0 to 4096
[  132.792349][ T5463] NILFS (loop0): invalid segment: Checksum error in segment payload
[  132.800442][ T5463] NILFS (loop0): trying rollback from an earlier position
[  132.814938][ T5463] NILFS (loop0): recovery complete
[pid  5463] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5463] chdir("./file0")            = 0
[pid  5463] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5463] close(4)                    = 0
[pid  5463] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5463] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  132.821014][ T5464] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5463] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5463] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5463] exit_group(0)               = ?
[pid  5463] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5463, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./197/binderfs")                = 0
umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./197/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./197/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./197/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./197/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./197")                          = 0
mkdir("./198", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5465
./strace-static-x86_64: Process 5465 attached
[pid  5465] chdir("./198")              = 0
[pid  5465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5465] setpgid(0, 0)               = 0
[pid  5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5465] write(3, "1000", 4)         = 4
[pid  5465] close(3)                    = 0
[pid  5465] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5465] memfd_create("syzkaller", 0) = 3
[pid  5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5465] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5465] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5465] close(3)                    = 0
[pid  5465] mkdir("./file0", 0777)      = 0
[pid  5465] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  133.115869][ T5465] loop0: detected capacity change from 0 to 4096
[  133.134765][ T5465] NILFS (loop0): invalid segment: Checksum error in segment payload
[  133.142846][ T5465] NILFS (loop0): trying rollback from an earlier position
[  133.158954][ T5465] NILFS (loop0): recovery complete
[pid  5465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5465] chdir("./file0")            = 0
[pid  5465] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5465] close(4)                    = 0
[pid  5465] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5465] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  133.164985][ T5466] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5465] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5465] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5465] exit_group(0)               = ?
[pid  5465] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./198/binderfs")                = 0
umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./198/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./198/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./198/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./198/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./198")                          = 0
mkdir("./199", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5467
./strace-static-x86_64: Process 5467 attached
[pid  5467] chdir("./199")              = 0
[pid  5467] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5467] setpgid(0, 0)               = 0
[pid  5467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5467] write(3, "1000", 4)         = 4
[pid  5467] close(3)                    = 0
[pid  5467] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5467] memfd_create("syzkaller", 0) = 3
[pid  5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5467] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5467] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5467] close(3)                    = 0
[pid  5467] mkdir("./file0", 0777)      = 0
[pid  5467] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5467] chdir("./file0")            = 0
[pid  5467] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5467] close(4)                    = 0
[  133.468126][ T5467] loop0: detected capacity change from 0 to 4096
[  133.482899][ T5467] NILFS (loop0): invalid segment: Checksum error in segment payload
[  133.490980][ T5467] NILFS (loop0): trying rollback from an earlier position
[  133.504618][ T5467] NILFS (loop0): recovery complete
[pid  5467] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5467] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  133.510866][ T5468] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5467] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5467] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5467] exit_group(0)               = ?
[pid  5467] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5467, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./199/binderfs")                = 0
umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./199/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./199/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./199/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./199/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./199")                          = 0
mkdir("./200", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5469
./strace-static-x86_64: Process 5469 attached
[pid  5469] chdir("./200")              = 0
[pid  5469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5469] setpgid(0, 0)               = 0
[pid  5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5469] write(3, "1000", 4)         = 4
[pid  5469] close(3)                    = 0
[pid  5469] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5469] memfd_create("syzkaller", 0) = 3
[pid  5469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5469] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5469] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5469] close(3)                    = 0
[pid  5469] mkdir("./file0", 0777)      = 0
[  133.792900][ T5469] loop0: detected capacity change from 0 to 4096
[  133.807617][ T5469] NILFS (loop0): invalid segment: Checksum error in segment payload
[  133.815629][ T5469] NILFS (loop0): trying rollback from an earlier position
[  133.829136][ T5469] NILFS (loop0): recovery complete
[pid  5469] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5469] chdir("./file0")            = 0
[pid  5469] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5469] close(4)                    = 0
[pid  5469] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5469] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  133.835108][ T5470] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.847681][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  133.847690][   T27] audit: type=1800 audit(1676306821.608:202): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5469] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5469] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5469] exit_group(0)               = ?
[pid  5469] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./200/binderfs")                = 0
umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./200/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./200/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./200/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./200/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./200")                          = 0
mkdir("./201", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5471
./strace-static-x86_64: Process 5471 attached
[pid  5471] chdir("./201")              = 0
[pid  5471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5471] setpgid(0, 0)               = 0
[pid  5471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5471] write(3, "1000", 4)         = 4
[pid  5471] close(3)                    = 0
[pid  5471] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5471] memfd_create("syzkaller", 0) = 3
[pid  5471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5471] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5471] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5471] close(3)                    = 0
[pid  5471] mkdir("./file0", 0777)      = 0
[  134.130076][ T5471] loop0: detected capacity change from 0 to 4096
[  134.146080][ T5471] NILFS (loop0): invalid segment: Checksum error in segment payload
[  134.154289][ T5471] NILFS (loop0): trying rollback from an earlier position
[  134.167558][ T5471] NILFS (loop0): recovery complete
[pid  5471] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5471] chdir("./file0")            = 0
[pid  5471] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5471] close(4)                    = 0
[pid  5471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5471] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  134.173505][ T5472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.177378][   T27] audit: type=1800 audit(1676306821.938:203): pid=5471 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5471] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5471] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5471] exit_group(0)               = ?
[pid  5471] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5471, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./201/binderfs")                = 0
umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./201/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./201/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./201/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./201/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./201")                          = 0
mkdir("./202", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5473
./strace-static-x86_64: Process 5473 attached
[pid  5473] chdir("./202")              = 0
[pid  5473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5473] setpgid(0, 0)               = 0
[pid  5473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5473] write(3, "1000", 4)         = 4
[pid  5473] close(3)                    = 0
[pid  5473] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5473] memfd_create("syzkaller", 0) = 3
[pid  5473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5473] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5473] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5473] close(3)                    = 0
[pid  5473] mkdir("./file0", 0777)      = 0
[pid  5473] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  134.498248][ T5473] loop0: detected capacity change from 0 to 4096
[  134.514286][ T5473] NILFS (loop0): invalid segment: Checksum error in segment payload
[  134.522437][ T5473] NILFS (loop0): trying rollback from an earlier position
[  134.537277][ T5473] NILFS (loop0): recovery complete
[pid  5473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5473] chdir("./file0")            = 0
[pid  5473] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5473] close(4)                    = 0
[pid  5473] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5473] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  134.544140][ T5474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.568453][   T27] audit: type=1800 audit(1676306822.328:204): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5473] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5473] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5473] exit_group(0)               = ?
[pid  5473] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5473, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./202/binderfs")                = 0
umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./202/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./202/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./202/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./202/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./202")                          = 0
mkdir("./203", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5475
./strace-static-x86_64: Process 5475 attached
[pid  5475] chdir("./203")              = 0
[pid  5475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5475] setpgid(0, 0)               = 0
[pid  5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5475] write(3, "1000", 4)         = 4
[pid  5475] close(3)                    = 0
[pid  5475] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5475] memfd_create("syzkaller", 0) = 3
[pid  5475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5475] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5475] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5475] close(3)                    = 0
[pid  5475] mkdir("./file0", 0777)      = 0
[pid  5475] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5475] chdir("./file0")            = 0
[  134.868519][ T5475] loop0: detected capacity change from 0 to 4096
[  134.885498][ T5475] NILFS (loop0): invalid segment: Checksum error in segment payload
[  134.893621][ T5475] NILFS (loop0): trying rollback from an earlier position
[  134.907526][ T5475] NILFS (loop0): recovery complete
[pid  5475] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5475] close(4)                    = 0
[pid  5475] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5475] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  134.913395][ T5476] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.924924][   T27] audit: type=1800 audit(1676306822.688:205): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5475] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5475] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5475] exit_group(0)               = ?
[pid  5475] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./203/binderfs")                = 0
umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./203/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./203/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./203/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./203/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./203")                          = 0
mkdir("./204", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5477
./strace-static-x86_64: Process 5477 attached
[pid  5477] chdir("./204")              = 0
[pid  5477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5477] setpgid(0, 0)               = 0
[pid  5477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5477] write(3, "1000", 4)         = 4
[pid  5477] close(3)                    = 0
[pid  5477] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5477] memfd_create("syzkaller", 0) = 3
[pid  5477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5477] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5477] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5477] close(3)                    = 0
[pid  5477] mkdir("./file0", 0777)      = 0
[  135.227334][ T5477] loop0: detected capacity change from 0 to 4096
[  135.243758][ T5477] NILFS (loop0): invalid segment: Checksum error in segment payload
[  135.251802][ T5477] NILFS (loop0): trying rollback from an earlier position
[  135.265375][ T5477] NILFS (loop0): recovery complete
[pid  5477] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5477] chdir("./file0")            = 0
[pid  5477] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5477] close(4)                    = 0
[pid  5477] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5477] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  135.271280][ T5478] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.292855][   T27] audit: type=1800 audit(1676306823.048:206): pid=5477 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5477] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5477] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5477] exit_group(0)               = ?
[pid  5477] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5477, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./204/binderfs")                = 0
umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./204/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./204/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./204/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./204/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./204")                          = 0
mkdir("./205", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5479
./strace-static-x86_64: Process 5479 attached
[pid  5479] chdir("./205")              = 0
[pid  5479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5479] setpgid(0, 0)               = 0
[pid  5479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5479] write(3, "1000", 4)         = 4
[pid  5479] close(3)                    = 0
[pid  5479] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5479] memfd_create("syzkaller", 0) = 3
[pid  5479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5479] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5479] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5479] close(3)                    = 0
[pid  5479] mkdir("./file0", 0777)      = 0
[pid  5479] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  135.566995][ T5479] loop0: detected capacity change from 0 to 4096
[  135.581980][ T5479] NILFS (loop0): invalid segment: Checksum error in segment payload
[  135.590043][ T5479] NILFS (loop0): trying rollback from an earlier position
[  135.604252][ T5479] NILFS (loop0): recovery complete
[pid  5479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5479] chdir("./file0")            = 0
[pid  5479] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5479] close(4)                    = 0
[pid  5479] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5479] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  135.610854][ T5480] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.627743][   T27] audit: type=1800 audit(1676306823.388:207): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5479] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5479] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5479] exit_group(0)               = ?
[pid  5479] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5479, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./205/binderfs")                = 0
umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./205/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./205/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./205/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./205/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./205")                          = 0
mkdir("./206", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5481 attached
, child_tidptr=0x555555db65d0) = 5481
[pid  5481] chdir("./206")              = 0
[pid  5481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5481] setpgid(0, 0)               = 0
[pid  5481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5481] write(3, "1000", 4)         = 4
[pid  5481] close(3)                    = 0
[pid  5481] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5481] memfd_create("syzkaller", 0) = 3
[pid  5481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5481] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5481] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5481] close(3)                    = 0
[pid  5481] mkdir("./file0", 0777)      = 0
[  135.916297][ T5481] loop0: detected capacity change from 0 to 4096
[  135.932658][ T5481] NILFS (loop0): invalid segment: Checksum error in segment payload
[  135.940712][ T5481] NILFS (loop0): trying rollback from an earlier position
[  135.954348][ T5481] NILFS (loop0): recovery complete
[pid  5481] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5481] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5481] chdir("./file0")            = 0
[pid  5481] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5481] close(4)                    = 0
[pid  5481] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5481] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  135.961010][ T5482] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.978226][   T27] audit: type=1800 audit(1676306823.738:208): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5481] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5481] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5481] exit_group(0)               = ?
[pid  5481] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5481, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./206/binderfs")                = 0
umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./206/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./206/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./206/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./206/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./206")                          = 0
mkdir("./207", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5483
./strace-static-x86_64: Process 5483 attached
[pid  5483] chdir("./207")              = 0
[pid  5483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5483] setpgid(0, 0)               = 0
[pid  5483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5483] write(3, "1000", 4)         = 4
[pid  5483] close(3)                    = 0
[pid  5483] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5483] memfd_create("syzkaller", 0) = 3
[pid  5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5483] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5483] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5483] close(3)                    = 0
[pid  5483] mkdir("./file0", 0777)      = 0
[pid  5483] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5483] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5483] chdir("./file0")            = 0
[pid  5483] ioctl(4, LOOP_CLR_FD)       = 0
[  136.260044][ T5483] loop0: detected capacity change from 0 to 4096
[  136.277551][ T5483] NILFS (loop0): invalid segment: Checksum error in segment payload
[  136.285598][ T5483] NILFS (loop0): trying rollback from an earlier position
[  136.299812][ T5483] NILFS (loop0): recovery complete
[pid  5483] close(4)                    = 0
[pid  5483] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5483] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  136.306394][ T5484] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.318377][   T27] audit: type=1800 audit(1676306824.078:209): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5483] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5483] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5483] exit_group(0)               = ?
[pid  5483] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5483, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./207/binderfs")                = 0
umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./207/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./207/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./207/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./207/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./207")                          = 0
mkdir("./208", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5485
./strace-static-x86_64: Process 5485 attached
[pid  5485] chdir("./208")              = 0
[pid  5485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5485] setpgid(0, 0)               = 0
[pid  5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5485] write(3, "1000", 4)         = 4
[pid  5485] close(3)                    = 0
[pid  5485] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5485] memfd_create("syzkaller", 0) = 3
[pid  5485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5485] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5485] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5485] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5485] close(3)                    = 0
[pid  5485] mkdir("./file0", 0777)      = 0
[  136.611046][ T5485] loop0: detected capacity change from 0 to 4096
[  136.627213][ T5485] NILFS (loop0): invalid segment: Checksum error in segment payload
[  136.635257][ T5485] NILFS (loop0): trying rollback from an earlier position
[  136.648904][ T5485] NILFS (loop0): recovery complete
[pid  5485] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5485] chdir("./file0")            = 0
[pid  5485] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5485] close(4)                    = 0
[pid  5485] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5485] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  136.654984][ T5486] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.671044][   T27] audit: type=1800 audit(1676306824.428:210): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5485] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5485] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5485] exit_group(0)               = ?
[pid  5485] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5485, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./208/binderfs")                = 0
umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./208/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./208/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./208/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./208/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./208")                          = 0
mkdir("./209", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5487
./strace-static-x86_64: Process 5487 attached
[pid  5487] chdir("./209")              = 0
[pid  5487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5487] setpgid(0, 0)               = 0
[pid  5487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5487] write(3, "1000", 4)         = 4
[pid  5487] close(3)                    = 0
[pid  5487] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5487] memfd_create("syzkaller", 0) = 3
[pid  5487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5487] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5487] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5487] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5487] close(3)                    = 0
[pid  5487] mkdir("./file0", 0777)      = 0
[  136.965157][ T5487] loop0: detected capacity change from 0 to 4096
[  136.982215][ T5487] NILFS (loop0): invalid segment: Checksum error in segment payload
[  136.990327][ T5487] NILFS (loop0): trying rollback from an earlier position
[  137.004350][ T5487] NILFS (loop0): recovery complete
[pid  5487] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5487] chdir("./file0")            = 0
[pid  5487] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5487] close(4)                    = 0
[pid  5487] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5487] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  137.010803][ T5488] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.016385][   T27] audit: type=1800 audit(1676306824.778:211): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5487] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5487] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5487] exit_group(0)               = ?
[pid  5487] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5487, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./209/binderfs")                = 0
umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./209/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./209/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./209/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./209/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./209")                          = 0
mkdir("./210", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5489
./strace-static-x86_64: Process 5489 attached
[pid  5489] chdir("./210")              = 0
[pid  5489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5489] setpgid(0, 0)               = 0
[pid  5489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5489] write(3, "1000", 4)         = 4
[pid  5489] close(3)                    = 0
[pid  5489] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5489] memfd_create("syzkaller", 0) = 3
[pid  5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5489] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5489] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5489] close(3)                    = 0
[pid  5489] mkdir("./file0", 0777)      = 0
[pid  5489] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  137.306860][ T5489] loop0: detected capacity change from 0 to 4096
[  137.321752][ T5489] NILFS (loop0): invalid segment: Checksum error in segment payload
[  137.329945][ T5489] NILFS (loop0): trying rollback from an earlier position
[  137.343804][ T5489] NILFS (loop0): recovery complete
[pid  5489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5489] chdir("./file0")            = 0
[pid  5489] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5489] close(4)                    = 0
[pid  5489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5489] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  137.351052][ T5490] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5489] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5489] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5489] exit_group(0)               = ?
[pid  5489] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5489, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./210", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./210", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./210/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./210/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./210/binderfs")                = 0
umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./210/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./210/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./210/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./210/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./210")                          = 0
mkdir("./211", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5491
./strace-static-x86_64: Process 5491 attached
[pid  5491] chdir("./211")              = 0
[pid  5491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5491] setpgid(0, 0)               = 0
[pid  5491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5491] write(3, "1000", 4)         = 4
[pid  5491] close(3)                    = 0
[pid  5491] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5491] memfd_create("syzkaller", 0) = 3
[pid  5491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5491] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5491] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5491] close(3)                    = 0
[pid  5491] mkdir("./file0", 0777)      = 0
[  137.733325][ T5491] loop0: detected capacity change from 0 to 4096
[  137.754891][ T5491] NILFS (loop0): invalid segment: Checksum error in segment payload
[  137.763398][ T5491] NILFS (loop0): trying rollback from an earlier position
[pid  5491] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5491] chdir("./file0")            = 0
[pid  5491] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5491] close(4)                    = 0
[pid  5491] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5491] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  137.782340][ T5491] NILFS (loop0): recovery complete
[  137.796304][ T5492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5491] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5491] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5491] exit_group(0)               = ?
[pid  5491] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5491, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./211", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./211", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./211/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./211/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./211/binderfs")                = 0
umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./211/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./211/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./211/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./211/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./211")                          = 0
mkdir("./212", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5493 attached
 <unfinished ...>
[pid  5493] chdir("./212")              = 0
[pid  5493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5493] setpgid(0, 0)               = 0
[pid  5493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5493
[pid  5493] <... openat resumed>)       = 3
[pid  5493] write(3, "1000", 4)         = 4
[pid  5493] close(3)                    = 0
[pid  5493] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5493] memfd_create("syzkaller", 0) = 3
[pid  5493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5493] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5493] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5493] close(3)                    = 0
[pid  5493] mkdir("./file0", 0777)      = 0
[  138.234571][ T5493] loop0: detected capacity change from 0 to 4096
[  138.253625][ T5493] NILFS (loop0): invalid segment: Checksum error in segment payload
[  138.261763][ T5493] NILFS (loop0): trying rollback from an earlier position
[  138.275648][ T5493] NILFS (loop0): recovery complete
[pid  5493] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5493] chdir("./file0")            = 0
[pid  5493] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5493] close(4)                    = 0
[pid  5493] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5493] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  138.282014][ T5494] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5493] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5493] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5493] exit_group(0)               = ?
[pid  5493] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5493, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./212", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./212", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./212/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./212/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./212/binderfs")                = 0
umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./212/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./212/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./212/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./212/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./212")                          = 0
mkdir("./213", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5495
./strace-static-x86_64: Process 5495 attached
[pid  5495] chdir("./213")              = 0
[pid  5495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5495] setpgid(0, 0)               = 0
[pid  5495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5495] write(3, "1000", 4)         = 4
[pid  5495] close(3)                    = 0
[pid  5495] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5495] memfd_create("syzkaller", 0) = 3
[pid  5495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5495] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5495] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5495] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5495] close(3)                    = 0
[pid  5495] mkdir("./file0", 0777)      = 0
[  138.581821][ T5495] loop0: detected capacity change from 0 to 4096
[  138.597638][ T5495] NILFS (loop0): invalid segment: Checksum error in segment payload
[  138.605682][ T5495] NILFS (loop0): trying rollback from an earlier position
[  138.619216][ T5495] NILFS (loop0): recovery complete
[pid  5495] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5495] chdir("./file0")            = 0
[pid  5495] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5495] close(4)                    = 0
[pid  5495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5495] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  138.625151][ T5496] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5495] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5495] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5495] exit_group(0)               = ?
[pid  5495] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5495, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./213", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./213", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./213/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./213/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./213/binderfs")                = 0
umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./213/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./213/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./213/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./213/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./213")                          = 0
mkdir("./214", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5497
./strace-static-x86_64: Process 5497 attached
[pid  5497] chdir("./214")              = 0
[pid  5497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5497] setpgid(0, 0)               = 0
[pid  5497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5497] write(3, "1000", 4)         = 4
[pid  5497] close(3)                    = 0
[pid  5497] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5497] memfd_create("syzkaller", 0) = 3
[pid  5497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5497] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5497] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5497] close(3)                    = 0
[pid  5497] mkdir("./file0", 0777)      = 0
[  138.895134][ T5497] loop0: detected capacity change from 0 to 4096
[  138.912369][ T5497] NILFS (loop0): invalid segment: Checksum error in segment payload
[  138.920644][ T5497] NILFS (loop0): trying rollback from an earlier position
[  138.937694][ T5497] NILFS (loop0): recovery complete
[pid  5497] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5497] chdir("./file0")            = 0
[pid  5497] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5497] close(4)                    = 0
[pid  5497] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5497] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  138.943576][ T5498] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.959434][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  138.959446][   T27] audit: type=1800 audit(1676306826.718:216): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5497] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5497] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5497] exit_group(0)               = ?
[pid  5497] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5497, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./214", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./214", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./214/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./214/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./214/binderfs")                = 0
umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./214/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./214/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./214/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./214/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./214")                          = 0
mkdir("./215", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5499
./strace-static-x86_64: Process 5499 attached
[pid  5499] chdir("./215")              = 0
[pid  5499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5499] setpgid(0, 0)               = 0
[pid  5499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5499] write(3, "1000", 4)         = 4
[pid  5499] close(3)                    = 0
[pid  5499] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5499] memfd_create("syzkaller", 0) = 3
[pid  5499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5499] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5499] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5499] close(3)                    = 0
[pid  5499] mkdir("./file0", 0777)      = 0
[pid  5499] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5499] chdir("./file0")            = 0
[pid  5499] ioctl(4, LOOP_CLR_FD)       = 0
[  139.250825][ T5499] loop0: detected capacity change from 0 to 4096
[  139.266928][ T5499] NILFS (loop0): invalid segment: Checksum error in segment payload
[  139.274949][ T5499] NILFS (loop0): trying rollback from an earlier position
[  139.287982][ T5499] NILFS (loop0): recovery complete
[pid  5499] close(4)                    = 0
[pid  5499] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5499] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  139.294749][ T5500] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.307434][   T27] audit: type=1800 audit(1676306827.068:217): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5499] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5499] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5499] exit_group(0)               = ?
[pid  5499] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5499, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./215", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./215", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./215/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./215/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./215/binderfs")                = 0
umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./215/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./215/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./215/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./215/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./215")                          = 0
mkdir("./216", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5501
./strace-static-x86_64: Process 5501 attached
[pid  5501] chdir("./216")              = 0
[pid  5501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5501] setpgid(0, 0)               = 0
[pid  5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5501] write(3, "1000", 4)         = 4
[pid  5501] close(3)                    = 0
[pid  5501] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5501] memfd_create("syzkaller", 0) = 3
[pid  5501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5501] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5501] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5501] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5501] close(3)                    = 0
[pid  5501] mkdir("./file0", 0777)      = 0
[pid  5501] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5501] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5501] chdir("./file0")            = 0
[  139.592800][ T5501] loop0: detected capacity change from 0 to 4096
[  139.608426][ T5501] NILFS (loop0): invalid segment: Checksum error in segment payload
[  139.616498][ T5501] NILFS (loop0): trying rollback from an earlier position
[  139.630008][ T5501] NILFS (loop0): recovery complete
[pid  5501] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5501] close(4)                    = 0
[pid  5501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5501] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  139.635934][ T5502] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.654971][   T27] audit: type=1800 audit(1676306827.408:218): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5501] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5501] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5501] exit_group(0)               = ?
[pid  5501] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5501, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./216", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./216", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./216/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./216/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./216/binderfs")                = 0
umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./216/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./216/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./216/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./216/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./216")                          = 0
mkdir("./217", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5503
./strace-static-x86_64: Process 5503 attached
[pid  5503] chdir("./217")              = 0
[pid  5503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5503] setpgid(0, 0)               = 0
[pid  5503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5503] write(3, "1000", 4)         = 4
[pid  5503] close(3)                    = 0
[pid  5503] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5503] memfd_create("syzkaller", 0) = 3
[pid  5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5503] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5503] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5503] close(3)                    = 0
[pid  5503] mkdir("./file0", 0777)      = 0
[  139.932533][ T5503] loop0: detected capacity change from 0 to 4096
[  139.949868][ T5503] NILFS (loop0): invalid segment: Checksum error in segment payload
[  139.957949][ T5503] NILFS (loop0): trying rollback from an earlier position
[  139.972035][ T5503] NILFS (loop0): recovery complete
[pid  5503] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5503] chdir("./file0")            = 0
[pid  5503] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5503] close(4)                    = 0
[pid  5503] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5503] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  139.978361][ T5504] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.993938][   T27] audit: type=1800 audit(1676306827.758:219): pid=5503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5503] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5503] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5503] exit_group(0)               = ?
[pid  5503] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5503, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./217", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./217", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./217/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./217/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./217/binderfs")                = 0
umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./217/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./217/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./217/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./217/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./217")                          = 0
mkdir("./218", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5505
./strace-static-x86_64: Process 5505 attached
[pid  5505] chdir("./218")              = 0
[pid  5505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5505] setpgid(0, 0)               = 0
[pid  5505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5505] write(3, "1000", 4)         = 4
[pid  5505] close(3)                    = 0
[pid  5505] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5505] memfd_create("syzkaller", 0) = 3
[pid  5505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5505] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5505] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5505] close(3)                    = 0
[pid  5505] mkdir("./file0", 0777)      = 0
[pid  5505] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5505] chdir("./file0")            = 0
[pid  5505] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5505] close(4)                    = 0
[pid  5505] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5505] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  140.285114][ T5505] loop0: detected capacity change from 0 to 4096
[  140.301389][ T5505] NILFS (loop0): invalid segment: Checksum error in segment payload
[  140.309524][ T5505] NILFS (loop0): trying rollback from an earlier position
[  140.322942][ T5505] NILFS (loop0): recovery complete
[  140.328714][ T5506] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.348036][   T27] audit: type=1800 audit(1676306828.108:220): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5505] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5505] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5505] exit_group(0)               = ?
[pid  5505] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5505, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./218", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./218", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./218/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./218/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./218/binderfs")                = 0
umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./218/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./218/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./218/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./218/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./218")                          = 0
mkdir("./219", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5507
./strace-static-x86_64: Process 5507 attached
[pid  5507] chdir("./219")              = 0
[pid  5507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5507] setpgid(0, 0)               = 0
[pid  5507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5507] write(3, "1000", 4)         = 4
[pid  5507] close(3)                    = 0
[pid  5507] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5507] memfd_create("syzkaller", 0) = 3
[pid  5507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5507] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5507] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5507] close(3)                    = 0
[pid  5507] mkdir("./file0", 0777)      = 0
[  140.641145][ T5507] loop0: detected capacity change from 0 to 4096
[  140.658468][ T5507] NILFS (loop0): invalid segment: Checksum error in segment payload
[  140.666562][ T5507] NILFS (loop0): trying rollback from an earlier position
[  140.679513][ T5507] NILFS (loop0): recovery complete
[pid  5507] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5507] chdir("./file0")            = 0
[pid  5507] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5507] close(4)                    = 0
[pid  5507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5507] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  140.686063][ T5508] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.706237][   T27] audit: type=1800 audit(1676306828.458:221): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5507] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5507] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5507] exit_group(0)               = ?
[pid  5507] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5507, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./219", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./219", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./219/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./219/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./219/binderfs")                = 0
umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./219/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./219/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./219/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./219/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./219")                          = 0
mkdir("./220", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5509
./strace-static-x86_64: Process 5509 attached
[pid  5509] chdir("./220")              = 0
[pid  5509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5509] setpgid(0, 0)               = 0
[pid  5509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5509] write(3, "1000", 4)         = 4
[pid  5509] close(3)                    = 0
[pid  5509] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5509] memfd_create("syzkaller", 0) = 3
[pid  5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5509] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5509] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5509] close(3)                    = 0
[pid  5509] mkdir("./file0", 0777)      = 0
[  140.977455][ T5509] loop0: detected capacity change from 0 to 4096
[  140.993117][ T5509] NILFS (loop0): invalid segment: Checksum error in segment payload
[  141.001161][ T5509] NILFS (loop0): trying rollback from an earlier position
[  141.016026][ T5509] NILFS (loop0): recovery complete
[pid  5509] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5509] chdir("./file0")            = 0
[pid  5509] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5509] close(4)                    = 0
[  141.022006][ T5510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5509] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5509] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  141.050621][   T27] audit: type=1800 audit(1676306828.808:222): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5509] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5509] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5509] exit_group(0)               = ?
[pid  5509] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5509, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./220", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./220", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./220/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./220/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./220/binderfs")                = 0
umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./220/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./220/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./220/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./220/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./220")                          = 0
mkdir("./221", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5511
./strace-static-x86_64: Process 5511 attached
[pid  5511] chdir("./221")              = 0
[pid  5511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5511] setpgid(0, 0)               = 0
[pid  5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5511] write(3, "1000", 4)         = 4
[pid  5511] close(3)                    = 0
[pid  5511] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5511] memfd_create("syzkaller", 0) = 3
[pid  5511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5511] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5511] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5511] close(3)                    = 0
[pid  5511] mkdir("./file0", 0777)      = 0
[  141.321974][ T5511] loop0: detected capacity change from 0 to 4096
[  141.338221][ T5511] NILFS (loop0): invalid segment: Checksum error in segment payload
[  141.346551][ T5511] NILFS (loop0): trying rollback from an earlier position
[  141.359646][ T5511] NILFS (loop0): recovery complete
[pid  5511] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5511] chdir("./file0")            = 0
[pid  5511] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5511] close(4)                    = 0
[pid  5511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5511] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  141.365361][ T5512] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.386247][   T27] audit: type=1800 audit(1676306829.138:223): pid=5511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5511] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5511] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5511] exit_group(0)               = ?
[pid  5511] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./221", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./221", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./221/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./221/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./221/binderfs")                = 0
umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./221/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./221/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./221/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./221/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./221")                          = 0
mkdir("./222", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5513 attached
, child_tidptr=0x555555db65d0) = 5513
[pid  5513] chdir("./222")              = 0
[pid  5513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5513] setpgid(0, 0)               = 0
[pid  5513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5513] write(3, "1000", 4)         = 4
[pid  5513] close(3)                    = 0
[pid  5513] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5513] memfd_create("syzkaller", 0) = 3
[pid  5513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5513] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5513] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5513] close(3)                    = 0
[pid  5513] mkdir("./file0", 0777)      = 0
[  141.670450][ T5513] loop0: detected capacity change from 0 to 4096
[  141.688987][ T5513] NILFS (loop0): invalid segment: Checksum error in segment payload
[  141.697072][ T5513] NILFS (loop0): trying rollback from an earlier position
[  141.710639][ T5513] NILFS (loop0): recovery complete
[pid  5513] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5513] chdir("./file0")            = 0
[pid  5513] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5513] close(4)                    = 0
[pid  5513] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5513] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  141.716571][ T5514] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.731499][   T27] audit: type=1800 audit(1676306829.488:224): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5513] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5513] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5513] exit_group(0)               = ?
[pid  5513] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5513, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./222", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./222", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./222/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./222/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./222/binderfs")                = 0
umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./222/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./222/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./222/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./222/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./222")                          = 0
mkdir("./223", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5515
./strace-static-x86_64: Process 5515 attached
[pid  5515] chdir("./223")              = 0
[pid  5515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5515] setpgid(0, 0)               = 0
[pid  5515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5515] write(3, "1000", 4)         = 4
[pid  5515] close(3)                    = 0
[pid  5515] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5515] memfd_create("syzkaller", 0) = 3
[pid  5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5515] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5515] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5515] close(3)                    = 0
[pid  5515] mkdir("./file0", 0777)      = 0
[  142.014348][ T5515] loop0: detected capacity change from 0 to 4096
[  142.030647][ T5515] NILFS (loop0): invalid segment: Checksum error in segment payload
[  142.038733][ T5515] NILFS (loop0): trying rollback from an earlier position
[  142.052133][ T5515] NILFS (loop0): recovery complete
[pid  5515] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5515] chdir("./file0")            = 0
[pid  5515] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5515] close(4)                    = 0
[pid  5515] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5515] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  142.058596][ T5516] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.074859][   T27] audit: type=1800 audit(1676306829.838:225): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5515] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5515] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5515] exit_group(0)               = ?
[pid  5515] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5515, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./223", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./223", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./223/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./223/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./223/binderfs")                = 0
umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./223/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./223/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./223/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./223/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./223")                          = 0
mkdir("./224", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5517
./strace-static-x86_64: Process 5517 attached
[pid  5517] chdir("./224")              = 0
[pid  5517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5517] setpgid(0, 0)               = 0
[pid  5517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5517] write(3, "1000", 4)         = 4
[pid  5517] close(3)                    = 0
[pid  5517] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5517] memfd_create("syzkaller", 0) = 3
[pid  5517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5517] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5517] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5517] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5517] close(3)                    = 0
[pid  5517] mkdir("./file0", 0777)      = 0
[pid  5517] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5517] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5517] chdir("./file0")            = 0
[pid  5517] ioctl(4, LOOP_CLR_FD)       = 0
[  142.362816][ T5517] loop0: detected capacity change from 0 to 4096
[  142.380122][ T5517] NILFS (loop0): invalid segment: Checksum error in segment payload
[  142.388194][ T5517] NILFS (loop0): trying rollback from an earlier position
[  142.401169][ T5517] NILFS (loop0): recovery complete
[pid  5517] close(4)                    = 0
[pid  5517] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5517] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  142.407159][ T5518] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5517] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5517] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5517] exit_group(0)               = ?
[pid  5517] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5517, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./224", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./224", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./224/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./224/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./224/binderfs")                = 0
umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./224/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./224/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./224/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./224/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./224")                          = 0
mkdir("./225", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5519
./strace-static-x86_64: Process 5519 attached
[pid  5519] chdir("./225")              = 0
[pid  5519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5519] setpgid(0, 0)               = 0
[pid  5519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5519] write(3, "1000", 4)         = 4
[pid  5519] close(3)                    = 0
[pid  5519] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5519] memfd_create("syzkaller", 0) = 3
[pid  5519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5519] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5519] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5519] close(3)                    = 0
[pid  5519] mkdir("./file0", 0777)      = 0
[  142.696620][ T5519] loop0: detected capacity change from 0 to 4096
[  142.713673][ T5519] NILFS (loop0): invalid segment: Checksum error in segment payload
[  142.721886][ T5519] NILFS (loop0): trying rollback from an earlier position
[  142.735732][ T5519] NILFS (loop0): recovery complete
[pid  5519] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5519] chdir("./file0")            = 0
[pid  5519] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5519] close(4)                    = 0
[pid  5519] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5519] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  142.741744][ T5520] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5519] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5519] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5519] exit_group(0)               = ?
[pid  5519] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5519, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./225", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./225", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./225/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./225/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./225/binderfs")                = 0
umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./225/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./225/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./225/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./225/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./225")                          = 0
mkdir("./226", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5521
./strace-static-x86_64: Process 5521 attached
[pid  5521] chdir("./226")              = 0
[pid  5521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5521] setpgid(0, 0)               = 0
[pid  5521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5521] write(3, "1000", 4)         = 4
[pid  5521] close(3)                    = 0
[pid  5521] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5521] memfd_create("syzkaller", 0) = 3
[pid  5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5521] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5521] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5521] close(3)                    = 0
[pid  5521] mkdir("./file0", 0777)      = 0
[pid  5521] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5521] chdir("./file0")            = 0
[pid  5521] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5521] close(4)                    = 0
[  143.025318][ T5521] loop0: detected capacity change from 0 to 4096
[  143.043097][ T5521] NILFS (loop0): invalid segment: Checksum error in segment payload
[  143.051277][ T5521] NILFS (loop0): trying rollback from an earlier position
[  143.065279][ T5521] NILFS (loop0): recovery complete
[pid  5521] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5521] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  143.071458][ T5522] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5521] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5521] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5521] exit_group(0)               = ?
[pid  5521] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5521, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./226", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./226", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./226/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./226/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./226/binderfs")                = 0
umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./226/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./226/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./226/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./226/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./226")                          = 0
mkdir("./227", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5523
./strace-static-x86_64: Process 5523 attached
[pid  5523] chdir("./227")              = 0
[pid  5523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5523] setpgid(0, 0)               = 0
[pid  5523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5523] write(3, "1000", 4)         = 4
[pid  5523] close(3)                    = 0
[pid  5523] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5523] memfd_create("syzkaller", 0) = 3
[pid  5523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5523] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5523] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5523] close(3)                    = 0
[pid  5523] mkdir("./file0", 0777)      = 0
[  143.382397][ T5523] loop0: detected capacity change from 0 to 4096
[  143.399488][ T5523] NILFS (loop0): invalid segment: Checksum error in segment payload
[  143.407578][ T5523] NILFS (loop0): trying rollback from an earlier position
[  143.422056][ T5523] NILFS (loop0): recovery complete
[pid  5523] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5523] chdir("./file0")            = 0
[pid  5523] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5523] close(4)                    = 0
[pid  5523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5523] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  143.428557][ T5524] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5523] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5523] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5523] exit_group(0)               = ?
[pid  5523] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5523, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./227", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./227", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./227/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./227/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./227/binderfs")                = 0
umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./227/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./227/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./227/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./227/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./227")                          = 0
mkdir("./228", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5525
./strace-static-x86_64: Process 5525 attached
[pid  5525] chdir("./228")              = 0
[pid  5525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5525] setpgid(0, 0)               = 0
[pid  5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5525] write(3, "1000", 4)         = 4
[pid  5525] close(3)                    = 0
[pid  5525] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5525] memfd_create("syzkaller", 0) = 3
[pid  5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5525] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5525] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5525] close(3)                    = 0
[pid  5525] mkdir("./file0", 0777)      = 0
[  143.728691][ T5525] loop0: detected capacity change from 0 to 4096
[  143.744409][ T5525] NILFS (loop0): invalid segment: Checksum error in segment payload
[  143.752625][ T5525] NILFS (loop0): trying rollback from an earlier position
[  143.766794][ T5525] NILFS (loop0): recovery complete
[pid  5525] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5525] chdir("./file0")            = 0
[pid  5525] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5525] close(4)                    = 0
[pid  5525] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5525] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  143.773108][ T5526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5525] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5525] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5525] exit_group(0)               = ?
[pid  5525] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./228", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./228", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./228/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./228/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./228/binderfs")                = 0
umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./228/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./228/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./228/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./228/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./228")                          = 0
mkdir("./229", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5527
./strace-static-x86_64: Process 5527 attached
[pid  5527] chdir("./229")              = 0
[pid  5527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5527] setpgid(0, 0)               = 0
[pid  5527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5527] write(3, "1000", 4)         = 4
[pid  5527] close(3)                    = 0
[pid  5527] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5527] memfd_create("syzkaller", 0) = 3
[pid  5527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5527] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5527] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5527] close(3)                    = 0
[pid  5527] mkdir("./file0", 0777)      = 0
[pid  5527] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  144.056902][ T5527] loop0: detected capacity change from 0 to 4096
[  144.072308][ T5527] NILFS (loop0): invalid segment: Checksum error in segment payload
[  144.080415][ T5527] NILFS (loop0): trying rollback from an earlier position
[  144.097033][ T5527] NILFS (loop0): recovery complete
[pid  5527] chdir("./file0")            = 0
[pid  5527] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5527] close(4)                    = 0
[pid  5527] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5527] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  144.103022][ T5528] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.113842][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  144.113854][   T27] audit: type=1800 audit(1676306831.878:231): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5527] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5527] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5527] exit_group(0)               = ?
[pid  5527] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5527, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./229", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./229", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./229/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./229/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./229/binderfs")                = 0
umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./229/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./229/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./229/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./229/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./229")                          = 0
mkdir("./230", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5529
./strace-static-x86_64: Process 5529 attached
[pid  5529] chdir("./230")              = 0
[pid  5529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5529] setpgid(0, 0)               = 0
[pid  5529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5529] write(3, "1000", 4)         = 4
[pid  5529] close(3)                    = 0
[pid  5529] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5529] memfd_create("syzkaller", 0) = 3
[pid  5529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5529] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5529] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5529] close(3)                    = 0
[pid  5529] mkdir("./file0", 0777)      = 0
[pid  5529] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  144.407149][ T5529] loop0: detected capacity change from 0 to 4096
[  144.422593][ T5529] NILFS (loop0): invalid segment: Checksum error in segment payload
[  144.430718][ T5529] NILFS (loop0): trying rollback from an earlier position
[  144.443845][ T5529] NILFS (loop0): recovery complete
[pid  5529] chdir("./file0")            = 0
[pid  5529] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5529] close(4)                    = 0
[pid  5529] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5529] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  144.450685][ T5530] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.463814][   T27] audit: type=1800 audit(1676306832.228:232): pid=5529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5529] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5529] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5529] exit_group(0)               = ?
[pid  5529] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5529, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./230", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./230", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./230/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./230/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./230/binderfs")                = 0
umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./230/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./230/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./230/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./230/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./230")                          = 0
mkdir("./231", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5531 attached
, child_tidptr=0x555555db65d0) = 5531
[pid  5531] chdir("./231")              = 0
[pid  5531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5531] setpgid(0, 0)               = 0
[pid  5531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5531] write(3, "1000", 4)         = 4
[pid  5531] close(3)                    = 0
[pid  5531] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5531] memfd_create("syzkaller", 0) = 3
[pid  5531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5531] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5531] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5531] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5531] close(3)                    = 0
[pid  5531] mkdir("./file0", 0777)      = 0
[  144.777555][ T5531] loop0: detected capacity change from 0 to 4096
[  144.795933][ T5531] NILFS (loop0): invalid segment: Checksum error in segment payload
[  144.804325][ T5531] NILFS (loop0): trying rollback from an earlier position
[  144.818217][ T5531] NILFS (loop0): recovery complete
[pid  5531] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5531] chdir("./file0")            = 0
[pid  5531] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5531] close(4)                    = 0
[pid  5531] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5531] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  144.824140][ T5532] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.841595][   T27] audit: type=1800 audit(1676306832.598:233): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5531] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5531] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5531] exit_group(0)               = ?
[pid  5531] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5531, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./231", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./231", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./231/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./231/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./231/binderfs")                = 0
umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./231/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./231/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./231/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./231/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./231")                          = 0
mkdir("./232", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5533 attached
 <unfinished ...>
[pid  5533] chdir("./232")              = 0
[pid  5533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5533] setpgid(0, 0 <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5533
[pid  5533] <... setpgid resumed>)      = 0
[pid  5533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5533] write(3, "1000", 4)         = 4
[pid  5533] close(3)                    = 0
[pid  5533] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5533] memfd_create("syzkaller", 0) = 3
[pid  5533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5533] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5533] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5533] close(3)                    = 0
[pid  5533] mkdir("./file0", 0777)      = 0
[  145.148880][ T5533] loop0: detected capacity change from 0 to 4096
[  145.167072][ T5533] NILFS (loop0): invalid segment: Checksum error in segment payload
[  145.175089][ T5533] NILFS (loop0): trying rollback from an earlier position
[  145.189435][ T5533] NILFS (loop0): recovery complete
[pid  5533] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5533] chdir("./file0")            = 0
[pid  5533] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5533] close(4)                    = 0
[pid  5533] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5533] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  145.195439][ T5534] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.210544][   T27] audit: type=1800 audit(1676306832.968:234): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5533] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5533] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5533] exit_group(0)               = ?
[pid  5533] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5533, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./232", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./232", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./232/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./232/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./232/binderfs")                = 0
umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./232/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./232/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./232/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./232/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./232")                          = 0
mkdir("./233", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5535
./strace-static-x86_64: Process 5535 attached
[pid  5535] chdir("./233")              = 0
[pid  5535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5535] setpgid(0, 0)               = 0
[pid  5535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5535] write(3, "1000", 4)         = 4
[pid  5535] close(3)                    = 0
[pid  5535] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5535] memfd_create("syzkaller", 0) = 3
[pid  5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5535] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5535] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5535] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5535] close(3)                    = 0
[pid  5535] mkdir("./file0", 0777)      = 0
[pid  5535] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5535] chdir("./file0")            = 0
[pid  5535] ioctl(4, LOOP_CLR_FD)       = 0
[  145.509294][ T5535] loop0: detected capacity change from 0 to 4096
[  145.525063][ T5535] NILFS (loop0): invalid segment: Checksum error in segment payload
[  145.533264][ T5535] NILFS (loop0): trying rollback from an earlier position
[  145.547656][ T5535] NILFS (loop0): recovery complete
[pid  5535] close(4)                    = 0
[pid  5535] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5535] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  145.554485][ T5536] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.567102][   T27] audit: type=1800 audit(1676306833.328:235): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5535] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5535] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5535] exit_group(0)               = ?
[pid  5535] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5535, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./233", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./233", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./233/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./233/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./233/binderfs")                = 0
umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./233/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./233/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./233/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./233/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./233")                          = 0
mkdir("./234", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5537
./strace-static-x86_64: Process 5537 attached
[pid  5537] chdir("./234")              = 0
[pid  5537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5537] setpgid(0, 0)               = 0
[pid  5537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5537] write(3, "1000", 4)         = 4
[pid  5537] close(3)                    = 0
[pid  5537] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5537] memfd_create("syzkaller", 0) = 3
[pid  5537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5537] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5537] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5537] close(3)                    = 0
[pid  5537] mkdir("./file0", 0777)      = 0
[  145.863739][ T5537] loop0: detected capacity change from 0 to 4096
[  145.879490][ T5537] NILFS (loop0): invalid segment: Checksum error in segment payload
[  145.887550][ T5537] NILFS (loop0): trying rollback from an earlier position
[  145.903514][ T5537] NILFS (loop0): recovery complete
[pid  5537] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5537] chdir("./file0")            = 0
[pid  5537] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5537] close(4)                    = 0
[pid  5537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5537] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  145.910304][ T5538] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.924880][   T27] audit: type=1800 audit(1676306833.688:236): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5537] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5537] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5537] exit_group(0)               = ?
[pid  5537] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5537, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./234", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./234", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./234/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./234/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./234/binderfs")                = 0
umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./234/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./234/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./234/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./234/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./234")                          = 0
mkdir("./235", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5539
./strace-static-x86_64: Process 5539 attached
[pid  5539] chdir("./235")              = 0
[pid  5539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5539] setpgid(0, 0)               = 0
[pid  5539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5539] write(3, "1000", 4)         = 4
[pid  5539] close(3)                    = 0
[pid  5539] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5539] memfd_create("syzkaller", 0) = 3
[pid  5539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5539] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5539] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5539] close(3)                    = 0
[pid  5539] mkdir("./file0", 0777)      = 0
[  146.205167][ T5539] loop0: detected capacity change from 0 to 4096
[  146.221615][ T5539] NILFS (loop0): invalid segment: Checksum error in segment payload
[  146.229691][ T5539] NILFS (loop0): trying rollback from an earlier position
[  146.243372][ T5539] NILFS (loop0): recovery complete
[pid  5539] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5539] chdir("./file0")            = 0
[pid  5539] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5539] close(4)                    = 0
[pid  5539] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5539] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  146.249482][ T5540] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.269134][   T27] audit: type=1800 audit(1676306834.028:237): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5539] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5539] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5539] exit_group(0)               = ?
[pid  5539] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5539, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./235", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./235", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./235/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./235/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./235/binderfs")                = 0
umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./235/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./235/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./235/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./235/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./235")                          = 0
mkdir("./236", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5541
./strace-static-x86_64: Process 5541 attached
[pid  5541] chdir("./236")              = 0
[pid  5541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5541] setpgid(0, 0)               = 0
[pid  5541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5541] write(3, "1000", 4)         = 4
[pid  5541] close(3)                    = 0
[pid  5541] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5541] memfd_create("syzkaller", 0) = 3
[pid  5541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5541] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5541] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5541] close(3)                    = 0
[pid  5541] mkdir("./file0", 0777)      = 0
[  146.554309][ T5541] loop0: detected capacity change from 0 to 4096
[  146.568675][ T5541] NILFS (loop0): invalid segment: Checksum error in segment payload
[  146.576724][ T5541] NILFS (loop0): trying rollback from an earlier position
[  146.590355][ T5541] NILFS (loop0): recovery complete
[pid  5541] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5541] chdir("./file0")            = 0
[pid  5541] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5541] close(4)                    = 0
[pid  5541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5541] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  146.596444][ T5542] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.612405][   T27] audit: type=1800 audit(1676306834.368:238): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5541] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5541] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5541] exit_group(0)               = ?
[pid  5541] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5541, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./236", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./236", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./236/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./236/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./236/binderfs")                = 0
umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./236/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./236/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./236/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./236/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./236")                          = 0
mkdir("./237", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5543
./strace-static-x86_64: Process 5543 attached
[pid  5543] chdir("./237")              = 0
[pid  5543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5543] setpgid(0, 0)               = 0
[pid  5543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5543] write(3, "1000", 4)         = 4
[pid  5543] close(3)                    = 0
[pid  5543] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5543] memfd_create("syzkaller", 0) = 3
[pid  5543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5543] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5543] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5543] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5543] close(3)                    = 0
[pid  5543] mkdir("./file0", 0777)      = 0
[  146.893213][ T5543] loop0: detected capacity change from 0 to 4096
[  146.909652][ T5543] NILFS (loop0): invalid segment: Checksum error in segment payload
[  146.917841][ T5543] NILFS (loop0): trying rollback from an earlier position
[  146.931629][ T5543] NILFS (loop0): recovery complete
[pid  5543] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5543] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5543] chdir("./file0")            = 0
[pid  5543] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5543] close(4)                    = 0
[pid  5543] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5543] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  146.937435][ T5544] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.949633][   T27] audit: type=1800 audit(1676306834.708:239): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5543] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5543] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5543] exit_group(0)               = ?
[pid  5543] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5543, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./237", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./237", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./237/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./237/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./237/binderfs")                = 0
umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./237/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./237/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./237/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./237/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./237")                          = 0
mkdir("./238", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5545
./strace-static-x86_64: Process 5545 attached
[pid  5545] chdir("./238")              = 0
[pid  5545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5545] setpgid(0, 0)               = 0
[pid  5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5545] write(3, "1000", 4)         = 4
[pid  5545] close(3)                    = 0
[pid  5545] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5545] memfd_create("syzkaller", 0) = 3
[pid  5545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5545] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5545] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5545] close(3)                    = 0
[pid  5545] mkdir("./file0", 0777)      = 0
[  147.241388][ T5545] loop0: detected capacity change from 0 to 4096
[  147.258476][ T5545] NILFS (loop0): invalid segment: Checksum error in segment payload
[  147.266588][ T5545] NILFS (loop0): trying rollback from an earlier position
[  147.280215][ T5545] NILFS (loop0): recovery complete
[pid  5545] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5545] chdir("./file0")            = 0
[pid  5545] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5545] close(4)                    = 0
[pid  5545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5545] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  147.285972][ T5546] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.309179][   T27] audit: type=1800 audit(1676306835.068:240): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5545] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5545] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5545] exit_group(0)               = ?
[pid  5545] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5545, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./238", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./238", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./238/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./238/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./238/binderfs")                = 0
umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./238/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./238/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./238/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./238/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./238")                          = 0
mkdir("./239", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5547
./strace-static-x86_64: Process 5547 attached
[pid  5547] chdir("./239")              = 0
[pid  5547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5547] setpgid(0, 0)               = 0
[pid  5547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5547] write(3, "1000", 4)         = 4
[pid  5547] close(3)                    = 0
[pid  5547] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5547] memfd_create("syzkaller", 0) = 3
[pid  5547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5547] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5547] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5547] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5547] close(3)                    = 0
[pid  5547] mkdir("./file0", 0777)      = 0
[  147.589975][ T5547] loop0: detected capacity change from 0 to 4096
[  147.604627][ T5547] NILFS (loop0): invalid segment: Checksum error in segment payload
[  147.612933][ T5547] NILFS (loop0): trying rollback from an earlier position
[  147.626631][ T5547] NILFS (loop0): recovery complete
[pid  5547] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5547] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5547] chdir("./file0")            = 0
[pid  5547] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5547] close(4)                    = 0
[pid  5547] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5547] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  147.632824][ T5548] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5547] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5547] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5547] exit_group(0)               = ?
[pid  5547] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5547, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./239", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./239", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./239/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./239/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./239/binderfs")                = 0
umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./239/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./239/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./239/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./239/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./239")                          = 0
mkdir("./240", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5549
./strace-static-x86_64: Process 5549 attached
[pid  5549] chdir("./240")              = 0
[pid  5549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5549] setpgid(0, 0)               = 0
[pid  5549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5549] write(3, "1000", 4)         = 4
[pid  5549] close(3)                    = 0
[pid  5549] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5549] memfd_create("syzkaller", 0) = 3
[pid  5549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5549] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5549] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5549] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5549] close(3)                    = 0
[pid  5549] mkdir("./file0", 0777)      = 0
[  147.921770][ T5549] loop0: detected capacity change from 0 to 4096
[  147.938657][ T5549] NILFS (loop0): invalid segment: Checksum error in segment payload
[  147.946707][ T5549] NILFS (loop0): trying rollback from an earlier position
[  147.960467][ T5549] NILFS (loop0): recovery complete
[pid  5549] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5549] chdir("./file0")            = 0
[pid  5549] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5549] close(4)                    = 0
[pid  5549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5549] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  147.966495][ T5550] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5549] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5549] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5549] exit_group(0)               = ?
[pid  5549] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5549, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./240", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./240", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./240/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./240/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./240/binderfs")                = 0
umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./240/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./240/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./240/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./240/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./240")                          = 0
mkdir("./241", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5551
./strace-static-x86_64: Process 5551 attached
[pid  5551] chdir("./241")              = 0
[pid  5551] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5551] setpgid(0, 0)               = 0
[pid  5551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5551] write(3, "1000", 4)         = 4
[pid  5551] close(3)                    = 0
[pid  5551] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5551] memfd_create("syzkaller", 0) = 3
[pid  5551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5551] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5551] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5551] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5551] close(3)                    = 0
[pid  5551] mkdir("./file0", 0777)      = 0
[  148.251865][ T5551] loop0: detected capacity change from 0 to 4096
[  148.269706][ T5551] NILFS (loop0): invalid segment: Checksum error in segment payload
[  148.277836][ T5551] NILFS (loop0): trying rollback from an earlier position
[  148.291347][ T5551] NILFS (loop0): recovery complete
[pid  5551] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5551] chdir("./file0")            = 0
[pid  5551] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5551] close(4)                    = 0
[pid  5551] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5551] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  148.297545][ T5552] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5551] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5551] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5551] exit_group(0)               = ?
[pid  5551] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5551, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./241", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./241", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./241/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./241/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./241/binderfs")                = 0
umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./241/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./241/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./241/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./241/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./241")                          = 0
mkdir("./242", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5553
./strace-static-x86_64: Process 5553 attached
[pid  5553] chdir("./242")              = 0
[pid  5553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5553] setpgid(0, 0)               = 0
[pid  5553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5553] write(3, "1000", 4)         = 4
[pid  5553] close(3)                    = 0
[pid  5553] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5553] memfd_create("syzkaller", 0) = 3
[pid  5553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5553] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5553] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5553] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5553] close(3)                    = 0
[pid  5553] mkdir("./file0", 0777)      = 0
[  148.593554][ T5553] loop0: detected capacity change from 0 to 4096
[  148.609779][ T5553] NILFS (loop0): invalid segment: Checksum error in segment payload
[  148.617934][ T5553] NILFS (loop0): trying rollback from an earlier position
[  148.632450][ T5553] NILFS (loop0): recovery complete
[pid  5553] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5553] chdir("./file0")            = 0
[pid  5553] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5553] close(4)                    = 0
[pid  5553] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5553] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  148.638481][ T5554] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5553] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5553] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5553] exit_group(0)               = ?
[pid  5553] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5553, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./242", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./242", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./242/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./242/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./242/binderfs")                = 0
umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./242/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./242/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./242/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./242/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./242")                          = 0
mkdir("./243", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5555
./strace-static-x86_64: Process 5555 attached
[pid  5555] chdir("./243")              = 0
[pid  5555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5555] setpgid(0, 0)               = 0
[pid  5555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5555] write(3, "1000", 4)         = 4
[pid  5555] close(3)                    = 0
[pid  5555] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5555] memfd_create("syzkaller", 0) = 3
[pid  5555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5555] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5555] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5555] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5555] close(3)                    = 0
[pid  5555] mkdir("./file0", 0777)      = 0
[  148.968016][ T5555] loop0: detected capacity change from 0 to 4096
[  148.993268][ T5555] NILFS (loop0): invalid segment: Checksum error in segment payload
[  149.001337][ T5555] NILFS (loop0): trying rollback from an earlier position
[pid  5555] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5555] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5555] chdir("./file0")            = 0
[pid  5555] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5555] close(4)                    = 0
[pid  5555] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5555] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  149.015750][ T5555] NILFS (loop0): recovery complete
[  149.021859][ T5556] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5555] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5555] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5555] exit_group(0)               = ?
[pid  5555] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5555, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./243", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./243", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./243/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./243/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./243/binderfs")                = 0
umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./243/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./243/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./243/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./243/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./243")                          = 0
mkdir("./244", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5557
./strace-static-x86_64: Process 5557 attached
[pid  5557] chdir("./244")              = 0
[pid  5557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5557] setpgid(0, 0)               = 0
[pid  5557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5557] write(3, "1000", 4)         = 4
[pid  5557] close(3)                    = 0
[pid  5557] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5557] memfd_create("syzkaller", 0) = 3
[pid  5557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5557] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5557] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5557] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5557] close(3)                    = 0
[pid  5557] mkdir("./file0", 0777)      = 0
[  149.325470][ T5557] loop0: detected capacity change from 0 to 4096
[  149.340474][ T5557] NILFS (loop0): invalid segment: Checksum error in segment payload
[  149.348527][ T5557] NILFS (loop0): trying rollback from an earlier position
[  149.361572][ T5557] NILFS (loop0): recovery complete
[pid  5557] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5557] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5557] chdir("./file0")            = 0
[pid  5557] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5557] close(4)                    = 0
[pid  5557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5557] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  149.367932][ T5558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.380083][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  149.380094][   T27] audit: type=1800 audit(1676306837.148:246): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5557] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5557] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5557] exit_group(0)               = ?
[pid  5557] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5557, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./244", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./244", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./244/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./244/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./244/binderfs")                = 0
umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./244/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./244/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./244/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./244/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./244")                          = 0
mkdir("./245", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5559 attached
, child_tidptr=0x555555db65d0) = 5559
[pid  5559] chdir("./245")              = 0
[pid  5559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5559] setpgid(0, 0)               = 0
[pid  5559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5559] write(3, "1000", 4)         = 4
[pid  5559] close(3)                    = 0
[pid  5559] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5559] memfd_create("syzkaller", 0) = 3
[pid  5559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5559] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5559] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5559] close(3)                    = 0
[pid  5559] mkdir("./file0", 0777)      = 0
[  149.685608][ T5559] loop0: detected capacity change from 0 to 4096
[  149.710523][ T5559] NILFS (loop0): invalid segment: Checksum error in segment payload
[  149.718555][ T5559] NILFS (loop0): trying rollback from an earlier position
[pid  5559] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5559] chdir("./file0")            = 0
[pid  5559] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5559] close(4)                    = 0
[pid  5559] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5559] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  149.733065][ T5559] NILFS (loop0): recovery complete
[  149.738929][ T5560] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.756223][   T27] audit: type=1800 audit(1676306837.508:247): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5559] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5559] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5559] exit_group(0)               = ?
[pid  5559] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5559, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./245", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./245", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./245/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./245/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./245/binderfs")                = 0
umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./245/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./245/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./245/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./245/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./245")                          = 0
mkdir("./246", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5561
./strace-static-x86_64: Process 5561 attached
[pid  5561] chdir("./246")              = 0
[pid  5561] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5561] setpgid(0, 0)               = 0
[pid  5561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5561] write(3, "1000", 4)         = 4
[pid  5561] close(3)                    = 0
[pid  5561] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5561] memfd_create("syzkaller", 0) = 3
[pid  5561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5561] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5561] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5561] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5561] close(3)                    = 0
[pid  5561] mkdir("./file0", 0777)      = 0
[pid  5561] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5561] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5561] chdir("./file0")            = 0
[pid  5561] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5561] close(4)                    = 0
[  150.020189][ T5561] loop0: detected capacity change from 0 to 4096
[  150.037336][ T5561] NILFS (loop0): invalid segment: Checksum error in segment payload
[  150.045345][ T5561] NILFS (loop0): trying rollback from an earlier position
[  150.060020][ T5561] NILFS (loop0): recovery complete
[pid  5561] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5561] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  150.066468][ T5562] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.086326][   T27] audit: type=1800 audit(1676306837.828:248): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5561] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5561] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5561] exit_group(0)               = ?
[pid  5561] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5561, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./246", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./246", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./246/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./246/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./246/binderfs")                = 0
umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./246/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./246/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./246/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./246/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./246")                          = 0
mkdir("./247", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5563
./strace-static-x86_64: Process 5563 attached
[pid  5563] chdir("./247")              = 0
[pid  5563] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5563] setpgid(0, 0)               = 0
[pid  5563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5563] write(3, "1000", 4)         = 4
[pid  5563] close(3)                    = 0
[pid  5563] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5563] memfd_create("syzkaller", 0) = 3
[pid  5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5563] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5563] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5563] close(3)                    = 0
[pid  5563] mkdir("./file0", 0777)      = 0
[pid  5563] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5563] chdir("./file0")            = 0
[pid  5563] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5563] close(4)                    = 0
[  150.367527][ T5563] loop0: detected capacity change from 0 to 4096
[  150.382941][ T5563] NILFS (loop0): invalid segment: Checksum error in segment payload
[  150.391072][ T5563] NILFS (loop0): trying rollback from an earlier position
[  150.405377][ T5563] NILFS (loop0): recovery complete
[pid  5563] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5563] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  150.411355][ T5564] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.426182][   T27] audit: type=1800 audit(1676306838.178:249): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5563] sendfile(4, 5, NULL, 2147538701) = 65536
[pid  5563] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5563] exit_group(0)               = ?
[pid  5563] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5563, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./247", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./247", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./247/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./247/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./247/binderfs")                = 0
umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./247/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./247/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./247/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./247/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./247")                          = 0
[  150.465422][ T5564] NILFS (loop0): nilfs_direct_assign (ino=6): invalid key: 130
[  150.473322][ T5564] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=6)
[  150.484304][ T5564] Remounting filesystem read-only
mkdir("./248", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5565
./strace-static-x86_64: Process 5565 attached
[pid  5565] chdir("./248")              = 0
[pid  5565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5565] setpgid(0, 0)               = 0
[pid  5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5565] write(3, "1000", 4)         = 4
[pid  5565] close(3)                    = 0
[pid  5565] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5565] memfd_create("syzkaller", 0) = 3
[pid  5565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5565] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5565] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5565] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5565] close(3)                    = 0
[pid  5565] mkdir("./file0", 0777)      = 0
[pid  5565] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5565] chdir("./file0")            = 0
[pid  5565] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5565] close(4)                    = 0
[pid  5565] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5565] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  150.570654][ T5565] loop0: detected capacity change from 0 to 4096
[  150.585227][ T5565] NILFS (loop0): invalid segment: Checksum error in segment payload
[  150.593266][ T5565] NILFS (loop0): trying rollback from an earlier position
[  150.606424][ T5565] NILFS (loop0): recovery complete
[  150.612662][ T5566] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.626179][   T27] audit: type=1800 audit(1676306838.378:250): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5565] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5565] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5565] exit_group(0)               = ?
[pid  5565] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5565, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./248", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./248", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./248/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./248/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./248/binderfs")                = 0
umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./248/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./248/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./248/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./248/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./248")                          = 0
mkdir("./249", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5567
./strace-static-x86_64: Process 5567 attached
[pid  5567] chdir("./249")              = 0
[pid  5567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5567] setpgid(0, 0)               = 0
[pid  5567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5567] write(3, "1000", 4)         = 4
[pid  5567] close(3)                    = 0
[pid  5567] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5567] memfd_create("syzkaller", 0) = 3
[pid  5567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5567] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5567] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5567] close(3)                    = 0
[pid  5567] mkdir("./file0", 0777)      = 0
[pid  5567] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  150.918013][ T5567] loop0: detected capacity change from 0 to 4096
[  150.933658][ T5567] NILFS (loop0): invalid segment: Checksum error in segment payload
[  150.941732][ T5567] NILFS (loop0): trying rollback from an earlier position
[  150.958491][ T5567] NILFS (loop0): recovery complete
[pid  5567] chdir("./file0")            = 0
[pid  5567] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5567] close(4)                    = 0
[pid  5567] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5567] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  150.964665][ T5568] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.988423][   T27] audit: type=1800 audit(1676306838.728:251): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5567] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5567] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5567] exit_group(0)               = ?
[pid  5567] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5567, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./249", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./249", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./249/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./249/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./249/binderfs")                = 0
umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./249/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./249/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./249/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./249/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./249")                          = 0
mkdir("./250", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5569
./strace-static-x86_64: Process 5569 attached
[pid  5569] chdir("./250")              = 0
[pid  5569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5569] setpgid(0, 0)               = 0
[pid  5569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5569] write(3, "1000", 4)         = 4
[pid  5569] close(3)                    = 0
[pid  5569] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5569] memfd_create("syzkaller", 0) = 3
[pid  5569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5569] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5569] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5569] close(3)                    = 0
[pid  5569] mkdir("./file0", 0777)      = 0
[  151.274305][ T5569] loop0: detected capacity change from 0 to 4096
[  151.291154][ T5569] NILFS (loop0): invalid segment: Checksum error in segment payload
[  151.299251][ T5569] NILFS (loop0): trying rollback from an earlier position
[  151.315729][ T5569] NILFS (loop0): recovery complete
[pid  5569] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5569] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5569] chdir("./file0")            = 0
[pid  5569] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5569] close(4)                    = 0
[pid  5569] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5569] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  151.321617][ T5570] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.336243][   T27] audit: type=1800 audit(1676306839.088:252): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5569] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5569] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5569] exit_group(0)               = ?
[pid  5569] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5569, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./250", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./250", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./250/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./250/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./250/binderfs")                = 0
umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./250/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./250/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./250/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./250/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./250")                          = 0
mkdir("./251", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5571
./strace-static-x86_64: Process 5571 attached
[pid  5571] chdir("./251")              = 0
[pid  5571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5571] setpgid(0, 0)               = 0
[pid  5571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5571] write(3, "1000", 4)         = 4
[pid  5571] close(3)                    = 0
[pid  5571] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5571] memfd_create("syzkaller", 0) = 3
[pid  5571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5571] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5571] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5571] close(3)                    = 0
[pid  5571] mkdir("./file0", 0777)      = 0
[  151.618997][ T5571] loop0: detected capacity change from 0 to 4096
[  151.636607][ T5571] NILFS (loop0): invalid segment: Checksum error in segment payload
[  151.644616][ T5571] NILFS (loop0): trying rollback from an earlier position
[  151.659342][ T5571] NILFS (loop0): recovery complete
[pid  5571] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5571] chdir("./file0")            = 0
[pid  5571] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5571] close(4)                    = 0
[pid  5571] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5571] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  151.665312][ T5572] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.694788][   T27] audit: type=1800 audit(1676306839.448:253): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5571] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5571] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5571] exit_group(0)               = ?
[pid  5571] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5571, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./251", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./251", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./251/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./251/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./251/binderfs")                = 0
umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./251/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./251/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./251/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./251/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./251")                          = 0
mkdir("./252", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5573
./strace-static-x86_64: Process 5573 attached
[pid  5573] chdir("./252")              = 0
[pid  5573] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5573] setpgid(0, 0)               = 0
[pid  5573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5573] write(3, "1000", 4)         = 4
[pid  5573] close(3)                    = 0
[pid  5573] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5573] memfd_create("syzkaller", 0) = 3
[pid  5573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5573] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5573] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5573] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5573] close(3)                    = 0
[pid  5573] mkdir("./file0", 0777)      = 0
[  151.977631][ T5573] loop0: detected capacity change from 0 to 4096
[  151.994457][ T5573] NILFS (loop0): invalid segment: Checksum error in segment payload
[  152.002573][ T5573] NILFS (loop0): trying rollback from an earlier position
[  152.016116][ T5573] NILFS (loop0): recovery complete
[pid  5573] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5573] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5573] chdir("./file0")            = 0
[pid  5573] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5573] close(4)                    = 0
[pid  5573] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5573] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  152.022025][ T5574] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.034310][   T27] audit: type=1800 audit(1676306839.788:254): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5573] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5573] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5573] exit_group(0)               = ?
[pid  5573] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5573, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./252", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./252", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./252/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./252/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./252/binderfs")                = 0
umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./252/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./252/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./252/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./252/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./252")                          = 0
mkdir("./253", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5575
./strace-static-x86_64: Process 5575 attached
[pid  5575] chdir("./253")              = 0
[pid  5575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5575] setpgid(0, 0)               = 0
[pid  5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5575] write(3, "1000", 4)         = 4
[pid  5575] close(3)                    = 0
[pid  5575] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5575] memfd_create("syzkaller", 0) = 3
[pid  5575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5575] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5575] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5575] close(3)                    = 0
[pid  5575] mkdir("./file0", 0777)      = 0
[pid  5575] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5575] chdir("./file0")            = 0
[pid  5575] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5575] close(4)                    = 0
[  152.311016][ T5575] loop0: detected capacity change from 0 to 4096
[  152.326954][ T5575] NILFS (loop0): invalid segment: Checksum error in segment payload
[  152.334986][ T5575] NILFS (loop0): trying rollback from an earlier position
[  152.348735][ T5575] NILFS (loop0): recovery complete
[pid  5575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5575] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  152.354935][ T5576] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.375554][   T27] audit: type=1800 audit(1676306840.118:255): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5575] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5575] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5575] exit_group(0)               = ?
[pid  5575] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5575, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./253", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./253", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./253/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./253/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./253/binderfs")                = 0
umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./253/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./253/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./253/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./253/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./253")                          = 0
mkdir("./254", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5577
./strace-static-x86_64: Process 5577 attached
[pid  5577] chdir("./254")              = 0
[pid  5577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5577] setpgid(0, 0)               = 0
[pid  5577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5577] write(3, "1000", 4)         = 4
[pid  5577] close(3)                    = 0
[pid  5577] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5577] memfd_create("syzkaller", 0) = 3
[pid  5577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5577] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5577] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5577] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5577] close(3)                    = 0
[pid  5577] mkdir("./file0", 0777)      = 0
[  152.654445][ T5577] loop0: detected capacity change from 0 to 4096
[  152.671187][ T5577] NILFS (loop0): invalid segment: Checksum error in segment payload
[  152.679359][ T5577] NILFS (loop0): trying rollback from an earlier position
[  152.692752][ T5577] NILFS (loop0): recovery complete
[pid  5577] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5577] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5577] chdir("./file0")            = 0
[pid  5577] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5577] close(4)                    = 0
[pid  5577] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5577] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  152.698651][ T5578] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5577] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5577] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5577] exit_group(0)               = ?
[pid  5577] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5577, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./254", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./254", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./254/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./254/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./254/binderfs")                = 0
umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./254/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./254/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./254/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./254/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./254")                          = 0
mkdir("./255", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5579
./strace-static-x86_64: Process 5579 attached
[pid  5579] chdir("./255")              = 0
[pid  5579] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5579] setpgid(0, 0)               = 0
[pid  5579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5579] write(3, "1000", 4)         = 4
[pid  5579] close(3)                    = 0
[pid  5579] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5579] memfd_create("syzkaller", 0) = 3
[pid  5579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5579] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5579] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5579] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5579] close(3)                    = 0
[pid  5579] mkdir("./file0", 0777)      = 0
[  153.006714][ T5579] loop0: detected capacity change from 0 to 4096
[  153.026402][ T5579] NILFS (loop0): invalid segment: Checksum error in segment payload
[  153.034462][ T5579] NILFS (loop0): trying rollback from an earlier position
[  153.050243][ T5579] NILFS (loop0): recovery complete
[pid  5579] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5579] chdir("./file0")            = 0
[pid  5579] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5579] close(4)                    = 0
[pid  5579] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5579] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  153.056665][ T5580] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5579] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5579] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5579] exit_group(0)               = ?
[pid  5579] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5579, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./255", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./255", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./255/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./255/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./255/binderfs")                = 0
umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./255/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./255/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./255/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./255/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./255")                          = 0
mkdir("./256", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5581
./strace-static-x86_64: Process 5581 attached
[pid  5581] chdir("./256")              = 0
[pid  5581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5581] setpgid(0, 0)               = 0
[pid  5581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5581] write(3, "1000", 4)         = 4
[pid  5581] close(3)                    = 0
[pid  5581] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5581] memfd_create("syzkaller", 0) = 3
[pid  5581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5581] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5581] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5581] close(3)                    = 0
[pid  5581] mkdir("./file0", 0777)      = 0
[  153.359208][ T5581] loop0: detected capacity change from 0 to 4096
[  153.376878][ T5581] NILFS (loop0): invalid segment: Checksum error in segment payload
[  153.384970][ T5581] NILFS (loop0): trying rollback from an earlier position
[  153.399264][ T5581] NILFS (loop0): recovery complete
[pid  5581] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5581] chdir("./file0")            = 0
[pid  5581] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5581] close(4)                    = 0
[pid  5581] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5581] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  153.405257][ T5582] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5581] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5581] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5581] exit_group(0)               = ?
[pid  5581] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5581, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./256", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./256", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./256/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./256/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./256/binderfs")                = 0
umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./256/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./256/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./256/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./256/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./256")                          = 0
mkdir("./257", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5583
./strace-static-x86_64: Process 5583 attached
[pid  5583] chdir("./257")              = 0
[pid  5583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5583] setpgid(0, 0)               = 0
[pid  5583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5583] write(3, "1000", 4)         = 4
[pid  5583] close(3)                    = 0
[pid  5583] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5583] memfd_create("syzkaller", 0) = 3
[pid  5583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5583] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5583] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5583] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5583] close(3)                    = 0
[pid  5583] mkdir("./file0", 0777)      = 0
[  153.705720][ T5583] loop0: detected capacity change from 0 to 4096
[  153.722146][ T5583] NILFS (loop0): invalid segment: Checksum error in segment payload
[  153.730198][ T5583] NILFS (loop0): trying rollback from an earlier position
[  153.744123][ T5583] NILFS (loop0): recovery complete
[pid  5583] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5583] chdir("./file0")            = 0
[pid  5583] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5583] close(4)                    = 0
[pid  5583] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5583] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  153.751209][ T5584] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5583] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5583] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5583] exit_group(0)               = ?
[pid  5583] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5583, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./257", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./257", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./257/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./257/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./257/binderfs")                = 0
umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./257/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./257/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./257/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./257/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./257")                          = 0
mkdir("./258", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5585
./strace-static-x86_64: Process 5585 attached
[pid  5585] chdir("./258")              = 0
[pid  5585] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5585] setpgid(0, 0)               = 0
[pid  5585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5585] write(3, "1000", 4)         = 4
[pid  5585] close(3)                    = 0
[pid  5585] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5585] memfd_create("syzkaller", 0) = 3
[pid  5585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5585] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5585] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5585] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5585] close(3)                    = 0
[pid  5585] mkdir("./file0", 0777)      = 0
[pid  5585] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  154.049370][ T5585] loop0: detected capacity change from 0 to 4096
[  154.065457][ T5585] NILFS (loop0): invalid segment: Checksum error in segment payload
[  154.073559][ T5585] NILFS (loop0): trying rollback from an earlier position
[  154.087575][ T5585] NILFS (loop0): recovery complete
[pid  5585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5585] chdir("./file0")            = 0
[pid  5585] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5585] close(4)                    = 0
[pid  5585] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5585] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  154.094398][ T5586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5585] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5585] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5585] exit_group(0)               = ?
[pid  5585] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5585, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./258", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./258", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./258/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./258/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./258/binderfs")                = 0
umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./258/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./258/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./258/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./258/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./258")                          = 0
mkdir("./259", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5587
./strace-static-x86_64: Process 5587 attached
[pid  5587] chdir("./259")              = 0
[pid  5587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5587] setpgid(0, 0)               = 0
[pid  5587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5587] write(3, "1000", 4)         = 4
[pid  5587] close(3)                    = 0
[pid  5587] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5587] memfd_create("syzkaller", 0) = 3
[pid  5587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5587] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5587] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5587] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5587] close(3)                    = 0
[pid  5587] mkdir("./file0", 0777)      = 0
[  154.395526][ T5587] loop0: detected capacity change from 0 to 4096
[  154.413060][ T5587] NILFS (loop0): invalid segment: Checksum error in segment payload
[  154.421121][ T5587] NILFS (loop0): trying rollback from an earlier position
[  154.434883][ T5587] NILFS (loop0): recovery complete
[pid  5587] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5587] chdir("./file0")            = 0
[pid  5587] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5587] close(4)                    = 0
[pid  5587] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5587] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  154.441191][ T5588] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.449669][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  154.449681][   T27] audit: type=1800 audit(1676306842.208:261): pid=5587 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5587] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5587] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5587] exit_group(0)               = ?
[pid  5587] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5587, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./259", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./259", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./259/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./259/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./259/binderfs")                = 0
umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./259/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./259/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./259/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./259/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./259")                          = 0
mkdir("./260", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5589 attached
 <unfinished ...>
[pid  5589] chdir("./260")              = 0
[pid  5589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5589] setpgid(0, 0)               = 0
[pid  5589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5589
[pid  5589] <... openat resumed>)       = 3
[pid  5589] write(3, "1000", 4)         = 4
[pid  5589] close(3)                    = 0
[pid  5589] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5589] memfd_create("syzkaller", 0) = 3
[pid  5589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5589] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5589] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5589] close(3)                    = 0
[pid  5589] mkdir("./file0", 0777)      = 0
[  154.754037][ T5589] loop0: detected capacity change from 0 to 4096
[  154.770248][ T5589] NILFS (loop0): invalid segment: Checksum error in segment payload
[  154.778454][ T5589] NILFS (loop0): trying rollback from an earlier position
[  154.791393][ T5589] NILFS (loop0): recovery complete
[pid  5589] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5589] chdir("./file0")            = 0
[pid  5589] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5589] close(4)                    = 0
[pid  5589] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5589] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  154.797186][ T5590] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.813090][   T27] audit: type=1800 audit(1676306842.578:262): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5589] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5589] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5589] exit_group(0)               = ?
[pid  5589] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5589, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./260", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./260", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./260/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./260/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./260/binderfs")                = 0
umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./260/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./260/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./260/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./260/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./260")                          = 0
mkdir("./261", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5591
./strace-static-x86_64: Process 5591 attached
[pid  5591] chdir("./261")              = 0
[pid  5591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5591] setpgid(0, 0)               = 0
[pid  5591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5591] write(3, "1000", 4)         = 4
[pid  5591] close(3)                    = 0
[pid  5591] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5591] memfd_create("syzkaller", 0) = 3
[pid  5591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5591] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5591] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5591] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5591] close(3)                    = 0
[pid  5591] mkdir("./file0", 0777)      = 0
[  155.111693][ T5591] loop0: detected capacity change from 0 to 4096
[  155.128121][ T5591] NILFS (loop0): invalid segment: Checksum error in segment payload
[  155.136173][ T5591] NILFS (loop0): trying rollback from an earlier position
[  155.150949][ T5591] NILFS (loop0): recovery complete
[pid  5591] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5591] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5591] chdir("./file0")            = 0
[pid  5591] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5591] close(4)                    = 0
[pid  5591] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5591] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  155.157256][ T5592] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.162793][   T27] audit: type=1800 audit(1676306842.918:263): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5591] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5591] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5591] exit_group(0)               = ?
[pid  5591] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5591, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./261", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./261", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./261/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./261/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./261/binderfs")                = 0
umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./261/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./261/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./261/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./261/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./261")                          = 0
mkdir("./262", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5593
./strace-static-x86_64: Process 5593 attached
[pid  5593] chdir("./262")              = 0
[pid  5593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5593] setpgid(0, 0)               = 0
[pid  5593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5593] write(3, "1000", 4)         = 4
[pid  5593] close(3)                    = 0
[pid  5593] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5593] memfd_create("syzkaller", 0) = 3
[pid  5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5593] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5593] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5593] close(3)                    = 0
[pid  5593] mkdir("./file0", 0777)      = 0
[  155.474119][ T5593] loop0: detected capacity change from 0 to 4096
[  155.492843][ T5593] NILFS (loop0): invalid segment: Checksum error in segment payload
[  155.500984][ T5593] NILFS (loop0): trying rollback from an earlier position
[  155.517081][ T5593] NILFS (loop0): recovery complete
[pid  5593] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5593] chdir("./file0")            = 0
[pid  5593] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5593] close(4)                    = 0
[pid  5593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5593] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  155.523295][ T5594] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.538733][   T27] audit: type=1800 audit(1676306843.298:264): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5593] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5593] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5593] exit_group(0)               = ?
[pid  5593] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5593, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./262", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./262", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./262/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./262/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./262/binderfs")                = 0
umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./262/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./262/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./262/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./262/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./262")                          = 0
mkdir("./263", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5595
./strace-static-x86_64: Process 5595 attached
[pid  5595] chdir("./263")              = 0
[pid  5595] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5595] setpgid(0, 0)               = 0
[pid  5595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5595] write(3, "1000", 4)         = 4
[pid  5595] close(3)                    = 0
[pid  5595] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5595] memfd_create("syzkaller", 0) = 3
[pid  5595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5595] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5595] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5595] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5595] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5595] close(3)                    = 0
[pid  5595] mkdir("./file0", 0777)      = 0
[pid  5595] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5595] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5595] chdir("./file0")            = 0
[  155.828386][ T5595] loop0: detected capacity change from 0 to 4096
[  155.845343][ T5595] NILFS (loop0): invalid segment: Checksum error in segment payload
[  155.853549][ T5595] NILFS (loop0): trying rollback from an earlier position
[  155.867577][ T5595] NILFS (loop0): recovery complete
[pid  5595] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5595] close(4)                    = 0
[pid  5595] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5595] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  155.874452][ T5596] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.886244][   T27] audit: type=1800 audit(1676306843.648:265): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5595] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5595] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5595] exit_group(0)               = ?
[pid  5595] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5595, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./263", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./263", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./263/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./263/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./263/binderfs")                = 0
umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./263/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./263/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./263/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./263/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./263")                          = 0
mkdir("./264", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5597
./strace-static-x86_64: Process 5597 attached
[pid  5597] chdir("./264")              = 0
[pid  5597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5597] setpgid(0, 0)               = 0
[pid  5597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5597] write(3, "1000", 4)         = 4
[pid  5597] close(3)                    = 0
[pid  5597] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5597] memfd_create("syzkaller", 0) = 3
[pid  5597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5597] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5597] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5597] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5597] close(3)                    = 0
[pid  5597] mkdir("./file0", 0777)      = 0
[  156.164875][ T5597] loop0: detected capacity change from 0 to 4096
[  156.182769][ T5597] NILFS (loop0): invalid segment: Checksum error in segment payload
[  156.190835][ T5597] NILFS (loop0): trying rollback from an earlier position
[  156.204569][ T5597] NILFS (loop0): recovery complete
[pid  5597] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5597] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5597] chdir("./file0")            = 0
[pid  5597] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5597] close(4)                    = 0
[pid  5597] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5597] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  156.211102][ T5598] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.225942][   T27] audit: type=1800 audit(1676306843.988:266): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5597] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5597] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5597] exit_group(0)               = ?
[pid  5597] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5597, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./264", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./264", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./264/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./264/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./264/binderfs")                = 0
umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./264/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./264/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./264/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./264/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./264")                          = 0
mkdir("./265", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5599
./strace-static-x86_64: Process 5599 attached
[pid  5599] chdir("./265")              = 0
[pid  5599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5599] setpgid(0, 0)               = 0
[pid  5599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5599] write(3, "1000", 4)         = 4
[pid  5599] close(3)                    = 0
[pid  5599] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5599] memfd_create("syzkaller", 0) = 3
[pid  5599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5599] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5599] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5599] close(3)                    = 0
[pid  5599] mkdir("./file0", 0777)      = 0
[  156.517476][ T5599] loop0: detected capacity change from 0 to 4096
[  156.533066][ T5599] NILFS (loop0): invalid segment: Checksum error in segment payload
[  156.541170][ T5599] NILFS (loop0): trying rollback from an earlier position
[  156.555203][ T5599] NILFS (loop0): recovery complete
[pid  5599] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5599] chdir("./file0")            = 0
[pid  5599] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5599] close(4)                    = 0
[pid  5599] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5599] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  156.561720][ T5600] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.576931][   T27] audit: type=1800 audit(1676306844.338:267): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5599] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5599] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5599] exit_group(0)               = ?
[pid  5599] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5599, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./265", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./265", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./265/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./265/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./265/binderfs")                = 0
umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./265/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./265/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./265/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./265/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./265")                          = 0
mkdir("./266", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5601
./strace-static-x86_64: Process 5601 attached
[pid  5601] chdir("./266")              = 0
[pid  5601] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5601] setpgid(0, 0)               = 0
[pid  5601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5601] write(3, "1000", 4)         = 4
[pid  5601] close(3)                    = 0
[pid  5601] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5601] memfd_create("syzkaller", 0) = 3
[pid  5601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5601] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5601] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5601] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5601] close(3)                    = 0
[pid  5601] mkdir("./file0", 0777)      = 0
[  156.875003][ T5601] loop0: detected capacity change from 0 to 4096
[  156.891000][ T5601] NILFS (loop0): invalid segment: Checksum error in segment payload
[  156.899146][ T5601] NILFS (loop0): trying rollback from an earlier position
[  156.916567][ T5601] NILFS (loop0): recovery complete
[pid  5601] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5601] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5601] chdir("./file0")            = 0
[pid  5601] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5601] close(4)                    = 0
[pid  5601] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5601] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  156.922681][ T5602] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.955909][   T27] audit: type=1800 audit(1676306844.708:268): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5601] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5601] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5601] exit_group(0)               = ?
[pid  5601] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5601, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./266", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./266", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./266/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./266/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./266/binderfs")                = 0
umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./266/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./266/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./266/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./266/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./266")                          = 0
mkdir("./267", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5603
./strace-static-x86_64: Process 5603 attached
[pid  5603] chdir("./267")              = 0
[pid  5603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5603] setpgid(0, 0)               = 0
[pid  5603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5603] write(3, "1000", 4)         = 4
[pid  5603] close(3)                    = 0
[pid  5603] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5603] memfd_create("syzkaller", 0) = 3
[pid  5603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5603] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5603] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5603] close(3)                    = 0
[pid  5603] mkdir("./file0", 0777)      = 0
[  157.239413][ T5603] loop0: detected capacity change from 0 to 4096
[  157.253951][ T5603] NILFS (loop0): invalid segment: Checksum error in segment payload
[  157.262044][ T5603] NILFS (loop0): trying rollback from an earlier position
[  157.276310][ T5603] NILFS (loop0): recovery complete
[pid  5603] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5603] chdir("./file0")            = 0
[pid  5603] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5603] close(4)                    = 0
[pid  5603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5603] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  157.282317][ T5604] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.298762][   T27] audit: type=1800 audit(1676306845.058:269): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5603] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5603] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5603] exit_group(0)               = ?
[pid  5603] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5603, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./267", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./267", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./267/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./267/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./267/binderfs")                = 0
umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./267/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./267/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./267/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./267/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./267")                          = 0
mkdir("./268", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5605
./strace-static-x86_64: Process 5605 attached
[pid  5605] chdir("./268")              = 0
[pid  5605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5605] setpgid(0, 0)               = 0
[pid  5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5605] write(3, "1000", 4)         = 4
[pid  5605] close(3)                    = 0
[pid  5605] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5605] memfd_create("syzkaller", 0) = 3
[pid  5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5605] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5605] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5605] close(3)                    = 0
[pid  5605] mkdir("./file0", 0777)      = 0
[pid  5605] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  157.574259][ T5605] loop0: detected capacity change from 0 to 4096
[  157.590304][ T5605] NILFS (loop0): invalid segment: Checksum error in segment payload
[  157.598374][ T5605] NILFS (loop0): trying rollback from an earlier position
[  157.611561][ T5605] NILFS (loop0): recovery complete
[pid  5605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5605] chdir("./file0")            = 0
[pid  5605] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5605] close(4)                    = 0
[pid  5605] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5605] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  157.618420][ T5606] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.631534][   T27] audit: type=1800 audit(1676306845.398:270): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5605] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5605] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5605] exit_group(0)               = ?
[pid  5605] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5605, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./268", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./268", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./268/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./268/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./268/binderfs")                = 0
umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./268/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./268/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./268/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./268/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./268")                          = 0
mkdir("./269", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5607
./strace-static-x86_64: Process 5607 attached
[pid  5607] chdir("./269")              = 0
[pid  5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5607] setpgid(0, 0)               = 0
[pid  5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5607] write(3, "1000", 4)         = 4
[pid  5607] close(3)                    = 0
[pid  5607] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5607] memfd_create("syzkaller", 0) = 3
[pid  5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5607] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5607] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5607] close(3)                    = 0
[pid  5607] mkdir("./file0", 0777)      = 0
[  157.910604][ T5607] loop0: detected capacity change from 0 to 4096
[  157.926803][ T5607] NILFS (loop0): invalid segment: Checksum error in segment payload
[  157.934824][ T5607] NILFS (loop0): trying rollback from an earlier position
[  157.948412][ T5607] NILFS (loop0): recovery complete
[pid  5607] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5607] chdir("./file0")            = 0
[pid  5607] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5607] close(4)                    = 0
[pid  5607] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5607] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  157.954597][ T5608] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5607] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5607] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5607] exit_group(0)               = ?
[pid  5607] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./269", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./269", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./269/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./269/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./269/binderfs")                = 0
umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./269/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./269/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./269/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./269/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./269")                          = 0
mkdir("./270", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5609
./strace-static-x86_64: Process 5609 attached
[pid  5609] chdir("./270")              = 0
[pid  5609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5609] setpgid(0, 0)               = 0
[pid  5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5609] write(3, "1000", 4)         = 4
[pid  5609] close(3)                    = 0
[pid  5609] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5609] memfd_create("syzkaller", 0) = 3
[pid  5609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5609] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5609] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5609] close(3)                    = 0
[pid  5609] mkdir("./file0", 0777)      = 0
[  158.244008][ T5609] loop0: detected capacity change from 0 to 4096
[  158.258739][ T5609] NILFS (loop0): invalid segment: Checksum error in segment payload
[  158.266845][ T5609] NILFS (loop0): trying rollback from an earlier position
[  158.280112][ T5609] NILFS (loop0): recovery complete
[pid  5609] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5609] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5609] chdir("./file0")            = 0
[pid  5609] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5609] close(4)                    = 0
[pid  5609] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5609] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  158.286362][ T5610] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5609] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5609] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5609] exit_group(0)               = ?
[pid  5609] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5609, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./270", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./270", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./270/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./270/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./270/binderfs")                = 0
umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./270/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./270/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./270/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./270/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./270")                          = 0
mkdir("./271", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5611
./strace-static-x86_64: Process 5611 attached
[pid  5611] chdir("./271")              = 0
[pid  5611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5611] setpgid(0, 0)               = 0
[pid  5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5611] write(3, "1000", 4)         = 4
[pid  5611] close(3)                    = 0
[pid  5611] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5611] memfd_create("syzkaller", 0) = 3
[pid  5611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5611] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5611] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5611] close(3)                    = 0
[pid  5611] mkdir("./file0", 0777)      = 0
[  158.569244][ T5611] loop0: detected capacity change from 0 to 4096
[  158.585732][ T5611] NILFS (loop0): invalid segment: Checksum error in segment payload
[  158.593845][ T5611] NILFS (loop0): trying rollback from an earlier position
[  158.608044][ T5611] NILFS (loop0): recovery complete
[pid  5611] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5611] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5611] chdir("./file0")            = 0
[pid  5611] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5611] close(4)                    = 0
[pid  5611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5611] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  158.614367][ T5612] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5611] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5611] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5611] exit_group(0)               = ?
[pid  5611] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5611, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./271", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./271", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./271/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./271/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./271/binderfs")                = 0
umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./271/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./271/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./271/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./271/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./271")                          = 0
mkdir("./272", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5613
./strace-static-x86_64: Process 5613 attached
[pid  5613] chdir("./272")              = 0
[pid  5613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5613] setpgid(0, 0)               = 0
[pid  5613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5613] write(3, "1000", 4)         = 4
[pid  5613] close(3)                    = 0
[pid  5613] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5613] memfd_create("syzkaller", 0) = 3
[pid  5613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5613] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5613] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5613] close(3)                    = 0
[pid  5613] mkdir("./file0", 0777)      = 0
[pid  5613] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  158.897008][ T5613] loop0: detected capacity change from 0 to 4096
[  158.911843][ T5613] NILFS (loop0): invalid segment: Checksum error in segment payload
[  158.919915][ T5613] NILFS (loop0): trying rollback from an earlier position
[  158.933874][ T5613] NILFS (loop0): recovery complete
[pid  5613] chdir("./file0")            = 0
[pid  5613] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5613] close(4)                    = 0
[pid  5613] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5613] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  158.940608][ T5614] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5613] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5613] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5613] exit_group(0)               = ?
[pid  5613] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5613, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./272", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./272", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./272/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./272/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./272/binderfs")                = 0
umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./272/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./272/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./272/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./272/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./272")                          = 0
mkdir("./273", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5615
./strace-static-x86_64: Process 5615 attached
[pid  5615] chdir("./273")              = 0
[pid  5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5615] setpgid(0, 0)               = 0
[pid  5615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "1000", 4)         = 4
[pid  5615] close(3)                    = 0
[pid  5615] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5615] memfd_create("syzkaller", 0) = 3
[pid  5615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5615] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5615] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5615] close(3)                    = 0
[pid  5615] mkdir("./file0", 0777)      = 0
[pid  5615] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  159.243840][ T5615] loop0: detected capacity change from 0 to 4096
[  159.260160][ T5615] NILFS (loop0): invalid segment: Checksum error in segment payload
[  159.268309][ T5615] NILFS (loop0): trying rollback from an earlier position
[  159.281424][ T5615] NILFS (loop0): recovery complete
[pid  5615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5615] chdir("./file0")            = 0
[pid  5615] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5615] close(4)                    = 0
[pid  5615] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5615] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  159.288659][ T5616] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5615] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5615] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5615] exit_group(0)               = ?
[pid  5615] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5615, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./273", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./273", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./273/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./273/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./273/binderfs")                = 0
umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./273/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./273/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./273/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./273/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./273")                          = 0
mkdir("./274", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5617
./strace-static-x86_64: Process 5617 attached
[pid  5617] chdir("./274")              = 0
[pid  5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5617] setpgid(0, 0)               = 0
[pid  5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5617] write(3, "1000", 4)         = 4
[pid  5617] close(3)                    = 0
[pid  5617] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5617] memfd_create("syzkaller", 0) = 3
[pid  5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5617] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5617] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5617] close(3)                    = 0
[pid  5617] mkdir("./file0", 0777)      = 0
[pid  5617] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5617] chdir("./file0")            = 0
[pid  5617] ioctl(4, LOOP_CLR_FD)       = 0
[  159.587741][ T5617] loop0: detected capacity change from 0 to 4096
[  159.603449][ T5617] NILFS (loop0): invalid segment: Checksum error in segment payload
[  159.611571][ T5617] NILFS (loop0): trying rollback from an earlier position
[  159.625850][ T5617] NILFS (loop0): recovery complete
[pid  5617] close(4)                    = 0
[pid  5617] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5617] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  159.632036][ T5618] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.647838][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  159.647850][   T27] audit: type=1800 audit(1676306847.408:276): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5617] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5617] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5617] exit_group(0)               = ?
[pid  5617] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./274", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./274", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./274/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./274/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./274/binderfs")                = 0
umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./274/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./274/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./274/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./274/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./274")                          = 0
mkdir("./275", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5619
./strace-static-x86_64: Process 5619 attached
[pid  5619] chdir("./275")              = 0
[pid  5619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5619] setpgid(0, 0)               = 0
[pid  5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5619] write(3, "1000", 4)         = 4
[pid  5619] close(3)                    = 0
[pid  5619] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5619] memfd_create("syzkaller", 0) = 3
[pid  5619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5619] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5619] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5619] close(3)                    = 0
[pid  5619] mkdir("./file0", 0777)      = 0
[  159.982307][ T5619] loop0: detected capacity change from 0 to 4096
[  159.998550][ T5619] NILFS (loop0): invalid segment: Checksum error in segment payload
[  160.006644][ T5619] NILFS (loop0): trying rollback from an earlier position
[  160.021477][ T5619] NILFS (loop0): recovery complete
[pid  5619] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5619] chdir("./file0")            = 0
[pid  5619] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5619] close(4)                    = 0
[pid  5619] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5619] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  160.027941][ T5620] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.044416][   T27] audit: type=1800 audit(1676306847.808:277): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5619] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5619] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5619] exit_group(0)               = ?
[pid  5619] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./275", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./275", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./275/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./275/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./275/binderfs")                = 0
umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./275/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./275/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./275/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./275/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./275")                          = 0
mkdir("./276", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5621
./strace-static-x86_64: Process 5621 attached
[pid  5621] chdir("./276")              = 0
[pid  5621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5621] setpgid(0, 0)               = 0
[pid  5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5621] write(3, "1000", 4)         = 4
[pid  5621] close(3)                    = 0
[pid  5621] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5621] memfd_create("syzkaller", 0) = 3
[pid  5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5621] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5621] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5621] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5621] close(3)                    = 0
[pid  5621] mkdir("./file0", 0777)      = 0
[  160.344675][ T5621] loop0: detected capacity change from 0 to 4096
[  160.363590][ T5621] NILFS (loop0): invalid segment: Checksum error in segment payload
[  160.371717][ T5621] NILFS (loop0): trying rollback from an earlier position
[  160.386603][ T5621] NILFS (loop0): recovery complete
[pid  5621] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5621] chdir("./file0")            = 0
[pid  5621] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5621] close(4)                    = 0
[pid  5621] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5621] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  160.392520][ T5622] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.407603][   T27] audit: type=1800 audit(1676306848.168:278): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5621] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5621] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5621] exit_group(0)               = ?
[pid  5621] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./276", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./276", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./276/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./276/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./276/binderfs")                = 0
umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./276/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./276/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./276/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./276/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./276")                          = 0
mkdir("./277", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5623
./strace-static-x86_64: Process 5623 attached
[pid  5623] chdir("./277")              = 0
[pid  5623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5623] setpgid(0, 0)               = 0
[pid  5623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5623] write(3, "1000", 4)         = 4
[pid  5623] close(3)                    = 0
[pid  5623] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5623] memfd_create("syzkaller", 0) = 3
[pid  5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5623] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5623] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5623] close(3)                    = 0
[pid  5623] mkdir("./file0", 0777)      = 0
[pid  5623] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5623] chdir("./file0")            = 0
[  160.698971][ T5623] loop0: detected capacity change from 0 to 4096
[  160.715258][ T5623] NILFS (loop0): invalid segment: Checksum error in segment payload
[  160.723376][ T5623] NILFS (loop0): trying rollback from an earlier position
[  160.737981][ T5623] NILFS (loop0): recovery complete
[pid  5623] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5623] close(4)                    = 0
[pid  5623] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5623] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  160.744801][ T5624] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.767438][   T27] audit: type=1800 audit(1676306848.528:279): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5623] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5623] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5623] exit_group(0)               = ?
[pid  5623] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5623, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./277", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./277", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./277/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./277/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./277/binderfs")                = 0
umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./277/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./277/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./277/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./277/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./277")                          = 0
mkdir("./278", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5625
./strace-static-x86_64: Process 5625 attached
[pid  5625] chdir("./278")              = 0
[pid  5625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5625] setpgid(0, 0)               = 0
[pid  5625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5625] write(3, "1000", 4)         = 4
[pid  5625] close(3)                    = 0
[pid  5625] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5625] memfd_create("syzkaller", 0) = 3
[pid  5625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5625] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5625] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5625] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5625] close(3)                    = 0
[pid  5625] mkdir("./file0", 0777)      = 0
[pid  5625] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  161.069242][ T5625] loop0: detected capacity change from 0 to 4096
[  161.086373][ T5625] NILFS (loop0): invalid segment: Checksum error in segment payload
[  161.094408][ T5625] NILFS (loop0): trying rollback from an earlier position
[  161.108391][ T5625] NILFS (loop0): recovery complete
[pid  5625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5625] chdir("./file0")            = 0
[pid  5625] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5625] close(4)                    = 0
[pid  5625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5625] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  161.115924][ T5626] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.128196][   T27] audit: type=1800 audit(1676306848.888:280): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5625] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5625] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5625] exit_group(0)               = ?
[pid  5625] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5625, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./278", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./278", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./278/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./278/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./278/binderfs")                = 0
umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./278/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./278/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./278/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./278/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./278")                          = 0
mkdir("./279", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5627
./strace-static-x86_64: Process 5627 attached
[pid  5627] chdir("./279")              = 0
[pid  5627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5627] setpgid(0, 0)               = 0
[pid  5627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5627] write(3, "1000", 4)         = 4
[pid  5627] close(3)                    = 0
[pid  5627] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5627] memfd_create("syzkaller", 0) = 3
[pid  5627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5627] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5627] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5627] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5627] close(3)                    = 0
[pid  5627] mkdir("./file0", 0777)      = 0
[  161.424060][ T5627] loop0: detected capacity change from 0 to 4096
[  161.440126][ T5627] NILFS (loop0): invalid segment: Checksum error in segment payload
[  161.448314][ T5627] NILFS (loop0): trying rollback from an earlier position
[  161.462739][ T5627] NILFS (loop0): recovery complete
[pid  5627] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5627] chdir("./file0")            = 0
[pid  5627] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5627] close(4)                    = 0
[pid  5627] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5627] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  161.469603][ T5628] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.487990][   T27] audit: type=1800 audit(1676306849.248:281): pid=5627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5627] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5627] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5627] exit_group(0)               = ?
[pid  5627] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5627, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./279", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./279", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./279/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./279/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./279/binderfs")                = 0
umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./279/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./279/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./279/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./279/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./279")                          = 0
mkdir("./280", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5629
./strace-static-x86_64: Process 5629 attached
[pid  5629] chdir("./280")              = 0
[pid  5629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5629] setpgid(0, 0)               = 0
[pid  5629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5629] write(3, "1000", 4)         = 4
[pid  5629] close(3)                    = 0
[pid  5629] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5629] memfd_create("syzkaller", 0) = 3
[pid  5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5629] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5629] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5629] close(3)                    = 0
[pid  5629] mkdir("./file0", 0777)      = 0
[  161.791329][ T5629] loop0: detected capacity change from 0 to 4096
[  161.806428][ T5629] NILFS (loop0): invalid segment: Checksum error in segment payload
[  161.814492][ T5629] NILFS (loop0): trying rollback from an earlier position
[  161.828038][ T5629] NILFS (loop0): recovery complete
[pid  5629] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5629] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5629] chdir("./file0")            = 0
[pid  5629] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5629] close(4)                    = 0
[pid  5629] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5629] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  161.834415][ T5630] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.856209][   T27] audit: type=1800 audit(1676306849.608:282): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5629] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5629] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5629] exit_group(0)               = ?
[pid  5629] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5629, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./280", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./280", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./280/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./280/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./280/binderfs")                = 0
umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./280/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./280/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./280/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./280/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./280")                          = 0
mkdir("./281", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5631
./strace-static-x86_64: Process 5631 attached
[pid  5631] chdir("./281")              = 0
[pid  5631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5631] setpgid(0, 0)               = 0
[pid  5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5631] write(3, "1000", 4)         = 4
[pid  5631] close(3)                    = 0
[pid  5631] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5631] memfd_create("syzkaller", 0) = 3
[pid  5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5631] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5631] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5631] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5631] close(3)                    = 0
[pid  5631] mkdir("./file0", 0777)      = 0
[  162.154342][ T5631] loop0: detected capacity change from 0 to 4096
[  162.172114][ T5631] NILFS (loop0): invalid segment: Checksum error in segment payload
[  162.180276][ T5631] NILFS (loop0): trying rollback from an earlier position
[  162.195142][ T5631] NILFS (loop0): recovery complete
[pid  5631] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5631] chdir("./file0")            = 0
[pid  5631] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5631] close(4)                    = 0
[pid  5631] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5631] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  162.201264][ T5632] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.216327][   T27] audit: type=1800 audit(1676306849.978:283): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5631] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5631] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5631] exit_group(0)               = ?
[pid  5631] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./281", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./281", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./281/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./281/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./281/binderfs")                = 0
umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./281/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./281/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./281/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./281/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./281")                          = 0
mkdir("./282", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5633
./strace-static-x86_64: Process 5633 attached
[pid  5633] chdir("./282")              = 0
[pid  5633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5633] setpgid(0, 0)               = 0
[pid  5633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5633] write(3, "1000", 4)         = 4
[pid  5633] close(3)                    = 0
[pid  5633] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5633] memfd_create("syzkaller", 0) = 3
[pid  5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5633] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5633] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5633] close(3)                    = 0
[pid  5633] mkdir("./file0", 0777)      = 0
[pid  5633] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  162.537289][ T5633] loop0: detected capacity change from 0 to 4096
[  162.553023][ T5633] NILFS (loop0): invalid segment: Checksum error in segment payload
[  162.561152][ T5633] NILFS (loop0): trying rollback from an earlier position
[  162.575389][ T5633] NILFS (loop0): recovery complete
[pid  5633] chdir("./file0")            = 0
[pid  5633] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5633] close(4)                    = 0
[pid  5633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5633] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  162.582802][ T5634] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.603282][   T27] audit: type=1800 audit(1676306850.358:284): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5633] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5633] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5633] exit_group(0)               = ?
[pid  5633] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5633, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./282", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./282", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./282/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./282/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./282/binderfs")                = 0
umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./282/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./282/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./282/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./282/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./282")                          = 0
mkdir("./283", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5635
./strace-static-x86_64: Process 5635 attached
[pid  5635] chdir("./283")              = 0
[pid  5635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5635] setpgid(0, 0)               = 0
[pid  5635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5635] write(3, "1000", 4)         = 4
[pid  5635] close(3)                    = 0
[pid  5635] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5635] memfd_create("syzkaller", 0) = 3
[pid  5635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5635] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5635] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5635] close(3)                    = 0
[pid  5635] mkdir("./file0", 0777)      = 0
[pid  5635] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  162.916533][ T5635] loop0: detected capacity change from 0 to 4096
[  162.933143][ T5635] NILFS (loop0): invalid segment: Checksum error in segment payload
[  162.941228][ T5635] NILFS (loop0): trying rollback from an earlier position
[  162.955472][ T5635] NILFS (loop0): recovery complete
[pid  5635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5635] chdir("./file0")            = 0
[pid  5635] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5635] close(4)                    = 0
[pid  5635] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5635] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  162.961870][ T5636] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.976359][   T27] audit: type=1800 audit(1676306850.738:285): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5635] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5635] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5635] exit_group(0)               = ?
[pid  5635] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5635, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./283", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./283", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./283/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./283/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./283/binderfs")                = 0
umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./283/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./283/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./283/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./283/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./283")                          = 0
mkdir("./284", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5637
./strace-static-x86_64: Process 5637 attached
[pid  5637] chdir("./284")              = 0
[pid  5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5637] setpgid(0, 0)               = 0
[pid  5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5637] write(3, "1000", 4)         = 4
[pid  5637] close(3)                    = 0
[pid  5637] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5637] memfd_create("syzkaller", 0) = 3
[pid  5637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5637] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5637] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5637] close(3)                    = 0
[pid  5637] mkdir("./file0", 0777)      = 0
[pid  5637] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  163.271156][ T5637] loop0: detected capacity change from 0 to 4096
[  163.287591][ T5637] NILFS (loop0): invalid segment: Checksum error in segment payload
[  163.295691][ T5637] NILFS (loop0): trying rollback from an earlier position
[  163.309912][ T5637] NILFS (loop0): recovery complete
[pid  5637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5637] chdir("./file0")            = 0
[pid  5637] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5637] close(4)                    = 0
[pid  5637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5637] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  163.316844][ T5638] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5637] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5637] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5637] exit_group(0)               = ?
[pid  5637] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./284", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./284", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./284/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./284/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./284/binderfs")                = 0
umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./284/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./284/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./284/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./284/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./284")                          = 0
mkdir("./285", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5639
./strace-static-x86_64: Process 5639 attached
[pid  5639] chdir("./285")              = 0
[pid  5639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5639] setpgid(0, 0)               = 0
[pid  5639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5639] write(3, "1000", 4)         = 4
[pid  5639] close(3)                    = 0
[pid  5639] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5639] memfd_create("syzkaller", 0) = 3
[pid  5639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5639] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5639] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5639] close(3)                    = 0
[pid  5639] mkdir("./file0", 0777)      = 0
[  163.629907][ T5639] loop0: detected capacity change from 0 to 4096
[  163.647556][ T5639] NILFS (loop0): invalid segment: Checksum error in segment payload
[  163.655732][ T5639] NILFS (loop0): trying rollback from an earlier position
[  163.670237][ T5639] NILFS (loop0): recovery complete
[pid  5639] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5639] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5639] chdir("./file0")            = 0
[pid  5639] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5639] close(4)                    = 0
[pid  5639] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5639] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  163.676019][ T5640] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5639] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5639] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5639] exit_group(0)               = ?
[pid  5639] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5639, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./285", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./285", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./285/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./285/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./285/binderfs")                = 0
umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./285/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./285/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./285/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./285/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./285")                          = 0
mkdir("./286", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5641
./strace-static-x86_64: Process 5641 attached
[pid  5641] chdir("./286")              = 0
[pid  5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5641] setpgid(0, 0)               = 0
[pid  5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5641] write(3, "1000", 4)         = 4
[pid  5641] close(3)                    = 0
[pid  5641] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5641] memfd_create("syzkaller", 0) = 3
[pid  5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5641] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5641] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5641] close(3)                    = 0
[pid  5641] mkdir("./file0", 0777)      = 0
[  163.974546][ T5641] loop0: detected capacity change from 0 to 4096
[  163.992431][ T5641] NILFS (loop0): invalid segment: Checksum error in segment payload
[  164.000556][ T5641] NILFS (loop0): trying rollback from an earlier position
[  164.015071][ T5641] NILFS (loop0): recovery complete
[pid  5641] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5641] chdir("./file0")            = 0
[pid  5641] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5641] close(4)                    = 0
[pid  5641] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5641] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  164.020946][ T5642] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5641] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5641] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5641] exit_group(0)               = ?
[pid  5641] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./286", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./286", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./286/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./286/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./286/binderfs")                = 0
umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./286/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./286/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./286/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./286/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./286")                          = 0
mkdir("./287", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5643
./strace-static-x86_64: Process 5643 attached
[pid  5643] chdir("./287")              = 0
[pid  5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5643] setpgid(0, 0)               = 0
[pid  5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5643] write(3, "1000", 4)         = 4
[pid  5643] close(3)                    = 0
[pid  5643] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5643] memfd_create("syzkaller", 0) = 3
[pid  5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5643] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5643] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5643] close(3)                    = 0
[pid  5643] mkdir("./file0", 0777)      = 0
[  164.308864][ T5643] loop0: detected capacity change from 0 to 4096
[  164.324836][ T5643] NILFS (loop0): invalid segment: Checksum error in segment payload
[  164.333156][ T5643] NILFS (loop0): trying rollback from an earlier position
[  164.349911][ T5643] NILFS (loop0): recovery complete
[pid  5643] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5643] chdir("./file0")            = 0
[pid  5643] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5643] close(4)                    = 0
[pid  5643] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5643] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  164.356508][ T5644] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5643] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5643] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5643] exit_group(0)               = ?
[pid  5643] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./287", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./287", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./287/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./287/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./287/binderfs")                = 0
umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./287/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./287/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./287/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./287/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./287")                          = 0
mkdir("./288", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5645
./strace-static-x86_64: Process 5645 attached
[pid  5645] chdir("./288")              = 0
[pid  5645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5645] setpgid(0, 0)               = 0
[pid  5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5645] write(3, "1000", 4)         = 4
[pid  5645] close(3)                    = 0
[pid  5645] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5645] memfd_create("syzkaller", 0) = 3
[pid  5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5645] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5645] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5645] close(3)                    = 0
[pid  5645] mkdir("./file0", 0777)      = 0
[  164.670572][ T5645] loop0: detected capacity change from 0 to 4096
[  164.686701][ T5645] NILFS (loop0): invalid segment: Checksum error in segment payload
[  164.694763][ T5645] NILFS (loop0): trying rollback from an earlier position
[  164.709508][ T5645] NILFS (loop0): recovery complete
[pid  5645] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5645] chdir("./file0")            = 0
[pid  5645] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5645] close(4)                    = 0
[pid  5645] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5645] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  164.715906][ T5646] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.736248][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  164.736266][   T27] audit: type=1800 audit(1676306852.488:290): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5645] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5645] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5645] exit_group(0)               = ?
[pid  5645] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5645, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./288", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./288", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./288/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./288/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./288/binderfs")                = 0
umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./288/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./288/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./288/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./288/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./288")                          = 0
mkdir("./289", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5647
./strace-static-x86_64: Process 5647 attached
[pid  5647] chdir("./289")              = 0
[pid  5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5647] setpgid(0, 0)               = 0
[pid  5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5647] write(3, "1000", 4)         = 4
[pid  5647] close(3)                    = 0
[pid  5647] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5647] memfd_create("syzkaller", 0) = 3
[pid  5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5647] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5647] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5647] close(3)                    = 0
[pid  5647] mkdir("./file0", 0777)      = 0
[  165.036461][ T5647] loop0: detected capacity change from 0 to 4096
[  165.053428][ T5647] NILFS (loop0): invalid segment: Checksum error in segment payload
[  165.061536][ T5647] NILFS (loop0): trying rollback from an earlier position
[  165.076542][ T5647] NILFS (loop0): recovery complete
[pid  5647] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5647] chdir("./file0")            = 0
[pid  5647] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5647] close(4)                    = 0
[pid  5647] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5647] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  165.083156][ T5648] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.106255][   T27] audit: type=1800 audit(1676306852.858:291): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5647] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5647] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5647] exit_group(0)               = ?
[pid  5647] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5647, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./289", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./289", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./289/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./289/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./289/binderfs")                = 0
umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./289/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./289/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./289/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./289/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./289")                          = 0
mkdir("./290", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5649
./strace-static-x86_64: Process 5649 attached
[pid  5649] chdir("./290")              = 0
[pid  5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5649] setpgid(0, 0)               = 0
[pid  5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5649] write(3, "1000", 4)         = 4
[pid  5649] close(3)                    = 0
[pid  5649] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5649] memfd_create("syzkaller", 0) = 3
[pid  5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5649] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5649] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5649] close(3)                    = 0
[pid  5649] mkdir("./file0", 0777)      = 0
[  165.423481][ T5649] loop0: detected capacity change from 0 to 4096
[  165.439877][ T5649] NILFS (loop0): invalid segment: Checksum error in segment payload
[  165.447964][ T5649] NILFS (loop0): trying rollback from an earlier position
[  165.461871][ T5649] NILFS (loop0): recovery complete
[pid  5649] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5649] chdir("./file0")            = 0
[pid  5649] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5649] close(4)                    = 0
[pid  5649] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5649] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  165.468620][ T5650] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.486196][   T27] audit: type=1800 audit(1676306853.228:292): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5649] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5649] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5649] exit_group(0)               = ?
[pid  5649] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5649, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
umount2("./290", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./290", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./290/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./290/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./290/binderfs")                = 0
umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./290/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./290/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./290/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./290/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./290")                          = 0
mkdir("./291", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5651
./strace-static-x86_64: Process 5651 attached
[pid  5651] chdir("./291")              = 0
[pid  5651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5651] setpgid(0, 0)               = 0
[pid  5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5651] write(3, "1000", 4)         = 4
[pid  5651] close(3)                    = 0
[pid  5651] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5651] memfd_create("syzkaller", 0) = 3
[pid  5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5651] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5651] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5651] close(3)                    = 0
[pid  5651] mkdir("./file0", 0777)      = 0
[pid  5651] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5651] chdir("./file0")            = 0
[  165.793003][ T5651] loop0: detected capacity change from 0 to 4096
[  165.809430][ T5651] NILFS (loop0): invalid segment: Checksum error in segment payload
[  165.817500][ T5651] NILFS (loop0): trying rollback from an earlier position
[  165.832042][ T5651] NILFS (loop0): recovery complete
[pid  5651] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5651] close(4)                    = 0
[pid  5651] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5651] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  165.838114][ T5652] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.856409][   T27] audit: type=1800 audit(1676306853.608:293): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5651] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5651] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5651] exit_group(0)               = ?
[pid  5651] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5651, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./291", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./291", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./291/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./291/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./291/binderfs")                = 0
umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./291/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./291/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./291/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./291/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./291")                          = 0
mkdir("./292", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5653
./strace-static-x86_64: Process 5653 attached
[pid  5653] chdir("./292")              = 0
[pid  5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5653] setpgid(0, 0)               = 0
[pid  5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5653] write(3, "1000", 4)         = 4
[pid  5653] close(3)                    = 0
[pid  5653] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5653] memfd_create("syzkaller", 0) = 3
[pid  5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5653] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5653] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5653] close(3)                    = 0
[pid  5653] mkdir("./file0", 0777)      = 0
[  166.174805][ T5653] loop0: detected capacity change from 0 to 4096
[  166.191029][ T5653] NILFS (loop0): invalid segment: Checksum error in segment payload
[  166.199104][ T5653] NILFS (loop0): trying rollback from an earlier position
[  166.217840][ T5653] NILFS (loop0): recovery complete
[pid  5653] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5653] chdir("./file0")            = 0
[pid  5653] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5653] close(4)                    = 0
[pid  5653] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5653] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  166.224219][ T5654] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.238813][   T27] audit: type=1800 audit(1676306853.998:294): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5653] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5653] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5653] exit_group(0)               = ?
[pid  5653] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5653, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./292", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./292", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./292/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./292/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./292/binderfs")                = 0
umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./292/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./292/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./292/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./292/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./292")                          = 0
mkdir("./293", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5655
./strace-static-x86_64: Process 5655 attached
[pid  5655] chdir("./293")              = 0
[pid  5655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5655] setpgid(0, 0)               = 0
[pid  5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5655] write(3, "1000", 4)         = 4
[pid  5655] close(3)                    = 0
[pid  5655] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5655] memfd_create("syzkaller", 0) = 3
[pid  5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5655] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5655] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5655] close(3)                    = 0
[pid  5655] mkdir("./file0", 0777)      = 0
[  166.544579][ T5655] loop0: detected capacity change from 0 to 4096
[  166.563699][ T5655] NILFS (loop0): invalid segment: Checksum error in segment payload
[  166.571903][ T5655] NILFS (loop0): trying rollback from an earlier position
[  166.588756][ T5655] NILFS (loop0): recovery complete
[pid  5655] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5655] chdir("./file0")            = 0
[pid  5655] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5655] close(4)                    = 0
[pid  5655] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5655] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  166.594975][ T5656] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.601251][   T27] audit: type=1800 audit(1676306854.358:295): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5655] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5655] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5655] exit_group(0)               = ?
[pid  5655] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5655, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./293", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./293", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./293/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./293/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./293/binderfs")                = 0
umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./293/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./293/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./293/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./293/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./293")                          = 0
mkdir("./294", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5657
./strace-static-x86_64: Process 5657 attached
[pid  5657] chdir("./294")              = 0
[pid  5657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5657] setpgid(0, 0)               = 0
[pid  5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5657] write(3, "1000", 4)         = 4
[pid  5657] close(3)                    = 0
[pid  5657] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5657] memfd_create("syzkaller", 0) = 3
[pid  5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5657] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5657] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5657] close(3)                    = 0
[pid  5657] mkdir("./file0", 0777)      = 0
[  166.913731][ T5657] loop0: detected capacity change from 0 to 4096
[  166.933182][ T5657] NILFS (loop0): invalid segment: Checksum error in segment payload
[  166.941576][ T5657] NILFS (loop0): trying rollback from an earlier position
[  166.956212][ T5657] NILFS (loop0): recovery complete
[pid  5657] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5657] chdir("./file0")            = 0
[pid  5657] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5657] close(4)                    = 0
[pid  5657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5657] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  166.962317][ T5658] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.968621][   T27] audit: type=1800 audit(1676306854.728:296): pid=5657 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5657] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5657] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5657] exit_group(0)               = ?
[pid  5657] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5657, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./294", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./294", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./294/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./294/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./294/binderfs")                = 0
umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./294/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./294/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./294/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./294/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./294")                          = 0
mkdir("./295", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5659
./strace-static-x86_64: Process 5659 attached
[pid  5659] chdir("./295")              = 0
[pid  5659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5659] setpgid(0, 0)               = 0
[pid  5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5659] write(3, "1000", 4)         = 4
[pid  5659] close(3)                    = 0
[pid  5659] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5659] memfd_create("syzkaller", 0) = 3
[pid  5659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5659] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5659] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5659] close(3)                    = 0
[pid  5659] mkdir("./file0", 0777)      = 0
[  167.291816][ T5659] loop0: detected capacity change from 0 to 4096
[  167.310869][ T5659] NILFS (loop0): invalid segment: Checksum error in segment payload
[  167.318969][ T5659] NILFS (loop0): trying rollback from an earlier position
[  167.334856][ T5659] NILFS (loop0): recovery complete
[pid  5659] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5659] chdir("./file0")            = 0
[pid  5659] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5659] close(4)                    = 0
[pid  5659] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5659] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  167.341249][ T5660] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.362244][   T27] audit: type=1800 audit(1676306855.118:297): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5659] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5659] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5659] exit_group(0)               = ?
[pid  5659] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5659, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./295", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./295", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./295/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./295/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./295/binderfs")                = 0
umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./295/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./295/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./295/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./295/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./295")                          = 0
mkdir("./296", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5661
./strace-static-x86_64: Process 5661 attached
[pid  5661] chdir("./296")              = 0
[pid  5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5661] setpgid(0, 0)               = 0
[pid  5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5661] write(3, "1000", 4)         = 4
[pid  5661] close(3)                    = 0
[pid  5661] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5661] memfd_create("syzkaller", 0) = 3
[pid  5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5661] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5661] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5661] close(3)                    = 0
[pid  5661] mkdir("./file0", 0777)      = 0
[  167.666056][ T5661] loop0: detected capacity change from 0 to 4096
[  167.683943][ T5661] NILFS (loop0): invalid segment: Checksum error in segment payload
[  167.692036][ T5661] NILFS (loop0): trying rollback from an earlier position
[  167.706391][ T5661] NILFS (loop0): recovery complete
[pid  5661] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5661] chdir("./file0")            = 0
[pid  5661] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5661] close(4)                    = 0
[pid  5661] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5661] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  167.712821][ T5662] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.738268][   T27] audit: type=1800 audit(1676306855.498:298): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5661] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5661] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5661] exit_group(0)               = ?
[pid  5661] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./296", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./296/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./296/binderfs")                = 0
umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./296/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./296/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./296/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./296/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./296")                          = 0
mkdir("./297", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5663 attached
, child_tidptr=0x555555db65d0) = 5663
[pid  5663] chdir("./297")              = 0
[pid  5663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5663] setpgid(0, 0)               = 0
[pid  5663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5663] write(3, "1000", 4)         = 4
[pid  5663] close(3)                    = 0
[pid  5663] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5663] memfd_create("syzkaller", 0) = 3
[pid  5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5663] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5663] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5663] close(3)                    = 0
[pid  5663] mkdir("./file0", 0777)      = 0
[  168.041313][ T5663] loop0: detected capacity change from 0 to 4096
[  168.059999][ T5663] NILFS (loop0): invalid segment: Checksum error in segment payload
[  168.068137][ T5663] NILFS (loop0): trying rollback from an earlier position
[  168.083085][ T5663] NILFS (loop0): recovery complete
[pid  5663] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5663] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5663] chdir("./file0")            = 0
[pid  5663] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5663] close(4)                    = 0
[pid  5663] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5663] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  168.089387][ T5664] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.106245][   T27] audit: type=1800 audit(1676306855.858:299): pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5663] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5663] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5663] exit_group(0)               = ?
[pid  5663] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5663, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./297", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./297/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./297/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./297/binderfs")                = 0
umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./297/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./297/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./297/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./297/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./297")                          = 0
mkdir("./298", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5665
./strace-static-x86_64: Process 5665 attached
[pid  5665] chdir("./298")              = 0
[pid  5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5665] setpgid(0, 0)               = 0
[pid  5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5665] write(3, "1000", 4)         = 4
[pid  5665] close(3)                    = 0
[pid  5665] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5665] memfd_create("syzkaller", 0) = 3
[pid  5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5665] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5665] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5665] close(3)                    = 0
[pid  5665] mkdir("./file0", 0777)      = 0
[pid  5665] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  168.436312][ T5665] loop0: detected capacity change from 0 to 4096
[  168.455385][ T5665] NILFS (loop0): invalid segment: Checksum error in segment payload
[  168.463728][ T5665] NILFS (loop0): trying rollback from an earlier position
[  168.477458][ T5665] NILFS (loop0): recovery complete
[pid  5665] chdir("./file0")            = 0
[pid  5665] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5665] close(4)                    = 0
[pid  5665] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5665] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  168.483682][ T5666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5665] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5665] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5665] exit_group(0)               = ?
[pid  5665] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5665, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./298", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./298/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./298/binderfs")                = 0
umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./298/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./298/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./298/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./298/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./298")                          = 0
mkdir("./299", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5667
./strace-static-x86_64: Process 5667 attached
[pid  5667] chdir("./299")              = 0
[pid  5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5667] setpgid(0, 0)               = 0
[pid  5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5667] write(3, "1000", 4)         = 4
[pid  5667] close(3)                    = 0
[pid  5667] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5667] memfd_create("syzkaller", 0) = 3
[pid  5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5667] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5667] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5667] close(3)                    = 0
[pid  5667] mkdir("./file0", 0777)      = 0
[  168.755380][ T5667] loop0: detected capacity change from 0 to 4096
[  168.772085][ T5667] NILFS (loop0): invalid segment: Checksum error in segment payload
[  168.780180][ T5667] NILFS (loop0): trying rollback from an earlier position
[  168.794378][ T5667] NILFS (loop0): recovery complete
[pid  5667] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5667] chdir("./file0")            = 0
[pid  5667] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5667] close(4)                    = 0
[pid  5667] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5667] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  168.800457][ T5668] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5667] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5667] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5667] exit_group(0)               = ?
[pid  5667] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5667, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./299", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./299/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./299/binderfs")                = 0
umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./299/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./299/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./299/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./299/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./299")                          = 0
mkdir("./300", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5669
./strace-static-x86_64: Process 5669 attached
[pid  5669] chdir("./300")              = 0
[pid  5669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5669] setpgid(0, 0)               = 0
[pid  5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5669] write(3, "1000", 4)         = 4
[pid  5669] close(3)                    = 0
[pid  5669] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5669] memfd_create("syzkaller", 0) = 3
[pid  5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5669] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5669] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5669] close(3)                    = 0
[pid  5669] mkdir("./file0", 0777)      = 0
[  169.068883][ T5669] loop0: detected capacity change from 0 to 4096
[  169.083987][ T5669] NILFS (loop0): invalid segment: Checksum error in segment payload
[  169.092104][ T5669] NILFS (loop0): trying rollback from an earlier position
[  169.106078][ T5669] NILFS (loop0): recovery complete
[pid  5669] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5669] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5669] chdir("./file0")            = 0
[pid  5669] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5669] close(4)                    = 0
[pid  5669] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5669] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  169.112069][ T5670] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5669] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5669] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5669] exit_group(0)               = ?
[pid  5669] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5669, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./300", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./300/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./300/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./300/binderfs")                = 0
umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./300/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./300/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./300/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./300/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./300")                          = 0
mkdir("./301", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5671
./strace-static-x86_64: Process 5671 attached
[pid  5671] chdir("./301")              = 0
[pid  5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5671] setpgid(0, 0)               = 0
[pid  5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5671] write(3, "1000", 4)         = 4
[pid  5671] close(3)                    = 0
[pid  5671] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5671] memfd_create("syzkaller", 0) = 3
[pid  5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5671] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5671] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5671] close(3)                    = 0
[pid  5671] mkdir("./file0", 0777)      = 0
[  169.394279][ T5671] loop0: detected capacity change from 0 to 4096
[  169.411532][ T5671] NILFS (loop0): invalid segment: Checksum error in segment payload
[  169.419584][ T5671] NILFS (loop0): trying rollback from an earlier position
[  169.433604][ T5671] NILFS (loop0): recovery complete
[pid  5671] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5671] chdir("./file0")            = 0
[pid  5671] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5671] close(4)                    = 0
[pid  5671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5671] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  169.439505][ T5672] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5671] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5671] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5671] exit_group(0)               = ?
[pid  5671] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./301", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./301/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./301/binderfs")                = 0
umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./301/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./301/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./301/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./301/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./301")                          = 0
mkdir("./302", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5673
./strace-static-x86_64: Process 5673 attached
[pid  5673] chdir("./302")              = 0
[pid  5673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5673] setpgid(0, 0)               = 0
[pid  5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5673] write(3, "1000", 4)         = 4
[pid  5673] close(3)                    = 0
[pid  5673] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5673] memfd_create("syzkaller", 0) = 3
[pid  5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5673] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5673] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5673] close(3)                    = 0
[pid  5673] mkdir("./file0", 0777)      = 0
[  169.727566][ T5673] loop0: detected capacity change from 0 to 4096
[  169.742609][ T5673] NILFS (loop0): invalid segment: Checksum error in segment payload
[  169.750692][ T5673] NILFS (loop0): trying rollback from an earlier position
[  169.764403][ T5673] NILFS (loop0): recovery complete
[pid  5673] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5673] chdir("./file0")            = 0
[pid  5673] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5673] close(4)                    = 0
[pid  5673] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5673] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  169.770349][ T5674] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.786200][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  169.786212][   T27] audit: type=1800 audit(1676306857.538:304): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5673] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5673] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5673] exit_group(0)               = ?
[pid  5673] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5673, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./302", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./302/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./302/binderfs")                = 0
umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./302/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./302/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./302/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./302/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./302")                          = 0
mkdir("./303", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5675
./strace-static-x86_64: Process 5675 attached
[pid  5675] chdir("./303")              = 0
[pid  5675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5675] setpgid(0, 0)               = 0
[pid  5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5675] write(3, "1000", 4)         = 4
[pid  5675] close(3)                    = 0
[pid  5675] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5675] memfd_create("syzkaller", 0) = 3
[pid  5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5675] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5675] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5675] close(3)                    = 0
[pid  5675] mkdir("./file0", 0777)      = 0
[  170.064829][ T5675] loop0: detected capacity change from 0 to 4096
[  170.081373][ T5675] NILFS (loop0): invalid segment: Checksum error in segment payload
[  170.089443][ T5675] NILFS (loop0): trying rollback from an earlier position
[  170.103185][ T5675] NILFS (loop0): recovery complete
[pid  5675] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5675] chdir("./file0")            = 0
[pid  5675] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5675] close(4)                    = 0
[pid  5675] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5675] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  170.109267][ T5676] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.114783][   T27] audit: type=1800 audit(1676306857.878:305): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5675] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5675] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5675] exit_group(0)               = ?
[pid  5675] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5675, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./303", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./303/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./303/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./303/binderfs")                = 0
umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./303/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./303/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./303/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./303/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./303")                          = 0
mkdir("./304", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5677
./strace-static-x86_64: Process 5677 attached
[pid  5677] chdir("./304")              = 0
[pid  5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5677] setpgid(0, 0)               = 0
[pid  5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5677] write(3, "1000", 4)         = 4
[pid  5677] close(3)                    = 0
[pid  5677] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5677] memfd_create("syzkaller", 0) = 3
[pid  5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5677] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5677] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5677] close(3)                    = 0
[pid  5677] mkdir("./file0", 0777)      = 0
[  170.426999][ T5677] loop0: detected capacity change from 0 to 4096
[  170.443325][ T5677] NILFS (loop0): invalid segment: Checksum error in segment payload
[  170.451425][ T5677] NILFS (loop0): trying rollback from an earlier position
[  170.465642][ T5677] NILFS (loop0): recovery complete
[pid  5677] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5677] chdir("./file0")            = 0
[pid  5677] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5677] close(4)                    = 0
[pid  5677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5677] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  170.471528][ T5678] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.489650][   T27] audit: type=1800 audit(1676306858.248:306): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5677] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5677] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5677] exit_group(0)               = ?
[pid  5677] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./304", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./304/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./304/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./304/binderfs")                = 0
umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./304/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./304/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./304/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./304/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./304")                          = 0
mkdir("./305", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5679 attached
, child_tidptr=0x555555db65d0) = 5679
[pid  5679] chdir("./305")              = 0
[pid  5679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5679] setpgid(0, 0)               = 0
[pid  5679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5679] write(3, "1000", 4)         = 4
[pid  5679] close(3)                    = 0
[pid  5679] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5679] memfd_create("syzkaller", 0) = 3
[pid  5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5679] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5679] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5679] close(3)                    = 0
[pid  5679] mkdir("./file0", 0777)      = 0
[  170.790636][ T5679] loop0: detected capacity change from 0 to 4096
[  170.806775][ T5679] NILFS (loop0): invalid segment: Checksum error in segment payload
[  170.814823][ T5679] NILFS (loop0): trying rollback from an earlier position
[  170.829693][ T5679] NILFS (loop0): recovery complete
[pid  5679] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5679] chdir("./file0")            = 0
[pid  5679] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5679] close(4)                    = 0
[pid  5679] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5679] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  170.836325][ T5680] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.853535][   T27] audit: type=1800 audit(1676306858.608:307): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5679] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5679] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5679] exit_group(0)               = ?
[pid  5679] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5679, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./305", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./305/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./305/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./305/binderfs")                = 0
umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./305/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./305/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./305/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./305/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./305")                          = 0
mkdir("./306", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5681
./strace-static-x86_64: Process 5681 attached
[pid  5681] chdir("./306")              = 0
[pid  5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5681] setpgid(0, 0)               = 0
[pid  5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5681] write(3, "1000", 4)         = 4
[pid  5681] close(3)                    = 0
[pid  5681] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5681] memfd_create("syzkaller", 0) = 3
[pid  5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5681] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5681] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5681] close(3)                    = 0
[pid  5681] mkdir("./file0", 0777)      = 0
[  171.165333][ T5681] loop0: detected capacity change from 0 to 4096
[  171.181085][ T5681] NILFS (loop0): invalid segment: Checksum error in segment payload
[  171.189230][ T5681] NILFS (loop0): trying rollback from an earlier position
[  171.202909][ T5681] NILFS (loop0): recovery complete
[pid  5681] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5681] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5681] chdir("./file0")            = 0
[pid  5681] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5681] close(4)                    = 0
[pid  5681] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5681] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  171.208959][ T5682] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.226213][   T27] audit: type=1800 audit(1676306858.978:308): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5681] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5681] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5681] exit_group(0)               = ?
[pid  5681] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5681, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./306", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./306/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./306/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./306/binderfs")                = 0
umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./306/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./306/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./306/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./306/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./306")                          = 0
mkdir("./307", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5683
./strace-static-x86_64: Process 5683 attached
[pid  5683] chdir("./307")              = 0
[pid  5683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5683] setpgid(0, 0)               = 0
[pid  5683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5683] write(3, "1000", 4)         = 4
[pid  5683] close(3)                    = 0
[pid  5683] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5683] memfd_create("syzkaller", 0) = 3
[pid  5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5683] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5683] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5683] close(3)                    = 0
[pid  5683] mkdir("./file0", 0777)      = 0
[  171.507824][ T5683] loop0: detected capacity change from 0 to 4096
[  171.522752][ T5683] NILFS (loop0): invalid segment: Checksum error in segment payload
[  171.530908][ T5683] NILFS (loop0): trying rollback from an earlier position
[  171.546342][ T5683] NILFS (loop0): recovery complete
[pid  5683] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5683] chdir("./file0")            = 0
[pid  5683] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5683] close(4)                    = 0
[pid  5683] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5683] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  171.552342][ T5684] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.557363][   T27] audit: type=1800 audit(1676306859.318:309): pid=5683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5683] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5683] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5683] exit_group(0)               = ?
[pid  5683] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5683, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./307", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./307/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./307/binderfs")                = 0
umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./307/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./307/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./307/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./307/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./307")                          = 0
mkdir("./308", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5685
./strace-static-x86_64: Process 5685 attached
[pid  5685] chdir("./308")              = 0
[pid  5685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5685] setpgid(0, 0)               = 0
[pid  5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5685] write(3, "1000", 4)         = 4
[pid  5685] close(3)                    = 0
[pid  5685] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5685] memfd_create("syzkaller", 0) = 3
[pid  5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5685] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5685] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5685] close(3)                    = 0
[pid  5685] mkdir("./file0", 0777)      = 0
[  171.838208][ T5685] loop0: detected capacity change from 0 to 4096
[  171.854644][ T5685] NILFS (loop0): invalid segment: Checksum error in segment payload
[  171.862855][ T5685] NILFS (loop0): trying rollback from an earlier position
[  171.876361][ T5685] NILFS (loop0): recovery complete
[pid  5685] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5685] chdir("./file0")            = 0
[pid  5685] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5685] close(4)                    = 0
[pid  5685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5685] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  171.882249][ T5686] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.886668][   T27] audit: type=1800 audit(1676306859.648:310): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5685] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5685] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5685] exit_group(0)               = ?
[pid  5685] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5685, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./308", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./308/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./308/binderfs")                = 0
umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./308/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./308/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./308/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./308/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./308")                          = 0
mkdir("./309", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5687
./strace-static-x86_64: Process 5687 attached
[pid  5687] chdir("./309")              = 0
[pid  5687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5687] setpgid(0, 0)               = 0
[pid  5687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5687] write(3, "1000", 4)         = 4
[pid  5687] close(3)                    = 0
[pid  5687] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5687] memfd_create("syzkaller", 0) = 3
[pid  5687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5687] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5687] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5687] close(3)                    = 0
[pid  5687] mkdir("./file0", 0777)      = 0
[pid  5687] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5687] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5687] chdir("./file0")            = 0
[pid  5687] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5687] close(4)                    = 0
[  172.179070][ T5687] loop0: detected capacity change from 0 to 4096
[  172.194942][ T5687] NILFS (loop0): invalid segment: Checksum error in segment payload
[  172.203240][ T5687] NILFS (loop0): trying rollback from an earlier position
[  172.217713][ T5687] NILFS (loop0): recovery complete
[pid  5687] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5687] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  172.224124][ T5688] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.230800][   T27] audit: type=1800 audit(1676306859.988:311): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5687] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5687] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5687] exit_group(0)               = ?
[pid  5687] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5687, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./309", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./309/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./309/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./309/binderfs")                = 0
umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./309/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./309/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./309/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./309/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./309")                          = 0
mkdir("./310", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5689
./strace-static-x86_64: Process 5689 attached
[pid  5689] chdir("./310")              = 0
[pid  5689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5689] setpgid(0, 0)               = 0
[pid  5689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5689] write(3, "1000", 4)         = 4
[pid  5689] close(3)                    = 0
[pid  5689] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5689] memfd_create("syzkaller", 0) = 3
[pid  5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5689] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5689] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5689] close(3)                    = 0
[pid  5689] mkdir("./file0", 0777)      = 0
[  172.519187][ T5689] loop0: detected capacity change from 0 to 4096
[  172.536720][ T5689] NILFS (loop0): invalid segment: Checksum error in segment payload
[  172.544914][ T5689] NILFS (loop0): trying rollback from an earlier position
[  172.559464][ T5689] NILFS (loop0): recovery complete
[pid  5689] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5689] chdir("./file0")            = 0
[pid  5689] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5689] close(4)                    = 0
[pid  5689] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5689] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  172.565844][ T5690] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.581649][   T27] audit: type=1800 audit(1676306860.338:312): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5689] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5689] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5689] exit_group(0)               = ?
[pid  5689] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5689, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./310", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./310/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./310/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./310/binderfs")                = 0
umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./310/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./310/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./310/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./310/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./310")                          = 0
mkdir("./311", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5691
./strace-static-x86_64: Process 5691 attached
[pid  5691] chdir("./311")              = 0
[pid  5691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5691] setpgid(0, 0)               = 0
[pid  5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5691] write(3, "1000", 4)         = 4
[pid  5691] close(3)                    = 0
[pid  5691] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5691] memfd_create("syzkaller", 0) = 3
[pid  5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5691] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5691] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5691] close(3)                    = 0
[pid  5691] mkdir("./file0", 0777)      = 0
[pid  5691] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  172.859413][ T5691] loop0: detected capacity change from 0 to 4096
[  172.877587][ T5691] NILFS (loop0): invalid segment: Checksum error in segment payload
[  172.885606][ T5691] NILFS (loop0): trying rollback from an earlier position
[  172.899415][ T5691] NILFS (loop0): recovery complete
[pid  5691] chdir("./file0")            = 0
[pid  5691] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5691] close(4)                    = 0
[pid  5691] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5691] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  172.905755][ T5692] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.919206][   T27] audit: type=1800 audit(1676306860.678:313): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5691] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5691] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5691] exit_group(0)               = ?
[pid  5691] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5691, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./311", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./311/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./311/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./311/binderfs")                = 0
umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./311/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./311/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./311/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./311/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./311")                          = 0
mkdir("./312", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5693
./strace-static-x86_64: Process 5693 attached
[pid  5693] chdir("./312")              = 0
[pid  5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5693] setpgid(0, 0)               = 0
[pid  5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5693] write(3, "1000", 4)         = 4
[pid  5693] close(3)                    = 0
[pid  5693] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5693] memfd_create("syzkaller", 0) = 3
[pid  5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5693] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5693] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5693] close(3)                    = 0
[pid  5693] mkdir("./file0", 0777)      = 0
[  173.213253][ T5693] loop0: detected capacity change from 0 to 4096
[  173.230069][ T5693] NILFS (loop0): invalid segment: Checksum error in segment payload
[  173.238140][ T5693] NILFS (loop0): trying rollback from an earlier position
[  173.251146][ T5693] NILFS (loop0): recovery complete
[pid  5693] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5693] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5693] chdir("./file0")            = 0
[pid  5693] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5693] close(4)                    = 0
[pid  5693] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5693] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  173.256970][ T5694] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5693] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5693] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5693] exit_group(0)               = ?
[pid  5693] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5693, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./312", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./312/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./312/binderfs")                = 0
umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./312/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./312/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./312/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./312/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./312")                          = 0
mkdir("./313", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5695
./strace-static-x86_64: Process 5695 attached
[pid  5695] chdir("./313")              = 0
[pid  5695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5695] setpgid(0, 0)               = 0
[pid  5695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5695] write(3, "1000", 4)         = 4
[pid  5695] close(3)                    = 0
[pid  5695] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5695] memfd_create("syzkaller", 0) = 3
[pid  5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5695] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5695] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5695] close(3)                    = 0
[pid  5695] mkdir("./file0", 0777)      = 0
[  173.537831][ T5695] loop0: detected capacity change from 0 to 4096
[  173.553666][ T5695] NILFS (loop0): invalid segment: Checksum error in segment payload
[  173.561760][ T5695] NILFS (loop0): trying rollback from an earlier position
[  173.575697][ T5695] NILFS (loop0): recovery complete
[pid  5695] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5695] chdir("./file0")            = 0
[pid  5695] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5695] close(4)                    = 0
[pid  5695] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5695] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  173.581620][ T5696] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5695] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5695] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5695] exit_group(0)               = ?
[pid  5695] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5695, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./313", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./313/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./313/binderfs")                = 0
umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./313/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./313/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./313/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./313/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./313")                          = 0
mkdir("./314", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5697 attached
, child_tidptr=0x555555db65d0) = 5697
[pid  5697] chdir("./314")              = 0
[pid  5697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5697] setpgid(0, 0)               = 0
[pid  5697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5697] write(3, "1000", 4)         = 4
[pid  5697] close(3)                    = 0
[pid  5697] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5697] memfd_create("syzkaller", 0) = 3
[pid  5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5697] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5697] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5697] close(3)                    = 0
[pid  5697] mkdir("./file0", 0777)      = 0
[  173.882408][ T5697] loop0: detected capacity change from 0 to 4096
[  173.898557][ T5697] NILFS (loop0): invalid segment: Checksum error in segment payload
[  173.906615][ T5697] NILFS (loop0): trying rollback from an earlier position
[  173.920439][ T5697] NILFS (loop0): recovery complete
[pid  5697] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5697] chdir("./file0")            = 0
[pid  5697] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5697] close(4)                    = 0
[pid  5697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5697] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  173.926850][ T5698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5697] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5697] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5697] exit_group(0)               = ?
[pid  5697] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5697, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./314", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./314/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./314/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./314/binderfs")                = 0
umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./314/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./314/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./314/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./314/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./314")                          = 0
mkdir("./315", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5699
./strace-static-x86_64: Process 5699 attached
[pid  5699] chdir("./315")              = 0
[pid  5699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5699] setpgid(0, 0)               = 0
[pid  5699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5699] write(3, "1000", 4)         = 4
[pid  5699] close(3)                    = 0
[pid  5699] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5699] memfd_create("syzkaller", 0) = 3
[pid  5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5699] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5699] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5699] close(3)                    = 0
[pid  5699] mkdir("./file0", 0777)      = 0
[pid  5699] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  174.216972][ T5699] loop0: detected capacity change from 0 to 4096
[  174.233914][ T5699] NILFS (loop0): invalid segment: Checksum error in segment payload
[  174.242004][ T5699] NILFS (loop0): trying rollback from an earlier position
[  174.258640][ T5699] NILFS (loop0): recovery complete
[pid  5699] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5699] chdir("./file0")            = 0
[pid  5699] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5699] close(4)                    = 0
[pid  5699] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5699] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  174.264779][ T5700] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5699] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5699] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5699] exit_group(0)               = ?
[pid  5699] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5699, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./315", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./315/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./315/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./315/binderfs")                = 0
umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./315/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./315/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./315/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./315/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./315")                          = 0
mkdir("./316", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5701
./strace-static-x86_64: Process 5701 attached
[pid  5701] chdir("./316")              = 0
[pid  5701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5701] setpgid(0, 0)               = 0
[pid  5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5701] write(3, "1000", 4)         = 4
[pid  5701] close(3)                    = 0
[pid  5701] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5701] memfd_create("syzkaller", 0) = 3
[pid  5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5701] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5701] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5701] close(3)                    = 0
[pid  5701] mkdir("./file0", 0777)      = 0
[  174.559757][ T5701] loop0: detected capacity change from 0 to 4096
[  174.576024][ T5701] NILFS (loop0): invalid segment: Checksum error in segment payload
[  174.584219][ T5701] NILFS (loop0): trying rollback from an earlier position
[  174.598660][ T5701] NILFS (loop0): recovery complete
[pid  5701] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5701] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5701] chdir("./file0")            = 0
[pid  5701] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5701] close(4)                    = 0
[pid  5701] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5701] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  174.604708][ T5702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5701] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5701] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5701] exit_group(0)               = ?
[pid  5701] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5701, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./316", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./316/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./316/binderfs")                = 0
umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./316/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./316/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./316/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./316/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./316")                          = 0
mkdir("./317", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5703
./strace-static-x86_64: Process 5703 attached
[pid  5703] chdir("./317")              = 0
[pid  5703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5703] setpgid(0, 0)               = 0
[pid  5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5703] write(3, "1000", 4)         = 4
[pid  5703] close(3)                    = 0
[pid  5703] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5703] memfd_create("syzkaller", 0) = 3
[pid  5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5703] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5703] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5703] close(3)                    = 0
[pid  5703] mkdir("./file0", 0777)      = 0
[  174.897371][ T5703] loop0: detected capacity change from 0 to 4096
[  174.912590][ T5703] NILFS (loop0): invalid segment: Checksum error in segment payload
[  174.920715][ T5703] NILFS (loop0): trying rollback from an earlier position
[  174.934683][ T5703] NILFS (loop0): recovery complete
[pid  5703] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5703] chdir("./file0")            = 0
[pid  5703] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5703] close(4)                    = 0
[pid  5703] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5703] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  174.940438][ T5704] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.956374][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  174.956386][   T27] audit: type=1800 audit(1676306862.718:319): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5703] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5703] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5703] exit_group(0)               = ?
[pid  5703] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5703, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./317", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./317/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./317/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./317/binderfs")                = 0
umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./317/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./317/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./317/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./317/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./317")                          = 0
mkdir("./318", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5705
./strace-static-x86_64: Process 5705 attached
[pid  5705] chdir("./318")              = 0
[pid  5705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5705] setpgid(0, 0)               = 0
[pid  5705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5705] write(3, "1000", 4)         = 4
[pid  5705] close(3)                    = 0
[pid  5705] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5705] memfd_create("syzkaller", 0) = 3
[pid  5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5705] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5705] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5705] close(3)                    = 0
[pid  5705] mkdir("./file0", 0777)      = 0
[  175.239990][ T5705] loop0: detected capacity change from 0 to 4096
[  175.255907][ T5705] NILFS (loop0): invalid segment: Checksum error in segment payload
[  175.264060][ T5705] NILFS (loop0): trying rollback from an earlier position
[  175.277587][ T5705] NILFS (loop0): recovery complete
[pid  5705] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5705] chdir("./file0")            = 0
[pid  5705] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5705] close(4)                    = 0
[pid  5705] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5705] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  175.283382][ T5706] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.306198][   T27] audit: type=1800 audit(1676306863.058:320): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5705] sendfile(4, 5, NULL, 2147538701) = 65536
[pid  5705] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5705] exit_group(0)               = ?
[pid  5705] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5705, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./318", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./318/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./318/binderfs")                = 0
umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./318/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./318/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./318/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[  175.336353][ T5706] NILFS (loop0): nilfs_direct_assign (ino=6): invalid key: 130
[  175.344338][ T5706] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=6)
[  175.354751][ T5706] Remounting filesystem read-only
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./318/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./318")                          = 0
mkdir("./319", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5707
./strace-static-x86_64: Process 5707 attached
[pid  5707] chdir("./319")              = 0
[pid  5707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5707] setpgid(0, 0)               = 0
[pid  5707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5707] write(3, "1000", 4)         = 4
[pid  5707] close(3)                    = 0
[pid  5707] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5707] memfd_create("syzkaller", 0) = 3
[pid  5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5707] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5707] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5707] close(3)                    = 0
[pid  5707] mkdir("./file0", 0777)      = 0
[  175.453131][ T5707] loop0: detected capacity change from 0 to 4096
[  175.469908][ T5707] NILFS (loop0): invalid segment: Checksum error in segment payload
[  175.478003][ T5707] NILFS (loop0): trying rollback from an earlier position
[  175.491031][ T5707] NILFS (loop0): recovery complete
[pid  5707] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5707] chdir("./file0")            = 0
[pid  5707] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5707] close(4)                    = 0
[pid  5707] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5707] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  175.496797][ T5708] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.509751][   T27] audit: type=1800 audit(1676306863.268:321): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5707] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5707] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5707] exit_group(0)               = ?
[pid  5707] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5707, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./319", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./319/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./319/binderfs")                = 0
umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./319/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./319/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./319/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./319")                          = 0
mkdir("./320", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5709
./strace-static-x86_64: Process 5709 attached
[pid  5709] chdir("./320")              = 0
[pid  5709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5709] setpgid(0, 0)               = 0
[pid  5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5709] write(3, "1000", 4)         = 4
[pid  5709] close(3)                    = 0
[pid  5709] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5709] memfd_create("syzkaller", 0) = 3
[pid  5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5709] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5709] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5709] close(3)                    = 0
[pid  5709] mkdir("./file0", 0777)      = 0
[pid  5709] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  175.794703][ T5709] loop0: detected capacity change from 0 to 4096
[  175.812999][ T5709] NILFS (loop0): invalid segment: Checksum error in segment payload
[  175.821124][ T5709] NILFS (loop0): trying rollback from an earlier position
[  175.834223][ T5709] NILFS (loop0): recovery complete
[pid  5709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5709] chdir("./file0")            = 0
[pid  5709] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5709] close(4)                    = 0
[pid  5709] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5709] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  175.841180][ T5710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.854590][   T27] audit: type=1800 audit(1676306863.618:322): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5709] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5709] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5709] exit_group(0)               = ?
[pid  5709] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5709, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./320/binderfs")                = 0
umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./320/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./320/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./320")                          = 0
mkdir("./321", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5711
./strace-static-x86_64: Process 5711 attached
[pid  5711] chdir("./321")              = 0
[pid  5711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5711] setpgid(0, 0)               = 0
[pid  5711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5711] write(3, "1000", 4)         = 4
[pid  5711] close(3)                    = 0
[pid  5711] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5711] memfd_create("syzkaller", 0) = 3
[pid  5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5711] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5711] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5711] close(3)                    = 0
[pid  5711] mkdir("./file0", 0777)      = 0
[pid  5711] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5711] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5711] chdir("./file0")            = 0
[pid  5711] ioctl(4, LOOP_CLR_FD)       = 0
[  176.148240][ T5711] loop0: detected capacity change from 0 to 4096
[  176.165381][ T5711] NILFS (loop0): invalid segment: Checksum error in segment payload
[  176.173539][ T5711] NILFS (loop0): trying rollback from an earlier position
[  176.186727][ T5711] NILFS (loop0): recovery complete
[pid  5711] close(4)                    = 0
[pid  5711] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5711] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  176.192779][ T5712] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.207460][   T27] audit: type=1800 audit(1676306863.968:323): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5711] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5711] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5711] exit_group(0)               = ?
[pid  5711] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5711, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./321/binderfs")                = 0
umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./321/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./321/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./321")                          = 0
mkdir("./322", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5713
./strace-static-x86_64: Process 5713 attached
[pid  5713] chdir("./322")              = 0
[pid  5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5713] setpgid(0, 0)               = 0
[pid  5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5713] write(3, "1000", 4)         = 4
[pid  5713] close(3)                    = 0
[pid  5713] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5713] memfd_create("syzkaller", 0) = 3
[pid  5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5713] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5713] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5713] close(3)                    = 0
[pid  5713] mkdir("./file0", 0777)      = 0
[  176.497306][ T5713] loop0: detected capacity change from 0 to 4096
[  176.513131][ T5713] NILFS (loop0): invalid segment: Checksum error in segment payload
[  176.521195][ T5713] NILFS (loop0): trying rollback from an earlier position
[  176.535174][ T5713] NILFS (loop0): recovery complete
[pid  5713] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5713] chdir("./file0")            = 0
[pid  5713] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5713] close(4)                    = 0
[pid  5713] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5713] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  176.541668][ T5714] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.556068][   T27] audit: type=1800 audit(1676306864.318:324): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5713] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5713] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5713] exit_group(0)               = ?
[pid  5713] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5713, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./322/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./322/binderfs")                = 0
umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./322/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./322/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./322")                          = 0
mkdir("./323", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5715
./strace-static-x86_64: Process 5715 attached
[pid  5715] chdir("./323")              = 0
[pid  5715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5715] setpgid(0, 0)               = 0
[pid  5715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5715] write(3, "1000", 4)         = 4
[pid  5715] close(3)                    = 0
[pid  5715] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5715] memfd_create("syzkaller", 0) = 3
[pid  5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5715] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5715] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5715] close(3)                    = 0
[pid  5715] mkdir("./file0", 0777)      = 0
[  176.851063][ T5715] loop0: detected capacity change from 0 to 4096
[  176.867685][ T5715] NILFS (loop0): invalid segment: Checksum error in segment payload
[  176.875759][ T5715] NILFS (loop0): trying rollback from an earlier position
[  176.890569][ T5715] NILFS (loop0): recovery complete
[pid  5715] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5715] chdir("./file0")            = 0
[pid  5715] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5715] close(4)                    = 0
[pid  5715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5715] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  176.896517][ T5716] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.909872][   T27] audit: type=1800 audit(1676306864.668:325): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5715] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5715] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5715] exit_group(0)               = ?
[pid  5715] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5715, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./323/binderfs")                = 0
umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./323/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./323/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./323")                          = 0
mkdir("./324", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5717
./strace-static-x86_64: Process 5717 attached
[pid  5717] chdir("./324")              = 0
[pid  5717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5717] setpgid(0, 0)               = 0
[pid  5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5717] write(3, "1000", 4)         = 4
[pid  5717] close(3)                    = 0
[pid  5717] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5717] memfd_create("syzkaller", 0) = 3
[pid  5717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5717] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5717] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5717] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5717] close(3)                    = 0
[pid  5717] mkdir("./file0", 0777)      = 0
[  177.203820][ T5717] loop0: detected capacity change from 0 to 4096
[  177.218776][ T5717] NILFS (loop0): invalid segment: Checksum error in segment payload
[  177.226961][ T5717] NILFS (loop0): trying rollback from an earlier position
[  177.240253][ T5717] NILFS (loop0): recovery complete
[pid  5717] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5717] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5717] chdir("./file0")            = 0
[pid  5717] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5717] close(4)                    = 0
[pid  5717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5717] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  177.245956][ T5718] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.266213][   T27] audit: type=1800 audit(1676306865.018:326): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5717] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5717] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5717] exit_group(0)               = ?
[pid  5717] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5717, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./324/binderfs")                = 0
umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./324/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./324/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./324")                          = 0
mkdir("./325", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5719
./strace-static-x86_64: Process 5719 attached
[pid  5719] chdir("./325")              = 0
[pid  5719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5719] setpgid(0, 0)               = 0
[pid  5719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5719] write(3, "1000", 4)         = 4
[pid  5719] close(3)                    = 0
[pid  5719] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5719] memfd_create("syzkaller", 0) = 3
[pid  5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5719] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5719] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5719] close(3)                    = 0
[pid  5719] mkdir("./file0", 0777)      = 0
[  177.539886][ T5719] loop0: detected capacity change from 0 to 4096
[  177.554789][ T5719] NILFS (loop0): invalid segment: Checksum error in segment payload
[  177.562827][ T5719] NILFS (loop0): trying rollback from an earlier position
[  177.576076][ T5719] NILFS (loop0): recovery complete
[pid  5719] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5719] chdir("./file0")            = 0
[pid  5719] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5719] close(4)                    = 0
[pid  5719] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5719] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  177.582170][ T5720] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.595828][   T27] audit: type=1800 audit(1676306865.358:327): pid=5719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5719] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5719] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5719] exit_group(0)               = ?
[pid  5719] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5719, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./325/binderfs")                = 0
umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./325/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./325/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./325")                          = 0
mkdir("./326", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5721
./strace-static-x86_64: Process 5721 attached
[pid  5721] chdir("./326")              = 0
[pid  5721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5721] setpgid(0, 0)               = 0
[pid  5721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5721] write(3, "1000", 4)         = 4
[pid  5721] close(3)                    = 0
[pid  5721] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5721] memfd_create("syzkaller", 0) = 3
[pid  5721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5721] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5721] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5721] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5721] close(3)                    = 0
[pid  5721] mkdir("./file0", 0777)      = 0
[  177.881378][ T5721] loop0: detected capacity change from 0 to 4096
[  177.899008][ T5721] NILFS (loop0): invalid segment: Checksum error in segment payload
[  177.907122][ T5721] NILFS (loop0): trying rollback from an earlier position
[  177.921162][ T5721] NILFS (loop0): recovery complete
[pid  5721] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5721] chdir("./file0")            = 0
[pid  5721] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5721] close(4)                    = 0
[pid  5721] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5721] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  177.927090][ T5722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.941459][   T27] audit: type=1800 audit(1676306865.708:328): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5721] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5721] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5721] exit_group(0)               = ?
[pid  5721] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5721, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./326/binderfs")                = 0
umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./326/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./326")                          = 0
mkdir("./327", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5723
./strace-static-x86_64: Process 5723 attached
[pid  5723] chdir("./327")              = 0
[pid  5723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5723] setpgid(0, 0)               = 0
[pid  5723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5723] write(3, "1000", 4)         = 4
[pid  5723] close(3)                    = 0
[pid  5723] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5723] memfd_create("syzkaller", 0) = 3
[pid  5723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5723] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5723] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5723] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5723] close(3)                    = 0
[pid  5723] mkdir("./file0", 0777)      = 0
[  178.230533][ T5723] loop0: detected capacity change from 0 to 4096
[  178.248040][ T5723] NILFS (loop0): invalid segment: Checksum error in segment payload
[  178.256031][ T5723] NILFS (loop0): trying rollback from an earlier position
[  178.271519][ T5723] NILFS (loop0): recovery complete
[pid  5723] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5723] chdir("./file0")            = 0
[pid  5723] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5723] close(4)                    = 0
[pid  5723] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5723] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  178.277353][ T5724] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5723] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5723] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5723] exit_group(0)               = ?
[pid  5723] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5723, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./327/binderfs")                = 0
umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./327/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./327")                          = 0
mkdir("./328", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5725
./strace-static-x86_64: Process 5725 attached
[pid  5725] chdir("./328")              = 0
[pid  5725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5725] setpgid(0, 0)               = 0
[pid  5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5725] write(3, "1000", 4)         = 4
[pid  5725] close(3)                    = 0
[pid  5725] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5725] memfd_create("syzkaller", 0) = 3
[pid  5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5725] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5725] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5725] close(3)                    = 0
[pid  5725] mkdir("./file0", 0777)      = 0
[  178.560583][ T5725] loop0: detected capacity change from 0 to 4096
[  178.576958][ T5725] NILFS (loop0): invalid segment: Checksum error in segment payload
[  178.585016][ T5725] NILFS (loop0): trying rollback from an earlier position
[  178.598921][ T5725] NILFS (loop0): recovery complete
[pid  5725] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5725] chdir("./file0")            = 0
[pid  5725] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5725] close(4)                    = 0
[pid  5725] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5725] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  178.605359][ T5726] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5725] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5725] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5725] exit_group(0)               = ?
[pid  5725] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5725, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./328/binderfs")                = 0
umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./328/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./328")                          = 0
mkdir("./329", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5727
./strace-static-x86_64: Process 5727 attached
[pid  5727] chdir("./329")              = 0
[pid  5727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5727] setpgid(0, 0)               = 0
[pid  5727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5727] write(3, "1000", 4)         = 4
[pid  5727] close(3)                    = 0
[pid  5727] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5727] memfd_create("syzkaller", 0) = 3
[pid  5727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5727] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5727] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5727] close(3)                    = 0
[pid  5727] mkdir("./file0", 0777)      = 0
[  178.895226][ T5727] loop0: detected capacity change from 0 to 4096
[  178.910604][ T5727] NILFS (loop0): invalid segment: Checksum error in segment payload
[  178.918645][ T5727] NILFS (loop0): trying rollback from an earlier position
[  178.932732][ T5727] NILFS (loop0): recovery complete
[pid  5727] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5727] chdir("./file0")            = 0
[pid  5727] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5727] close(4)                    = 0
[pid  5727] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5727] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  178.938689][ T5728] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5727] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5727] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5727] exit_group(0)               = ?
[pid  5727] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5727, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./329/binderfs")                = 0
umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./329/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./329/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./329")                          = 0
mkdir("./330", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5729
./strace-static-x86_64: Process 5729 attached
[pid  5729] chdir("./330")              = 0
[pid  5729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5729] setpgid(0, 0)               = 0
[pid  5729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5729] write(3, "1000", 4)         = 4
[pid  5729] close(3)                    = 0
[pid  5729] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5729] memfd_create("syzkaller", 0) = 3
[pid  5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5729] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5729] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5729] close(3)                    = 0
[pid  5729] mkdir("./file0", 0777)      = 0
[  179.233889][ T5729] loop0: detected capacity change from 0 to 4096
[  179.249955][ T5729] NILFS (loop0): invalid segment: Checksum error in segment payload
[  179.258187][ T5729] NILFS (loop0): trying rollback from an earlier position
[  179.272227][ T5729] NILFS (loop0): recovery complete
[pid  5729] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5729] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5729] chdir("./file0")            = 0
[pid  5729] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5729] close(4)                    = 0
[pid  5729] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5729] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  179.278239][ T5730] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5729] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5729] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5729] exit_group(0)               = ?
[pid  5729] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5729, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./330/binderfs")                = 0
umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./330/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./330")                          = 0
mkdir("./331", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5731
./strace-static-x86_64: Process 5731 attached
[pid  5731] chdir("./331")              = 0
[pid  5731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5731] setpgid(0, 0)               = 0
[pid  5731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5731] write(3, "1000", 4)         = 4
[pid  5731] close(3)                    = 0
[pid  5731] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5731] memfd_create("syzkaller", 0) = 3
[pid  5731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5731] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5731] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5731] close(3)                    = 0
[pid  5731] mkdir("./file0", 0777)      = 0
[  179.543340][ T5731] loop0: detected capacity change from 0 to 4096
[  179.559145][ T5731] NILFS (loop0): invalid segment: Checksum error in segment payload
[  179.567251][ T5731] NILFS (loop0): trying rollback from an earlier position
[  179.581680][ T5731] NILFS (loop0): recovery complete
[pid  5731] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5731] chdir("./file0")            = 0
[pid  5731] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5731] close(4)                    = 0
[pid  5731] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5731] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  179.587912][ T5732] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5731] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5731] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5731] exit_group(0)               = ?
[pid  5731] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5731, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./331/binderfs")                = 0
umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./331/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./331")                          = 0
mkdir("./332", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5733
./strace-static-x86_64: Process 5733 attached
[pid  5733] chdir("./332")              = 0
[pid  5733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5733] setpgid(0, 0)               = 0
[pid  5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5733] write(3, "1000", 4)         = 4
[pid  5733] close(3)                    = 0
[pid  5733] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5733] memfd_create("syzkaller", 0) = 3
[pid  5733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5733] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5733] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5733] close(3)                    = 0
[pid  5733] mkdir("./file0", 0777)      = 0
[  179.871317][ T5733] loop0: detected capacity change from 0 to 4096
[  179.887128][ T5733] NILFS (loop0): invalid segment: Checksum error in segment payload
[  179.895166][ T5733] NILFS (loop0): trying rollback from an earlier position
[  179.909343][ T5733] NILFS (loop0): recovery complete
[pid  5733] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5733] chdir("./file0")            = 0
[pid  5733] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5733] close(4)                    = 0
[pid  5733] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5733] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  179.915170][ T5734] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5733] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5733] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5733] exit_group(0)               = ?
[pid  5733] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5733, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./332/binderfs")                = 0
umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./332/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./332")                          = 0
mkdir("./333", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5735
./strace-static-x86_64: Process 5735 attached
[pid  5735] chdir("./333")              = 0
[pid  5735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5735] setpgid(0, 0)               = 0
[pid  5735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5735] write(3, "1000", 4)         = 4
[pid  5735] close(3)                    = 0
[pid  5735] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5735] memfd_create("syzkaller", 0) = 3
[pid  5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5735] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5735] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5735] close(3)                    = 0
[pid  5735] mkdir("./file0", 0777)      = 0
[pid  5735] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  180.198502][ T5735] loop0: detected capacity change from 0 to 4096
[  180.214308][ T5735] NILFS (loop0): invalid segment: Checksum error in segment payload
[  180.222351][ T5735] NILFS (loop0): trying rollback from an earlier position
[  180.235907][ T5735] NILFS (loop0): recovery complete
[pid  5735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5735] chdir("./file0")            = 0
[pid  5735] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5735] close(4)                    = 0
[pid  5735] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5735] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  180.242530][ T5736] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.258152][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  180.258164][   T27] audit: type=1800 audit(1676306868.018:335): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5735] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5735] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5735] exit_group(0)               = ?
[pid  5735] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5735, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./333/binderfs")                = 0
umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./333/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./333")                          = 0
mkdir("./334", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5737
./strace-static-x86_64: Process 5737 attached
[pid  5737] chdir("./334")              = 0
[pid  5737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5737] setpgid(0, 0)               = 0
[pid  5737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5737] write(3, "1000", 4)         = 4
[pid  5737] close(3)                    = 0
[pid  5737] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5737] memfd_create("syzkaller", 0) = 3
[pid  5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5737] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5737] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5737] close(3)                    = 0
[pid  5737] mkdir("./file0", 0777)      = 0
[  180.555290][ T5737] loop0: detected capacity change from 0 to 4096
[  180.570744][ T5737] NILFS (loop0): invalid segment: Checksum error in segment payload
[  180.578777][ T5737] NILFS (loop0): trying rollback from an earlier position
[  180.592580][ T5737] NILFS (loop0): recovery complete
[pid  5737] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5737] chdir("./file0")            = 0
[pid  5737] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5737] close(4)                    = 0
[pid  5737] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5737] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  180.598407][ T5738] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.612048][   T27] audit: type=1800 audit(1676306868.378:336): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[  180.647813][ T5738] NILFS (loop0): nilfs_direct_assign (ino=6): invalid key: 130
[pid  5737] sendfile(4, 5, NULL, 2147538701) = 65536
[pid  5737] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5737] exit_group(0)               = ?
[pid  5737] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5737, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./334/binderfs")                = 0
umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./334/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./334/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./334")                          = 0
mkdir("./335", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5739 attached
[  180.655664][ T5738] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=6)
[  180.665473][ T5738] Remounting filesystem read-only
, child_tidptr=0x555555db65d0) = 5739
[pid  5739] chdir("./335")              = 0
[pid  5739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5739] setpgid(0, 0)               = 0
[pid  5739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5739] write(3, "1000", 4)         = 4
[pid  5739] close(3)                    = 0
[pid  5739] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5739] memfd_create("syzkaller", 0) = 3
[pid  5739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5739] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5739] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5739] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5739] close(3)                    = 0
[pid  5739] mkdir("./file0", 0777)      = 0
[  180.754677][ T5739] loop0: detected capacity change from 0 to 4096
[  180.772294][ T5739] NILFS (loop0): invalid segment: Checksum error in segment payload
[  180.780393][ T5739] NILFS (loop0): trying rollback from an earlier position
[  180.793986][ T5739] NILFS (loop0): recovery complete
[pid  5739] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5739] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5739] chdir("./file0")            = 0
[pid  5739] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5739] close(4)                    = 0
[pid  5739] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5739] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  180.800181][ T5740] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.827553][   T27] audit: type=1800 audit(1676306868.588:337): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5739] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5739] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5739] exit_group(0)               = ?
[pid  5739] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5739, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./335/binderfs")                = 0
umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./335/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./335/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./335")                          = 0
mkdir("./336", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5741
./strace-static-x86_64: Process 5741 attached
[pid  5741] chdir("./336")              = 0
[pid  5741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5741] setpgid(0, 0)               = 0
[pid  5741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5741] write(3, "1000", 4)         = 4
[pid  5741] close(3)                    = 0
[pid  5741] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5741] memfd_create("syzkaller", 0) = 3
[pid  5741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5741] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5741] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5741] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5741] close(3)                    = 0
[pid  5741] mkdir("./file0", 0777)      = 0
[  181.109932][ T5741] loop0: detected capacity change from 0 to 4096
[  181.127747][ T5741] NILFS (loop0): invalid segment: Checksum error in segment payload
[  181.136050][ T5741] NILFS (loop0): trying rollback from an earlier position
[  181.150823][ T5741] NILFS (loop0): recovery complete
[pid  5741] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5741] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5741] chdir("./file0")            = 0
[pid  5741] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5741] close(4)                    = 0
[pid  5741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5741] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  181.156958][ T5742] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.171581][   T27] audit: type=1800 audit(1676306868.938:338): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5741] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5741] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5741] exit_group(0)               = ?
[pid  5741] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5741, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./336/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./336/binderfs")                = 0
umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./336/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./336/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./336")                          = 0
mkdir("./337", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5743
./strace-static-x86_64: Process 5743 attached
[pid  5743] chdir("./337")              = 0
[pid  5743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5743] setpgid(0, 0)               = 0
[pid  5743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5743] write(3, "1000", 4)         = 4
[pid  5743] close(3)                    = 0
[pid  5743] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5743] memfd_create("syzkaller", 0) = 3
[pid  5743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5743] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5743] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5743] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5743] close(3)                    = 0
[pid  5743] mkdir("./file0", 0777)      = 0
[pid  5743] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5743] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5743] chdir("./file0")            = 0
[pid  5743] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5743] close(4)                    = 0
[  181.455241][ T5743] loop0: detected capacity change from 0 to 4096
[  181.473052][ T5743] NILFS (loop0): invalid segment: Checksum error in segment payload
[  181.481136][ T5743] NILFS (loop0): trying rollback from an earlier position
[  181.495063][ T5743] NILFS (loop0): recovery complete
[pid  5743] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5743] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  181.512985][ T5744] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.516216][   T27] audit: type=1800 audit(1676306869.258:339): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5743] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5743] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5743] exit_group(0)               = ?
[pid  5743] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5743, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./337/binderfs")                = 0
umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./337/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./337/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./337")                          = 0
mkdir("./338", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5745
./strace-static-x86_64: Process 5745 attached
[pid  5745] chdir("./338")              = 0
[pid  5745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5745] setpgid(0, 0)               = 0
[pid  5745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5745] write(3, "1000", 4)         = 4
[pid  5745] close(3)                    = 0
[pid  5745] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5745] memfd_create("syzkaller", 0) = 3
[pid  5745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5745] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5745] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5745] close(3)                    = 0
[pid  5745] mkdir("./file0", 0777)      = 0
[  181.829247][ T5745] loop0: detected capacity change from 0 to 4096
[  181.845887][ T5745] NILFS (loop0): invalid segment: Checksum error in segment payload
[  181.854064][ T5745] NILFS (loop0): trying rollback from an earlier position
[  181.869175][ T5745] NILFS (loop0): recovery complete
[pid  5745] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5745] chdir("./file0")            = 0
[pid  5745] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5745] close(4)                    = 0
[pid  5745] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5745] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  181.875971][ T5746] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.887784][   T27] audit: type=1800 audit(1676306869.648:340): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5745] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5745] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5745] exit_group(0)               = ?
[pid  5745] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5745, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./338/binderfs")                = 0
umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./338/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./338")                          = 0
mkdir("./339", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5747
./strace-static-x86_64: Process 5747 attached
[pid  5747] chdir("./339")              = 0
[pid  5747] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5747] setpgid(0, 0)               = 0
[pid  5747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5747] write(3, "1000", 4)         = 4
[pid  5747] close(3)                    = 0
[pid  5747] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5747] memfd_create("syzkaller", 0) = 3
[pid  5747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5747] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5747] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5747] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5747] close(3)                    = 0
[pid  5747] mkdir("./file0", 0777)      = 0
[  182.174406][ T5747] loop0: detected capacity change from 0 to 4096
[  182.191890][ T5747] NILFS (loop0): invalid segment: Checksum error in segment payload
[  182.199972][ T5747] NILFS (loop0): trying rollback from an earlier position
[  182.214198][ T5747] NILFS (loop0): recovery complete
[pid  5747] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5747] chdir("./file0")            = 0
[pid  5747] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5747] close(4)                    = 0
[pid  5747] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5747] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  182.221079][ T5748] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.236225][   T27] audit: type=1800 audit(1676306869.998:341): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5747] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5747] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5747] exit_group(0)               = ?
[pid  5747] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5747, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./339/binderfs")                = 0
umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./339/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./339")                          = 0
mkdir("./340", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5749
./strace-static-x86_64: Process 5749 attached
[pid  5749] chdir("./340")              = 0
[pid  5749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5749] setpgid(0, 0)               = 0
[pid  5749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5749] write(3, "1000", 4)         = 4
[pid  5749] close(3)                    = 0
[pid  5749] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5749] memfd_create("syzkaller", 0) = 3
[pid  5749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5749] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5749] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5749] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5749] close(3)                    = 0
[pid  5749] mkdir("./file0", 0777)      = 0
[  182.501401][ T5749] loop0: detected capacity change from 0 to 4096
[  182.519825][ T5749] NILFS (loop0): invalid segment: Checksum error in segment payload
[  182.528141][ T5749] NILFS (loop0): trying rollback from an earlier position
[  182.544197][ T5749] NILFS (loop0): recovery complete
[pid  5749] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5749] chdir("./file0")            = 0
[pid  5749] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5749] close(4)                    = 0
[pid  5749] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5749] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  182.550382][ T5750] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.564137][   T27] audit: type=1800 audit(1676306870.328:342): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5749] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5749] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5749] exit_group(0)               = ?
[pid  5749] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5749, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./340/binderfs")                = 0
umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./340/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./340")                          = 0
mkdir("./341", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5751
./strace-static-x86_64: Process 5751 attached
[pid  5751] chdir("./341")              = 0
[pid  5751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5751] setpgid(0, 0)               = 0
[pid  5751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5751] write(3, "1000", 4)         = 4
[pid  5751] close(3)                    = 0
[pid  5751] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5751] memfd_create("syzkaller", 0) = 3
[pid  5751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5751] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5751] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5751] close(3)                    = 0
[pid  5751] mkdir("./file0", 0777)      = 0
[pid  5751] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5751] chdir("./file0")            = 0
[pid  5751] ioctl(4, LOOP_CLR_FD)       = 0
[  182.877839][ T5751] loop0: detected capacity change from 0 to 4096
[  182.893518][ T5751] NILFS (loop0): invalid segment: Checksum error in segment payload
[  182.901595][ T5751] NILFS (loop0): trying rollback from an earlier position
[  182.915814][ T5751] NILFS (loop0): recovery complete
[pid  5751] close(4)                    = 0
[pid  5751] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5751] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  182.921752][ T5752] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.936189][   T27] audit: type=1800 audit(1676306870.688:343): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5751] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5751] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5751] exit_group(0)               = ?
[pid  5751] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5751, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./341/binderfs")                = 0
umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./341/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./341")                          = 0
mkdir("./342", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5753
./strace-static-x86_64: Process 5753 attached
[pid  5753] chdir("./342")              = 0
[pid  5753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5753] setpgid(0, 0)               = 0
[pid  5753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5753] write(3, "1000", 4)         = 4
[pid  5753] close(3)                    = 0
[pid  5753] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5753] memfd_create("syzkaller", 0) = 3
[pid  5753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5753] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5753] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5753] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5753] close(3)                    = 0
[pid  5753] mkdir("./file0", 0777)      = 0
[pid  5753] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  183.233485][ T5753] loop0: detected capacity change from 0 to 4096
[  183.252556][ T5753] NILFS (loop0): invalid segment: Checksum error in segment payload
[  183.260699][ T5753] NILFS (loop0): trying rollback from an earlier position
[  183.275066][ T5753] NILFS (loop0): recovery complete
[pid  5753] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5753] chdir("./file0")            = 0
[pid  5753] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5753] close(4)                    = 0
[pid  5753] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5753] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  183.281327][ T5754] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.294714][   T27] audit: type=1800 audit(1676306871.058:344): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5753] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5753] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5753] exit_group(0)               = ?
[pid  5753] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5753, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./342/binderfs")                = 0
umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./342/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./342/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./342")                          = 0
mkdir("./343", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5755
./strace-static-x86_64: Process 5755 attached
[pid  5755] chdir("./343")              = 0
[pid  5755] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5755] setpgid(0, 0)               = 0
[pid  5755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5755] write(3, "1000", 4)         = 4
[pid  5755] close(3)                    = 0
[pid  5755] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5755] memfd_create("syzkaller", 0) = 3
[pid  5755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5755] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5755] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5755] close(3)                    = 0
[pid  5755] mkdir("./file0", 0777)      = 0
[  183.602212][ T5755] loop0: detected capacity change from 0 to 4096
[  183.618067][ T5755] NILFS (loop0): invalid segment: Checksum error in segment payload
[  183.626101][ T5755] NILFS (loop0): trying rollback from an earlier position
[  183.639868][ T5755] NILFS (loop0): recovery complete
[pid  5755] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5755] chdir("./file0")            = 0
[pid  5755] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5755] close(4)                    = 0
[pid  5755] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5755] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  183.645852][ T5756] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5755] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5755] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5755] exit_group(0)               = ?
[pid  5755] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5755, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./343/binderfs")                = 0
umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./343/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./343/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./343")                          = 0
mkdir("./344", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5757
./strace-static-x86_64: Process 5757 attached
[pid  5757] chdir("./344")              = 0
[pid  5757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5757] setpgid(0, 0)               = 0
[pid  5757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5757] write(3, "1000", 4)         = 4
[pid  5757] close(3)                    = 0
[pid  5757] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5757] memfd_create("syzkaller", 0) = 3
[pid  5757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5757] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5757] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5757] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5757] close(3)                    = 0
[pid  5757] mkdir("./file0", 0777)      = 0
[  183.960347][ T5757] loop0: detected capacity change from 0 to 4096
[  183.977396][ T5757] NILFS (loop0): invalid segment: Checksum error in segment payload
[  183.985564][ T5757] NILFS (loop0): trying rollback from an earlier position
[  184.002236][ T5757] NILFS (loop0): recovery complete
[pid  5757] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5757] chdir("./file0")            = 0
[pid  5757] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5757] close(4)                    = 0
[pid  5757] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5757] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  184.008560][ T5758] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5757] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5757] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5757] exit_group(0)               = ?
[pid  5757] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5757, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./344/binderfs")                = 0
umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./344/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./344")                          = 0
mkdir("./345", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5759
./strace-static-x86_64: Process 5759 attached
[pid  5759] chdir("./345")              = 0
[pid  5759] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5759] setpgid(0, 0)               = 0
[pid  5759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5759] write(3, "1000", 4)         = 4
[pid  5759] close(3)                    = 0
[pid  5759] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5759] memfd_create("syzkaller", 0) = 3
[pid  5759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5759] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5759] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5759] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5759] close(3)                    = 0
[pid  5759] mkdir("./file0", 0777)      = 0
[  184.333662][ T5759] loop0: detected capacity change from 0 to 4096
[  184.351206][ T5759] NILFS (loop0): invalid segment: Checksum error in segment payload
[  184.359331][ T5759] NILFS (loop0): trying rollback from an earlier position
[  184.373793][ T5759] NILFS (loop0): recovery complete
[pid  5759] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5759] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5759] chdir("./file0")            = 0
[pid  5759] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5759] close(4)                    = 0
[pid  5759] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5759] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  184.379881][ T5760] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5759] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5759] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5759] exit_group(0)               = ?
[pid  5759] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5759, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./345/binderfs")                = 0
umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./345/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./345")                          = 0
mkdir("./346", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5761
./strace-static-x86_64: Process 5761 attached
[pid  5761] chdir("./346")              = 0
[pid  5761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5761] setpgid(0, 0)               = 0
[pid  5761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5761] write(3, "1000", 4)         = 4
[pid  5761] close(3)                    = 0
[pid  5761] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5761] memfd_create("syzkaller", 0) = 3
[pid  5761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5761] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5761] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5761] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5761] close(3)                    = 0
[pid  5761] mkdir("./file0", 0777)      = 0
[pid  5761] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5761] chdir("./file0")            = 0
[  184.696933][ T5761] loop0: detected capacity change from 0 to 4096
[  184.714667][ T5761] NILFS (loop0): invalid segment: Checksum error in segment payload
[  184.722823][ T5761] NILFS (loop0): trying rollback from an earlier position
[  184.736402][ T5761] NILFS (loop0): recovery complete
[pid  5761] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5761] close(4)                    = 0
[pid  5761] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5761] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  184.742588][ T5762] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5761] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5761] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5761] exit_group(0)               = ?
[pid  5761] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5761, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./346/binderfs")                = 0
umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./346/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./346/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./346")                          = 0
mkdir("./347", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5763
./strace-static-x86_64: Process 5763 attached
[pid  5763] chdir("./347")              = 0
[pid  5763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5763] setpgid(0, 0)               = 0
[pid  5763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5763] write(3, "1000", 4)         = 4
[pid  5763] close(3)                    = 0
[pid  5763] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5763] memfd_create("syzkaller", 0) = 3
[pid  5763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5763] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5763] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5763] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5763] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5763] close(3)                    = 0
[pid  5763] mkdir("./file0", 0777)      = 0
[  185.049692][ T5763] loop0: detected capacity change from 0 to 4096
[  185.065939][ T5763] NILFS (loop0): invalid segment: Checksum error in segment payload
[  185.074343][ T5763] NILFS (loop0): trying rollback from an earlier position
[  185.088369][ T5763] NILFS (loop0): recovery complete
[pid  5763] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5763] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5763] chdir("./file0")            = 0
[pid  5763] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5763] close(4)                    = 0
[pid  5763] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5763] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  185.094455][ T5764] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5763] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5763] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5763] exit_group(0)               = ?
[pid  5763] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5763, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./347/binderfs")                = 0
umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./347/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./347")                          = 0
mkdir("./348", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5765
./strace-static-x86_64: Process 5765 attached
[pid  5765] chdir("./348")              = 0
[pid  5765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5765] setpgid(0, 0)               = 0
[pid  5765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5765] write(3, "1000", 4)         = 4
[pid  5765] close(3)                    = 0
[pid  5765] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5765] memfd_create("syzkaller", 0) = 3
[pid  5765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5765] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5765] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5765] close(3)                    = 0
[pid  5765] mkdir("./file0", 0777)      = 0
[pid  5765] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5765] chdir("./file0")            = 0
[pid  5765] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5765] close(4)                    = 0
[  185.407347][ T5765] loop0: detected capacity change from 0 to 4096
[  185.424010][ T5765] NILFS (loop0): invalid segment: Checksum error in segment payload
[  185.432198][ T5765] NILFS (loop0): trying rollback from an earlier position
[  185.446491][ T5765] NILFS (loop0): recovery complete
[pid  5765] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5765] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  185.452553][ T5766] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.466174][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  185.466187][   T27] audit: type=1800 audit(1676306873.218:350): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5765] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5765] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5765] exit_group(0)               = ?
[pid  5765] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5765, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./348/binderfs")                = 0
umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./348/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./348")                          = 0
mkdir("./349", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5767
./strace-static-x86_64: Process 5767 attached
[pid  5767] chdir("./349")              = 0
[pid  5767] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5767] setpgid(0, 0)               = 0
[pid  5767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5767] write(3, "1000", 4)         = 4
[pid  5767] close(3)                    = 0
[pid  5767] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5767] memfd_create("syzkaller", 0) = 3
[pid  5767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5767] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5767] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5767] close(3)                    = 0
[pid  5767] mkdir("./file0", 0777)      = 0
[  185.764765][ T5767] loop0: detected capacity change from 0 to 4096
[  185.782204][ T5767] NILFS (loop0): invalid segment: Checksum error in segment payload
[  185.790496][ T5767] NILFS (loop0): trying rollback from an earlier position
[  185.804867][ T5767] NILFS (loop0): recovery complete
[pid  5767] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5767] chdir("./file0")            = 0
[pid  5767] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5767] close(4)                    = 0
[pid  5767] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5767] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  185.811443][ T5768] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.825254][   T27] audit: type=1800 audit(1676306873.578:351): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5767] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5767] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5767] exit_group(0)               = ?
[pid  5767] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5767, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./349/binderfs")                = 0
umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./349/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./349")                          = 0
mkdir("./350", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5769
./strace-static-x86_64: Process 5769 attached
[pid  5769] chdir("./350")              = 0
[pid  5769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5769] setpgid(0, 0)               = 0
[pid  5769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5769] write(3, "1000", 4)         = 4
[pid  5769] close(3)                    = 0
[pid  5769] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5769] memfd_create("syzkaller", 0) = 3
[pid  5769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5769] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5769] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5769] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5769] close(3)                    = 0
[pid  5769] mkdir("./file0", 0777)      = 0
[  186.131971][ T5769] loop0: detected capacity change from 0 to 4096
[  186.148815][ T5769] NILFS (loop0): invalid segment: Checksum error in segment payload
[  186.156882][ T5769] NILFS (loop0): trying rollback from an earlier position
[  186.171736][ T5769] NILFS (loop0): recovery complete
[pid  5769] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5769] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5769] chdir("./file0")            = 0
[pid  5769] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5769] close(4)                    = 0
[pid  5769] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5769] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  186.177643][ T5770] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.191181][   T27] audit: type=1800 audit(1676306873.958:352): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5769] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5769] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5769] exit_group(0)               = ?
[pid  5769] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5769, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./350/binderfs")                = 0
umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./350/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./350/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./350")                          = 0
mkdir("./351", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5771
./strace-static-x86_64: Process 5771 attached
[pid  5771] chdir("./351")              = 0
[pid  5771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5771] setpgid(0, 0)               = 0
[pid  5771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5771] write(3, "1000", 4)         = 4
[pid  5771] close(3)                    = 0
[pid  5771] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5771] memfd_create("syzkaller", 0) = 3
[pid  5771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5771] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5771] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5771] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5771] close(3)                    = 0
[pid  5771] mkdir("./file0", 0777)      = 0
[  186.506904][ T5771] loop0: detected capacity change from 0 to 4096
[  186.523241][ T5771] NILFS (loop0): invalid segment: Checksum error in segment payload
[  186.531417][ T5771] NILFS (loop0): trying rollback from an earlier position
[  186.549111][ T5771] NILFS (loop0): recovery complete
[pid  5771] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5771] chdir("./file0")            = 0
[pid  5771] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5771] close(4)                    = 0
[pid  5771] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5771] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  186.555435][ T5772] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.562229][   T27] audit: type=1800 audit(1676306874.308:353): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5771] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5771] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5771] exit_group(0)               = ?
[pid  5771] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5771, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./351/binderfs")                = 0
umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./351/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./351/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./351")                          = 0
mkdir("./352", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5773
./strace-static-x86_64: Process 5773 attached
[pid  5773] chdir("./352")              = 0
[pid  5773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5773] setpgid(0, 0)               = 0
[pid  5773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5773] write(3, "1000", 4)         = 4
[pid  5773] close(3)                    = 0
[pid  5773] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5773] memfd_create("syzkaller", 0) = 3
[pid  5773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5773] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5773] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5773] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5773] close(3)                    = 0
[pid  5773] mkdir("./file0", 0777)      = 0
[  186.860849][ T5773] loop0: detected capacity change from 0 to 4096
[  186.877130][ T5773] NILFS (loop0): invalid segment: Checksum error in segment payload
[  186.885160][ T5773] NILFS (loop0): trying rollback from an earlier position
[  186.901307][ T5773] NILFS (loop0): recovery complete
[pid  5773] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5773] chdir("./file0")            = 0
[pid  5773] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5773] close(4)                    = 0
[pid  5773] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5773] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  186.907708][ T5774] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.922064][   T27] audit: type=1800 audit(1676306874.688:354): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5773] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5773] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5773] exit_group(0)               = ?
[pid  5773] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5773, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./352/binderfs")                = 0
umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./352/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./352/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./352")                          = 0
mkdir("./353", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5775 attached
, child_tidptr=0x555555db65d0) = 5775
[pid  5775] chdir("./353")              = 0
[pid  5775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5775] setpgid(0, 0)               = 0
[pid  5775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5775] write(3, "1000", 4)         = 4
[pid  5775] close(3)                    = 0
[pid  5775] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5775] memfd_create("syzkaller", 0) = 3
[pid  5775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5775] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5775] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5775] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5775] close(3)                    = 0
[pid  5775] mkdir("./file0", 0777)      = 0
[pid  5775] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5775] chdir("./file0")            = 0
[pid  5775] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5775] close(4)                    = 0
[  187.226313][ T5775] loop0: detected capacity change from 0 to 4096
[  187.242166][ T5775] NILFS (loop0): invalid segment: Checksum error in segment payload
[  187.250281][ T5775] NILFS (loop0): trying rollback from an earlier position
[  187.264135][ T5775] NILFS (loop0): recovery complete
[pid  5775] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5775] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  187.270195][ T5776] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.286165][   T27] audit: type=1800 audit(1676306875.038:355): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5775] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5775] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5775] exit_group(0)               = ?
[pid  5775] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5775, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./353/binderfs")                = 0
umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./353/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./353")                          = 0
mkdir("./354", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5777
./strace-static-x86_64: Process 5777 attached
[pid  5777] chdir("./354")              = 0
[pid  5777] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5777] setpgid(0, 0)               = 0
[pid  5777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5777] write(3, "1000", 4)         = 4
[pid  5777] close(3)                    = 0
[pid  5777] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5777] memfd_create("syzkaller", 0) = 3
[pid  5777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5777] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5777] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5777] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5777] close(3)                    = 0
[pid  5777] mkdir("./file0", 0777)      = 0
[  187.550257][ T5777] loop0: detected capacity change from 0 to 4096
[  187.566726][ T5777] NILFS (loop0): invalid segment: Checksum error in segment payload
[  187.574814][ T5777] NILFS (loop0): trying rollback from an earlier position
[  187.590993][ T5777] NILFS (loop0): recovery complete
[pid  5777] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5777] chdir("./file0")            = 0
[pid  5777] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5777] close(4)                    = 0
[pid  5777] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5777] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  187.597228][ T5778] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.611783][   T27] audit: type=1800 audit(1676306875.378:356): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5777] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5777] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5777] exit_group(0)               = ?
[pid  5777] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5777, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./354/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./354/binderfs")                = 0
umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./354/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./354/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./354")                          = 0
mkdir("./355", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5779
./strace-static-x86_64: Process 5779 attached
[pid  5779] chdir("./355")              = 0
[pid  5779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5779] setpgid(0, 0)               = 0
[pid  5779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5779] write(3, "1000", 4)         = 4
[pid  5779] close(3)                    = 0
[pid  5779] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5779] memfd_create("syzkaller", 0) = 3
[pid  5779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5779] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5779] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5779] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5779] close(3)                    = 0
[pid  5779] mkdir("./file0", 0777)      = 0
[  187.889113][ T5779] loop0: detected capacity change from 0 to 4096
[  187.904044][ T5779] NILFS (loop0): invalid segment: Checksum error in segment payload
[  187.912219][ T5779] NILFS (loop0): trying rollback from an earlier position
[  187.928459][ T5779] NILFS (loop0): recovery complete
[pid  5779] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5779] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5779] chdir("./file0")            = 0
[pid  5779] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5779] close(4)                    = 0
[pid  5779] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5779] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  187.935008][ T5780] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.958483][   T27] audit: type=1800 audit(1676306875.698:357): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5779] sendfile(4, 5, NULL, 2147538701) = 65536
[pid  5779] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5779] exit_group(0)               = ?
[pid  5779] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5779, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./355/binderfs")                = 0
umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./355/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./355/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./355")                          = 0
mkdir("./356", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
[  187.983384][ T5780] NILFS (loop0): nilfs_direct_assign (ino=6): invalid key: 130
[  187.991116][ T5780] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=6)
[  188.001115][ T5780] Remounting filesystem read-only
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5781
./strace-static-x86_64: Process 5781 attached
[pid  5781] chdir("./356")              = 0
[pid  5781] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5781] setpgid(0, 0)               = 0
[pid  5781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5781] write(3, "1000", 4)         = 4
[pid  5781] close(3)                    = 0
[pid  5781] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5781] memfd_create("syzkaller", 0) = 3
[pid  5781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5781] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5781] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5781] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5781] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5781] close(3)                    = 0
[pid  5781] mkdir("./file0", 0777)      = 0
[pid  5781] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  188.105960][ T5781] loop0: detected capacity change from 0 to 4096
[  188.124967][ T5781] NILFS (loop0): invalid segment: Checksum error in segment payload
[  188.133242][ T5781] NILFS (loop0): trying rollback from an earlier position
[  188.147927][ T5781] NILFS (loop0): recovery complete
[pid  5781] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5781] chdir("./file0")            = 0
[pid  5781] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5781] close(4)                    = 0
[pid  5781] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5781] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  188.154673][ T5782] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.164975][   T27] audit: type=1800 audit(1676306875.908:358): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5781] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5781] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5781] exit_group(0)               = ?
[pid  5781] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5781, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./356/binderfs")                = 0
umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./356/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./356")                          = 0
mkdir("./357", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5783
./strace-static-x86_64: Process 5783 attached
[pid  5783] chdir("./357")              = 0
[pid  5783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5783] setpgid(0, 0)               = 0
[pid  5783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5783] write(3, "1000", 4)         = 4
[pid  5783] close(3)                    = 0
[pid  5783] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5783] memfd_create("syzkaller", 0) = 3
[pid  5783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5783] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5783] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5783] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5783] close(3)                    = 0
[pid  5783] mkdir("./file0", 0777)      = 0
[  188.488939][ T5783] loop0: detected capacity change from 0 to 4096
[  188.505419][ T5783] NILFS (loop0): invalid segment: Checksum error in segment payload
[  188.513491][ T5783] NILFS (loop0): trying rollback from an earlier position
[  188.527862][ T5783] NILFS (loop0): recovery complete
[pid  5783] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5783] chdir("./file0")            = 0
[pid  5783] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5783] close(4)                    = 0
[  188.533623][ T5784] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5783] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5783] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  188.560261][   T27] audit: type=1800 audit(1676306876.318:359): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5783] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5783] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5783] exit_group(0)               = ?
[pid  5783] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5783, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./357/binderfs")                = 0
umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./357/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./357")                          = 0
mkdir("./358", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5785
./strace-static-x86_64: Process 5785 attached
[pid  5785] chdir("./358")              = 0
[pid  5785] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5785] setpgid(0, 0)               = 0
[pid  5785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5785] write(3, "1000", 4)         = 4
[pid  5785] close(3)                    = 0
[pid  5785] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5785] memfd_create("syzkaller", 0) = 3
[pid  5785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5785] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5785] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5785] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5785] close(3)                    = 0
[pid  5785] mkdir("./file0", 0777)      = 0
[pid  5785] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  188.834317][ T5785] loop0: detected capacity change from 0 to 4096
[  188.850413][ T5785] NILFS (loop0): invalid segment: Checksum error in segment payload
[  188.858487][ T5785] NILFS (loop0): trying rollback from an earlier position
[  188.872406][ T5785] NILFS (loop0): recovery complete
[pid  5785] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5785] chdir("./file0")            = 0
[pid  5785] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5785] close(4)                    = 0
[pid  5785] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5785] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  188.880061][ T5786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5785] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5785] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5785] exit_group(0)               = ?
[pid  5785] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5785, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./358/binderfs")                = 0
umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./358/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./358/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./358")                          = 0
mkdir("./359", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5787
./strace-static-x86_64: Process 5787 attached
[pid  5787] chdir("./359")              = 0
[pid  5787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5787] setpgid(0, 0)               = 0
[pid  5787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5787] write(3, "1000", 4)         = 4
[pid  5787] close(3)                    = 0
[pid  5787] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5787] memfd_create("syzkaller", 0) = 3
[pid  5787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5787] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5787] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5787] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5787] close(3)                    = 0
[pid  5787] mkdir("./file0", 0777)      = 0
[pid  5787] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  189.200635][ T5787] loop0: detected capacity change from 0 to 4096
[  189.218097][ T5787] NILFS (loop0): invalid segment: Checksum error in segment payload
[  189.226207][ T5787] NILFS (loop0): trying rollback from an earlier position
[  189.240164][ T5787] NILFS (loop0): recovery complete
[pid  5787] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5787] chdir("./file0")            = 0
[pid  5787] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5787] close(4)                    = 0
[pid  5787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5787] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  189.247812][ T5788] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5787] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5787] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5787] exit_group(0)               = ?
[pid  5787] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5787, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./359", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./359/binderfs")                = 0
umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./359/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./359/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./359/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./359/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./359")                          = 0
mkdir("./360", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5789
./strace-static-x86_64: Process 5789 attached
[pid  5789] chdir("./360")              = 0
[pid  5789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5789] setpgid(0, 0)               = 0
[pid  5789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5789] write(3, "1000", 4)         = 4
[pid  5789] close(3)                    = 0
[pid  5789] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5789] memfd_create("syzkaller", 0) = 3
[pid  5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5789] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5789] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5789] close(3)                    = 0
[pid  5789] mkdir("./file0", 0777)      = 0
[  189.557928][ T5789] loop0: detected capacity change from 0 to 4096
[  189.574531][ T5789] NILFS (loop0): invalid segment: Checksum error in segment payload
[  189.582663][ T5789] NILFS (loop0): trying rollback from an earlier position
[  189.599477][ T5789] NILFS (loop0): recovery complete
[pid  5789] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5789] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5789] chdir("./file0")            = 0
[pid  5789] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5789] close(4)                    = 0
[pid  5789] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5789] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  189.605749][ T5790] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5789] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5789] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5789] exit_group(0)               = ?
[pid  5789] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5789, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./360", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./360/binderfs")                = 0
umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./360/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./360/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./360/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./360/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./360")                          = 0
mkdir("./361", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5791
./strace-static-x86_64: Process 5791 attached
[pid  5791] chdir("./361")              = 0
[pid  5791] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5791] setpgid(0, 0)               = 0
[pid  5791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5791] write(3, "1000", 4)         = 4
[pid  5791] close(3)                    = 0
[pid  5791] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5791] memfd_create("syzkaller", 0) = 3
[pid  5791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5791] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5791] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5791] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5791] close(3)                    = 0
[pid  5791] mkdir("./file0", 0777)      = 0
[  189.908546][ T5791] loop0: detected capacity change from 0 to 4096
[  189.924221][ T5791] NILFS (loop0): invalid segment: Checksum error in segment payload
[  189.932409][ T5791] NILFS (loop0): trying rollback from an earlier position
[  189.947109][ T5791] NILFS (loop0): recovery complete
[pid  5791] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5791] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5791] chdir("./file0")            = 0
[pid  5791] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5791] close(4)                    = 0
[pid  5791] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5791] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  189.953974][ T5792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5791] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5791] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5791] exit_group(0)               = ?
[pid  5791] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5791, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./361/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./361/binderfs")                = 0
umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./361/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./361/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./361/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./361/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./361")                          = 0
mkdir("./362", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5793
./strace-static-x86_64: Process 5793 attached
[pid  5793] chdir("./362")              = 0
[pid  5793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5793] setpgid(0, 0)               = 0
[pid  5793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5793] write(3, "1000", 4)         = 4
[pid  5793] close(3)                    = 0
[pid  5793] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5793] memfd_create("syzkaller", 0) = 3
[pid  5793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5793] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5793] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5793] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5793] close(3)                    = 0
[pid  5793] mkdir("./file0", 0777)      = 0
[pid  5793] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  190.283725][ T5793] loop0: detected capacity change from 0 to 4096
[  190.301193][ T5793] NILFS (loop0): invalid segment: Checksum error in segment payload
[  190.309360][ T5793] NILFS (loop0): trying rollback from an earlier position
[  190.324247][ T5793] NILFS (loop0): recovery complete
[pid  5793] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5793] chdir("./file0")            = 0
[pid  5793] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5793] close(4)                    = 0
[pid  5793] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5793] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  190.332166][ T5794] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5793] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5793] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5793] exit_group(0)               = ?
[pid  5793] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5793, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./362", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./362/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./362/binderfs")                = 0
umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./362/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./362/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./362/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./362/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./362")                          = 0
mkdir("./363", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5795
./strace-static-x86_64: Process 5795 attached
[pid  5795] chdir("./363")              = 0
[pid  5795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5795] setpgid(0, 0)               = 0
[pid  5795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5795] write(3, "1000", 4)         = 4
[pid  5795] close(3)                    = 0
[pid  5795] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5795] memfd_create("syzkaller", 0) = 3
[pid  5795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5795] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5795] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5795] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5795] close(3)                    = 0
[pid  5795] mkdir("./file0", 0777)      = 0
[  190.660326][ T5795] loop0: detected capacity change from 0 to 4096
[  190.678733][ T5795] NILFS (loop0): invalid segment: Checksum error in segment payload
[  190.686825][ T5795] NILFS (loop0): trying rollback from an earlier position
[  190.701663][ T5795] NILFS (loop0): recovery complete
[pid  5795] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5795] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5795] chdir("./file0")            = 0
[pid  5795] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5795] close(4)                    = 0
[pid  5795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5795] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  190.708438][ T5796] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.722229][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  190.722264][   T27] audit: type=1800 audit(1676306878.488:365): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5795] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5795] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5795] exit_group(0)               = ?
[pid  5795] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5795, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./363/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./363/binderfs")                = 0
umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./363/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./363/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./363/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./363/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./363")                          = 0
mkdir("./364", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5797
./strace-static-x86_64: Process 5797 attached
[pid  5797] chdir("./364")              = 0
[pid  5797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5797] setpgid(0, 0)               = 0
[pid  5797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5797] write(3, "1000", 4)         = 4
[pid  5797] close(3)                    = 0
[pid  5797] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5797] memfd_create("syzkaller", 0) = 3
[pid  5797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5797] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5797] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5797] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5797] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5797] close(3)                    = 0
[pid  5797] mkdir("./file0", 0777)      = 0
[  191.024930][ T5797] loop0: detected capacity change from 0 to 4096
[  191.040958][ T5797] NILFS (loop0): invalid segment: Checksum error in segment payload
[  191.049080][ T5797] NILFS (loop0): trying rollback from an earlier position
[  191.062969][ T5797] NILFS (loop0): recovery complete
[pid  5797] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5797] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5797] chdir("./file0")            = 0
[pid  5797] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5797] close(4)                    = 0
[pid  5797] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5797] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  191.068874][ T5798] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.082335][   T27] audit: type=1800 audit(1676306878.848:366): pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5797] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5797] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5797] exit_group(0)               = ?
[pid  5797] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5797, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./364", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./364/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./364/binderfs")                = 0
umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./364/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./364/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./364/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./364/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./364")                          = 0
mkdir("./365", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5799
./strace-static-x86_64: Process 5799 attached
[pid  5799] chdir("./365")              = 0
[pid  5799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5799] setpgid(0, 0)               = 0
[pid  5799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5799] write(3, "1000", 4)         = 4
[pid  5799] close(3)                    = 0
[pid  5799] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5799] memfd_create("syzkaller", 0) = 3
[pid  5799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5799] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5799] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5799] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5799] close(3)                    = 0
[pid  5799] mkdir("./file0", 0777)      = 0
[pid  5799] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5799] chdir("./file0")            = 0
[pid  5799] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5799] close(4)                    = 0
[  191.400788][ T5799] loop0: detected capacity change from 0 to 4096
[  191.417636][ T5799] NILFS (loop0): invalid segment: Checksum error in segment payload
[  191.425733][ T5799] NILFS (loop0): trying rollback from an earlier position
[  191.440649][ T5799] NILFS (loop0): recovery complete
[pid  5799] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5799] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  191.454259][   T27] audit: type=1800 audit(1676306879.208:367): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[  191.463756][ T5800] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5799] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5799] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5799] exit_group(0)               = ?
[pid  5799] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5799, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./365", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./365/binderfs")                = 0
umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./365/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./365/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./365/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./365/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./365")                          = 0
mkdir("./366", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5801
./strace-static-x86_64: Process 5801 attached
[pid  5801] chdir("./366")              = 0
[pid  5801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5801] setpgid(0, 0)               = 0
[pid  5801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5801] write(3, "1000", 4)         = 4
[pid  5801] close(3)                    = 0
[pid  5801] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5801] memfd_create("syzkaller", 0) = 3
[pid  5801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5801] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5801] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5801] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5801] close(3)                    = 0
[pid  5801] mkdir("./file0", 0777)      = 0
[  191.763481][ T5801] loop0: detected capacity change from 0 to 4096
[  191.779686][ T5801] NILFS (loop0): invalid segment: Checksum error in segment payload
[  191.787786][ T5801] NILFS (loop0): trying rollback from an earlier position
[  191.802365][ T5801] NILFS (loop0): recovery complete
[pid  5801] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5801] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5801] chdir("./file0")            = 0
[pid  5801] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5801] close(4)                    = 0
[pid  5801] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5801] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  191.809144][ T5802] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.819513][   T27] audit: type=1800 audit(1676306879.568:368): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5801] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5801] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5801] exit_group(0)               = ?
[pid  5801] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5801, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./366", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./366/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./366/binderfs")                = 0
umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./366/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./366/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./366/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./366/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./366")                          = 0
mkdir("./367", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5803
./strace-static-x86_64: Process 5803 attached
[pid  5803] chdir("./367")              = 0
[pid  5803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5803] setpgid(0, 0)               = 0
[pid  5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5803] write(3, "1000", 4)         = 4
[pid  5803] close(3)                    = 0
[pid  5803] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5803] memfd_create("syzkaller", 0) = 3
[pid  5803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5803] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5803] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5803] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5803] close(3)                    = 0
[pid  5803] mkdir("./file0", 0777)      = 0
[  192.125373][ T5803] loop0: detected capacity change from 0 to 4096
[  192.151917][ T5803] NILFS (loop0): invalid segment: Checksum error in segment payload
[  192.159986][ T5803] NILFS (loop0): trying rollback from an earlier position
[pid  5803] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5803] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5803] chdir("./file0")            = 0
[pid  5803] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5803] close(4)                    = 0
[pid  5803] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5803] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  192.174059][ T5803] NILFS (loop0): recovery complete
[  192.181239][ T5804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.193707][   T27] audit: type=1800 audit(1676306879.958:369): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5803] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5803] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5803] exit_group(0)               = ?
[pid  5803] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./367", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./367/binderfs")                = 0
umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./367/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./367/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./367/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./367/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./367")                          = 0
mkdir("./368", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5805
./strace-static-x86_64: Process 5805 attached
[pid  5805] chdir("./368")              = 0
[pid  5805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5805] setpgid(0, 0)               = 0
[pid  5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5805] write(3, "1000", 4)         = 4
[pid  5805] close(3)                    = 0
[pid  5805] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5805] memfd_create("syzkaller", 0) = 3
[pid  5805] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5805] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5805] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5805] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5805] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5805] close(3)                    = 0
[pid  5805] mkdir("./file0", 0777)      = 0
[pid  5805] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  192.477698][ T5805] loop0: detected capacity change from 0 to 4096
[  192.493012][ T5805] NILFS (loop0): invalid segment: Checksum error in segment payload
[  192.501168][ T5805] NILFS (loop0): trying rollback from an earlier position
[  192.515641][ T5805] NILFS (loop0): recovery complete
[pid  5805] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5805] chdir("./file0")            = 0
[pid  5805] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5805] close(4)                    = 0
[pid  5805] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5805] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  192.521860][ T5806] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.537201][   T27] audit: type=1800 audit(1676306880.288:370): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5805] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5805] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5805] exit_group(0)               = ?
[pid  5805] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5805, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./368/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./368/binderfs")                = 0
umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./368/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./368/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./368/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./368/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./368")                          = 0
mkdir("./369", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5807 attached
 <unfinished ...>
[pid  5807] chdir("./369")              = 0
[pid  5807] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5807] setpgid(0, 0)               = 0
[pid  5807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5807] write(3, "1000", 4)         = 4
[pid  5807] close(3)                    = 0
[pid  5807] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5807] memfd_create("syzkaller", 0) = 3
[pid  5807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5060] <... clone resumed>, child_tidptr=0x555555db65d0) = 5807
[pid  5807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5807] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5807] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5807] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5807] close(3)                    = 0
[pid  5807] mkdir("./file0", 0777)      = 0
[pid  5807] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5807] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5807] chdir("./file0")            = 0
[pid  5807] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5807] close(4)                    = 0
[pid  5807] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[  192.825403][ T5807] loop0: detected capacity change from 0 to 4096
[  192.841196][ T5807] NILFS (loop0): invalid segment: Checksum error in segment payload
[  192.849248][ T5807] NILFS (loop0): trying rollback from an earlier position
[  192.862527][ T5807] NILFS (loop0): recovery complete
[pid  5807] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  192.868848][ T5808] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.886168][   T27] audit: type=1800 audit(1676306880.628:371): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5807] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5807] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5807] exit_group(0)               = ?
[pid  5807] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5807, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./369", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./369/binderfs")                = 0
umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./369/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./369/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./369/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./369/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./369")                          = 0
mkdir("./370", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5809
./strace-static-x86_64: Process 5809 attached
[pid  5809] chdir("./370")              = 0
[pid  5809] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5809] setpgid(0, 0)               = 0
[pid  5809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5809] write(3, "1000", 4)         = 4
[pid  5809] close(3)                    = 0
[pid  5809] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5809] memfd_create("syzkaller", 0) = 3
[pid  5809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5809] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5809] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5809] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5809] close(3)                    = 0
[pid  5809] mkdir("./file0", 0777)      = 0
[  193.173602][ T5809] loop0: detected capacity change from 0 to 4096
[  193.190527][ T5809] NILFS (loop0): invalid segment: Checksum error in segment payload
[  193.198637][ T5809] NILFS (loop0): trying rollback from an earlier position
[  193.213047][ T5809] NILFS (loop0): recovery complete
[pid  5809] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5809] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5809] chdir("./file0")            = 0
[pid  5809] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5809] close(4)                    = 0
[pid  5809] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5809] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  193.219052][ T5810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.236201][   T27] audit: type=1800 audit(1676306880.988:372): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5809] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5809] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5809] exit_group(0)               = ?
[pid  5809] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5809, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
umount2("./370", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./370/binderfs")                = 0
umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./370/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./370/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./370/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./370/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./370")                          = 0
mkdir("./371", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5811
./strace-static-x86_64: Process 5811 attached
[pid  5811] chdir("./371")              = 0
[pid  5811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5811] setpgid(0, 0)               = 0
[pid  5811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5811] write(3, "1000", 4)         = 4
[pid  5811] close(3)                    = 0
[pid  5811] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5811] memfd_create("syzkaller", 0) = 3
[pid  5811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5811] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5811] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5811] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5811] close(3)                    = 0
[pid  5811] mkdir("./file0", 0777)      = 0
[  193.525513][ T5811] loop0: detected capacity change from 0 to 4096
[  193.542699][ T5811] NILFS (loop0): invalid segment: Checksum error in segment payload
[  193.550785][ T5811] NILFS (loop0): trying rollback from an earlier position
[  193.564778][ T5811] NILFS (loop0): recovery complete
[pid  5811] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5811] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5811] chdir("./file0")            = 0
[pid  5811] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5811] close(4)                    = 0
[pid  5811] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5811] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  193.570847][ T5812] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.585317][   T27] audit: type=1800 audit(1676306881.338:373): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5811] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5811] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5811] exit_group(0)               = ?
[pid  5811] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5811, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./371", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./371/binderfs")                = 0
umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./371/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./371/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./371/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./371/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./371")                          = 0
mkdir("./372", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5813
./strace-static-x86_64: Process 5813 attached
[pid  5813] chdir("./372")              = 0
[pid  5813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5813] setpgid(0, 0)               = 0
[pid  5813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5813] write(3, "1000", 4)         = 4
[pid  5813] close(3)                    = 0
[pid  5813] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5813] memfd_create("syzkaller", 0) = 3
[pid  5813] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5813] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5813] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5813] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5813] close(3)                    = 0
[pid  5813] mkdir("./file0", 0777)      = 0
[pid  5813] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5813] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5813] chdir("./file0")            = 0
[pid  5813] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5813] close(4)                    = 0
[  193.887037][ T5813] loop0: detected capacity change from 0 to 4096
[  193.903708][ T5813] NILFS (loop0): invalid segment: Checksum error in segment payload
[  193.911816][ T5813] NILFS (loop0): trying rollback from an earlier position
[  193.925867][ T5813] NILFS (loop0): recovery complete
[pid  5813] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5813] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  193.932152][ T5814] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.938325][   T27] audit: type=1800 audit(1676306881.698:374): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5813] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5813] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5813] exit_group(0)               = ?
[pid  5813] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5813, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./372", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./372/binderfs")                = 0
umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./372/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./372/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./372/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./372/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./372")                          = 0
mkdir("./373", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5815
./strace-static-x86_64: Process 5815 attached
[pid  5815] chdir("./373")              = 0
[pid  5815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5815] setpgid(0, 0)               = 0
[pid  5815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5815] write(3, "1000", 4)         = 4
[pid  5815] close(3)                    = 0
[pid  5815] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5815] memfd_create("syzkaller", 0) = 3
[pid  5815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5815] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5815] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5815] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5815] close(3)                    = 0
[pid  5815] mkdir("./file0", 0777)      = 0
[pid  5815] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  194.248587][ T5815] loop0: detected capacity change from 0 to 4096
[  194.263906][ T5815] NILFS (loop0): invalid segment: Checksum error in segment payload
[  194.271965][ T5815] NILFS (loop0): trying rollback from an earlier position
[  194.289311][ T5815] NILFS (loop0): recovery complete
[pid  5815] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5815] chdir("./file0")            = 0
[pid  5815] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5815] close(4)                    = 0
[pid  5815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5815] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  194.295390][ T5816] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5815] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5815] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5815] exit_group(0)               = ?
[pid  5815] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5815, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./373", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./373/binderfs")                = 0
umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./373/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./373/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./373/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./373/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./373")                          = 0
mkdir("./374", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5817
./strace-static-x86_64: Process 5817 attached
[pid  5817] chdir("./374")              = 0
[pid  5817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5817] setpgid(0, 0)               = 0
[pid  5817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5817] write(3, "1000", 4)         = 4
[pid  5817] close(3)                    = 0
[pid  5817] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5817] memfd_create("syzkaller", 0) = 3
[pid  5817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5817] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5817] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5817] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5817] close(3)                    = 0
[pid  5817] mkdir("./file0", 0777)      = 0
[pid  5817] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5817] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  194.586303][ T5817] loop0: detected capacity change from 0 to 4096
[  194.601477][ T5817] NILFS (loop0): invalid segment: Checksum error in segment payload
[  194.609746][ T5817] NILFS (loop0): trying rollback from an earlier position
[  194.624173][ T5817] NILFS (loop0): recovery complete
[pid  5817] chdir("./file0")            = 0
[pid  5817] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5817] close(4)                    = 0
[pid  5817] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5817] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  194.630883][ T5818] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5817] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5817] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5817] exit_group(0)               = ?
[pid  5817] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5817, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./374", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./374/binderfs")                = 0
umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./374/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./374/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./374/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./374/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./374")                          = 0
mkdir("./375", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5819
./strace-static-x86_64: Process 5819 attached
[pid  5819] chdir("./375")              = 0
[pid  5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5819] setpgid(0, 0)               = 0
[pid  5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5819] write(3, "1000", 4)         = 4
[pid  5819] close(3)                    = 0
[pid  5819] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5819] memfd_create("syzkaller", 0) = 3
[pid  5819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5819] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5819] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5819] close(3)                    = 0
[pid  5819] mkdir("./file0", 0777)      = 0
[pid  5819] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5819] chdir("./file0")            = 0
[pid  5819] ioctl(4, LOOP_CLR_FD)       = 0
[  194.915657][ T5819] loop0: detected capacity change from 0 to 4096
[  194.931817][ T5819] NILFS (loop0): invalid segment: Checksum error in segment payload
[  194.939878][ T5819] NILFS (loop0): trying rollback from an earlier position
[  194.953617][ T5819] NILFS (loop0): recovery complete
[pid  5819] close(4)                    = 0
[pid  5819] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5819] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  194.959648][ T5820] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5819] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5819] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5819] exit_group(0)               = ?
[pid  5819] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5819, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./375", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./375/binderfs")                = 0
umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./375/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./375/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./375/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./375/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./375")                          = 0
mkdir("./376", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5821
./strace-static-x86_64: Process 5821 attached
[pid  5821] chdir("./376")              = 0
[pid  5821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5821] setpgid(0, 0)               = 0
[pid  5821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5821] write(3, "1000", 4)         = 4
[pid  5821] close(3)                    = 0
[pid  5821] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5821] memfd_create("syzkaller", 0) = 3
[pid  5821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5821] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5821] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5821] close(3)                    = 0
[pid  5821] mkdir("./file0", 0777)      = 0
[  195.247450][ T5821] loop0: detected capacity change from 0 to 4096
[  195.263752][ T5821] NILFS (loop0): invalid segment: Checksum error in segment payload
[  195.271807][ T5821] NILFS (loop0): trying rollback from an earlier position
[  195.286234][ T5821] NILFS (loop0): recovery complete
[pid  5821] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5821] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5821] chdir("./file0")            = 0
[pid  5821] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5821] close(4)                    = 0
[pid  5821] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5821] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  195.292115][ T5822] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5821] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5821] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5821] exit_group(0)               = ?
[pid  5821] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5821, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./376/binderfs")                = 0
umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./376/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./376/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./376/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./376/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./376")                          = 0
mkdir("./377", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5823
./strace-static-x86_64: Process 5823 attached
[pid  5823] chdir("./377")              = 0
[pid  5823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5823] setpgid(0, 0)               = 0
[pid  5823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5823] write(3, "1000", 4)         = 4
[pid  5823] close(3)                    = 0
[pid  5823] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5823] memfd_create("syzkaller", 0) = 3
[pid  5823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5823] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5823] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5823] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5823] close(3)                    = 0
[pid  5823] mkdir("./file0", 0777)      = 0
[  195.568921][ T5823] loop0: detected capacity change from 0 to 4096
[  195.584228][ T5823] NILFS (loop0): invalid segment: Checksum error in segment payload
[  195.592309][ T5823] NILFS (loop0): trying rollback from an earlier position
[  195.606401][ T5823] NILFS (loop0): recovery complete
[pid  5823] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5823] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5823] chdir("./file0")            = 0
[pid  5823] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5823] close(4)                    = 0
[pid  5823] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5823] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  195.612621][ T5824] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5823] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5823] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5823] exit_group(0)               = ?
[pid  5823] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./377", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./377/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./377/binderfs")                = 0
umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./377/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./377/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./377/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./377/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./377")                          = 0
mkdir("./378", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5825
./strace-static-x86_64: Process 5825 attached
[pid  5825] chdir("./378")              = 0
[pid  5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5825] setpgid(0, 0)               = 0
[pid  5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5825] write(3, "1000", 4)         = 4
[pid  5825] close(3)                    = 0
[pid  5825] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5825] memfd_create("syzkaller", 0) = 3
[pid  5825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5825] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5825] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5825] close(3)                    = 0
[pid  5825] mkdir("./file0", 0777)      = 0
[pid  5825] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5825] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5825] chdir("./file0")            = 0
[pid  5825] ioctl(4, LOOP_CLR_FD)       = 0
[  195.900495][ T5825] loop0: detected capacity change from 0 to 4096
[  195.916903][ T5825] NILFS (loop0): invalid segment: Checksum error in segment payload
[  195.925047][ T5825] NILFS (loop0): trying rollback from an earlier position
[  195.939238][ T5825] NILFS (loop0): recovery complete
[pid  5825] close(4)                    = 0
[pid  5825] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5825] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  195.945367][ T5826] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.969140][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  195.969154][   T27] audit: type=1800 audit(1676306883.708:380): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5825] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5825] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5825] exit_group(0)               = ?
[pid  5825] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5825, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
umount2("./378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./378/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./378/binderfs")                = 0
umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./378/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./378/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./378/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./378/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./378")                          = 0
mkdir("./379", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5827
./strace-static-x86_64: Process 5827 attached
[pid  5827] chdir("./379")              = 0
[pid  5827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5827] setpgid(0, 0)               = 0
[pid  5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5827] write(3, "1000", 4)         = 4
[pid  5827] close(3)                    = 0
[pid  5827] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5827] memfd_create("syzkaller", 0) = 3
[pid  5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5827] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5827] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5827] close(3)                    = 0
[pid  5827] mkdir("./file0", 0777)      = 0
[  196.261996][ T5827] loop0: detected capacity change from 0 to 4096
[  196.277510][ T5827] NILFS (loop0): invalid segment: Checksum error in segment payload
[  196.285529][ T5827] NILFS (loop0): trying rollback from an earlier position
[  196.300381][ T5827] NILFS (loop0): recovery complete
[pid  5827] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5827] chdir("./file0")            = 0
[pid  5827] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5827] close(4)                    = 0
[pid  5827] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5827] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  196.306502][ T5828] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.328572][   T27] audit: type=1800 audit(1676306884.088:381): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5827] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5827] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5827] exit_group(0)               = ?
[pid  5827] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./379", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./379/binderfs")                = 0
umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./379/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./379/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./379/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./379/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./379")                          = 0
mkdir("./380", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5829
./strace-static-x86_64: Process 5829 attached
[pid  5829] chdir("./380")              = 0
[pid  5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5829] setpgid(0, 0)               = 0
[pid  5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5829] write(3, "1000", 4)         = 4
[pid  5829] close(3)                    = 0
[pid  5829] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5829] memfd_create("syzkaller", 0) = 3
[pid  5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5829] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5829] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5829] close(3)                    = 0
[pid  5829] mkdir("./file0", 0777)      = 0
[pid  5829] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5829] chdir("./file0")            = 0
[  196.622405][ T5829] loop0: detected capacity change from 0 to 4096
[  196.640522][ T5829] NILFS (loop0): invalid segment: Checksum error in segment payload
[  196.648583][ T5829] NILFS (loop0): trying rollback from an earlier position
[  196.663577][ T5829] NILFS (loop0): recovery complete
[pid  5829] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5829] close(4)                    = 0
[pid  5829] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5829] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  196.669751][ T5830] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.687399][   T27] audit: type=1800 audit(1676306884.438:382): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5829] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5829] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5829] exit_group(0)               = ?
[pid  5829] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./380", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./380/binderfs")                = 0
umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./380/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./380/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./380/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./380/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./380")                          = 0
mkdir("./381", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5831
./strace-static-x86_64: Process 5831 attached
[pid  5831] chdir("./381")              = 0
[pid  5831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5831] setpgid(0, 0)               = 0
[pid  5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5831] write(3, "1000", 4)         = 4
[pid  5831] close(3)                    = 0
[pid  5831] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5831] memfd_create("syzkaller", 0) = 3
[pid  5831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5831] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5831] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5831] close(3)                    = 0
[pid  5831] mkdir("./file0", 0777)      = 0
[pid  5831] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5831] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5831] chdir("./file0")            = 0
[  196.970056][ T5831] loop0: detected capacity change from 0 to 4096
[  196.986958][ T5831] NILFS (loop0): invalid segment: Checksum error in segment payload
[  196.995019][ T5831] NILFS (loop0): trying rollback from an earlier position
[  197.008967][ T5831] NILFS (loop0): recovery complete
[pid  5831] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5831] close(4)                    = 0
[pid  5831] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5831] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  197.015541][ T5832] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.027516][   T27] audit: type=1800 audit(1676306884.788:383): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5831] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5831] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5831] exit_group(0)               = ?
[pid  5831] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./381", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./381/binderfs")                = 0
umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./381/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./381/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./381/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./381/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./381")                          = 0
mkdir("./382", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5833
./strace-static-x86_64: Process 5833 attached
[pid  5833] chdir("./382")              = 0
[pid  5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5833] setpgid(0, 0)               = 0
[pid  5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5833] write(3, "1000", 4)         = 4
[pid  5833] close(3)                    = 0
[pid  5833] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5833] memfd_create("syzkaller", 0) = 3
[pid  5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5833] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5833] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5833] close(3)                    = 0
[pid  5833] mkdir("./file0", 0777)      = 0
[pid  5833] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5833] chdir("./file0")            = 0
[pid  5833] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5833] close(4)                    = 0
[  197.332151][ T5833] loop0: detected capacity change from 0 to 4096
[  197.348037][ T5833] NILFS (loop0): invalid segment: Checksum error in segment payload
[  197.356095][ T5833] NILFS (loop0): trying rollback from an earlier position
[  197.368780][ T5833] NILFS (loop0): recovery complete
[pid  5833] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5833] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  197.374542][ T5834] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.395754][   T27] audit: type=1800 audit(1676306885.138:384): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5833] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5833] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5833] exit_group(0)               = ?
[pid  5833] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./382", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./382/binderfs")                = 0
umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./382/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./382/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./382/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./382/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./382")                          = 0
mkdir("./383", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5835
./strace-static-x86_64: Process 5835 attached
[pid  5835] chdir("./383")              = 0
[pid  5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5835] setpgid(0, 0)               = 0
[pid  5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5835] write(3, "1000", 4)         = 4
[pid  5835] close(3)                    = 0
[pid  5835] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5835] memfd_create("syzkaller", 0) = 3
[pid  5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5835] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5835] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5835] close(3)                    = 0
[pid  5835] mkdir("./file0", 0777)      = 0
[  197.659697][ T5835] loop0: detected capacity change from 0 to 4096
[  197.675234][ T5835] NILFS (loop0): invalid segment: Checksum error in segment payload
[  197.683341][ T5835] NILFS (loop0): trying rollback from an earlier position
[  197.697253][ T5835] NILFS (loop0): recovery complete
[pid  5835] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5835] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5835] chdir("./file0")            = 0
[pid  5835] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5835] close(4)                    = 0
[pid  5835] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5835] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  197.703637][ T5836] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.724475][   T27] audit: type=1800 audit(1676306885.458:385): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5835] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5835] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5835] exit_group(0)               = ?
[pid  5835] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./383/binderfs")                = 0
umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./383/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./383/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./383/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./383/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./383")                          = 0
mkdir("./384", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5837
./strace-static-x86_64: Process 5837 attached
[pid  5837] chdir("./384")              = 0
[pid  5837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5837] setpgid(0, 0)               = 0
[pid  5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5837] write(3, "1000", 4)         = 4
[pid  5837] close(3)                    = 0
[pid  5837] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5837] memfd_create("syzkaller", 0) = 3
[pid  5837] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5837] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5837] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5837] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5837] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5837] close(3)                    = 0
[pid  5837] mkdir("./file0", 0777)      = 0
[  198.015981][ T5837] loop0: detected capacity change from 0 to 4096
[  198.032644][ T5837] NILFS (loop0): invalid segment: Checksum error in segment payload
[  198.040729][ T5837] NILFS (loop0): trying rollback from an earlier position
[  198.055445][ T5837] NILFS (loop0): recovery complete
[pid  5837] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5837] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5837] chdir("./file0")            = 0
[pid  5837] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5837] close(4)                    = 0
[pid  5837] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5837] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  198.061517][ T5838] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.076187][   T27] audit: type=1800 audit(1676306885.818:386): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5837] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5837] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5837] exit_group(0)               = ?
[pid  5837] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./384", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./384/binderfs")                = 0
umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./384/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./384/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./384/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./384/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./384")                          = 0
mkdir("./385", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5839
./strace-static-x86_64: Process 5839 attached
[pid  5839] chdir("./385")              = 0
[pid  5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5839] setpgid(0, 0)               = 0
[pid  5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5839] write(3, "1000", 4)         = 4
[pid  5839] close(3)                    = 0
[pid  5839] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5839] memfd_create("syzkaller", 0) = 3
[pid  5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5839] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5839] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5839] close(3)                    = 0
[pid  5839] mkdir("./file0", 0777)      = 0
[pid  5839] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  198.346757][ T5839] loop0: detected capacity change from 0 to 4096
[  198.364495][ T5839] NILFS (loop0): invalid segment: Checksum error in segment payload
[  198.372609][ T5839] NILFS (loop0): trying rollback from an earlier position
[  198.386549][ T5839] NILFS (loop0): recovery complete
[pid  5839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5839] chdir("./file0")            = 0
[pid  5839] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5839] close(4)                    = 0
[pid  5839] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5839] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  198.392539][ T5840] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.405680][   T27] audit: type=1800 audit(1676306886.158:387): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5839] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5839] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5839] exit_group(0)               = ?
[pid  5839] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./385", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./385/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./385/binderfs")                = 0
umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./385/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./385/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./385/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./385/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./385")                          = 0
mkdir("./386", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5841
./strace-static-x86_64: Process 5841 attached
[pid  5841] chdir("./386")              = 0
[pid  5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5841] setpgid(0, 0)               = 0
[pid  5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5841] write(3, "1000", 4)         = 4
[pid  5841] close(3)                    = 0
[pid  5841] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5841] memfd_create("syzkaller", 0) = 3
[pid  5841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5841] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5841] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5841] close(3)                    = 0
[pid  5841] mkdir("./file0", 0777)      = 0
[pid  5841] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5841] chdir("./file0")            = 0
[pid  5841] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5841] close(4)                    = 0
[  198.704233][ T5841] loop0: detected capacity change from 0 to 4096
[  198.721289][ T5841] NILFS (loop0): invalid segment: Checksum error in segment payload
[  198.729351][ T5841] NILFS (loop0): trying rollback from an earlier position
[  198.742090][ T5841] NILFS (loop0): recovery complete
[pid  5841] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5841] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  198.749061][ T5842] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.760646][   T27] audit: type=1800 audit(1676306886.528:388): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5841] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5841] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5841] exit_group(0)               = ?
[pid  5841] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./386", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./386/binderfs")                = 0
umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./386/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./386/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./386/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./386/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./386")                          = 0
mkdir("./387", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5843
./strace-static-x86_64: Process 5843 attached
[pid  5843] chdir("./387")              = 0
[pid  5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5843] setpgid(0, 0)               = 0
[pid  5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5843] write(3, "1000", 4)         = 4
[pid  5843] close(3)                    = 0
[pid  5843] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5843] memfd_create("syzkaller", 0) = 3
[pid  5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5843] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5843] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5843] close(3)                    = 0
[pid  5843] mkdir("./file0", 0777)      = 0
[  199.115790][ T5843] loop0: detected capacity change from 0 to 4096
[  199.142661][ T5843] NILFS (loop0): invalid segment: Checksum error in segment payload
[  199.151306][ T5843] NILFS (loop0): trying rollback from an earlier position
[pid  5843] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5843] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5843] chdir("./file0")            = 0
[pid  5843] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5843] close(4)                    = 0
[pid  5843] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5843] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  199.167994][ T5843] NILFS (loop0): recovery complete
[  199.175316][ T5844] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.198528][   T27] audit: type=1800 audit(1676306886.958:389): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5843] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5843] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5843] exit_group(0)               = ?
[pid  5843] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./387", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./387/binderfs")                = 0
umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./387/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./387/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./387/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./387/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./387")                          = 0
mkdir("./388", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5845
./strace-static-x86_64: Process 5845 attached
[pid  5845] chdir("./388")              = 0
[pid  5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5845] setpgid(0, 0)               = 0
[pid  5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5845] write(3, "1000", 4)         = 4
[pid  5845] close(3)                    = 0
[pid  5845] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5845] memfd_create("syzkaller", 0) = 3
[pid  5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5845] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5845] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5845] close(3)                    = 0
[pid  5845] mkdir("./file0", 0777)      = 0
[  199.619737][ T5845] loop0: detected capacity change from 0 to 4096
[  199.635654][ T5845] NILFS (loop0): invalid segment: Checksum error in segment payload
[  199.643893][ T5845] NILFS (loop0): trying rollback from an earlier position
[  199.659590][ T5845] NILFS (loop0): recovery complete
[pid  5845] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5845] chdir("./file0")            = 0
[pid  5845] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5845] close(4)                    = 0
[pid  5845] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5845] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  199.665372][ T5846] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5845] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5845] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5845] exit_group(0)               = ?
[pid  5845] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./388", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./388/binderfs")                = 0
umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./388/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./388/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./388/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./388/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./388")                          = 0
mkdir("./389", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5847
./strace-static-x86_64: Process 5847 attached
[pid  5847] chdir("./389")              = 0
[pid  5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5847] setpgid(0, 0)               = 0
[pid  5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5847] write(3, "1000", 4)         = 4
[pid  5847] close(3)                    = 0
[pid  5847] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5847] memfd_create("syzkaller", 0) = 3
[pid  5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5847] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5847] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5847] close(3)                    = 0
[pid  5847] mkdir("./file0", 0777)      = 0
[  199.964999][ T5847] loop0: detected capacity change from 0 to 4096
[  199.980894][ T5847] NILFS (loop0): invalid segment: Checksum error in segment payload
[  199.989029][ T5847] NILFS (loop0): trying rollback from an earlier position
[  200.002716][ T5847] NILFS (loop0): recovery complete
[pid  5847] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5847] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5847] chdir("./file0")            = 0
[pid  5847] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5847] close(4)                    = 0
[pid  5847] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5847] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  200.008503][ T5848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5847] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5847] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5847] exit_group(0)               = ?
[pid  5847] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./389", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./389/binderfs")                = 0
umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./389/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./389/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./389/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./389/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./389")                          = 0
mkdir("./390", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5849
./strace-static-x86_64: Process 5849 attached
[pid  5849] chdir("./390")              = 0
[pid  5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5849] setpgid(0, 0)               = 0
[pid  5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5849] write(3, "1000", 4)         = 4
[pid  5849] close(3)                    = 0
[pid  5849] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5849] memfd_create("syzkaller", 0) = 3
[pid  5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5849] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5849] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5849] close(3)                    = 0
[pid  5849] mkdir("./file0", 0777)      = 0
[  200.284997][ T5849] loop0: detected capacity change from 0 to 4096
[  200.302183][ T5849] NILFS (loop0): invalid segment: Checksum error in segment payload
[  200.310271][ T5849] NILFS (loop0): trying rollback from an earlier position
[  200.323597][ T5849] NILFS (loop0): recovery complete
[pid  5849] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5849] chdir("./file0")            = 0
[pid  5849] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5849] close(4)                    = 0
[pid  5849] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5849] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  200.329666][ T5850] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5849] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5849] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5849] exit_group(0)               = ?
[pid  5849] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./390", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./390/binderfs")                = 0
umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./390/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./390/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./390/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./390/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./390")                          = 0
mkdir("./391", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5851
./strace-static-x86_64: Process 5851 attached
[pid  5851] chdir("./391")              = 0
[pid  5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5851] setpgid(0, 0)               = 0
[pid  5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5851] write(3, "1000", 4)         = 4
[pid  5851] close(3)                    = 0
[pid  5851] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5851] memfd_create("syzkaller", 0) = 3
[pid  5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5851] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5851] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5851] close(3)                    = 0
[pid  5851] mkdir("./file0", 0777)      = 0
[  200.610672][ T5851] loop0: detected capacity change from 0 to 4096
[  200.626430][ T5851] NILFS (loop0): invalid segment: Checksum error in segment payload
[  200.634487][ T5851] NILFS (loop0): trying rollback from an earlier position
[  200.648098][ T5851] NILFS (loop0): recovery complete
[pid  5851] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5851] chdir("./file0")            = 0
[pid  5851] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5851] close(4)                    = 0
[pid  5851] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5851] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  200.654040][ T5852] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5851] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5851] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5851] exit_group(0)               = ?
[pid  5851] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./391", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./391/binderfs")                = 0
umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./391/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./391/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./391/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./391/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./391")                          = 0
mkdir("./392", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5853
./strace-static-x86_64: Process 5853 attached
[pid  5853] chdir("./392")              = 0
[pid  5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5853] setpgid(0, 0)               = 0
[pid  5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5853] write(3, "1000", 4)         = 4
[pid  5853] close(3)                    = 0
[pid  5853] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5853] memfd_create("syzkaller", 0) = 3
[pid  5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5853] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5853] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5853] close(3)                    = 0
[pid  5853] mkdir("./file0", 0777)      = 0
[pid  5853] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  200.943055][ T5853] loop0: detected capacity change from 0 to 4096
[  200.959798][ T5853] NILFS (loop0): invalid segment: Checksum error in segment payload
[  200.968013][ T5853] NILFS (loop0): trying rollback from an earlier position
[  200.983794][ T5853] NILFS (loop0): recovery complete
[pid  5853] chdir("./file0")            = 0
[pid  5853] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5853] close(4)                    = 0
[pid  5853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5853] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  200.990036][ T5854] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.004149][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  201.004162][   T27] audit: type=1800 audit(1676306888.758:394): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5853] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5853] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5853] exit_group(0)               = ?
[pid  5853] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./392", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./392/binderfs")                = 0
umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./392/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./392/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./392/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./392/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./392")                          = 0
mkdir("./393", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5855
./strace-static-x86_64: Process 5855 attached
[pid  5855] chdir("./393")              = 0
[pid  5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5855] setpgid(0, 0)               = 0
[pid  5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5855] write(3, "1000", 4)         = 4
[pid  5855] close(3)                    = 0
[pid  5855] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5855] memfd_create("syzkaller", 0) = 3
[pid  5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5855] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5855] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5855] close(3)                    = 0
[pid  5855] mkdir("./file0", 0777)      = 0
[pid  5855] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5855] chdir("./file0")            = 0
[  201.297513][ T5855] loop0: detected capacity change from 0 to 4096
[  201.314785][ T5855] NILFS (loop0): invalid segment: Checksum error in segment payload
[  201.322951][ T5855] NILFS (loop0): trying rollback from an earlier position
[  201.336768][ T5855] NILFS (loop0): recovery complete
[pid  5855] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5855] close(4)                    = 0
[pid  5855] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5855] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  201.342978][ T5856] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.356154][   T27] audit: type=1800 audit(1676306889.108:395): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5855] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5855] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5855] exit_group(0)               = ?
[pid  5855] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./393", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./393/binderfs")                = 0
umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./393/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./393/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./393/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./393/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./393")                          = 0
mkdir("./394", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5857
./strace-static-x86_64: Process 5857 attached
[pid  5857] chdir("./394")              = 0
[pid  5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5857] setpgid(0, 0)               = 0
[pid  5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5857] write(3, "1000", 4)         = 4
[pid  5857] close(3)                    = 0
[pid  5857] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5857] memfd_create("syzkaller", 0) = 3
[pid  5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5857] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5857] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5857] close(3)                    = 0
[pid  5857] mkdir("./file0", 0777)      = 0
[  201.626770][ T5857] loop0: detected capacity change from 0 to 4096
[  201.645507][ T5857] NILFS (loop0): invalid segment: Checksum error in segment payload
[  201.653875][ T5857] NILFS (loop0): trying rollback from an earlier position
[  201.667924][ T5857] NILFS (loop0): recovery complete
[pid  5857] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5857] chdir("./file0")            = 0
[pid  5857] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5857] close(4)                    = 0
[pid  5857] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5857] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  201.673804][ T5858] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.687742][   T27] audit: type=1800 audit(1676306889.448:396): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5857] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5857] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5857] exit_group(0)               = ?
[pid  5857] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./394", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./394/binderfs")                = 0
umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./394/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./394/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./394/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./394/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./394")                          = 0
mkdir("./395", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5859
./strace-static-x86_64: Process 5859 attached
[pid  5859] chdir("./395")              = 0
[pid  5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5859] setpgid(0, 0)               = 0
[pid  5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5859] write(3, "1000", 4)         = 4
[pid  5859] close(3)                    = 0
[pid  5859] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5859] memfd_create("syzkaller", 0) = 3
[pid  5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5859] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5859] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5859] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5859] close(3)                    = 0
[pid  5859] mkdir("./file0", 0777)      = 0
[  201.982661][ T5859] loop0: detected capacity change from 0 to 4096
[  202.000072][ T5859] NILFS (loop0): invalid segment: Checksum error in segment payload
[  202.008752][ T5859] NILFS (loop0): trying rollback from an earlier position
[  202.022280][ T5859] NILFS (loop0): recovery complete
[pid  5859] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5859] chdir("./file0")            = 0
[pid  5859] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5859] close(4)                    = 0
[pid  5859] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5859] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  202.028083][ T5860] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.040982][   T27] audit: type=1800 audit(1676306889.798:397): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5859] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5859] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5859] exit_group(0)               = ?
[pid  5859] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./395/binderfs")                = 0
umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./395/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./395/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./395/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./395/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./395")                          = 0
mkdir("./396", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5861
./strace-static-x86_64: Process 5861 attached
[pid  5861] chdir("./396")              = 0
[pid  5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5861] setpgid(0, 0)               = 0
[pid  5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5861] write(3, "1000", 4)         = 4
[pid  5861] close(3)                    = 0
[pid  5861] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5861] memfd_create("syzkaller", 0) = 3
[pid  5861] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5861] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5861] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5861] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5861] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5861] close(3)                    = 0
[pid  5861] mkdir("./file0", 0777)      = 0
[pid  5861] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5861] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5861] chdir("./file0")            = 0
[pid  5861] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5861] close(4)                    = 0
[  202.323997][ T5861] loop0: detected capacity change from 0 to 4096
[  202.338825][ T5861] NILFS (loop0): invalid segment: Checksum error in segment payload
[  202.346877][ T5861] NILFS (loop0): trying rollback from an earlier position
[  202.360626][ T5861] NILFS (loop0): recovery complete
[pid  5861] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5861] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  202.366592][ T5862] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.375852][   T27] audit: type=1800 audit(1676306890.128:398): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5861] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5861] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5861] exit_group(0)               = ?
[pid  5861] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./396/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./396/binderfs")                = 0
umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./396/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./396/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./396/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./396/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./396")                          = 0
mkdir("./397", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5863
./strace-static-x86_64: Process 5863 attached
[pid  5863] chdir("./397")              = 0
[pid  5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5863] setpgid(0, 0)               = 0
[pid  5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5863] write(3, "1000", 4)         = 4
[pid  5863] close(3)                    = 0
[pid  5863] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5863] memfd_create("syzkaller", 0) = 3
[pid  5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5863] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5863] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5863] close(3)                    = 0
[pid  5863] mkdir("./file0", 0777)      = 0
[pid  5863] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5863] chdir("./file0")            = 0
[pid  5863] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5863] close(4)                    = 0
[  202.668739][ T5863] loop0: detected capacity change from 0 to 4096
[  202.683632][ T5863] NILFS (loop0): invalid segment: Checksum error in segment payload
[  202.691750][ T5863] NILFS (loop0): trying rollback from an earlier position
[  202.708045][ T5863] NILFS (loop0): recovery complete
[pid  5863] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5863] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  202.725564][ T5864] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.726184][   T27] audit: type=1800 audit(1676306890.478:399): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5863] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5863] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5863] exit_group(0)               = ?
[pid  5863] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./397", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./397/binderfs")                = 0
umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./397/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./397/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./397/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./397/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./397")                          = 0
mkdir("./398", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5865
./strace-static-x86_64: Process 5865 attached
[pid  5865] chdir("./398")              = 0
[pid  5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5865] setpgid(0, 0)               = 0
[pid  5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5865] write(3, "1000", 4)         = 4
[pid  5865] close(3)                    = 0
[pid  5865] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5865] memfd_create("syzkaller", 0) = 3
[pid  5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5865] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5865] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5865] close(3)                    = 0
[pid  5865] mkdir("./file0", 0777)      = 0
[pid  5865] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  202.993218][ T5865] loop0: detected capacity change from 0 to 4096
[  203.008389][ T5865] NILFS (loop0): invalid segment: Checksum error in segment payload
[  203.016504][ T5865] NILFS (loop0): trying rollback from an earlier position
[  203.029805][ T5865] NILFS (loop0): recovery complete
[pid  5865] chdir("./file0")            = 0
[pid  5865] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5865] close(4)                    = 0
[pid  5865] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5865] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  203.036696][ T5866] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.048210][   T27] audit: type=1800 audit(1676306890.808:400): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5865] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5865] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5865] exit_group(0)               = ?
[pid  5865] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./398", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./398/binderfs")                = 0
umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./398/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./398/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./398/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./398/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./398")                          = 0
mkdir("./399", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached
, child_tidptr=0x555555db65d0) = 5867
[pid  5867] chdir("./399")              = 0
[pid  5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5867] setpgid(0, 0)               = 0
[pid  5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5867] write(3, "1000", 4)         = 4
[pid  5867] close(3)                    = 0
[pid  5867] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5867] memfd_create("syzkaller", 0) = 3
[pid  5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5867] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5867] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5867] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5867] close(3)                    = 0
[pid  5867] mkdir("./file0", 0777)      = 0
[  203.342362][ T5867] loop0: detected capacity change from 0 to 4096
[  203.357977][ T5867] NILFS (loop0): invalid segment: Checksum error in segment payload
[  203.365985][ T5867] NILFS (loop0): trying rollback from an earlier position
[  203.379875][ T5867] NILFS (loop0): recovery complete
[pid  5867] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5867] chdir("./file0")            = 0
[pid  5867] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5867] close(4)                    = 0
[pid  5867] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5867] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  203.386091][ T5868] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.399267][   T27] audit: type=1800 audit(1676306891.158:401): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5867] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5867] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5867] exit_group(0)               = ?
[pid  5867] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./399/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./399/binderfs")                = 0
umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./399/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./399/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./399/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./399/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./399")                          = 0
mkdir("./400", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5869
./strace-static-x86_64: Process 5869 attached
[pid  5869] chdir("./400")              = 0
[pid  5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5869] setpgid(0, 0)               = 0
[pid  5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5869] write(3, "1000", 4)         = 4
[pid  5869] close(3)                    = 0
[pid  5869] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5869] memfd_create("syzkaller", 0) = 3
[pid  5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5869] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5869] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5869] close(3)                    = 0
[pid  5869] mkdir("./file0", 0777)      = 0
[  203.682621][ T5869] loop0: detected capacity change from 0 to 4096
[  203.699453][ T5869] NILFS (loop0): invalid segment: Checksum error in segment payload
[  203.707534][ T5869] NILFS (loop0): trying rollback from an earlier position
[  203.721283][ T5869] NILFS (loop0): recovery complete
[pid  5869] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5869] chdir("./file0")            = 0
[pid  5869] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5869] close(4)                    = 0
[pid  5869] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5869] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  203.727153][ T5870] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.743353][   T27] audit: type=1800 audit(1676306891.508:402): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5869] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5869] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5869] exit_group(0)               = ?
[pid  5869] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./400", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./400/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./400/binderfs")                = 0
umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./400/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./400/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./400/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./400/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./400")                          = 0
mkdir("./401", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5871
./strace-static-x86_64: Process 5871 attached
[pid  5871] chdir("./401")              = 0
[pid  5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5871] setpgid(0, 0)               = 0
[pid  5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5871] write(3, "1000", 4)         = 4
[pid  5871] close(3)                    = 0
[pid  5871] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5871] memfd_create("syzkaller", 0) = 3
[pid  5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5871] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5871] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5871] close(3)                    = 0
[pid  5871] mkdir("./file0", 0777)      = 0
[  204.016617][ T5871] loop0: detected capacity change from 0 to 4096
[  204.032253][ T5871] NILFS (loop0): invalid segment: Checksum error in segment payload
[  204.040390][ T5871] NILFS (loop0): trying rollback from an earlier position
[  204.054030][ T5871] NILFS (loop0): recovery complete
[pid  5871] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5871] chdir("./file0")            = 0
[pid  5871] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5871] close(4)                    = 0
[pid  5871] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5871] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  204.059897][ T5872] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.078525][   T27] audit: type=1800 audit(1676306891.838:403): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5871] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5871] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5871] exit_group(0)               = ?
[pid  5871] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./401", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./401/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./401/binderfs")                = 0
umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./401/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./401/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./401/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./401/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./401")                          = 0
mkdir("./402", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5873
./strace-static-x86_64: Process 5873 attached
[pid  5873] chdir("./402")              = 0
[pid  5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5873] setpgid(0, 0)               = 0
[pid  5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5873] write(3, "1000", 4)         = 4
[pid  5873] close(3)                    = 0
[pid  5873] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5873] memfd_create("syzkaller", 0) = 3
[pid  5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5873] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5873] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5873] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5873] close(3)                    = 0
[pid  5873] mkdir("./file0", 0777)      = 0
[  204.338488][ T5873] loop0: detected capacity change from 0 to 4096
[  204.353881][ T5873] NILFS (loop0): invalid segment: Checksum error in segment payload
[  204.361986][ T5873] NILFS (loop0): trying rollback from an earlier position
[  204.376307][ T5873] NILFS (loop0): recovery complete
[pid  5873] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5873] chdir("./file0")            = 0
[pid  5873] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5873] close(4)                    = 0
[pid  5873] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5873] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  204.382040][ T5874] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5873] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5873] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5873] exit_group(0)               = ?
[pid  5873] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./402", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./402/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./402/binderfs")                = 0
umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./402/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./402/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./402/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./402/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./402")                          = 0
mkdir("./403", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5875
./strace-static-x86_64: Process 5875 attached
[pid  5875] chdir("./403")              = 0
[pid  5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5875] setpgid(0, 0)               = 0
[pid  5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5875] write(3, "1000", 4)         = 4
[pid  5875] close(3)                    = 0
[pid  5875] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5875] memfd_create("syzkaller", 0) = 3
[pid  5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5875] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5875] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5875] close(3)                    = 0
[pid  5875] mkdir("./file0", 0777)      = 0
[pid  5875] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5875] chdir("./file0")            = 0
[pid  5875] ioctl(4, LOOP_CLR_FD)       = 0
[  204.664393][ T5875] loop0: detected capacity change from 0 to 4096
[  204.680524][ T5875] NILFS (loop0): invalid segment: Checksum error in segment payload
[  204.688587][ T5875] NILFS (loop0): trying rollback from an earlier position
[  204.702461][ T5875] NILFS (loop0): recovery complete
[pid  5875] close(4)                    = 0
[pid  5875] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5875] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  204.708259][ T5876] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5875] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5875] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5875] exit_group(0)               = ?
[pid  5875] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./403", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./403/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./403/binderfs")                = 0
umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./403/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./403/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./403/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./403/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./403")                          = 0
mkdir("./404", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5877
./strace-static-x86_64: Process 5877 attached
[pid  5877] chdir("./404")              = 0
[pid  5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5877] setpgid(0, 0)               = 0
[pid  5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5877] write(3, "1000", 4)         = 4
[pid  5877] close(3)                    = 0
[pid  5877] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5877] memfd_create("syzkaller", 0) = 3
[pid  5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5877] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5877] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5877] close(3)                    = 0
[pid  5877] mkdir("./file0", 0777)      = 0
[  204.978663][ T5877] loop0: detected capacity change from 0 to 4096
[  204.993077][ T5877] NILFS (loop0): invalid segment: Checksum error in segment payload
[  205.001143][ T5877] NILFS (loop0): trying rollback from an earlier position
[  205.014602][ T5877] NILFS (loop0): recovery complete
[pid  5877] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5877] chdir("./file0")            = 0
[pid  5877] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5877] close(4)                    = 0
[pid  5877] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5877] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  205.020735][ T5878] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5877] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5877] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5877] exit_group(0)               = ?
[pid  5877] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./404", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./404/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./404/binderfs")                = 0
umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./404/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./404/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./404/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./404/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./404")                          = 0
mkdir("./405", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5879
./strace-static-x86_64: Process 5879 attached
[pid  5879] chdir("./405")              = 0
[pid  5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5879] setpgid(0, 0)               = 0
[pid  5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5879] write(3, "1000", 4)         = 4
[pid  5879] close(3)                    = 0
[pid  5879] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5879] memfd_create("syzkaller", 0) = 3
[pid  5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5879] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5879] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5879] close(3)                    = 0
[pid  5879] mkdir("./file0", 0777)      = 0
[  205.299102][ T5879] loop0: detected capacity change from 0 to 4096
[  205.317139][ T5879] NILFS (loop0): invalid segment: Checksum error in segment payload
[  205.325148][ T5879] NILFS (loop0): trying rollback from an earlier position
[  205.339243][ T5879] NILFS (loop0): recovery complete
[pid  5879] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5879] chdir("./file0")            = 0
[pid  5879] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5879] close(4)                    = 0
[pid  5879] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5879] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  205.345479][ T5880] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5879] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5879] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5879] exit_group(0)               = ?
[pid  5879] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./405", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./405/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./405/binderfs")                = 0
umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./405/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./405/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./405/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./405/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./405")                          = 0
mkdir("./406", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5881
./strace-static-x86_64: Process 5881 attached
[pid  5881] chdir("./406")              = 0
[pid  5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5881] setpgid(0, 0)               = 0
[pid  5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5881] write(3, "1000", 4)         = 4
[pid  5881] close(3)                    = 0
[pid  5881] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5881] memfd_create("syzkaller", 0) = 3
[pid  5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5881] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5881] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5881] close(3)                    = 0
[pid  5881] mkdir("./file0", 0777)      = 0
[  205.635795][ T5881] loop0: detected capacity change from 0 to 4096
[  205.651462][ T5881] NILFS (loop0): invalid segment: Checksum error in segment payload
[  205.659503][ T5881] NILFS (loop0): trying rollback from an earlier position
[  205.673238][ T5881] NILFS (loop0): recovery complete
[pid  5881] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5881] chdir("./file0")            = 0
[pid  5881] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5881] close(4)                    = 0
[pid  5881] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5881] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  205.679388][ T5882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5881] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5881] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5881] exit_group(0)               = ?
[pid  5881] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./406", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./406/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./406/binderfs")                = 0
umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./406/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./406/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./406/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./406/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./406")                          = 0
mkdir("./407", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5883
./strace-static-x86_64: Process 5883 attached
[pid  5883] chdir("./407")              = 0
[pid  5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5883] setpgid(0, 0)               = 0
[pid  5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5883] write(3, "1000", 4)         = 4
[pid  5883] close(3)                    = 0
[pid  5883] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5883] memfd_create("syzkaller", 0) = 3
[pid  5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5883] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5883] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5883] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5883] close(3)                    = 0
[pid  5883] mkdir("./file0", 0777)      = 0
[  205.969568][ T5883] loop0: detected capacity change from 0 to 4096
[  205.985214][ T5883] NILFS (loop0): invalid segment: Checksum error in segment payload
[  205.993617][ T5883] NILFS (loop0): trying rollback from an earlier position
[  206.008236][ T5883] NILFS (loop0): recovery complete
[pid  5883] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5883] chdir("./file0")            = 0
[pid  5883] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5883] close(4)                    = 0
[pid  5883] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5883] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  206.014437][ T5884] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.027433][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  206.027442][   T27] audit: type=1800 audit(1676306893.788:409): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5883] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5883] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5883] exit_group(0)               = ?
[pid  5883] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./407", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./407/binderfs")                = 0
umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./407/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./407/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./407/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./407/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./407")                          = 0
mkdir("./408", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5885
./strace-static-x86_64: Process 5885 attached
[pid  5885] chdir("./408")              = 0
[pid  5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5885] setpgid(0, 0)               = 0
[pid  5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5885] write(3, "1000", 4)         = 4
[pid  5885] close(3)                    = 0
[pid  5885] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5885] memfd_create("syzkaller", 0) = 3
[pid  5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5885] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5885] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5885] close(3)                    = 0
[pid  5885] mkdir("./file0", 0777)      = 0
[pid  5885] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5885] chdir("./file0")            = 0
[pid  5885] ioctl(4, LOOP_CLR_FD)       = 0
[  206.300362][ T5885] loop0: detected capacity change from 0 to 4096
[  206.314666][ T5885] NILFS (loop0): invalid segment: Checksum error in segment payload
[  206.322921][ T5885] NILFS (loop0): trying rollback from an earlier position
[  206.336312][ T5885] NILFS (loop0): recovery complete
[pid  5885] close(4)                    = 0
[pid  5885] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5885] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  206.342593][ T5886] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.355602][   T27] audit: type=1800 audit(1676306894.118:410): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5885] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5885] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5885] exit_group(0)               = ?
[pid  5885] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./408", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./408/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./408/binderfs")                = 0
umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./408/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./408/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./408/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./408/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./408")                          = 0
mkdir("./409", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5887
./strace-static-x86_64: Process 5887 attached
[pid  5887] chdir("./409")              = 0
[pid  5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5887] setpgid(0, 0)               = 0
[pid  5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5887] write(3, "1000", 4)         = 4
[pid  5887] close(3)                    = 0
[pid  5887] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5887] memfd_create("syzkaller", 0) = 3
[pid  5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5887] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5887] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5887] close(3)                    = 0
[pid  5887] mkdir("./file0", 0777)      = 0
[  206.623625][ T5887] loop0: detected capacity change from 0 to 4096
[  206.639624][ T5887] NILFS (loop0): invalid segment: Checksum error in segment payload
[  206.647770][ T5887] NILFS (loop0): trying rollback from an earlier position
[  206.661611][ T5887] NILFS (loop0): recovery complete
[pid  5887] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5887] chdir("./file0")            = 0
[pid  5887] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5887] close(4)                    = 0
[pid  5887] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5887] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  206.668014][ T5888] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.681168][   T27] audit: type=1800 audit(1676306894.448:411): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5887] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5887] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5887] exit_group(0)               = ?
[pid  5887] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./409", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./409/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./409/binderfs")                = 0
umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./409/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./409/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./409/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./409/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./409")                          = 0
mkdir("./410", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5889
./strace-static-x86_64: Process 5889 attached
[pid  5889] chdir("./410")              = 0
[pid  5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5889] setpgid(0, 0)               = 0
[pid  5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5889] write(3, "1000", 4)         = 4
[pid  5889] close(3)                    = 0
[pid  5889] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5889] memfd_create("syzkaller", 0) = 3
[pid  5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5889] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5889] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5889] close(3)                    = 0
[pid  5889] mkdir("./file0", 0777)      = 0
[  206.957810][ T5889] loop0: detected capacity change from 0 to 4096
[  206.973920][ T5889] NILFS (loop0): invalid segment: Checksum error in segment payload
[  206.981959][ T5889] NILFS (loop0): trying rollback from an earlier position
[  206.996045][ T5889] NILFS (loop0): recovery complete
[pid  5889] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5889] chdir("./file0")            = 0
[pid  5889] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5889] close(4)                    = 0
[pid  5889] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5889] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  207.002339][ T5890] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.016190][   T27] audit: type=1800 audit(1676306894.768:412): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5889] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5889] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5889] exit_group(0)               = ?
[pid  5889] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./410", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./410/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./410/binderfs")                = 0
umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./410/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./410/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./410/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./410/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./410")                          = 0
mkdir("./411", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5891
./strace-static-x86_64: Process 5891 attached
[pid  5891] chdir("./411")              = 0
[pid  5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5891] setpgid(0, 0)               = 0
[pid  5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5891] write(3, "1000", 4)         = 4
[pid  5891] close(3)                    = 0
[pid  5891] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5891] memfd_create("syzkaller", 0) = 3
[pid  5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5891] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5891] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5891] close(3)                    = 0
[pid  5891] mkdir("./file0", 0777)      = 0
[pid  5891] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5891] chdir("./file0")            = 0
[pid  5891] ioctl(4, LOOP_CLR_FD)       = 0
[  207.290510][ T5891] loop0: detected capacity change from 0 to 4096
[  207.304808][ T5891] NILFS (loop0): invalid segment: Checksum error in segment payload
[  207.312926][ T5891] NILFS (loop0): trying rollback from an earlier position
[  207.327348][ T5891] NILFS (loop0): recovery complete
[pid  5891] close(4)                    = 0
[pid  5891] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5891] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  207.333951][ T5892] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.347096][   T27] audit: type=1800 audit(1676306895.108:413): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5891] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5891] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5891] exit_group(0)               = ?
[pid  5891] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./411", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./411/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./411/binderfs")                = 0
umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./411/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./411/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./411/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./411/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./411")                          = 0
mkdir("./412", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5893
./strace-static-x86_64: Process 5893 attached
[pid  5893] chdir("./412")              = 0
[pid  5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5893] setpgid(0, 0)               = 0
[pid  5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5893] write(3, "1000", 4)         = 4
[pid  5893] close(3)                    = 0
[pid  5893] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5893] memfd_create("syzkaller", 0) = 3
[pid  5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5893] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5893] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5893] close(3)                    = 0
[pid  5893] mkdir("./file0", 0777)      = 0
[  207.635451][ T5893] loop0: detected capacity change from 0 to 4096
[  207.651958][ T5893] NILFS (loop0): invalid segment: Checksum error in segment payload
[  207.660007][ T5893] NILFS (loop0): trying rollback from an earlier position
[  207.673494][ T5893] NILFS (loop0): recovery complete
[pid  5893] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5893] chdir("./file0")            = 0
[pid  5893] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5893] close(4)                    = 0
[pid  5893] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5893] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  207.679572][ T5894] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.692075][   T27] audit: type=1800 audit(1676306895.448:414): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5893] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5893] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5893] exit_group(0)               = ?
[pid  5893] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./412", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./412/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./412/binderfs")                = 0
umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./412/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./412/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./412/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./412/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./412")                          = 0
mkdir("./413", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5895
./strace-static-x86_64: Process 5895 attached
[pid  5895] chdir("./413")              = 0
[pid  5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5895] setpgid(0, 0)               = 0
[pid  5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5895] write(3, "1000", 4)         = 4
[pid  5895] close(3)                    = 0
[pid  5895] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5895] memfd_create("syzkaller", 0) = 3
[pid  5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5895] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5895] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5895] close(3)                    = 0
[pid  5895] mkdir("./file0", 0777)      = 0
[  207.973291][ T5895] loop0: detected capacity change from 0 to 4096
[  207.987944][ T5895] NILFS (loop0): invalid segment: Checksum error in segment payload
[  207.995944][ T5895] NILFS (loop0): trying rollback from an earlier position
[  208.010342][ T5895] NILFS (loop0): recovery complete
[pid  5895] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5895] chdir("./file0")            = 0
[pid  5895] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5895] close(4)                    = 0
[pid  5895] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5895] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  208.016559][ T5896] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.032404][   T27] audit: type=1800 audit(1676306895.788:415): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5895] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5895] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5895] exit_group(0)               = ?
[pid  5895] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./413", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./413", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./413/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./413/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./413/binderfs")                = 0
umount2("./413/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./413/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./413/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./413/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./413/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./413/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./413")                          = 0
mkdir("./414", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5897
./strace-static-x86_64: Process 5897 attached
[pid  5897] chdir("./414")              = 0
[pid  5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5897] setpgid(0, 0)               = 0
[pid  5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5897] write(3, "1000", 4)         = 4
[pid  5897] close(3)                    = 0
[pid  5897] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5897] memfd_create("syzkaller", 0) = 3
[pid  5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5897] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5897] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5897] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5897] close(3)                    = 0
[pid  5897] mkdir("./file0", 0777)      = 0
[pid  5897] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5897] chdir("./file0")            = 0
[pid  5897] ioctl(4, LOOP_CLR_FD)       = 0
[  208.331175][ T5897] loop0: detected capacity change from 0 to 4096
[  208.346538][ T5897] NILFS (loop0): invalid segment: Checksum error in segment payload
[  208.354560][ T5897] NILFS (loop0): trying rollback from an earlier position
[  208.368779][ T5897] NILFS (loop0): recovery complete
[pid  5897] close(4)                    = 0
[pid  5897] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5897] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  208.375453][ T5898] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.388224][   T27] audit: type=1800 audit(1676306896.148:416): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5897] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5897] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5897] exit_group(0)               = ?
[pid  5897] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./414", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./414", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./414/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./414/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./414/binderfs")                = 0
umount2("./414/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./414/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./414/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./414/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./414/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./414/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./414")                          = 0
mkdir("./415", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5899 attached
, child_tidptr=0x555555db65d0) = 5899
[pid  5899] chdir("./415")              = 0
[pid  5899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5899] setpgid(0, 0)               = 0
[pid  5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5899] write(3, "1000", 4)         = 4
[pid  5899] close(3)                    = 0
[pid  5899] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5899] memfd_create("syzkaller", 0) = 3
[pid  5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5899] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5899] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5899] close(3)                    = 0
[pid  5899] mkdir("./file0", 0777)      = 0
[  208.671679][ T5899] loop0: detected capacity change from 0 to 4096
[  208.687776][ T5899] NILFS (loop0): invalid segment: Checksum error in segment payload
[  208.695832][ T5899] NILFS (loop0): trying rollback from an earlier position
[  208.709618][ T5899] NILFS (loop0): recovery complete
[pid  5899] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5899] chdir("./file0")            = 0
[pid  5899] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5899] close(4)                    = 0
[pid  5899] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5899] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  208.715537][ T5900] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.736197][   T27] audit: type=1800 audit(1676306896.488:417): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5899] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5899] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5899] exit_group(0)               = ?
[pid  5899] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./415", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./415/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./415/binderfs")                = 0
umount2("./415/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./415/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./415/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./415/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./415/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./415/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./415")                          = 0
mkdir("./416", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5901
./strace-static-x86_64: Process 5901 attached
[pid  5901] chdir("./416")              = 0
[pid  5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5901] setpgid(0, 0)               = 0
[pid  5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5901] write(3, "1000", 4)         = 4
[pid  5901] close(3)                    = 0
[pid  5901] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5901] memfd_create("syzkaller", 0) = 3
[pid  5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5901] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5901] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5901] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5901] close(3)                    = 0
[pid  5901] mkdir("./file0", 0777)      = 0
[  209.027218][ T5901] loop0: detected capacity change from 0 to 4096
[  209.044821][ T5901] NILFS (loop0): invalid segment: Checksum error in segment payload
[  209.052946][ T5901] NILFS (loop0): trying rollback from an earlier position
[  209.068522][ T5901] NILFS (loop0): recovery complete
[pid  5901] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5901] chdir("./file0")            = 0
[pid  5901] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5901] close(4)                    = 0
[pid  5901] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5901] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  209.074376][ T5902] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.099349][   T27] audit: type=1800 audit(1676306896.858:418): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5901] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5901] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5901] exit_group(0)               = ?
[pid  5901] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./416", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./416/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./416/binderfs")                = 0
umount2("./416/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./416/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./416/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./416/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./416/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./416/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./416")                          = 0
mkdir("./417", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5903
./strace-static-x86_64: Process 5903 attached
[pid  5903] chdir("./417")              = 0
[pid  5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5903] setpgid(0, 0)               = 0
[pid  5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5903] write(3, "1000", 4)         = 4
[pid  5903] close(3)                    = 0
[pid  5903] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5903] memfd_create("syzkaller", 0) = 3
[pid  5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5903] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5903] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5903] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5903] close(3)                    = 0
[pid  5903] mkdir("./file0", 0777)      = 0
[  209.371857][ T5903] loop0: detected capacity change from 0 to 4096
[  209.388233][ T5903] NILFS (loop0): invalid segment: Checksum error in segment payload
[  209.396286][ T5903] NILFS (loop0): trying rollback from an earlier position
[  209.409965][ T5903] NILFS (loop0): recovery complete
[pid  5903] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5903] chdir("./file0")            = 0
[pid  5903] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5903] close(4)                    = 0
[pid  5903] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5903] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  209.415961][ T5904] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5903] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5903] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5903] exit_group(0)               = ?
[pid  5903] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./417", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./417/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./417/binderfs")                = 0
umount2("./417/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./417/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./417/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./417/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./417/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./417/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./417")                          = 0
mkdir("./418", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5905
./strace-static-x86_64: Process 5905 attached
[pid  5905] chdir("./418")              = 0
[pid  5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5905] setpgid(0, 0)               = 0
[pid  5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5905] write(3, "1000", 4)         = 4
[pid  5905] close(3)                    = 0
[pid  5905] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5905] memfd_create("syzkaller", 0) = 3
[pid  5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5905] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5905] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5905] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5905] close(3)                    = 0
[pid  5905] mkdir("./file0", 0777)      = 0
[  209.701084][ T5905] loop0: detected capacity change from 0 to 4096
[  209.715722][ T5905] NILFS (loop0): invalid segment: Checksum error in segment payload
[  209.723808][ T5905] NILFS (loop0): trying rollback from an earlier position
[  209.737182][ T5905] NILFS (loop0): recovery complete
[pid  5905] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5905] chdir("./file0")            = 0
[pid  5905] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5905] close(4)                    = 0
[pid  5905] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5905] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  209.742950][ T5906] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5905] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5905] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5905] exit_group(0)               = ?
[pid  5905] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./418", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./418/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./418/binderfs")                = 0
umount2("./418/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./418/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./418/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./418/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./418/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./418/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./418")                          = 0
mkdir("./419", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5907
./strace-static-x86_64: Process 5907 attached
[pid  5907] chdir("./419")              = 0
[pid  5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5907] setpgid(0, 0)               = 0
[pid  5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5907] write(3, "1000", 4)         = 4
[pid  5907] close(3)                    = 0
[pid  5907] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5907] memfd_create("syzkaller", 0) = 3
[pid  5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5907] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5907] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5907] close(3)                    = 0
[pid  5907] mkdir("./file0", 0777)      = 0
[  210.014447][ T5907] loop0: detected capacity change from 0 to 4096
[  210.029757][ T5907] NILFS (loop0): invalid segment: Checksum error in segment payload
[  210.037780][ T5907] NILFS (loop0): trying rollback from an earlier position
[  210.051312][ T5907] NILFS (loop0): recovery complete
[pid  5907] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5907] chdir("./file0")            = 0
[pid  5907] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5907] close(4)                    = 0
[pid  5907] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5907] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  210.057287][ T5908] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5907] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5907] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5907] exit_group(0)               = ?
[pid  5907] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./419", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./419/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./419/binderfs")                = 0
umount2("./419/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./419/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./419/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./419/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./419/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./419/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./419")                          = 0
mkdir("./420", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5909
./strace-static-x86_64: Process 5909 attached
[pid  5909] chdir("./420")              = 0
[pid  5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5909] setpgid(0, 0)               = 0
[pid  5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5909] write(3, "1000", 4)         = 4
[pid  5909] close(3)                    = 0
[pid  5909] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5909] memfd_create("syzkaller", 0) = 3
[pid  5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5909] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5909] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5909] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5909] close(3)                    = 0
[pid  5909] mkdir("./file0", 0777)      = 0
[  210.337927][ T5909] loop0: detected capacity change from 0 to 4096
[  210.353306][ T5909] NILFS (loop0): invalid segment: Checksum error in segment payload
[  210.361343][ T5909] NILFS (loop0): trying rollback from an earlier position
[  210.375117][ T5909] NILFS (loop0): recovery complete
[pid  5909] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5909] chdir("./file0")            = 0
[pid  5909] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5909] close(4)                    = 0
[pid  5909] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5909] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  210.381368][ T5910] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5909] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5909] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5909] exit_group(0)               = ?
[pid  5909] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./420", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./420/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./420/binderfs")                = 0
umount2("./420/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./420/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./420/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./420/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./420/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./420/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./420")                          = 0
mkdir("./421", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5911
./strace-static-x86_64: Process 5911 attached
[pid  5911] chdir("./421")              = 0
[pid  5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5911] setpgid(0, 0)               = 0
[pid  5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5911] write(3, "1000", 4)         = 4
[pid  5911] close(3)                    = 0
[pid  5911] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5911] memfd_create("syzkaller", 0) = 3
[pid  5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5911] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5911] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5911] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5911] close(3)                    = 0
[pid  5911] mkdir("./file0", 0777)      = 0
[  210.670773][ T5911] loop0: detected capacity change from 0 to 4096
[  210.689262][ T5911] NILFS (loop0): invalid segment: Checksum error in segment payload
[  210.697592][ T5911] NILFS (loop0): trying rollback from an earlier position
[  210.711742][ T5911] NILFS (loop0): recovery complete
[pid  5911] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5911] chdir("./file0")            = 0
[pid  5911] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5911] close(4)                    = 0
[pid  5911] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5911] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  210.717628][ T5912] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5911] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5911] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5911] exit_group(0)               = ?
[pid  5911] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./421", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./421/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./421/binderfs")                = 0
umount2("./421/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./421/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./421/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./421/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./421/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./421/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./421")                          = 0
mkdir("./422", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5913
./strace-static-x86_64: Process 5913 attached
[pid  5913] chdir("./422")              = 0
[pid  5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5913] setpgid(0, 0)               = 0
[pid  5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5913] write(3, "1000", 4)         = 4
[pid  5913] close(3)                    = 0
[pid  5913] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5913] memfd_create("syzkaller", 0) = 3
[pid  5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5913] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5913] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5913] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5913] close(3)                    = 0
[pid  5913] mkdir("./file0", 0777)      = 0
[  211.019261][ T5913] loop0: detected capacity change from 0 to 4096
[  211.034264][ T5913] NILFS (loop0): invalid segment: Checksum error in segment payload
[  211.042335][ T5913] NILFS (loop0): trying rollback from an earlier position
[  211.056507][ T5913] NILFS (loop0): recovery complete
[pid  5913] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5913] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5913] chdir("./file0")            = 0
[pid  5913] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5913] close(4)                    = 0
[pid  5913] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5913] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  211.062664][ T5914] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.075709][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  211.075721][   T27] audit: type=1800 audit(1676306898.828:424): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5913] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5913] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5913] exit_group(0)               = ?
[pid  5913] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./422", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./422/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./422/binderfs")                = 0
umount2("./422/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./422/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./422/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./422/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./422/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./422/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./422")                          = 0
mkdir("./423", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5915
./strace-static-x86_64: Process 5915 attached
[pid  5915] chdir("./423")              = 0
[pid  5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5915] setpgid(0, 0)               = 0
[pid  5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5915] write(3, "1000", 4)         = 4
[pid  5915] close(3)                    = 0
[pid  5915] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5915] memfd_create("syzkaller", 0) = 3
[pid  5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5915] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5915] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5915] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5915] close(3)                    = 0
[pid  5915] mkdir("./file0", 0777)      = 0
[  211.370976][ T5915] loop0: detected capacity change from 0 to 4096
[  211.387937][ T5915] NILFS (loop0): invalid segment: Checksum error in segment payload
[  211.395996][ T5915] NILFS (loop0): trying rollback from an earlier position
[  211.410333][ T5915] NILFS (loop0): recovery complete
[pid  5915] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5915] chdir("./file0")            = 0
[pid  5915] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5915] close(4)                    = 0
[pid  5915] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5915] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  211.416451][ T5916] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.436234][   T27] audit: type=1800 audit(1676306899.178:425): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5915] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5915] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5915] exit_group(0)               = ?
[pid  5915] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./423", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./423/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./423/binderfs")                = 0
umount2("./423/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./423/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./423/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./423/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./423/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./423/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./423")                          = 0
mkdir("./424", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5917
./strace-static-x86_64: Process 5917 attached
[pid  5917] chdir("./424")              = 0
[pid  5917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5917] setpgid(0, 0)               = 0
[pid  5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5917] write(3, "1000", 4)         = 4
[pid  5917] close(3)                    = 0
[pid  5917] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5917] memfd_create("syzkaller", 0) = 3
[pid  5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5917] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5917] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5917] close(3)                    = 0
[pid  5917] mkdir("./file0", 0777)      = 0
[  211.709706][ T5917] loop0: detected capacity change from 0 to 4096
[  211.725734][ T5917] NILFS (loop0): invalid segment: Checksum error in segment payload
[  211.733884][ T5917] NILFS (loop0): trying rollback from an earlier position
[  211.750987][ T5917] NILFS (loop0): recovery complete
[pid  5917] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5917] chdir("./file0")            = 0
[pid  5917] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5917] close(4)                    = 0
[pid  5917] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5917] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  211.757189][ T5918] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.762651][   T27] audit: type=1800 audit(1676306899.518:426): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5917] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5917] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5917] exit_group(0)               = ?
[pid  5917] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./424", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./424/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./424/binderfs")                = 0
umount2("./424/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./424/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./424/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./424/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./424/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./424/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./424")                          = 0
mkdir("./425", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5919
./strace-static-x86_64: Process 5919 attached
[pid  5919] chdir("./425")              = 0
[pid  5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5919] setpgid(0, 0)               = 0
[pid  5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5919] write(3, "1000", 4)         = 4
[pid  5919] close(3)                    = 0
[pid  5919] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5919] memfd_create("syzkaller", 0) = 3
[pid  5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5919] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5919] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5919] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5919] close(3)                    = 0
[pid  5919] mkdir("./file0", 0777)      = 0
[  212.054057][ T5919] loop0: detected capacity change from 0 to 4096
[  212.070730][ T5919] NILFS (loop0): invalid segment: Checksum error in segment payload
[  212.078782][ T5919] NILFS (loop0): trying rollback from an earlier position
[  212.092551][ T5919] NILFS (loop0): recovery complete
[pid  5919] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5919] chdir("./file0")            = 0
[pid  5919] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5919] close(4)                    = 0
[pid  5919] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5919] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  212.098623][ T5920] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.113067][   T27] audit: type=1800 audit(1676306899.878:427): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5919] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5919] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5919] exit_group(0)               = ?
[pid  5919] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./425", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./425/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./425/binderfs")                = 0
umount2("./425/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./425/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./425/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./425/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./425/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./425/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./425")                          = 0
mkdir("./426", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5921
./strace-static-x86_64: Process 5921 attached
[pid  5921] chdir("./426")              = 0
[pid  5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5921] setpgid(0, 0)               = 0
[pid  5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5921] write(3, "1000", 4)         = 4
[pid  5921] close(3)                    = 0
[pid  5921] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5921] memfd_create("syzkaller", 0) = 3
[pid  5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5921] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5921] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5921] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5921] close(3)                    = 0
[pid  5921] mkdir("./file0", 0777)      = 0
[  212.399787][ T5921] loop0: detected capacity change from 0 to 4096
[  212.416198][ T5921] NILFS (loop0): invalid segment: Checksum error in segment payload
[  212.424271][ T5921] NILFS (loop0): trying rollback from an earlier position
[  212.437627][ T5921] NILFS (loop0): recovery complete
[pid  5921] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5921] chdir("./file0")            = 0
[pid  5921] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5921] close(4)                    = 0
[pid  5921] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5921] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  212.443502][ T5922] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.456819][   T27] audit: type=1800 audit(1676306900.218:428): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5921] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5921] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5921] exit_group(0)               = ?
[pid  5921] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./426", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./426", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./426/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./426/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./426/binderfs")                = 0
umount2("./426/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./426/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./426/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./426/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./426/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./426/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./426")                          = 0
mkdir("./427", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5923
./strace-static-x86_64: Process 5923 attached
[pid  5923] chdir("./427")              = 0
[pid  5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5923] setpgid(0, 0)               = 0
[pid  5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5923] write(3, "1000", 4)         = 4
[pid  5923] close(3)                    = 0
[pid  5923] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5923] memfd_create("syzkaller", 0) = 3
[pid  5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5923] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5923] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5923] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5923] close(3)                    = 0
[pid  5923] mkdir("./file0", 0777)      = 0
[  212.719715][ T5923] loop0: detected capacity change from 0 to 4096
[  212.735839][ T5923] NILFS (loop0): invalid segment: Checksum error in segment payload
[  212.743860][ T5923] NILFS (loop0): trying rollback from an earlier position
[  212.756968][ T5923] NILFS (loop0): recovery complete
[pid  5923] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5923] chdir("./file0")            = 0
[pid  5923] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5923] close(4)                    = 0
[pid  5923] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5923] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  212.762746][ T5924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.776093][   T27] audit: type=1800 audit(1676306900.538:429): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5923] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5923] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5923] exit_group(0)               = ?
[pid  5923] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./427", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./427", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./427/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./427/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./427/binderfs")                = 0
umount2("./427/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./427/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./427/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./427/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./427/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./427/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./427")                          = 0
mkdir("./428", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5925
./strace-static-x86_64: Process 5925 attached
[pid  5925] chdir("./428")              = 0
[pid  5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5925] setpgid(0, 0)               = 0
[pid  5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5925] write(3, "1000", 4)         = 4
[pid  5925] close(3)                    = 0
[pid  5925] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5925] memfd_create("syzkaller", 0) = 3
[pid  5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5925] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5925] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5925] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5925] close(3)                    = 0
[pid  5925] mkdir("./file0", 0777)      = 0
[pid  5925] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5925] chdir("./file0")            = 0
[pid  5925] ioctl(4, LOOP_CLR_FD)       = 0
[  213.062859][ T5925] loop0: detected capacity change from 0 to 4096
[  213.079544][ T5925] NILFS (loop0): invalid segment: Checksum error in segment payload
[  213.087701][ T5925] NILFS (loop0): trying rollback from an earlier position
[  213.101043][ T5925] NILFS (loop0): recovery complete
[pid  5925] close(4)                    = 0
[pid  5925] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5925] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  213.106912][ T5926] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.125423][   T27] audit: type=1800 audit(1676306900.888:430): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5925] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5925] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5925] exit_group(0)               = ?
[pid  5925] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./428", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./428/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./428/binderfs")                = 0
umount2("./428/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./428/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./428/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./428/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./428/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./428/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./428")                          = 0
mkdir("./429", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5927
./strace-static-x86_64: Process 5927 attached
[pid  5927] chdir("./429")              = 0
[pid  5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5927] setpgid(0, 0)               = 0
[pid  5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5927] write(3, "1000", 4)         = 4
[pid  5927] close(3)                    = 0
[pid  5927] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5927] memfd_create("syzkaller", 0) = 3
[pid  5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5927] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5927] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5927] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5927] close(3)                    = 0
[pid  5927] mkdir("./file0", 0777)      = 0
[pid  5927] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5927] chdir("./file0")            = 0
[pid  5927] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5927] close(4)                    = 0
[  213.384579][ T5927] loop0: detected capacity change from 0 to 4096
[  213.400897][ T5927] NILFS (loop0): invalid segment: Checksum error in segment payload
[  213.408967][ T5927] NILFS (loop0): trying rollback from an earlier position
[  213.422882][ T5927] NILFS (loop0): recovery complete
[pid  5927] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5927] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  213.429216][ T5928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.446176][   T27] audit: type=1800 audit(1676306901.198:431): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5927] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5927] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5927] exit_group(0)               = ?
[pid  5927] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./429", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./429/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./429/binderfs")                = 0
umount2("./429/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./429/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./429/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./429/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./429/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./429/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./429")                          = 0
mkdir("./430", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5929
./strace-static-x86_64: Process 5929 attached
[pid  5929] chdir("./430")              = 0
[pid  5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5929] setpgid(0, 0)               = 0
[pid  5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5929] write(3, "1000", 4)         = 4
[pid  5929] close(3)                    = 0
[pid  5929] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5929] memfd_create("syzkaller", 0) = 3
[pid  5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5929] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5929] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5929] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5929] close(3)                    = 0
[pid  5929] mkdir("./file0", 0777)      = 0
[pid  5929] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5929] chdir("./file0")            = 0
[pid  5929] ioctl(4, LOOP_CLR_FD)       = 0
[  213.715822][ T5929] loop0: detected capacity change from 0 to 4096
[  213.731984][ T5929] NILFS (loop0): invalid segment: Checksum error in segment payload
[  213.740182][ T5929] NILFS (loop0): trying rollback from an earlier position
[  213.753949][ T5929] NILFS (loop0): recovery complete
[pid  5929] close(4)                    = 0
[pid  5929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5929] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  213.760253][ T5930] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.774608][   T27] audit: type=1800 audit(1676306901.538:432): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5929] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5929] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5929] exit_group(0)               = ?
[pid  5929] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./430", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./430/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./430/binderfs")                = 0
umount2("./430/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./430/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./430/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./430/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./430/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./430/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./430")                          = 0
mkdir("./431", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5931
./strace-static-x86_64: Process 5931 attached
[pid  5931] chdir("./431")              = 0
[pid  5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5931] setpgid(0, 0)               = 0
[pid  5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5931] write(3, "1000", 4)         = 4
[pid  5931] close(3)                    = 0
[pid  5931] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5931] memfd_create("syzkaller", 0) = 3
[pid  5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5931] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5931] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5931] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5931] close(3)                    = 0
[pid  5931] mkdir("./file0", 0777)      = 0
[  214.039560][ T5931] loop0: detected capacity change from 0 to 4096
[  214.057212][ T5931] NILFS (loop0): invalid segment: Checksum error in segment payload
[  214.065265][ T5931] NILFS (loop0): trying rollback from an earlier position
[  214.079470][ T5931] NILFS (loop0): recovery complete
[pid  5931] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5931] chdir("./file0")            = 0
[pid  5931] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5931] close(4)                    = 0
[pid  5931] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5931] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  214.085331][ T5932] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.101231][   T27] audit: type=1800 audit(1676306901.858:433): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5931] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5931] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5931] exit_group(0)               = ?
[pid  5931] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./431", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./431/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./431/binderfs")                = 0
umount2("./431/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./431/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./431/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./431/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./431/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./431/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./431")                          = 0
mkdir("./432", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5933
./strace-static-x86_64: Process 5933 attached
[pid  5933] chdir("./432")              = 0
[pid  5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5933] setpgid(0, 0)               = 0
[pid  5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5933] write(3, "1000", 4)         = 4
[pid  5933] close(3)                    = 0
[pid  5933] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5933] memfd_create("syzkaller", 0) = 3
[pid  5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5933] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5933] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5933] close(3)                    = 0
[pid  5933] mkdir("./file0", 0777)      = 0
[  214.381940][ T5933] loop0: detected capacity change from 0 to 4096
[  214.399127][ T5933] NILFS (loop0): invalid segment: Checksum error in segment payload
[  214.407254][ T5933] NILFS (loop0): trying rollback from an earlier position
[  214.422728][ T5933] NILFS (loop0): recovery complete
[pid  5933] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5933] chdir("./file0")            = 0
[pid  5933] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5933] close(4)                    = 0
[pid  5933] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5933] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  214.429044][ T5934] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5933] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5933] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5933] exit_group(0)               = ?
[pid  5933] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./432", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./432/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./432/binderfs")                = 0
umount2("./432/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./432/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./432/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./432/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./432/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./432/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./432")                          = 0
mkdir("./433", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5935
./strace-static-x86_64: Process 5935 attached
[pid  5935] chdir("./433")              = 0
[pid  5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5935] setpgid(0, 0)               = 0
[pid  5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5935] write(3, "1000", 4)         = 4
[pid  5935] close(3)                    = 0
[pid  5935] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5935] memfd_create("syzkaller", 0) = 3
[pid  5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5935] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5935] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5935] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5935] close(3)                    = 0
[pid  5935] mkdir("./file0", 0777)      = 0
[pid  5935] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5935] chdir("./file0")            = 0
[pid  5935] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5935] close(4)                    = 0
[  214.719592][ T5935] loop0: detected capacity change from 0 to 4096
[  214.735210][ T5935] NILFS (loop0): invalid segment: Checksum error in segment payload
[  214.743366][ T5935] NILFS (loop0): trying rollback from an earlier position
[  214.758101][ T5935] NILFS (loop0): recovery complete
[pid  5935] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5935] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  214.764207][ T5936] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5935] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5935] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5935] exit_group(0)               = ?
[pid  5935] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./433", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./433/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./433/binderfs")                = 0
umount2("./433/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./433/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./433/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./433/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./433/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./433/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./433")                          = 0
mkdir("./434", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5937
./strace-static-x86_64: Process 5937 attached
[pid  5937] chdir("./434")              = 0
[pid  5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5937] setpgid(0, 0)               = 0
[pid  5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5937] write(3, "1000", 4)         = 4
[pid  5937] close(3)                    = 0
[pid  5937] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5937] memfd_create("syzkaller", 0) = 3
[pid  5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5937] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5937] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5937] close(3)                    = 0
[pid  5937] mkdir("./file0", 0777)      = 0
[  215.043288][ T5937] loop0: detected capacity change from 0 to 4096
[  215.059404][ T5937] NILFS (loop0): invalid segment: Checksum error in segment payload
[  215.067577][ T5937] NILFS (loop0): trying rollback from an earlier position
[  215.081114][ T5937] NILFS (loop0): recovery complete
[pid  5937] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5937] chdir("./file0")            = 0
[pid  5937] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5937] close(4)                    = 0
[pid  5937] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5937] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  215.087135][ T5938] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5937] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5937] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5937] exit_group(0)               = ?
[pid  5937] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./434", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./434/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./434/binderfs")                = 0
umount2("./434/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./434/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./434/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./434/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./434/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./434/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./434")                          = 0
mkdir("./435", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5939
./strace-static-x86_64: Process 5939 attached
[pid  5939] chdir("./435")              = 0
[pid  5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5939] setpgid(0, 0)               = 0
[pid  5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5939] write(3, "1000", 4)         = 4
[pid  5939] close(3)                    = 0
[pid  5939] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5939] memfd_create("syzkaller", 0) = 3
[pid  5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5939] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5939] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5939] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5939] close(3)                    = 0
[pid  5939] mkdir("./file0", 0777)      = 0
[  215.352021][ T5939] loop0: detected capacity change from 0 to 4096
[  215.367923][ T5939] NILFS (loop0): invalid segment: Checksum error in segment payload
[  215.375974][ T5939] NILFS (loop0): trying rollback from an earlier position
[  215.389678][ T5939] NILFS (loop0): recovery complete
[pid  5939] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5939] chdir("./file0")            = 0
[pid  5939] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5939] close(4)                    = 0
[pid  5939] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5939] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  215.395834][ T5940] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5939] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5939] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5939] exit_group(0)               = ?
[pid  5939] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./435", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./435/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./435/binderfs")                = 0
umount2("./435/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./435/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./435/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./435/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./435/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./435/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./435")                          = 0
mkdir("./436", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5941
./strace-static-x86_64: Process 5941 attached
[pid  5941] chdir("./436")              = 0
[pid  5941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5941] setpgid(0, 0)               = 0
[pid  5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5941] write(3, "1000", 4)         = 4
[pid  5941] close(3)                    = 0
[pid  5941] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5941] memfd_create("syzkaller", 0) = 3
[pid  5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5941] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5941] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5941] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5941] close(3)                    = 0
[pid  5941] mkdir("./file0", 0777)      = 0
[  215.680963][ T5941] loop0: detected capacity change from 0 to 4096
[  215.696192][ T5941] NILFS (loop0): invalid segment: Checksum error in segment payload
[  215.704212][ T5941] NILFS (loop0): trying rollback from an earlier position
[  215.718091][ T5941] NILFS (loop0): recovery complete
[pid  5941] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5941] chdir("./file0")            = 0
[pid  5941] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5941] close(4)                    = 0
[pid  5941] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5941] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  215.724038][ T5942] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5941] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5941] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5941] exit_group(0)               = ?
[pid  5941] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./436", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./436/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./436/binderfs")                = 0
umount2("./436/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./436/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./436/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./436/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./436/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./436/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./436")                          = 0
mkdir("./437", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5943
./strace-static-x86_64: Process 5943 attached
[pid  5943] chdir("./437")              = 0
[pid  5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5943] setpgid(0, 0)               = 0
[pid  5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5943] write(3, "1000", 4)         = 4
[pid  5943] close(3)                    = 0
[pid  5943] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5943] memfd_create("syzkaller", 0) = 3
[pid  5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5943] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5943] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5943] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5943] close(3)                    = 0
[pid  5943] mkdir("./file0", 0777)      = 0
[pid  5943] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  216.012417][ T5943] loop0: detected capacity change from 0 to 4096
[  216.030929][ T5943] NILFS (loop0): invalid segment: Checksum error in segment payload
[  216.039253][ T5943] NILFS (loop0): trying rollback from an earlier position
[  216.053146][ T5943] NILFS (loop0): recovery complete
[pid  5943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5943] chdir("./file0")            = 0
[pid  5943] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5943] close(4)                    = 0
[pid  5943] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5943] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  216.059907][ T5944] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5943] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5943] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5943] exit_group(0)               = ?
[pid  5943] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./437", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./437/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./437/binderfs")                = 0
umount2("./437/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./437/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./437/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./437/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./437/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./437/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./437")                          = 0
mkdir("./438", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5945
./strace-static-x86_64: Process 5945 attached
[pid  5945] chdir("./438")              = 0
[pid  5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5945] setpgid(0, 0)               = 0
[pid  5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5945] write(3, "1000", 4)         = 4
[pid  5945] close(3)                    = 0
[pid  5945] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5945] memfd_create("syzkaller", 0) = 3
[pid  5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5945] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5945] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5945] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5945] close(3)                    = 0
[pid  5945] mkdir("./file0", 0777)      = 0
[  216.342782][ T5945] loop0: detected capacity change from 0 to 4096
[  216.359415][ T5945] NILFS (loop0): invalid segment: Checksum error in segment payload
[  216.367795][ T5945] NILFS (loop0): trying rollback from an earlier position
[  216.381222][ T5945] NILFS (loop0): recovery complete
[pid  5945] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5945] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5945] chdir("./file0")            = 0
[pid  5945] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5945] close(4)                    = 0
[pid  5945] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5945] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  216.387513][ T5946] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  216.397663][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  216.397674][   T27] audit: type=1800 audit(1676306904.148:440): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5945] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5945] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5945] exit_group(0)               = ?
[pid  5945] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./438", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./438/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./438/binderfs")                = 0
umount2("./438/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./438/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./438/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./438/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./438/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./438/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./438")                          = 0
mkdir("./439", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5947
./strace-static-x86_64: Process 5947 attached
[pid  5947] chdir("./439")              = 0
[pid  5947] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5947] setpgid(0, 0)               = 0
[pid  5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5947] write(3, "1000", 4)         = 4
[pid  5947] close(3)                    = 0
[pid  5947] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5947] memfd_create("syzkaller", 0) = 3
[pid  5947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5947] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5947] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5947] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5947] close(3)                    = 0
[pid  5947] mkdir("./file0", 0777)      = 0
[pid  5947] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5947] chdir("./file0")            = 0
[pid  5947] ioctl(4, LOOP_CLR_FD)       = 0
[  216.668911][ T5947] loop0: detected capacity change from 0 to 4096
[  216.684525][ T5947] NILFS (loop0): invalid segment: Checksum error in segment payload
[  216.692561][ T5947] NILFS (loop0): trying rollback from an earlier position
[  216.706385][ T5947] NILFS (loop0): recovery complete
[pid  5947] close(4)                    = 0
[pid  5947] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5947] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  216.712119][ T5948] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  216.725673][   T27] audit: type=1800 audit(1676306904.488:441): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5947] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5947] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5947] exit_group(0)               = ?
[pid  5947] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5947, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./439", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./439/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./439/binderfs")                = 0
umount2("./439/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./439/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./439/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./439/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./439/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./439/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./439")                          = 0
mkdir("./440", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5949
./strace-static-x86_64: Process 5949 attached
[pid  5949] chdir("./440")              = 0
[pid  5949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5949] setpgid(0, 0)               = 0
[pid  5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5949] write(3, "1000", 4)         = 4
[pid  5949] close(3)                    = 0
[pid  5949] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5949] memfd_create("syzkaller", 0) = 3
[pid  5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5949] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5949] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5949] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5949] close(3)                    = 0
[pid  5949] mkdir("./file0", 0777)      = 0
[pid  5949] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5949] chdir("./file0")            = 0
[pid  5949] ioctl(4, LOOP_CLR_FD)       = 0
[  217.004309][ T5949] loop0: detected capacity change from 0 to 4096
[  217.020947][ T5949] NILFS (loop0): invalid segment: Checksum error in segment payload
[  217.029031][ T5949] NILFS (loop0): trying rollback from an earlier position
[  217.042525][ T5949] NILFS (loop0): recovery complete
[pid  5949] close(4)                    = 0
[pid  5949] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5949] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  217.048331][ T5950] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.069537][   T27] audit: type=1800 audit(1676306904.828:442): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5949] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5949] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5949] exit_group(0)               = ?
[pid  5949] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./440", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./440/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./440/binderfs")                = 0
umount2("./440/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./440/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./440/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./440/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./440/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./440/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./440")                          = 0
mkdir("./441", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5951
./strace-static-x86_64: Process 5951 attached
[pid  5951] chdir("./441")              = 0
[pid  5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5951] setpgid(0, 0)               = 0
[pid  5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5951] write(3, "1000", 4)         = 4
[pid  5951] close(3)                    = 0
[pid  5951] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5951] memfd_create("syzkaller", 0) = 3
[pid  5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5951] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5951] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5951] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5951] close(3)                    = 0
[pid  5951] mkdir("./file0", 0777)      = 0
[pid  5951] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  217.335451][ T5951] loop0: detected capacity change from 0 to 4096
[  217.350050][ T5951] NILFS (loop0): invalid segment: Checksum error in segment payload
[  217.358131][ T5951] NILFS (loop0): trying rollback from an earlier position
[  217.373398][ T5951] NILFS (loop0): recovery complete
[pid  5951] chdir("./file0")            = 0
[pid  5951] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5951] close(4)                    = 0
[pid  5951] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5951] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  217.379420][ T5952] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.398255][   T27] audit: type=1800 audit(1676306905.158:443): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5951] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5951] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5951] exit_group(0)               = ?
[pid  5951] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./441", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./441/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./441/binderfs")                = 0
umount2("./441/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./441/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./441/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./441/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./441/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./441/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./441")                          = 0
mkdir("./442", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5953
./strace-static-x86_64: Process 5953 attached
[pid  5953] chdir("./442")              = 0
[pid  5953] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5953] setpgid(0, 0)               = 0
[pid  5953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5953] write(3, "1000", 4)         = 4
[pid  5953] close(3)                    = 0
[pid  5953] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5953] memfd_create("syzkaller", 0) = 3
[pid  5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5953] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5953] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5953] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5953] close(3)                    = 0
[pid  5953] mkdir("./file0", 0777)      = 0
[  217.679467][ T5953] loop0: detected capacity change from 0 to 4096
[  217.697121][ T5953] NILFS (loop0): invalid segment: Checksum error in segment payload
[  217.705217][ T5953] NILFS (loop0): trying rollback from an earlier position
[  217.718833][ T5953] NILFS (loop0): recovery complete
[pid  5953] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5953] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5953] chdir("./file0")            = 0
[pid  5953] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5953] close(4)                    = 0
[pid  5953] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5953] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  217.725099][ T5954] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.729886][   T27] audit: type=1800 audit(1676306905.478:444): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5953] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5953] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5953] exit_group(0)               = ?
[pid  5953] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5953, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./442", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./442/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./442/binderfs")                = 0
umount2("./442/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./442/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./442/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./442/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./442/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./442/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./442")                          = 0
mkdir("./443", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5955
./strace-static-x86_64: Process 5955 attached
[pid  5955] chdir("./443")              = 0
[pid  5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5955] setpgid(0, 0)               = 0
[pid  5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5955] write(3, "1000", 4)         = 4
[pid  5955] close(3)                    = 0
[pid  5955] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5955] memfd_create("syzkaller", 0) = 3
[pid  5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5955] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5955] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5955] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5955] close(3)                    = 0
[pid  5955] mkdir("./file0", 0777)      = 0
[  218.024059][ T5955] loop0: detected capacity change from 0 to 4096
[  218.040264][ T5955] NILFS (loop0): invalid segment: Checksum error in segment payload
[  218.048302][ T5955] NILFS (loop0): trying rollback from an earlier position
[  218.061697][ T5955] NILFS (loop0): recovery complete
[pid  5955] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5955] chdir("./file0")            = 0
[pid  5955] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5955] close(4)                    = 0
[pid  5955] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5955] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  218.067872][ T5956] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.077759][   T27] audit: type=1800 audit(1676306905.838:445): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5955] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5955] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5955] exit_group(0)               = ?
[pid  5955] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./443", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./443/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./443/binderfs")                = 0
umount2("./443/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./443/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./443/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./443/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./443/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./443/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./443")                          = 0
mkdir("./444", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5957
./strace-static-x86_64: Process 5957 attached
[pid  5957] chdir("./444")              = 0
[pid  5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5957] setpgid(0, 0)               = 0
[pid  5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5957] write(3, "1000", 4)         = 4
[pid  5957] close(3)                    = 0
[pid  5957] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5957] memfd_create("syzkaller", 0) = 3
[pid  5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5957] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5957] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5957] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5957] close(3)                    = 0
[pid  5957] mkdir("./file0", 0777)      = 0
[  218.352651][ T5957] loop0: detected capacity change from 0 to 4096
[  218.367859][ T5957] NILFS (loop0): invalid segment: Checksum error in segment payload
[  218.375869][ T5957] NILFS (loop0): trying rollback from an earlier position
[  218.389718][ T5957] NILFS (loop0): recovery complete
[pid  5957] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5957] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5957] chdir("./file0")            = 0
[pid  5957] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5957] close(4)                    = 0
[pid  5957] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5957] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  218.395446][ T5958] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.412249][   T27] audit: type=1800 audit(1676306906.168:446): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5957] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5957] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5957] exit_group(0)               = ?
[pid  5957] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./444", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./444/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./444/binderfs")                = 0
umount2("./444/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./444/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./444/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./444/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./444/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./444/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./444")                          = 0
mkdir("./445", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5959
./strace-static-x86_64: Process 5959 attached
[pid  5959] chdir("./445")              = 0
[pid  5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5959] setpgid(0, 0)               = 0
[pid  5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5959] write(3, "1000", 4)         = 4
[pid  5959] close(3)                    = 0
[pid  5959] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5959] memfd_create("syzkaller", 0) = 3
[pid  5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5959] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5959] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5959] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5959] close(3)                    = 0
[pid  5959] mkdir("./file0", 0777)      = 0
[pid  5959] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5959] chdir("./file0")            = 0
[pid  5959] ioctl(4, LOOP_CLR_FD)       = 0
[  218.668332][ T5959] loop0: detected capacity change from 0 to 4096
[  218.684119][ T5959] NILFS (loop0): invalid segment: Checksum error in segment payload
[  218.692224][ T5959] NILFS (loop0): trying rollback from an earlier position
[  218.705666][ T5959] NILFS (loop0): recovery complete
[pid  5959] close(4)                    = 0
[pid  5959] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5959] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  218.711544][ T5960] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.726877][   T27] audit: type=1800 audit(1676306906.488:447): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5959] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5959] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5959] exit_group(0)               = ?
[pid  5959] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./445", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./445/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./445/binderfs")                = 0
umount2("./445/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./445/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./445/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./445/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./445/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./445/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./445")                          = 0
mkdir("./446", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5961
./strace-static-x86_64: Process 5961 attached
[pid  5961] chdir("./446")              = 0
[pid  5961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5961] setpgid(0, 0)               = 0
[pid  5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5961] write(3, "1000", 4)         = 4
[pid  5961] close(3)                    = 0
[pid  5961] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5961] memfd_create("syzkaller", 0) = 3
[pid  5961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5961] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5961] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5961] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5961] close(3)                    = 0
[pid  5961] mkdir("./file0", 0777)      = 0
[  218.989091][ T5961] loop0: detected capacity change from 0 to 4096
[  219.006003][ T5961] NILFS (loop0): invalid segment: Checksum error in segment payload
[  219.014141][ T5961] NILFS (loop0): trying rollback from an earlier position
[  219.027928][ T5961] NILFS (loop0): recovery complete
[pid  5961] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5961] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5961] chdir("./file0")            = 0
[pid  5961] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5961] close(4)                    = 0
[pid  5961] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5961] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  219.034179][ T5962] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.037679][   T27] audit: type=1800 audit(1676306906.798:448): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5961] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5961] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5961] exit_group(0)               = ?
[pid  5961] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./446", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./446/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./446/binderfs")                = 0
umount2("./446/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./446/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./446/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./446/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./446/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./446/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./446")                          = 0
mkdir("./447", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5963
./strace-static-x86_64: Process 5963 attached
[pid  5963] chdir("./447")              = 0
[pid  5963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5963] setpgid(0, 0)               = 0
[pid  5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5963] write(3, "1000", 4)         = 4
[pid  5963] close(3)                    = 0
[pid  5963] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5963] memfd_create("syzkaller", 0) = 3
[pid  5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5963] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5963] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5963] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5963] close(3)                    = 0
[pid  5963] mkdir("./file0", 0777)      = 0
[pid  5963] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5963] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5963] chdir("./file0")            = 0
[pid  5963] ioctl(4, LOOP_CLR_FD)       = 0
[  219.333036][ T5963] loop0: detected capacity change from 0 to 4096
[  219.349609][ T5963] NILFS (loop0): invalid segment: Checksum error in segment payload
[  219.357695][ T5963] NILFS (loop0): trying rollback from an earlier position
[  219.372194][ T5963] NILFS (loop0): recovery complete
[pid  5963] close(4)                    = 0
[pid  5963] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5963] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  219.378133][ T5964] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.392302][   T27] audit: type=1800 audit(1676306907.148:449): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5963] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5963] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5963] exit_group(0)               = ?
[pid  5963] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./447", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./447/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./447/binderfs")                = 0
umount2("./447/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./447/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./447/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./447/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./447/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./447/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./447")                          = 0
mkdir("./448", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5965
./strace-static-x86_64: Process 5965 attached
[pid  5965] chdir("./448")              = 0
[pid  5965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5965] setpgid(0, 0)               = 0
[pid  5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5965] write(3, "1000", 4)         = 4
[pid  5965] close(3)                    = 0
[pid  5965] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5965] memfd_create("syzkaller", 0) = 3
[pid  5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5965] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5965] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5965] close(3)                    = 0
[pid  5965] mkdir("./file0", 0777)      = 0
[  219.656872][ T5965] loop0: detected capacity change from 0 to 4096
[  219.673084][ T5965] NILFS (loop0): invalid segment: Checksum error in segment payload
[  219.681195][ T5965] NILFS (loop0): trying rollback from an earlier position
[  219.693903][ T5965] NILFS (loop0): recovery complete
[pid  5965] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5965] chdir("./file0")            = 0
[pid  5965] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5965] close(4)                    = 0
[pid  5965] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5965] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  219.700144][ T5966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5965] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5965] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5965] exit_group(0)               = ?
[pid  5965] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./448", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./448/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./448/binderfs")                = 0
umount2("./448/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./448/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./448/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./448/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./448/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./448/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./448")                          = 0
mkdir("./449", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5967
./strace-static-x86_64: Process 5967 attached
[pid  5967] chdir("./449")              = 0
[pid  5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5967] setpgid(0, 0)               = 0
[pid  5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5967] write(3, "1000", 4)         = 4
[pid  5967] close(3)                    = 0
[pid  5967] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5967] memfd_create("syzkaller", 0) = 3
[pid  5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5967] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5967] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5967] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5967] close(3)                    = 0
[pid  5967] mkdir("./file0", 0777)      = 0
[  219.983376][ T5967] loop0: detected capacity change from 0 to 4096
[  219.999906][ T5967] NILFS (loop0): invalid segment: Checksum error in segment payload
[  220.007993][ T5967] NILFS (loop0): trying rollback from an earlier position
[  220.021368][ T5967] NILFS (loop0): recovery complete
[pid  5967] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5967] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5967] chdir("./file0")            = 0
[pid  5967] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5967] close(4)                    = 0
[pid  5967] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5967] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  220.027887][ T5968] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5967] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5967] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5967] exit_group(0)               = ?
[pid  5967] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./449", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./449/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./449/binderfs")                = 0
umount2("./449/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./449/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./449/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./449/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./449/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./449/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./449")                          = 0
mkdir("./450", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5969
./strace-static-x86_64: Process 5969 attached
[pid  5969] chdir("./450")              = 0
[pid  5969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5969] setpgid(0, 0)               = 0
[pid  5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5969] write(3, "1000", 4)         = 4
[pid  5969] close(3)                    = 0
[pid  5969] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5969] memfd_create("syzkaller", 0) = 3
[pid  5969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5969] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5969] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5969] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5969] close(3)                    = 0
[pid  5969] mkdir("./file0", 0777)      = 0
[pid  5969] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  220.316098][ T5969] loop0: detected capacity change from 0 to 4096
[  220.334224][ T5969] NILFS (loop0): invalid segment: Checksum error in segment payload
[  220.342546][ T5969] NILFS (loop0): trying rollback from an earlier position
[  220.356469][ T5969] NILFS (loop0): recovery complete
[pid  5969] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5969] chdir("./file0")            = 0
[pid  5969] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5969] close(4)                    = 0
[pid  5969] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5969] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  220.362743][ T5970] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5969] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5969] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5969] exit_group(0)               = ?
[pid  5969] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./450", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./450/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./450/binderfs")                = 0
umount2("./450/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./450/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./450/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./450/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./450/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./450/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./450")                          = 0
mkdir("./451", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5971
./strace-static-x86_64: Process 5971 attached
[pid  5971] chdir("./451")              = 0
[pid  5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5971] setpgid(0, 0)               = 0
[pid  5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5971] write(3, "1000", 4)         = 4
[pid  5971] close(3)                    = 0
[pid  5971] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5971] memfd_create("syzkaller", 0) = 3
[pid  5971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5971] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5971] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5971] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5971] close(3)                    = 0
[pid  5971] mkdir("./file0", 0777)      = 0
[pid  5971] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5971] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5971] chdir("./file0")            = 0
[pid  5971] ioctl(4, LOOP_CLR_FD)       = 0
[  220.649969][ T5971] loop0: detected capacity change from 0 to 4096
[  220.665487][ T5971] NILFS (loop0): invalid segment: Checksum error in segment payload
[  220.673577][ T5971] NILFS (loop0): trying rollback from an earlier position
[  220.687197][ T5971] NILFS (loop0): recovery complete
[pid  5971] close(4)                    = 0
[pid  5971] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5971] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  220.693170][ T5972] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5971] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5971] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5971] exit_group(0)               = ?
[pid  5971] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./451", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./451/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./451/binderfs")                = 0
umount2("./451/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./451/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./451/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./451/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./451/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./451/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./451")                          = 0
mkdir("./452", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5973
./strace-static-x86_64: Process 5973 attached
[pid  5973] chdir("./452")              = 0
[pid  5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5973] setpgid(0, 0)               = 0
[pid  5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5973] write(3, "1000", 4)         = 4
[pid  5973] close(3)                    = 0
[pid  5973] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5973] memfd_create("syzkaller", 0) = 3
[pid  5973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5973] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5973] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5973] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5973] close(3)                    = 0
[pid  5973] mkdir("./file0", 0777)      = 0
[  220.985847][ T5973] loop0: detected capacity change from 0 to 4096
[  221.004374][ T5973] NILFS (loop0): invalid segment: Checksum error in segment payload
[  221.012948][ T5973] NILFS (loop0): trying rollback from an earlier position
[  221.027091][ T5973] NILFS (loop0): recovery complete
[pid  5973] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5973] chdir("./file0")            = 0
[pid  5973] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5973] close(4)                    = 0
[pid  5973] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5973] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  221.033196][ T5974] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5973] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5973] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5973] exit_group(0)               = ?
[pid  5973] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./452", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./452/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./452/binderfs")                = 0
umount2("./452/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./452/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./452/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./452/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./452/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./452/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./452")                          = 0
mkdir("./453", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5975
./strace-static-x86_64: Process 5975 attached
[pid  5975] chdir("./453")              = 0
[pid  5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5975] setpgid(0, 0)               = 0
[pid  5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5975] write(3, "1000", 4)         = 4
[pid  5975] close(3)                    = 0
[pid  5975] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5975] memfd_create("syzkaller", 0) = 3
[pid  5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5975] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5975] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5975] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5975] close(3)                    = 0
[pid  5975] mkdir("./file0", 0777)      = 0
[  221.310461][ T5975] loop0: detected capacity change from 0 to 4096
[  221.326001][ T5975] NILFS (loop0): invalid segment: Checksum error in segment payload
[  221.334090][ T5975] NILFS (loop0): trying rollback from an earlier position
[  221.347923][ T5975] NILFS (loop0): recovery complete
[pid  5975] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5975] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5975] chdir("./file0")            = 0
[pid  5975] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5975] close(4)                    = 0
[pid  5975] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5975] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  221.354325][ T5976] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5975] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5975] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5975] exit_group(0)               = ?
[pid  5975] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./453", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./453/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./453/binderfs")                = 0
umount2("./453/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./453/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./453/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./453/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./453/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./453/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./453")                          = 0
mkdir("./454", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5977 attached
, child_tidptr=0x555555db65d0) = 5977
[pid  5977] chdir("./454")              = 0
[pid  5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5977] setpgid(0, 0)               = 0
[pid  5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5977] write(3, "1000", 4)         = 4
[pid  5977] close(3)                    = 0
[pid  5977] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5977] memfd_create("syzkaller", 0) = 3
[pid  5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5977] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5977] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5977] close(3)                    = 0
[pid  5977] mkdir("./file0", 0777)      = 0
[  221.642420][ T5977] loop0: detected capacity change from 0 to 4096
[  221.657239][ T5977] NILFS (loop0): invalid segment: Checksum error in segment payload
[  221.665260][ T5977] NILFS (loop0): trying rollback from an earlier position
[  221.679954][ T5977] NILFS (loop0): recovery complete
[pid  5977] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5977] chdir("./file0")            = 0
[pid  5977] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5977] close(4)                    = 0
[pid  5977] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5977] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  221.686518][ T5978] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.698274][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  221.698286][   T27] audit: type=1800 audit(1676306909.458:456): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5977] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5977] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5977] exit_group(0)               = ?
[pid  5977] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./454", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./454/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./454/binderfs")                = 0
umount2("./454/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./454/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./454/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./454/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./454/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./454/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./454")                          = 0
mkdir("./455", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5979
./strace-static-x86_64: Process 5979 attached
[pid  5979] chdir("./455")              = 0
[pid  5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5979] setpgid(0, 0)               = 0
[pid  5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5979] write(3, "1000", 4)         = 4
[pid  5979] close(3)                    = 0
[pid  5979] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5979] memfd_create("syzkaller", 0) = 3
[pid  5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5979] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5979] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5979] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5979] close(3)                    = 0
[pid  5979] mkdir("./file0", 0777)      = 0
[pid  5979] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5979] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5979] chdir("./file0")            = 0
[pid  5979] ioctl(4, LOOP_CLR_FD)       = 0
[  221.986687][ T5979] loop0: detected capacity change from 0 to 4096
[  222.004521][ T5979] NILFS (loop0): invalid segment: Checksum error in segment payload
[  222.012853][ T5979] NILFS (loop0): trying rollback from an earlier position
[  222.026463][ T5979] NILFS (loop0): recovery complete
[pid  5979] close(4)                    = 0
[pid  5979] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5979] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  222.032161][ T5980] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.040310][   T27] audit: type=1800 audit(1676306909.788:457): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5979] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5979] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5979] exit_group(0)               = ?
[pid  5979] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./455", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./455/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./455/binderfs")                = 0
umount2("./455/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./455/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./455/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./455/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./455/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./455/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./455")                          = 0
mkdir("./456", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5981
./strace-static-x86_64: Process 5981 attached
[pid  5981] chdir("./456")              = 0
[pid  5981] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5981] setpgid(0, 0)               = 0
[pid  5981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5981] write(3, "1000", 4)         = 4
[pid  5981] close(3)                    = 0
[pid  5981] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5981] memfd_create("syzkaller", 0) = 3
[pid  5981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5981] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5981] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5981] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5981] close(3)                    = 0
[pid  5981] mkdir("./file0", 0777)      = 0
[pid  5981] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5981] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5981] chdir("./file0")            = 0
[  222.348807][ T5981] loop0: detected capacity change from 0 to 4096
[  222.364423][ T5981] NILFS (loop0): invalid segment: Checksum error in segment payload
[  222.372969][ T5981] NILFS (loop0): trying rollback from an earlier position
[  222.387628][ T5981] NILFS (loop0): recovery complete
[pid  5981] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5981] close(4)                    = 0
[pid  5981] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5981] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  222.393996][ T5982] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.407370][   T27] audit: type=1800 audit(1676306910.168:458): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5981] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5981] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5981] exit_group(0)               = ?
[pid  5981] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5981, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./456", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./456/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./456/binderfs")                = 0
umount2("./456/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./456/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./456/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./456/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./456/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./456/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./456")                          = 0
mkdir("./457", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5983
./strace-static-x86_64: Process 5983 attached
[pid  5983] chdir("./457")              = 0
[pid  5983] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5983] setpgid(0, 0)               = 0
[pid  5983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5983] write(3, "1000", 4)         = 4
[pid  5983] close(3)                    = 0
[pid  5983] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5983] memfd_create("syzkaller", 0) = 3
[pid  5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5983] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5983] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5983] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5983] close(3)                    = 0
[pid  5983] mkdir("./file0", 0777)      = 0
[  222.679944][ T5983] loop0: detected capacity change from 0 to 4096
[  222.695698][ T5983] NILFS (loop0): invalid segment: Checksum error in segment payload
[  222.703836][ T5983] NILFS (loop0): trying rollback from an earlier position
[  222.717526][ T5983] NILFS (loop0): recovery complete
[pid  5983] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5983] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5983] chdir("./file0")            = 0
[pid  5983] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5983] close(4)                    = 0
[pid  5983] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5983] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  222.723987][ T5984] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.736586][   T27] audit: type=1800 audit(1676306910.498:459): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5983] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5983] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5983] exit_group(0)               = ?
[pid  5983] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5983, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./457", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./457/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./457/binderfs")                = 0
umount2("./457/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./457/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./457/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./457/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./457/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./457/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./457")                          = 0
mkdir("./458", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5985
./strace-static-x86_64: Process 5985 attached
[pid  5985] chdir("./458")              = 0
[pid  5985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5985] setpgid(0, 0)               = 0
[pid  5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5985] write(3, "1000", 4)         = 4
[pid  5985] close(3)                    = 0
[pid  5985] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5985] memfd_create("syzkaller", 0) = 3
[pid  5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5985] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5985] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5985] close(3)                    = 0
[pid  5985] mkdir("./file0", 0777)      = 0
[pid  5985] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5985] chdir("./file0")            = 0
[  223.005637][ T5985] loop0: detected capacity change from 0 to 4096
[  223.022139][ T5985] NILFS (loop0): invalid segment: Checksum error in segment payload
[  223.030236][ T5985] NILFS (loop0): trying rollback from an earlier position
[  223.044111][ T5985] NILFS (loop0): recovery complete
[pid  5985] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5985] close(4)                    = 0
[pid  5985] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5985] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  223.051161][ T5986] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.063394][   T27] audit: type=1800 audit(1676306910.828:460): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5985] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5985] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5985] exit_group(0)               = ?
[pid  5985] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./458", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./458/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./458/binderfs")                = 0
umount2("./458/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./458/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./458/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./458/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./458/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./458/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./458")                          = 0
mkdir("./459", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5987
./strace-static-x86_64: Process 5987 attached
[pid  5987] chdir("./459")              = 0
[pid  5987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5987] setpgid(0, 0)               = 0
[pid  5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5987] write(3, "1000", 4)         = 4
[pid  5987] close(3)                    = 0
[pid  5987] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5987] memfd_create("syzkaller", 0) = 3
[pid  5987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5987] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5987] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5987] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5987] close(3)                    = 0
[pid  5987] mkdir("./file0", 0777)      = 0
[pid  5987] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5987] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5987] chdir("./file0")            = 0
[pid  5987] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5987] close(4)                    = 0
[  223.336693][ T5987] loop0: detected capacity change from 0 to 4096
[  223.352720][ T5987] NILFS (loop0): invalid segment: Checksum error in segment payload
[  223.360786][ T5987] NILFS (loop0): trying rollback from an earlier position
[  223.374664][ T5987] NILFS (loop0): recovery complete
[pid  5987] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5987] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  223.380692][ T5988] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.387355][   T27] audit: type=1800 audit(1676306911.148:461): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5987] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5987] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5987] exit_group(0)               = ?
[pid  5987] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./459", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./459/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./459/binderfs")                = 0
umount2("./459/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./459/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./459/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./459/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./459/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./459/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./459")                          = 0
mkdir("./460", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5989
./strace-static-x86_64: Process 5989 attached
[pid  5989] chdir("./460")              = 0
[pid  5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5989] setpgid(0, 0)               = 0
[pid  5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5989] write(3, "1000", 4)         = 4
[pid  5989] close(3)                    = 0
[pid  5989] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5989] memfd_create("syzkaller", 0) = 3
[pid  5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5989] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5989] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5989] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5989] close(3)                    = 0
[pid  5989] mkdir("./file0", 0777)      = 0
[pid  5989] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5989] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5989] chdir("./file0")            = 0
[pid  5989] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5989] close(4)                    = 0
[  223.683410][ T5989] loop0: detected capacity change from 0 to 4096
[  223.700103][ T5989] NILFS (loop0): invalid segment: Checksum error in segment payload
[  223.708161][ T5989] NILFS (loop0): trying rollback from an earlier position
[  223.721673][ T5989] NILFS (loop0): recovery complete
[pid  5989] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5989] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  223.727569][ T5990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.746148][   T27] audit: type=1800 audit(1676306911.488:462): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5989] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5989] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5989] exit_group(0)               = ?
[pid  5989] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./460", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./460/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./460/binderfs")                = 0
umount2("./460/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./460/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./460/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./460/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./460/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./460/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./460")                          = 0
mkdir("./461", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5991
./strace-static-x86_64: Process 5991 attached
[pid  5991] chdir("./461")              = 0
[pid  5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5991] setpgid(0, 0)               = 0
[pid  5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5991] write(3, "1000", 4)         = 4
[pid  5991] close(3)                    = 0
[pid  5991] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5991] memfd_create("syzkaller", 0) = 3
[pid  5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5991] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5991] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5991] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5991] close(3)                    = 0
[pid  5991] mkdir("./file0", 0777)      = 0
[pid  5991] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5991] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  224.019813][ T5991] loop0: detected capacity change from 0 to 4096
[  224.035994][ T5991] NILFS (loop0): invalid segment: Checksum error in segment payload
[  224.044234][ T5991] NILFS (loop0): trying rollback from an earlier position
[  224.058390][ T5991] NILFS (loop0): recovery complete
[pid  5991] chdir("./file0")            = 0
[pid  5991] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5991] close(4)                    = 0
[pid  5991] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5991] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  224.064610][ T5992] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.077658][   T27] audit: type=1800 audit(1676306911.838:463): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5991] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5991] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5991] exit_group(0)               = ?
[pid  5991] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./461", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./461/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./461/binderfs")                = 0
umount2("./461/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./461/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./461/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./461/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./461/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./461/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./461")                          = 0
mkdir("./462", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5993
./strace-static-x86_64: Process 5993 attached
[pid  5993] chdir("./462")              = 0
[pid  5993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5993] setpgid(0, 0)               = 0
[pid  5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5993] write(3, "1000", 4)         = 4
[pid  5993] close(3)                    = 0
[pid  5993] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5993] memfd_create("syzkaller", 0) = 3
[pid  5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5993] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5993] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5993] close(3)                    = 0
[pid  5993] mkdir("./file0", 0777)      = 0
[  224.365439][ T5993] loop0: detected capacity change from 0 to 4096
[  224.380852][ T5993] NILFS (loop0): invalid segment: Checksum error in segment payload
[  224.389179][ T5993] NILFS (loop0): trying rollback from an earlier position
[  224.403236][ T5993] NILFS (loop0): recovery complete
[pid  5993] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5993] chdir("./file0")            = 0
[pid  5993] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5993] close(4)                    = 0
[pid  5993] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5993] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  224.409418][ T5994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.423852][   T27] audit: type=1800 audit(1676306912.178:464): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5993] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5993] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5993] exit_group(0)               = ?
[pid  5993] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./462", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./462/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./462/binderfs")                = 0
umount2("./462/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./462/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./462/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./462/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./462/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./462/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./462")                          = 0
mkdir("./463", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5995
./strace-static-x86_64: Process 5995 attached
[pid  5995] chdir("./463")              = 0
[pid  5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5995] setpgid(0, 0)               = 0
[pid  5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5995] write(3, "1000", 4)         = 4
[pid  5995] close(3)                    = 0
[pid  5995] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5995] memfd_create("syzkaller", 0) = 3
[pid  5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5995] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5995] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5995] close(3)                    = 0
[pid  5995] mkdir("./file0", 0777)      = 0
[  224.691520][ T5995] loop0: detected capacity change from 0 to 4096
[  224.708695][ T5995] NILFS (loop0): invalid segment: Checksum error in segment payload
[  224.716735][ T5995] NILFS (loop0): trying rollback from an earlier position
[  224.730686][ T5995] NILFS (loop0): recovery complete
[pid  5995] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5995] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5995] chdir("./file0")            = 0
[pid  5995] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5995] close(4)                    = 0
[pid  5995] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5995] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  224.737047][ T5996] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.756153][   T27] audit: type=1800 audit(1676306912.498:465): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  5995] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5995] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5995] exit_group(0)               = ?
[pid  5995] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./463", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./463/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./463/binderfs")                = 0
umount2("./463/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./463/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./463/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./463/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./463/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./463/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./463")                          = 0
mkdir("./464", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5997
./strace-static-x86_64: Process 5997 attached
[pid  5997] chdir("./464")              = 0
[pid  5997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5997] setpgid(0, 0)               = 0
[pid  5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5997] write(3, "1000", 4)         = 4
[pid  5997] close(3)                    = 0
[pid  5997] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5997] memfd_create("syzkaller", 0) = 3
[pid  5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5997] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5997] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5997] close(3)                    = 0
[pid  5997] mkdir("./file0", 0777)      = 0
[pid  5997] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  225.020552][ T5997] loop0: detected capacity change from 0 to 4096
[  225.037538][ T5997] NILFS (loop0): invalid segment: Checksum error in segment payload
[  225.045613][ T5997] NILFS (loop0): trying rollback from an earlier position
[  225.060728][ T5997] NILFS (loop0): recovery complete
[pid  5997] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5997] chdir("./file0")            = 0
[pid  5997] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5997] close(4)                    = 0
[pid  5997] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5997] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  225.066800][ T5998] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5997] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5997] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5997] exit_group(0)               = ?
[pid  5997] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./464", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./464/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./464/binderfs")                = 0
umount2("./464/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./464/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./464/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./464/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./464/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./464/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./464")                          = 0
mkdir("./465", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 5999
./strace-static-x86_64: Process 5999 attached
[pid  5999] chdir("./465")              = 0
[pid  5999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5999] setpgid(0, 0)               = 0
[pid  5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5999] write(3, "1000", 4)         = 4
[pid  5999] close(3)                    = 0
[pid  5999] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5999] memfd_create("syzkaller", 0) = 3
[pid  5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5999] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  5999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5999] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5999] close(3)                    = 0
[pid  5999] mkdir("./file0", 0777)      = 0
[  225.341791][ T5999] loop0: detected capacity change from 0 to 4096
[  225.357685][ T5999] NILFS (loop0): invalid segment: Checksum error in segment payload
[  225.365691][ T5999] NILFS (loop0): trying rollback from an earlier position
[  225.379592][ T5999] NILFS (loop0): recovery complete
[pid  5999] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  5999] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5999] chdir("./file0")            = 0
[pid  5999] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5999] close(4)                    = 0
[pid  5999] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  5999] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  225.385462][ T6000] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  5999] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  5999] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  5999] exit_group(0)               = ?
[pid  5999] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./465", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./465/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./465/binderfs")                = 0
umount2("./465/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./465/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./465/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./465/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./465/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./465/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./465")                          = 0
mkdir("./466", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6001
./strace-static-x86_64: Process 6001 attached
[pid  6001] chdir("./466")              = 0
[pid  6001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6001] setpgid(0, 0)               = 0
[pid  6001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6001] write(3, "1000", 4)         = 4
[pid  6001] close(3)                    = 0
[pid  6001] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6001] memfd_create("syzkaller", 0) = 3
[pid  6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6001] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6001] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6001] close(3)                    = 0
[pid  6001] mkdir("./file0", 0777)      = 0
[  225.660398][ T6001] loop0: detected capacity change from 0 to 4096
[  225.675841][ T6001] NILFS (loop0): invalid segment: Checksum error in segment payload
[  225.683942][ T6001] NILFS (loop0): trying rollback from an earlier position
[  225.696668][ T6001] NILFS (loop0): recovery complete
[pid  6001] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6001] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6001] chdir("./file0")            = 0
[pid  6001] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6001] close(4)                    = 0
[pid  6001] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6001] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  225.702409][ T6002] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6001] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6001] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6001] exit_group(0)               = ?
[pid  6001] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6001, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./466", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./466/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./466/binderfs")                = 0
umount2("./466/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./466/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./466/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./466/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./466/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./466/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./466")                          = 0
mkdir("./467", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6003
./strace-static-x86_64: Process 6003 attached
[pid  6003] chdir("./467")              = 0
[pid  6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6003] setpgid(0, 0)               = 0
[pid  6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6003] write(3, "1000", 4)         = 4
[pid  6003] close(3)                    = 0
[pid  6003] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6003] memfd_create("syzkaller", 0) = 3
[pid  6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6003] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6003] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6003] close(3)                    = 0
[pid  6003] mkdir("./file0", 0777)      = 0
[  225.985507][ T6003] loop0: detected capacity change from 0 to 4096
[  226.000612][ T6003] NILFS (loop0): invalid segment: Checksum error in segment payload
[  226.008647][ T6003] NILFS (loop0): trying rollback from an earlier position
[  226.021559][ T6003] NILFS (loop0): recovery complete
[pid  6003] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6003] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6003] chdir("./file0")            = 0
[pid  6003] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6003] close(4)                    = 0
[pid  6003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6003] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  226.027335][ T6004] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6003] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6003] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6003] exit_group(0)               = ?
[pid  6003] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./467", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./467/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./467/binderfs")                = 0
umount2("./467/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./467/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./467/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./467/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./467/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./467/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./467")                          = 0
mkdir("./468", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6005
./strace-static-x86_64: Process 6005 attached
[pid  6005] chdir("./468")              = 0
[pid  6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6005] setpgid(0, 0)               = 0
[pid  6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6005] write(3, "1000", 4)         = 4
[pid  6005] close(3)                    = 0
[pid  6005] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6005] memfd_create("syzkaller", 0) = 3
[pid  6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6005] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6005] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6005] close(3)                    = 0
[pid  6005] mkdir("./file0", 0777)      = 0
[pid  6005] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6005] chdir("./file0")            = 0
[  226.301099][ T6005] loop0: detected capacity change from 0 to 4096
[  226.317456][ T6005] NILFS (loop0): invalid segment: Checksum error in segment payload
[  226.325469][ T6005] NILFS (loop0): trying rollback from an earlier position
[  226.339887][ T6005] NILFS (loop0): recovery complete
[pid  6005] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6005] close(4)                    = 0
[pid  6005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6005] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  226.346007][ T6006] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6005] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6005] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6005] exit_group(0)               = ?
[pid  6005] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6005, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./468", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./468/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./468/binderfs")                = 0
umount2("./468/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./468/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./468/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./468/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./468/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./468/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./468")                          = 0
mkdir("./469", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6007
./strace-static-x86_64: Process 6007 attached
[pid  6007] chdir("./469")              = 0
[pid  6007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6007] setpgid(0, 0)               = 0
[pid  6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6007] write(3, "1000", 4)         = 4
[pid  6007] close(3)                    = 0
[pid  6007] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6007] memfd_create("syzkaller", 0) = 3
[pid  6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6007] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6007] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6007] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6007] close(3)                    = 0
[pid  6007] mkdir("./file0", 0777)      = 0
[pid  6007] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6007] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6007] chdir("./file0")            = 0
[pid  6007] ioctl(4, LOOP_CLR_FD)       = 0
[  226.625914][ T6007] loop0: detected capacity change from 0 to 4096
[  226.641884][ T6007] NILFS (loop0): invalid segment: Checksum error in segment payload
[  226.649996][ T6007] NILFS (loop0): trying rollback from an earlier position
[  226.664183][ T6007] NILFS (loop0): recovery complete
[pid  6007] close(4)                    = 0
[pid  6007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6007] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  226.670128][ T6008] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6007] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6007] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6007] exit_group(0)               = ?
[pid  6007] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./469", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./469/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./469/binderfs")                = 0
umount2("./469/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./469/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./469/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./469/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./469/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./469/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./469")                          = 0
mkdir("./470", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6009
./strace-static-x86_64: Process 6009 attached
[pid  6009] chdir("./470")              = 0
[pid  6009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6009] setpgid(0, 0)               = 0
[pid  6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6009] write(3, "1000", 4)         = 4
[pid  6009] close(3)                    = 0
[pid  6009] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6009] memfd_create("syzkaller", 0) = 3
[pid  6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6009] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6009] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6009] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6009] close(3)                    = 0
[pid  6009] mkdir("./file0", 0777)      = 0
[pid  6009] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6009] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6009] chdir("./file0")            = 0
[  226.957248][ T6009] loop0: detected capacity change from 0 to 4096
[  226.975460][ T6009] NILFS (loop0): invalid segment: Checksum error in segment payload
[  226.983848][ T6009] NILFS (loop0): trying rollback from an earlier position
[  226.998075][ T6009] NILFS (loop0): recovery complete
[pid  6009] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6009] close(4)                    = 0
[pid  6009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6009] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  227.003883][ T6010] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  227.017709][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  227.017720][   T27] audit: type=1800 audit(1676306914.778:472): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6009] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6009] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6009] exit_group(0)               = ?
[pid  6009] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./470", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./470/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./470/binderfs")                = 0
umount2("./470/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./470/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./470/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./470/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./470/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./470/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./470")                          = 0
mkdir("./471", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6011
./strace-static-x86_64: Process 6011 attached
[pid  6011] chdir("./471")              = 0
[pid  6011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6011] setpgid(0, 0)               = 0
[pid  6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6011] write(3, "1000", 4)         = 4
[pid  6011] close(3)                    = 0
[pid  6011] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6011] memfd_create("syzkaller", 0) = 3
[pid  6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6011] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6011] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6011] close(3)                    = 0
[pid  6011] mkdir("./file0", 0777)      = 0
[  227.312018][ T6011] loop0: detected capacity change from 0 to 4096
[  227.326857][ T6011] NILFS (loop0): invalid segment: Checksum error in segment payload
[  227.334863][ T6011] NILFS (loop0): trying rollback from an earlier position
[  227.348817][ T6011] NILFS (loop0): recovery complete
[pid  6011] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6011] chdir("./file0")            = 0
[pid  6011] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6011] close(4)                    = 0
[pid  6011] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6011] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  227.354710][ T6012] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  227.367725][   T27] audit: type=1800 audit(1676306915.128:473): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6011] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6011] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6011] exit_group(0)               = ?
[pid  6011] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./471", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./471/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./471/binderfs")                = 0
umount2("./471/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./471/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./471/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./471/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./471/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./471/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./471")                          = 0
mkdir("./472", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6016
./strace-static-x86_64: Process 6016 attached
[pid  6016] chdir("./472")              = 0
[pid  6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6016] setpgid(0, 0)               = 0
[pid  6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6016] write(3, "1000", 4)         = 4
[pid  6016] close(3)                    = 0
[pid  6016] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6016] memfd_create("syzkaller", 0) = 3
[pid  6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6016] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6016] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6016] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6016] close(3)                    = 0
[pid  6016] mkdir("./file0", 0777)      = 0
[pid  6016] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6016] chdir("./file0")            = 0
[pid  6016] ioctl(4, LOOP_CLR_FD)       = 0
[  227.669496][ T6016] loop0: detected capacity change from 0 to 4096
[  227.685483][ T6016] NILFS (loop0): invalid segment: Checksum error in segment payload
[  227.693634][ T6016] NILFS (loop0): trying rollback from an earlier position
[  227.707409][ T6016] NILFS (loop0): recovery complete
[pid  6016] close(4)                    = 0
[pid  6016] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6016] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  227.713148][ T6017] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  227.734145][   T27] audit: type=1800 audit(1676306915.488:474): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6016] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6016] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6016] exit_group(0)               = ?
[pid  6016] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./472", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./472/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./472/binderfs")                = 0
umount2("./472/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./472/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./472/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./472/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./472/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./472/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./472")                          = 0
mkdir("./473", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6018
./strace-static-x86_64: Process 6018 attached
[pid  6018] chdir("./473")              = 0
[pid  6018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6018] setpgid(0, 0)               = 0
[pid  6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6018] write(3, "1000", 4)         = 4
[pid  6018] close(3)                    = 0
[pid  6018] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6018] memfd_create("syzkaller", 0) = 3
[pid  6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6018] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6018] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6018] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6018] close(3)                    = 0
[pid  6018] mkdir("./file0", 0777)      = 0
[  228.011625][ T6018] loop0: detected capacity change from 0 to 4096
[  228.028323][ T6018] NILFS (loop0): invalid segment: Checksum error in segment payload
[  228.036427][ T6018] NILFS (loop0): trying rollback from an earlier position
[  228.050043][ T6018] NILFS (loop0): recovery complete
[pid  6018] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6018] chdir("./file0")            = 0
[pid  6018] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6018] close(4)                    = 0
[pid  6018] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6018] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  228.055995][ T6019] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.070427][   T27] audit: type=1800 audit(1676306915.828:475): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6018] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6018] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6018] exit_group(0)               = ?
[pid  6018] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6018, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./473", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./473/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./473/binderfs")                = 0
umount2("./473/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./473/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./473/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./473/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./473/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./473/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./473")                          = 0
mkdir("./474", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6020
./strace-static-x86_64: Process 6020 attached
[pid  6020] chdir("./474")              = 0
[pid  6020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6020] setpgid(0, 0)               = 0
[pid  6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6020] write(3, "1000", 4)         = 4
[pid  6020] close(3)                    = 0
[pid  6020] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6020] memfd_create("syzkaller", 0) = 3
[pid  6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6020] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6020] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6020] close(3)                    = 0
[pid  6020] mkdir("./file0", 0777)      = 0
[pid  6020] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6020] chdir("./file0")            = 0
[  228.340216][ T6020] loop0: detected capacity change from 0 to 4096
[  228.358440][ T6020] NILFS (loop0): invalid segment: Checksum error in segment payload
[  228.366592][ T6020] NILFS (loop0): trying rollback from an earlier position
[  228.380494][ T6020] NILFS (loop0): recovery complete
[pid  6020] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6020] close(4)                    = 0
[pid  6020] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6020] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  228.386496][ T6021] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.393260][   T27] audit: type=1800 audit(1676306916.148:476): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6020] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6020] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6020] exit_group(0)               = ?
[pid  6020] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6020, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./474", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./474/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./474/binderfs")                = 0
umount2("./474/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./474/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./474/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./474/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./474/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./474/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./474")                          = 0
mkdir("./475", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6022
./strace-static-x86_64: Process 6022 attached
[pid  6022] chdir("./475")              = 0
[pid  6022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6022] setpgid(0, 0)               = 0
[pid  6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6022] write(3, "1000", 4)         = 4
[pid  6022] close(3)                    = 0
[pid  6022] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6022] memfd_create("syzkaller", 0) = 3
[pid  6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6022] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6022] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6022] close(3)                    = 0
[pid  6022] mkdir("./file0", 0777)      = 0
[  228.677626][ T6022] loop0: detected capacity change from 0 to 4096
[  228.694561][ T6022] NILFS (loop0): invalid segment: Checksum error in segment payload
[  228.702663][ T6022] NILFS (loop0): trying rollback from an earlier position
[  228.715476][ T6022] NILFS (loop0): recovery complete
[pid  6022] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6022] chdir("./file0")            = 0
[pid  6022] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6022] close(4)                    = 0
[pid  6022] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6022] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  228.721538][ T6023] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.734068][   T27] audit: type=1800 audit(1676306916.488:477): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6022] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6022] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6022] exit_group(0)               = ?
[pid  6022] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./475", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./475/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./475/binderfs")                = 0
umount2("./475/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./475/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./475/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./475/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./475/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./475/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./475")                          = 0
mkdir("./476", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6024
./strace-static-x86_64: Process 6024 attached
[pid  6024] chdir("./476")              = 0
[pid  6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6024] setpgid(0, 0)               = 0
[pid  6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6024] write(3, "1000", 4)         = 4
[pid  6024] close(3)                    = 0
[pid  6024] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6024] memfd_create("syzkaller", 0) = 3
[pid  6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6024] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6024] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6024] close(3)                    = 0
[pid  6024] mkdir("./file0", 0777)      = 0
[pid  6024] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  229.027969][ T6024] loop0: detected capacity change from 0 to 4096
[  229.042717][ T6024] NILFS (loop0): invalid segment: Checksum error in segment payload
[  229.050782][ T6024] NILFS (loop0): trying rollback from an earlier position
[  229.064938][ T6024] NILFS (loop0): recovery complete
[pid  6024] chdir("./file0")            = 0
[pid  6024] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6024] close(4)                    = 0
[pid  6024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6024] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  229.071478][ T6025] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.084226][   T27] audit: type=1800 audit(1676306916.848:478): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6024] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6024] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6024] exit_group(0)               = ?
[pid  6024] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./476", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./476/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./476/binderfs")                = 0
umount2("./476/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./476/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./476/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./476/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./476/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./476/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./476")                          = 0
mkdir("./477", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6026
./strace-static-x86_64: Process 6026 attached
[pid  6026] chdir("./477")              = 0
[pid  6026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6026] setpgid(0, 0)               = 0
[pid  6026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6026] write(3, "1000", 4)         = 4
[pid  6026] close(3)                    = 0
[pid  6026] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6026] memfd_create("syzkaller", 0) = 3
[pid  6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6026] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6026] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6026] close(3)                    = 0
[pid  6026] mkdir("./file0", 0777)      = 0
[pid  6026] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  229.353622][ T6026] loop0: detected capacity change from 0 to 4096
[  229.374120][ T6026] NILFS (loop0): invalid segment: Checksum error in segment payload
[  229.382503][ T6026] NILFS (loop0): trying rollback from an earlier position
[  229.395537][ T6026] NILFS (loop0): recovery complete
[pid  6026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6026] chdir("./file0")            = 0
[pid  6026] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6026] close(4)                    = 0
[pid  6026] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6026] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  229.402167][ T6028] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.415964][   T27] audit: type=1800 audit(1676306917.168:479): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6026] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6026] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6026] exit_group(0)               = ?
[pid  6026] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6026, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./477", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./477/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./477/binderfs")                = 0
umount2("./477/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./477/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./477/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./477/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./477/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./477/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./477")                          = 0
mkdir("./478", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6029
./strace-static-x86_64: Process 6029 attached
[pid  6029] chdir("./478")              = 0
[pid  6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6029] setpgid(0, 0)               = 0
[pid  6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6029] write(3, "1000", 4)         = 4
[pid  6029] close(3)                    = 0
[pid  6029] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6029] memfd_create("syzkaller", 0) = 3
[pid  6029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6029] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6029] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6029] close(3)                    = 0
[pid  6029] mkdir("./file0", 0777)      = 0
[pid  6029] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6029] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6029] chdir("./file0")            = 0
[pid  6029] ioctl(4, LOOP_CLR_FD)       = 0
[  229.690651][ T6029] loop0: detected capacity change from 0 to 4096
[  229.705181][ T6029] NILFS (loop0): invalid segment: Checksum error in segment payload
[  229.713619][ T6029] NILFS (loop0): trying rollback from an earlier position
[  229.727095][ T6029] NILFS (loop0): recovery complete
[pid  6029] close(4)                    = 0
[pid  6029] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6029] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  229.732835][ T6030] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.751494][   T27] audit: type=1800 audit(1676306917.508:480): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6029] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6029] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6029] exit_group(0)               = ?
[pid  6029] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./478", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./478/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./478/binderfs")                = 0
umount2("./478/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./478/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./478/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./478/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./478/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./478/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./478")                          = 0
mkdir("./479", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6031
./strace-static-x86_64: Process 6031 attached
[pid  6031] chdir("./479")              = 0
[pid  6031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6031] setpgid(0, 0)               = 0
[pid  6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6031] write(3, "1000", 4)         = 4
[pid  6031] close(3)                    = 0
[pid  6031] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6031] memfd_create("syzkaller", 0) = 3
[pid  6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6031] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6031] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6031] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6031] close(3)                    = 0
[pid  6031] mkdir("./file0", 0777)      = 0
[  230.028786][ T6031] loop0: detected capacity change from 0 to 4096
[  230.044526][ T6031] NILFS (loop0): invalid segment: Checksum error in segment payload
[  230.052630][ T6031] NILFS (loop0): trying rollback from an earlier position
[  230.067385][ T6031] NILFS (loop0): recovery complete
[pid  6031] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6031] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6031] chdir("./file0")            = 0
[pid  6031] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6031] close(4)                    = 0
[pid  6031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6031] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  230.073505][ T6032] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.096167][   T27] audit: type=1800 audit(1676306917.838:481): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6031] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6031] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6031] exit_group(0)               = ?
[pid  6031] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./479", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./479/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./479/binderfs")                = 0
umount2("./479/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./479/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./479/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./479/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./479/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./479/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./479")                          = 0
mkdir("./480", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6035
./strace-static-x86_64: Process 6035 attached
[pid  6035] chdir("./480")              = 0
[pid  6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6035] setpgid(0, 0)               = 0
[pid  6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6035] write(3, "1000", 4)         = 4
[pid  6035] close(3)                    = 0
[pid  6035] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6035] memfd_create("syzkaller", 0) = 3
[pid  6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6035] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6035] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6035] close(3)                    = 0
[pid  6035] mkdir("./file0", 0777)      = 0
[  230.380282][ T6035] loop0: detected capacity change from 0 to 4096
[  230.396079][ T6035] NILFS (loop0): invalid segment: Checksum error in segment payload
[  230.404210][ T6035] NILFS (loop0): trying rollback from an earlier position
[  230.418747][ T6035] NILFS (loop0): recovery complete
[pid  6035] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6035] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6035] chdir("./file0")            = 0
[pid  6035] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6035] close(4)                    = 0
[pid  6035] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6035] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  230.424755][ T6036] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6035] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6035] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6035] exit_group(0)               = ?
[pid  6035] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./480", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./480/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./480/binderfs")                = 0
umount2("./480/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./480/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./480/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./480/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./480/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./480/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./480")                          = 0
mkdir("./481", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6037
./strace-static-x86_64: Process 6037 attached
[pid  6037] chdir("./481")              = 0
[pid  6037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6037] setpgid(0, 0)               = 0
[pid  6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6037] write(3, "1000", 4)         = 4
[pid  6037] close(3)                    = 0
[pid  6037] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6037] memfd_create("syzkaller", 0) = 3
[pid  6037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6037] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6037] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6037] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6037] close(3)                    = 0
[pid  6037] mkdir("./file0", 0777)      = 0
[  230.708874][ T6037] loop0: detected capacity change from 0 to 4096
[  230.724674][ T6037] NILFS (loop0): invalid segment: Checksum error in segment payload
[  230.732796][ T6037] NILFS (loop0): trying rollback from an earlier position
[  230.746492][ T6037] NILFS (loop0): recovery complete
[pid  6037] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6037] chdir("./file0")            = 0
[pid  6037] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6037] close(4)                    = 0
[pid  6037] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6037] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  230.752499][ T6038] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6037] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6037] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6037] exit_group(0)               = ?
[pid  6037] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./481", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./481/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./481/binderfs")                = 0
umount2("./481/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./481/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./481/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./481/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./481/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./481/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./481")                          = 0
mkdir("./482", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6039 attached
, child_tidptr=0x555555db65d0) = 6039
[pid  6039] chdir("./482")              = 0
[pid  6039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6039] setpgid(0, 0)               = 0
[pid  6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6039] write(3, "1000", 4)         = 4
[pid  6039] close(3)                    = 0
[pid  6039] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6039] memfd_create("syzkaller", 0) = 3
[pid  6039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6039] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6039] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6039] close(3)                    = 0
[pid  6039] mkdir("./file0", 0777)      = 0
[  231.015290][ T6039] loop0: detected capacity change from 0 to 4096
[  231.032347][ T6039] NILFS (loop0): invalid segment: Checksum error in segment payload
[  231.040475][ T6039] NILFS (loop0): trying rollback from an earlier position
[  231.054422][ T6039] NILFS (loop0): recovery complete
[pid  6039] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6039] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6039] chdir("./file0")            = 0
[pid  6039] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6039] close(4)                    = 0
[pid  6039] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6039] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  231.060291][ T6040] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6039] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6039] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6039] exit_group(0)               = ?
[pid  6039] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6039, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./482", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./482/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./482/binderfs")                = 0
umount2("./482/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./482/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./482/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./482/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./482/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./482/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./482")                          = 0
mkdir("./483", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6041
./strace-static-x86_64: Process 6041 attached
[pid  6041] chdir("./483")              = 0
[pid  6041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6041] setpgid(0, 0)               = 0
[pid  6041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6041] write(3, "1000", 4)         = 4
[pid  6041] close(3)                    = 0
[pid  6041] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6041] memfd_create("syzkaller", 0) = 3
[pid  6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6041] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6041] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6041] close(3)                    = 0
[pid  6041] mkdir("./file0", 0777)      = 0
[  231.319305][ T6041] loop0: detected capacity change from 0 to 4096
[  231.335436][ T6041] NILFS (loop0): invalid segment: Checksum error in segment payload
[  231.343523][ T6041] NILFS (loop0): trying rollback from an earlier position
[  231.357602][ T6041] NILFS (loop0): recovery complete
[pid  6041] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6041] chdir("./file0")            = 0
[pid  6041] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6041] close(4)                    = 0
[pid  6041] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6041] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  231.363506][ T6042] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6041] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6041] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6041] exit_group(0)               = ?
[pid  6041] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6041, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./483", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./483/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./483/binderfs")                = 0
umount2("./483/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./483/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./483/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./483/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./483/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./483/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./483")                          = 0
mkdir("./484", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6043
./strace-static-x86_64: Process 6043 attached
[pid  6043] chdir("./484")              = 0
[pid  6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6043] setpgid(0, 0)               = 0
[pid  6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6043] write(3, "1000", 4)         = 4
[pid  6043] close(3)                    = 0
[pid  6043] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6043] memfd_create("syzkaller", 0) = 3
[pid  6043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6043] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6043] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6043] close(3)                    = 0
[pid  6043] mkdir("./file0", 0777)      = 0
[  231.635746][ T6043] loop0: detected capacity change from 0 to 4096
[  231.651829][ T6043] NILFS (loop0): invalid segment: Checksum error in segment payload
[  231.659902][ T6043] NILFS (loop0): trying rollback from an earlier position
[  231.673534][ T6043] NILFS (loop0): recovery complete
[pid  6043] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6043] chdir("./file0")            = 0
[pid  6043] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6043] close(4)                    = 0
[pid  6043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6043] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  231.679648][ T6044] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6043] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6043] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6043] exit_group(0)               = ?
[pid  6043] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./484", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./484/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./484/binderfs")                = 0
umount2("./484/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./484/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./484/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./484/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./484/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./484/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./484")                          = 0
mkdir("./485", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6045
./strace-static-x86_64: Process 6045 attached
[pid  6045] chdir("./485")              = 0
[pid  6045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6045] setpgid(0, 0)               = 0
[pid  6045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6045] write(3, "1000", 4)         = 4
[pid  6045] close(3)                    = 0
[pid  6045] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6045] memfd_create("syzkaller", 0) = 3
[pid  6045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6045] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6045] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6045] close(3)                    = 0
[pid  6045] mkdir("./file0", 0777)      = 0
[pid  6045] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6045] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6045] chdir("./file0")            = 0
[pid  6045] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6045] close(4)                    = 0
[pid  6045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6045] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  231.963494][ T6045] loop0: detected capacity change from 0 to 4096
[  231.979881][ T6045] NILFS (loop0): invalid segment: Checksum error in segment payload
[  231.988041][ T6045] NILFS (loop0): trying rollback from an earlier position
[  232.002450][ T6045] NILFS (loop0): recovery complete
[  232.008366][ T6046] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6045] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6045] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6045] exit_group(0)               = ?
[pid  6045] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6045, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./485", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./485/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./485/binderfs")                = 0
umount2("./485/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./485/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./485/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./485/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./485/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./485/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./485")                          = 0
mkdir("./486", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6047
./strace-static-x86_64: Process 6047 attached
[pid  6047] chdir("./486")              = 0
[pid  6047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6047] setpgid(0, 0)               = 0
[pid  6047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6047] write(3, "1000", 4)         = 4
[pid  6047] close(3)                    = 0
[pid  6047] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6047] memfd_create("syzkaller", 0) = 3
[pid  6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6047] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6047] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6047] close(3)                    = 0
[pid  6047] mkdir("./file0", 0777)      = 0
[pid  6047] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6047] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6047] chdir("./file0")            = 0
[pid  6047] ioctl(4, LOOP_CLR_FD)       = 0
[  232.300459][ T6047] loop0: detected capacity change from 0 to 4096
[  232.316718][ T6047] NILFS (loop0): invalid segment: Checksum error in segment payload
[  232.324798][ T6047] NILFS (loop0): trying rollback from an earlier position
[  232.338907][ T6047] NILFS (loop0): recovery complete
[pid  6047] close(4)                    = 0
[pid  6047] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6047] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  232.345215][ T6048] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.358236][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  232.358249][   T27] audit: type=1800 audit(1676306920.118:488): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6047] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6047] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6047] exit_group(0)               = ?
[pid  6047] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6047, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./486", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./486/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./486/binderfs")                = 0
umount2("./486/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./486/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./486/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./486/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./486/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./486/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./486")                          = 0
mkdir("./487", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6049
./strace-static-x86_64: Process 6049 attached
[pid  6049] chdir("./487")              = 0
[pid  6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6049] setpgid(0, 0)               = 0
[pid  6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6049] write(3, "1000", 4)         = 4
[pid  6049] close(3)                    = 0
[pid  6049] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6049] memfd_create("syzkaller", 0) = 3
[pid  6049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6049] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6049] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6049] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6049] close(3)                    = 0
[pid  6049] mkdir("./file0", 0777)      = 0
[  232.634134][ T6049] loop0: detected capacity change from 0 to 4096
[  232.650893][ T6049] NILFS (loop0): invalid segment: Checksum error in segment payload
[  232.658953][ T6049] NILFS (loop0): trying rollback from an earlier position
[  232.672471][ T6049] NILFS (loop0): recovery complete
[pid  6049] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6049] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6049] chdir("./file0")            = 0
[pid  6049] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6049] close(4)                    = 0
[pid  6049] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6049] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  232.678380][ T6050] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.692571][   T27] audit: type=1800 audit(1676306920.448:489): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6049] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6049] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6049] exit_group(0)               = ?
[pid  6049] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./487", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./487/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./487/binderfs")                = 0
umount2("./487/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./487/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./487/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./487/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./487/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./487/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./487")                          = 0
mkdir("./488", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6051
./strace-static-x86_64: Process 6051 attached
[pid  6051] chdir("./488")              = 0
[pid  6051] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6051] setpgid(0, 0)               = 0
[pid  6051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6051] write(3, "1000", 4)         = 4
[pid  6051] close(3)                    = 0
[pid  6051] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6051] memfd_create("syzkaller", 0) = 3
[pid  6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6051] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6051] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6051] close(3)                    = 0
[pid  6051] mkdir("./file0", 0777)      = 0
[pid  6051] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6051] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6051] chdir("./file0")            = 0
[pid  6051] ioctl(4, LOOP_CLR_FD)       = 0
[  232.971757][ T6051] loop0: detected capacity change from 0 to 4096
[  232.987595][ T6051] NILFS (loop0): invalid segment: Checksum error in segment payload
[  232.995593][ T6051] NILFS (loop0): trying rollback from an earlier position
[  233.009671][ T6051] NILFS (loop0): recovery complete
[pid  6051] close(4)                    = 0
[pid  6051] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6051] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  233.016258][ T6052] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.033110][   T27] audit: type=1800 audit(1676306920.788:490): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6051] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6051] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6051] exit_group(0)               = ?
[pid  6051] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6051, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./488", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./488/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./488/binderfs")                = 0
umount2("./488/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./488/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./488/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./488/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./488/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./488/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./488")                          = 0
mkdir("./489", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6053
./strace-static-x86_64: Process 6053 attached
[pid  6053] chdir("./489")              = 0
[pid  6053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6053] setpgid(0, 0)               = 0
[pid  6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6053] write(3, "1000", 4)         = 4
[pid  6053] close(3)                    = 0
[pid  6053] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6053] memfd_create("syzkaller", 0) = 3
[pid  6053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6053] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6053] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6053] close(3)                    = 0
[pid  6053] mkdir("./file0", 0777)      = 0
[pid  6053] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6053] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6053] chdir("./file0")            = 0
[  233.309585][ T6053] loop0: detected capacity change from 0 to 4096
[  233.325101][ T6053] NILFS (loop0): invalid segment: Checksum error in segment payload
[  233.333293][ T6053] NILFS (loop0): trying rollback from an earlier position
[  233.349289][ T6053] NILFS (loop0): recovery complete
[pid  6053] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6053] close(4)                    = 0
[pid  6053] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6053] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  233.355350][ T6054] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.369079][   T27] audit: type=1800 audit(1676306921.128:491): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6053] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6053] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6053] exit_group(0)               = ?
[pid  6053] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./489", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./489/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./489/binderfs")                = 0
umount2("./489/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./489/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./489/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./489/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./489/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./489/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./489")                          = 0
mkdir("./490", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6055
./strace-static-x86_64: Process 6055 attached
[pid  6055] chdir("./490")              = 0
[pid  6055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6055] setpgid(0, 0)               = 0
[pid  6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6055] write(3, "1000", 4)         = 4
[pid  6055] close(3)                    = 0
[pid  6055] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6055] memfd_create("syzkaller", 0) = 3
[pid  6055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6055] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6055] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6055] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6055] close(3)                    = 0
[pid  6055] mkdir("./file0", 0777)      = 0
[  233.651766][ T6055] loop0: detected capacity change from 0 to 4096
[  233.667122][ T6055] NILFS (loop0): invalid segment: Checksum error in segment payload
[  233.675224][ T6055] NILFS (loop0): trying rollback from an earlier position
[  233.689157][ T6055] NILFS (loop0): recovery complete
[pid  6055] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6055] chdir("./file0")            = 0
[pid  6055] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6055] close(4)                    = 0
[pid  6055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6055] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  233.695073][ T6056] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.716200][   T27] audit: type=1800 audit(1676306921.468:492): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6055] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6055] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6055] exit_group(0)               = ?
[pid  6055] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6055, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./490", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./490/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./490/binderfs")                = 0
umount2("./490/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./490/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./490/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./490/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./490/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./490/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./490")                          = 0
mkdir("./491", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6057
./strace-static-x86_64: Process 6057 attached
[pid  6057] chdir("./491")              = 0
[pid  6057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6057] setpgid(0, 0)               = 0
[pid  6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6057] write(3, "1000", 4)         = 4
[pid  6057] close(3)                    = 0
[pid  6057] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6057] memfd_create("syzkaller", 0) = 3
[pid  6057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6057] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6057] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6057] close(3)                    = 0
[pid  6057] mkdir("./file0", 0777)      = 0
[  234.005338][ T6057] loop0: detected capacity change from 0 to 4096
[  234.021778][ T6057] NILFS (loop0): invalid segment: Checksum error in segment payload
[  234.029857][ T6057] NILFS (loop0): trying rollback from an earlier position
[  234.043669][ T6057] NILFS (loop0): recovery complete
[pid  6057] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6057] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6057] chdir("./file0")            = 0
[pid  6057] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6057] close(4)                    = 0
[pid  6057] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6057] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  234.049969][ T6058] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.066242][   T27] audit: type=1800 audit(1676306921.818:493): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6057] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6057] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6057] exit_group(0)               = ?
[pid  6057] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6057, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./491", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./491/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./491/binderfs")                = 0
umount2("./491/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./491/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./491/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./491/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./491/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./491/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./491")                          = 0
mkdir("./492", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6059
./strace-static-x86_64: Process 6059 attached
[pid  6059] chdir("./492")              = 0
[pid  6059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6059] setpgid(0, 0)               = 0
[pid  6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6059] write(3, "1000", 4)         = 4
[pid  6059] close(3)                    = 0
[pid  6059] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6059] memfd_create("syzkaller", 0) = 3
[pid  6059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6059] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6059] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6059] close(3)                    = 0
[pid  6059] mkdir("./file0", 0777)      = 0
[  234.350277][ T6059] loop0: detected capacity change from 0 to 4096
[  234.366469][ T6059] NILFS (loop0): invalid segment: Checksum error in segment payload
[  234.374549][ T6059] NILFS (loop0): trying rollback from an earlier position
[  234.388658][ T6059] NILFS (loop0): recovery complete
[pid  6059] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6059] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6059] chdir("./file0")            = 0
[pid  6059] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6059] close(4)                    = 0
[pid  6059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6059] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  234.394755][ T6060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.398105][   T27] audit: type=1800 audit(1676306922.158:494): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6059] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6059] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6059] exit_group(0)               = ?
[pid  6059] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6059, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./492", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./492/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./492/binderfs")                = 0
umount2("./492/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./492/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./492/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./492/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./492/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./492/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./492")                          = 0
mkdir("./493", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6061
./strace-static-x86_64: Process 6061 attached
[pid  6061] chdir("./493")              = 0
[pid  6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6061] setpgid(0, 0)               = 0
[pid  6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6061] write(3, "1000", 4)         = 4
[pid  6061] close(3)                    = 0
[pid  6061] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6061] memfd_create("syzkaller", 0) = 3
[pid  6061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6061] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6061] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6061] close(3)                    = 0
[pid  6061] mkdir("./file0", 0777)      = 0
[  234.691331][ T6061] loop0: detected capacity change from 0 to 4096
[  234.707772][ T6061] NILFS (loop0): invalid segment: Checksum error in segment payload
[  234.715836][ T6061] NILFS (loop0): trying rollback from an earlier position
[  234.729326][ T6061] NILFS (loop0): recovery complete
[pid  6061] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6061] chdir("./file0")            = 0
[pid  6061] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6061] close(4)                    = 0
[pid  6061] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6061] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  234.735062][ T6062] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.759286][   T27] audit: type=1800 audit(1676306922.498:495): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6061] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6061] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6061] exit_group(0)               = ?
[pid  6061] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6061, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./493", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./493/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./493/binderfs")                = 0
umount2("./493/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./493/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./493/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./493/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./493/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./493/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./493")                          = 0
mkdir("./494", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6063
./strace-static-x86_64: Process 6063 attached
[pid  6063] chdir("./494")              = 0
[pid  6063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6063] setpgid(0, 0)               = 0
[pid  6063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6063] write(3, "1000", 4)         = 4
[pid  6063] close(3)                    = 0
[pid  6063] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6063] memfd_create("syzkaller", 0) = 3
[pid  6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6063] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6063] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6063] close(3)                    = 0
[pid  6063] mkdir("./file0", 0777)      = 0
[  235.011335][ T6063] loop0: detected capacity change from 0 to 4096
[  235.026563][ T6063] NILFS (loop0): invalid segment: Checksum error in segment payload
[  235.034586][ T6063] NILFS (loop0): trying rollback from an earlier position
[  235.048053][ T6063] NILFS (loop0): recovery complete
[pid  6063] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6063] chdir("./file0")            = 0
[pid  6063] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6063] close(4)                    = 0
[pid  6063] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6063] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  235.053801][ T6064] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.068123][   T27] audit: type=1800 audit(1676306922.828:496): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6063] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6063] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6063] exit_group(0)               = ?
[pid  6063] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6063, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./494", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./494/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./494/binderfs")                = 0
umount2("./494/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./494/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./494/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./494/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./494/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./494/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./494")                          = 0
mkdir("./495", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6065
./strace-static-x86_64: Process 6065 attached
[pid  6065] chdir("./495")              = 0
[pid  6065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6065] setpgid(0, 0)               = 0
[pid  6065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6065] write(3, "1000", 4)         = 4
[pid  6065] close(3)                    = 0
[pid  6065] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6065] memfd_create("syzkaller", 0) = 3
[pid  6065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6065] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6065] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6065] close(3)                    = 0
[pid  6065] mkdir("./file0", 0777)      = 0
[  235.334641][ T6065] loop0: detected capacity change from 0 to 4096
[  235.349880][ T6065] NILFS (loop0): invalid segment: Checksum error in segment payload
[  235.357943][ T6065] NILFS (loop0): trying rollback from an earlier position
[  235.371295][ T6065] NILFS (loop0): recovery complete
[pid  6065] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6065] chdir("./file0")            = 0
[pid  6065] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6065] close(4)                    = 0
[pid  6065] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6065] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  235.377198][ T6066] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.391325][   T27] audit: type=1800 audit(1676306923.158:497): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6065] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6065] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6065] exit_group(0)               = ?
[pid  6065] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6065, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./495", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./495/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./495/binderfs")                = 0
umount2("./495/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./495/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./495/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./495/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./495/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./495/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./495")                          = 0
mkdir("./496", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6067
./strace-static-x86_64: Process 6067 attached
[pid  6067] chdir("./496")              = 0
[pid  6067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6067] setpgid(0, 0)               = 0
[pid  6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6067] write(3, "1000", 4)         = 4
[pid  6067] close(3)                    = 0
[pid  6067] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6067] memfd_create("syzkaller", 0) = 3
[pid  6067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6067] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6067] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6067] close(3)                    = 0
[pid  6067] mkdir("./file0", 0777)      = 0
[  235.669307][ T6067] loop0: detected capacity change from 0 to 4096
[  235.684267][ T6067] NILFS (loop0): invalid segment: Checksum error in segment payload
[  235.692333][ T6067] NILFS (loop0): trying rollback from an earlier position
[  235.708398][ T6067] NILFS (loop0): recovery complete
[pid  6067] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6067] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6067] chdir("./file0")            = 0
[pid  6067] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6067] close(4)                    = 0
[pid  6067] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6067] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  235.714696][ T6068] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6067] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6067] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6067] exit_group(0)               = ?
[pid  6067] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6067, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./496", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./496/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./496/binderfs")                = 0
umount2("./496/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./496/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./496/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./496/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./496/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./496/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./496")                          = 0
mkdir("./497", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6069
./strace-static-x86_64: Process 6069 attached
[pid  6069] chdir("./497")              = 0
[pid  6069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6069] setpgid(0, 0)               = 0
[pid  6069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6069] write(3, "1000", 4)         = 4
[pid  6069] close(3)                    = 0
[pid  6069] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6069] memfd_create("syzkaller", 0) = 3
[pid  6069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6069] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6069] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6069] close(3)                    = 0
[pid  6069] mkdir("./file0", 0777)      = 0
[  236.018827][ T6069] loop0: detected capacity change from 0 to 4096
[  236.036020][ T6069] NILFS (loop0): invalid segment: Checksum error in segment payload
[  236.044162][ T6069] NILFS (loop0): trying rollback from an earlier position
[  236.058609][ T6069] NILFS (loop0): recovery complete
[pid  6069] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6069] chdir("./file0")            = 0
[pid  6069] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6069] close(4)                    = 0
[pid  6069] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6069] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  236.064619][ T6070] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6069] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6069] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6069] exit_group(0)               = ?
[pid  6069] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6069, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./497", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./497/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./497/binderfs")                = 0
umount2("./497/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./497/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./497/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./497/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./497/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./497/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./497")                          = 0
mkdir("./498", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6071
./strace-static-x86_64: Process 6071 attached
[pid  6071] chdir("./498")              = 0
[pid  6071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6071] setpgid(0, 0)               = 0
[pid  6071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6071] write(3, "1000", 4)         = 4
[pid  6071] close(3)                    = 0
[pid  6071] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6071] memfd_create("syzkaller", 0) = 3
[pid  6071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6071] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6071] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6071] close(3)                    = 0
[pid  6071] mkdir("./file0", 0777)      = 0
[pid  6071] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6071] chdir("./file0")            = 0
[pid  6071] ioctl(4, LOOP_CLR_FD)       = 0
[  236.337381][ T6071] loop0: detected capacity change from 0 to 4096
[  236.352838][ T6071] NILFS (loop0): invalid segment: Checksum error in segment payload
[  236.360944][ T6071] NILFS (loop0): trying rollback from an earlier position
[  236.374323][ T6071] NILFS (loop0): recovery complete
[pid  6071] close(4)                    = 0
[pid  6071] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6071] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  236.386233][ T6072] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6071] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6071] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6071] exit_group(0)               = ?
[pid  6071] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6071, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./498", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./498/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./498/binderfs")                = 0
umount2("./498/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./498/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./498/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./498/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./498/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./498/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./498")                          = 0
mkdir("./499", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6073
./strace-static-x86_64: Process 6073 attached
[pid  6073] chdir("./499")              = 0
[pid  6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6073] setpgid(0, 0)               = 0
[pid  6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6073] write(3, "1000", 4)         = 4
[pid  6073] close(3)                    = 0
[pid  6073] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6073] memfd_create("syzkaller", 0) = 3
[pid  6073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6073] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6073] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6073] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6073] close(3)                    = 0
[pid  6073] mkdir("./file0", 0777)      = 0
[  236.658583][ T6073] loop0: detected capacity change from 0 to 4096
[  236.673755][ T6073] NILFS (loop0): invalid segment: Checksum error in segment payload
[  236.681824][ T6073] NILFS (loop0): trying rollback from an earlier position
[  236.696553][ T6073] NILFS (loop0): recovery complete
[pid  6073] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6073] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6073] chdir("./file0")            = 0
[pid  6073] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6073] close(4)                    = 0
[pid  6073] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6073] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  236.702352][ T6074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6073] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6073] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6073] exit_group(0)               = ?
[pid  6073] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./499", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./499/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./499/binderfs")                = 0
umount2("./499/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./499/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./499/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./499/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./499/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./499/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./499")                          = 0
mkdir("./500", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6075
./strace-static-x86_64: Process 6075 attached
[pid  6075] chdir("./500")              = 0
[pid  6075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6075] setpgid(0, 0)               = 0
[pid  6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6075] write(3, "1000", 4)         = 4
[pid  6075] close(3)                    = 0
[pid  6075] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6075] memfd_create("syzkaller", 0) = 3
[pid  6075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6075] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6075] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6075] close(3)                    = 0
[pid  6075] mkdir("./file0", 0777)      = 0
[  236.974418][ T6075] loop0: detected capacity change from 0 to 4096
[  236.990097][ T6075] NILFS (loop0): invalid segment: Checksum error in segment payload
[  236.998204][ T6075] NILFS (loop0): trying rollback from an earlier position
[  237.011631][ T6075] NILFS (loop0): recovery complete
[pid  6075] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6075] chdir("./file0")            = 0
[pid  6075] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6075] close(4)                    = 0
[pid  6075] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6075] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  237.017481][ T6076] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6075] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6075] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6075] exit_group(0)               = ?
[pid  6075] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6075, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./500", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./500/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./500/binderfs")                = 0
umount2("./500/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./500/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./500/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./500/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./500/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./500/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./500")                          = 0
mkdir("./501", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6077
./strace-static-x86_64: Process 6077 attached
[pid  6077] chdir("./501")              = 0
[pid  6077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6077] setpgid(0, 0)               = 0
[pid  6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6077] write(3, "1000", 4)         = 4
[pid  6077] close(3)                    = 0
[pid  6077] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6077] memfd_create("syzkaller", 0) = 3
[pid  6077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6077] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6077] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6077] close(3)                    = 0
[pid  6077] mkdir("./file0", 0777)      = 0
[  237.293142][ T6077] loop0: detected capacity change from 0 to 4096
[  237.309085][ T6077] NILFS (loop0): invalid segment: Checksum error in segment payload
[  237.317189][ T6077] NILFS (loop0): trying rollback from an earlier position
[  237.331423][ T6077] NILFS (loop0): recovery complete
[pid  6077] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6077] chdir("./file0")            = 0
[pid  6077] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6077] close(4)                    = 0
[pid  6077] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6077] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  237.337659][ T6078] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6077] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6077] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6077] exit_group(0)               = ?
[pid  6077] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6077, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./501", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./501/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./501/binderfs")                = 0
umount2("./501/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./501/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./501/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./501/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./501/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./501/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./501")                          = 0
mkdir("./502", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6079
./strace-static-x86_64: Process 6079 attached
[pid  6079] chdir("./502")              = 0
[pid  6079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6079] setpgid(0, 0)               = 0
[pid  6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6079] write(3, "1000", 4)         = 4
[pid  6079] close(3)                    = 0
[pid  6079] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6079] memfd_create("syzkaller", 0) = 3
[pid  6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6079] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6079] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6079] close(3)                    = 0
[pid  6079] mkdir("./file0", 0777)      = 0
[pid  6079] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6079] chdir("./file0")            = 0
[pid  6079] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6079] close(4)                    = 0
[pid  6079] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[  237.612038][ T6079] loop0: detected capacity change from 0 to 4096
[  237.627868][ T6079] NILFS (loop0): invalid segment: Checksum error in segment payload
[  237.635867][ T6079] NILFS (loop0): trying rollback from an earlier position
[  237.650045][ T6079] NILFS (loop0): recovery complete
[pid  6079] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  237.655898][ T6080] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.676242][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  237.676255][   T27] audit: type=1800 audit(1676306925.418:504): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6079] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6079] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6079] exit_group(0)               = ?
[pid  6079] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6079, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./502", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./502/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./502/binderfs")                = 0
umount2("./502/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./502/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./502/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./502/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./502/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./502/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./502")                          = 0
mkdir("./503", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6081
./strace-static-x86_64: Process 6081 attached
[pid  6081] chdir("./503")              = 0
[pid  6081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6081] setpgid(0, 0)               = 0
[pid  6081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6081] write(3, "1000", 4)         = 4
[pid  6081] close(3)                    = 0
[pid  6081] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6081] memfd_create("syzkaller", 0) = 3
[pid  6081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6081] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6081] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6081] close(3)                    = 0
[pid  6081] mkdir("./file0", 0777)      = 0
[  237.957191][ T6081] loop0: detected capacity change from 0 to 4096
[  237.972492][ T6081] NILFS (loop0): invalid segment: Checksum error in segment payload
[  237.980532][ T6081] NILFS (loop0): trying rollback from an earlier position
[  237.994221][ T6081] NILFS (loop0): recovery complete
[pid  6081] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6081] chdir("./file0")            = 0
[pid  6081] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6081] close(4)                    = 0
[pid  6081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6081] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  238.000230][ T6082] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.005530][   T27] audit: type=1800 audit(1676306925.758:505): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6081] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6081] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6081] exit_group(0)               = ?
[pid  6081] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6081, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./503", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./503/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./503/binderfs")                = 0
umount2("./503/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./503/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./503/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./503/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./503/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./503/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./503")                          = 0
mkdir("./504", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6083
./strace-static-x86_64: Process 6083 attached
[pid  6083] chdir("./504")              = 0
[pid  6083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6083] setpgid(0, 0)               = 0
[pid  6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6083] write(3, "1000", 4)         = 4
[pid  6083] close(3)                    = 0
[pid  6083] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6083] memfd_create("syzkaller", 0) = 3
[pid  6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6083] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6083] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6083] close(3)                    = 0
[pid  6083] mkdir("./file0", 0777)      = 0
[  238.289071][ T6083] loop0: detected capacity change from 0 to 4096
[  238.305259][ T6083] NILFS (loop0): invalid segment: Checksum error in segment payload
[  238.313373][ T6083] NILFS (loop0): trying rollback from an earlier position
[  238.327178][ T6083] NILFS (loop0): recovery complete
[pid  6083] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6083] chdir("./file0")            = 0
[pid  6083] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6083] close(4)                    = 0
[pid  6083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6083] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  238.332989][ T6084] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.346406][   T27] audit: type=1800 audit(1676306926.108:506): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6083] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6083] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6083] exit_group(0)               = ?
[pid  6083] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./504", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./504/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./504/binderfs")                = 0
umount2("./504/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./504/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./504/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./504/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./504/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./504/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./504")                          = 0
mkdir("./505", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6085
./strace-static-x86_64: Process 6085 attached
[pid  6085] chdir("./505")              = 0
[pid  6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6085] setpgid(0, 0)               = 0
[pid  6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6085] write(3, "1000", 4)         = 4
[pid  6085] close(3)                    = 0
[pid  6085] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6085] memfd_create("syzkaller", 0) = 3
[pid  6085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6085] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6085] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6085] close(3)                    = 0
[pid  6085] mkdir("./file0", 0777)      = 0
[  238.614209][ T6085] loop0: detected capacity change from 0 to 4096
[  238.630653][ T6085] NILFS (loop0): invalid segment: Checksum error in segment payload
[  238.638939][ T6085] NILFS (loop0): trying rollback from an earlier position
[  238.652568][ T6085] NILFS (loop0): recovery complete
[pid  6085] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6085] chdir("./file0")            = 0
[pid  6085] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6085] close(4)                    = 0
[pid  6085] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6085] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  238.658449][ T6086] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.666433][   T27] audit: type=1800 audit(1676306926.428:507): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6085] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6085] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6085] exit_group(0)               = ?
[pid  6085] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./505", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./505/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./505/binderfs")                = 0
umount2("./505/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./505/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./505/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./505/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./505/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./505/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./505")                          = 0
mkdir("./506", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6087
./strace-static-x86_64: Process 6087 attached
[pid  6087] chdir("./506")              = 0
[pid  6087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6087] setpgid(0, 0)               = 0
[pid  6087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6087] write(3, "1000", 4)         = 4
[pid  6087] close(3)                    = 0
[pid  6087] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6087] memfd_create("syzkaller", 0) = 3
[pid  6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6087] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6087] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6087] close(3)                    = 0
[pid  6087] mkdir("./file0", 0777)      = 0
[  238.936817][ T6087] loop0: detected capacity change from 0 to 4096
[  238.952799][ T6087] NILFS (loop0): invalid segment: Checksum error in segment payload
[  238.960863][ T6087] NILFS (loop0): trying rollback from an earlier position
[  238.974355][ T6087] NILFS (loop0): recovery complete
[pid  6087] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6087] chdir("./file0")            = 0
[pid  6087] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6087] close(4)                    = 0
[pid  6087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6087] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  238.980568][ T6088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.994774][   T27] audit: type=1800 audit(1676306926.748:508): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6087] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6087] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6087] exit_group(0)               = ?
[pid  6087] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6087, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./506", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./506/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./506/binderfs")                = 0
umount2("./506/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./506/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./506/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./506/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./506/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./506/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./506")                          = 0
mkdir("./507", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6089
./strace-static-x86_64: Process 6089 attached
[pid  6089] chdir("./507")              = 0
[pid  6089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6089] setpgid(0, 0)               = 0
[pid  6089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6089] write(3, "1000", 4)         = 4
[pid  6089] close(3)                    = 0
[pid  6089] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6089] memfd_create("syzkaller", 0) = 3
[pid  6089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6089] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6089] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6089] close(3)                    = 0
[pid  6089] mkdir("./file0", 0777)      = 0
[pid  6089] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6089] chdir("./file0")            = 0
[pid  6089] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6089] close(4)                    = 0
[  239.275433][ T6089] loop0: detected capacity change from 0 to 4096
[  239.290409][ T6089] NILFS (loop0): invalid segment: Checksum error in segment payload
[  239.298469][ T6089] NILFS (loop0): trying rollback from an earlier position
[  239.311376][ T6089] NILFS (loop0): recovery complete
[pid  6089] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6089] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  239.317362][ T6090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.323236][   T27] audit: type=1800 audit(1676306927.078:509): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6089] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6089] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6089] exit_group(0)               = ?
[pid  6089] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6089, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./507", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./507/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./507/binderfs")                = 0
umount2("./507/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./507/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./507/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./507/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./507/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./507/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./507")                          = 0
mkdir("./508", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6091
./strace-static-x86_64: Process 6091 attached
[pid  6091] chdir("./508")              = 0
[pid  6091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6091] setpgid(0, 0)               = 0
[pid  6091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6091] write(3, "1000", 4)         = 4
[pid  6091] close(3)                    = 0
[pid  6091] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6091] memfd_create("syzkaller", 0) = 3
[pid  6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6091] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6091] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6091] close(3)                    = 0
[pid  6091] mkdir("./file0", 0777)      = 0
[pid  6091] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6091] chdir("./file0")            = 0
[pid  6091] ioctl(4, LOOP_CLR_FD)       = 0
[  239.605626][ T6091] loop0: detected capacity change from 0 to 4096
[  239.620507][ T6091] NILFS (loop0): invalid segment: Checksum error in segment payload
[  239.628545][ T6091] NILFS (loop0): trying rollback from an earlier position
[  239.642419][ T6091] NILFS (loop0): recovery complete
[pid  6091] close(4)                    = 0
[pid  6091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6091] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  239.648830][ T6092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.662296][   T27] audit: type=1800 audit(1676306927.428:510): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6091] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6091] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6091] exit_group(0)               = ?
[pid  6091] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6091, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./508", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./508/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./508/binderfs")                = 0
umount2("./508/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./508/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./508/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./508/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./508/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./508/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./508")                          = 0
mkdir("./509", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6093
./strace-static-x86_64: Process 6093 attached
[pid  6093] chdir("./509")              = 0
[pid  6093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6093] setpgid(0, 0)               = 0
[pid  6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6093] write(3, "1000", 4)         = 4
[pid  6093] close(3)                    = 0
[pid  6093] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6093] memfd_create("syzkaller", 0) = 3
[pid  6093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6093] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6093] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6093] close(3)                    = 0
[pid  6093] mkdir("./file0", 0777)      = 0
[  239.943416][ T6093] loop0: detected capacity change from 0 to 4096
[  239.959767][ T6093] NILFS (loop0): invalid segment: Checksum error in segment payload
[  239.967886][ T6093] NILFS (loop0): trying rollback from an earlier position
[  239.981304][ T6093] NILFS (loop0): recovery complete
[pid  6093] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6093] chdir("./file0")            = 0
[pid  6093] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6093] close(4)                    = 0
[pid  6093] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6093] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  239.987237][ T6094] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.008112][   T27] audit: type=1800 audit(1676306927.768:511): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6093] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6093] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6093] exit_group(0)               = ?
[pid  6093] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6093, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./509", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./509/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./509/binderfs")                = 0
umount2("./509/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./509/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./509/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./509/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./509/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./509/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./509")                          = 0
mkdir("./510", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6095
./strace-static-x86_64: Process 6095 attached
[pid  6095] chdir("./510")              = 0
[pid  6095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6095] setpgid(0, 0)               = 0
[pid  6095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6095] write(3, "1000", 4)         = 4
[pid  6095] close(3)                    = 0
[pid  6095] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6095] memfd_create("syzkaller", 0) = 3
[pid  6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6095] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6095] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6095] close(3)                    = 0
[pid  6095] mkdir("./file0", 0777)      = 0
[pid  6095] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6095] chdir("./file0")            = 0
[pid  6095] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6095] close(4)                    = 0
[  240.281573][ T6095] loop0: detected capacity change from 0 to 4096
[  240.297515][ T6095] NILFS (loop0): invalid segment: Checksum error in segment payload
[  240.305523][ T6095] NILFS (loop0): trying rollback from an earlier position
[  240.319745][ T6095] NILFS (loop0): recovery complete
[pid  6095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6095] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  240.325682][ T6096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.334434][   T27] audit: type=1800 audit(1676306928.078:512): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6095] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6095] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6095] exit_group(0)               = ?
[pid  6095] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6095, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./510", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./510/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./510/binderfs")                = 0
umount2("./510/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./510/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./510/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./510/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./510/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./510/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./510")                          = 0
mkdir("./511", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6097
./strace-static-x86_64: Process 6097 attached
[pid  6097] chdir("./511")              = 0
[pid  6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6097] setpgid(0, 0)               = 0
[pid  6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6097] write(3, "1000", 4)         = 4
[pid  6097] close(3)                    = 0
[pid  6097] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6097] memfd_create("syzkaller", 0) = 3
[pid  6097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6097] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6097] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6097] close(3)                    = 0
[pid  6097] mkdir("./file0", 0777)      = 0
[pid  6097] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  240.617237][ T6097] loop0: detected capacity change from 0 to 4096
[  240.635083][ T6097] NILFS (loop0): invalid segment: Checksum error in segment payload
[  240.643158][ T6097] NILFS (loop0): trying rollback from an earlier position
[  240.658204][ T6097] NILFS (loop0): recovery complete
[pid  6097] chdir("./file0")            = 0
[pid  6097] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6097] close(4)                    = 0
[pid  6097] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6097] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  240.664174][ T6098] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.677744][   T27] audit: type=1800 audit(1676306928.438:513): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6097] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6097] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6097] exit_group(0)               = ?
[pid  6097] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6097, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./511", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./511/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./511/binderfs")                = 0
umount2("./511/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./511/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./511/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./511/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./511/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./511/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./511")                          = 0
mkdir("./512", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6099
./strace-static-x86_64: Process 6099 attached
[pid  6099] chdir("./512")              = 0
[pid  6099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6099] setpgid(0, 0)               = 0
[pid  6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6099] write(3, "1000", 4)         = 4
[pid  6099] close(3)                    = 0
[pid  6099] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6099] memfd_create("syzkaller", 0) = 3
[pid  6099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6099] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6099] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6099] close(3)                    = 0
[pid  6099] mkdir("./file0", 0777)      = 0
[  240.941289][ T6099] loop0: detected capacity change from 0 to 4096
[  240.958112][ T6099] NILFS (loop0): invalid segment: Checksum error in segment payload
[  240.966214][ T6099] NILFS (loop0): trying rollback from an earlier position
[  240.980208][ T6099] NILFS (loop0): recovery complete
[pid  6099] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6099] chdir("./file0")            = 0
[pid  6099] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6099] close(4)                    = 0
[pid  6099] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6099] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  240.986186][ T6100] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6099] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6099] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6099] exit_group(0)               = ?
[pid  6099] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6099, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./512", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./512/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./512/binderfs")                = 0
umount2("./512/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./512/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./512/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./512/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./512/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./512/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./512")                          = 0
mkdir("./513", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6101
./strace-static-x86_64: Process 6101 attached
[pid  6101] chdir("./513")              = 0
[pid  6101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6101] setpgid(0, 0)               = 0
[pid  6101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6101] write(3, "1000", 4)         = 4
[pid  6101] close(3)                    = 0
[pid  6101] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6101] memfd_create("syzkaller", 0) = 3
[pid  6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6101] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6101] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6101] close(3)                    = 0
[pid  6101] mkdir("./file0", 0777)      = 0
[pid  6101] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  241.271770][ T6101] loop0: detected capacity change from 0 to 4096
[  241.288706][ T6101] NILFS (loop0): invalid segment: Checksum error in segment payload
[  241.296812][ T6101] NILFS (loop0): trying rollback from an earlier position
[  241.311907][ T6101] NILFS (loop0): recovery complete
[pid  6101] chdir("./file0")            = 0
[pid  6101] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6101] close(4)                    = 0
[pid  6101] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6101] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  241.317987][ T6102] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6101] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6101] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6101] exit_group(0)               = ?
[pid  6101] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6101, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./513", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./513/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./513/binderfs")                = 0
umount2("./513/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./513/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./513/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./513/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./513/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./513/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./513")                          = 0
mkdir("./514", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6103
./strace-static-x86_64: Process 6103 attached
[pid  6103] chdir("./514")              = 0
[pid  6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6103] setpgid(0, 0)               = 0
[pid  6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6103] write(3, "1000", 4)         = 4
[pid  6103] close(3)                    = 0
[pid  6103] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6103] memfd_create("syzkaller", 0) = 3
[pid  6103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6103] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6103] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6103] close(3)                    = 0
[pid  6103] mkdir("./file0", 0777)      = 0
[pid  6103] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  241.608494][ T6103] loop0: detected capacity change from 0 to 4096
[  241.623477][ T6103] NILFS (loop0): invalid segment: Checksum error in segment payload
[  241.631502][ T6103] NILFS (loop0): trying rollback from an earlier position
[  241.645206][ T6103] NILFS (loop0): recovery complete
[pid  6103] chdir("./file0")            = 0
[pid  6103] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6103] close(4)                    = 0
[pid  6103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6103] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  241.651049][ T6104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6103] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6103] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6103] exit_group(0)               = ?
[pid  6103] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./514", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./514/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./514/binderfs")                = 0
umount2("./514/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./514/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./514/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./514/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./514/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./514/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./514")                          = 0
mkdir("./515", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6105
./strace-static-x86_64: Process 6105 attached
[pid  6105] chdir("./515")              = 0
[pid  6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6105] setpgid(0, 0)               = 0
[pid  6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6105] write(3, "1000", 4)         = 4
[pid  6105] close(3)                    = 0
[pid  6105] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6105] memfd_create("syzkaller", 0) = 3
[pid  6105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6105] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6105] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6105] close(3)                    = 0
[pid  6105] mkdir("./file0", 0777)      = 0
[  241.938465][ T6105] loop0: detected capacity change from 0 to 4096
[  241.953711][ T6105] NILFS (loop0): invalid segment: Checksum error in segment payload
[  241.961796][ T6105] NILFS (loop0): trying rollback from an earlier position
[  241.974756][ T6105] NILFS (loop0): recovery complete
[pid  6105] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6105] chdir("./file0")            = 0
[pid  6105] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6105] close(4)                    = 0
[pid  6105] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6105] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  241.980768][ T6106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6105] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6105] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6105] exit_group(0)               = ?
[pid  6105] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./515", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./515/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./515/binderfs")                = 0
umount2("./515/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./515/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./515/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./515/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./515/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./515/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./515")                          = 0
mkdir("./516", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6107
./strace-static-x86_64: Process 6107 attached
[pid  6107] chdir("./516")              = 0
[pid  6107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6107] setpgid(0, 0)               = 0
[pid  6107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6107] write(3, "1000", 4)         = 4
[pid  6107] close(3)                    = 0
[pid  6107] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6107] memfd_create("syzkaller", 0) = 3
[pid  6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6107] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6107] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6107] close(3)                    = 0
[pid  6107] mkdir("./file0", 0777)      = 0
[pid  6107] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6107] chdir("./file0")            = 0
[pid  6107] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6107] close(4)                    = 0
[  242.249981][ T6107] loop0: detected capacity change from 0 to 4096
[  242.266283][ T6107] NILFS (loop0): invalid segment: Checksum error in segment payload
[  242.274361][ T6107] NILFS (loop0): trying rollback from an earlier position
[  242.287831][ T6107] NILFS (loop0): recovery complete
[pid  6107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6107] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  242.294193][ T6108] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6107] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6107] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6107] exit_group(0)               = ?
[pid  6107] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6107, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./516", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./516/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./516/binderfs")                = 0
umount2("./516/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./516/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./516/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./516/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./516/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./516/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./516")                          = 0
mkdir("./517", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6109
./strace-static-x86_64: Process 6109 attached
[pid  6109] chdir("./517")              = 0
[pid  6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6109] setpgid(0, 0)               = 0
[pid  6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6109] write(3, "1000", 4)         = 4
[pid  6109] close(3)                    = 0
[pid  6109] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6109] memfd_create("syzkaller", 0) = 3
[pid  6109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6109] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6109] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6109] close(3)                    = 0
[pid  6109] mkdir("./file0", 0777)      = 0
[pid  6109] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6109] chdir("./file0")            = 0
[pid  6109] ioctl(4, LOOP_CLR_FD)       = 0
[  242.570027][ T6109] loop0: detected capacity change from 0 to 4096
[  242.585321][ T6109] NILFS (loop0): invalid segment: Checksum error in segment payload
[  242.593407][ T6109] NILFS (loop0): trying rollback from an earlier position
[  242.607348][ T6109] NILFS (loop0): recovery complete
[pid  6109] close(4)                    = 0
[pid  6109] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6109] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  242.613169][ T6110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6109] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6109] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6109] exit_group(0)               = ?
[pid  6109] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./517", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./517/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./517/binderfs")                = 0
umount2("./517/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./517/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./517/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./517/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./517/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./517/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./517")                          = 0
mkdir("./518", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6111
./strace-static-x86_64: Process 6111 attached
[pid  6111] chdir("./518")              = 0
[pid  6111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6111] setpgid(0, 0)               = 0
[pid  6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6111] write(3, "1000", 4)         = 4
[pid  6111] close(3)                    = 0
[pid  6111] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6111] memfd_create("syzkaller", 0) = 3
[pid  6111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6111] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6111] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6111] close(3)                    = 0
[pid  6111] mkdir("./file0", 0777)      = 0
[pid  6111] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6111] chdir("./file0")            = 0
[pid  6111] ioctl(4, LOOP_CLR_FD)       = 0
[  242.892669][ T6111] loop0: detected capacity change from 0 to 4096
[  242.907877][ T6111] NILFS (loop0): invalid segment: Checksum error in segment payload
[  242.915872][ T6111] NILFS (loop0): trying rollback from an earlier position
[  242.929883][ T6111] NILFS (loop0): recovery complete
[pid  6111] close(4)                    = 0
[pid  6111] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6111] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  242.936034][ T6112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.949691][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  242.949702][   T27] audit: type=1800 audit(1676306930.708:520): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6111] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6111] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6111] exit_group(0)               = ?
[pid  6111] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./518", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./518/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./518/binderfs")                = 0
umount2("./518/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./518/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./518/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./518/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./518/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./518/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./518")                          = 0
mkdir("./519", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6113
./strace-static-x86_64: Process 6113 attached
[pid  6113] chdir("./519")              = 0
[pid  6113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6113] setpgid(0, 0)               = 0
[pid  6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6113] write(3, "1000", 4)         = 4
[pid  6113] close(3)                    = 0
[pid  6113] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6113] memfd_create("syzkaller", 0) = 3
[pid  6113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6113] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6113] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6113] close(3)                    = 0
[pid  6113] mkdir("./file0", 0777)      = 0
[  243.215195][ T6113] loop0: detected capacity change from 0 to 4096
[  243.240411][ T6113] NILFS (loop0): invalid segment: Checksum error in segment payload
[  243.248480][ T6113] NILFS (loop0): trying rollback from an earlier position
[pid  6113] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6113] chdir("./file0")            = 0
[pid  6113] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6113] close(4)                    = 0
[pid  6113] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6113] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  243.262560][ T6113] NILFS (loop0): recovery complete
[  243.268580][ T6114] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.286204][   T27] audit: type=1800 audit(1676306931.038:521): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6113] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6113] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6113] exit_group(0)               = ?
[pid  6113] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./519", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./519/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./519/binderfs")                = 0
umount2("./519/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./519/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./519/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./519/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./519/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./519/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./519")                          = 0
mkdir("./520", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6115
./strace-static-x86_64: Process 6115 attached
[pid  6115] chdir("./520")              = 0
[pid  6115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6115] setpgid(0, 0)               = 0
[pid  6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6115] write(3, "1000", 4)         = 4
[pid  6115] close(3)                    = 0
[pid  6115] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6115] memfd_create("syzkaller", 0) = 3
[pid  6115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6115] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6115] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6115] close(3)                    = 0
[pid  6115] mkdir("./file0", 0777)      = 0
[pid  6115] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6115] chdir("./file0")            = 0
[  243.550006][ T6115] loop0: detected capacity change from 0 to 4096
[  243.564848][ T6115] NILFS (loop0): invalid segment: Checksum error in segment payload
[  243.573129][ T6115] NILFS (loop0): trying rollback from an earlier position
[  243.587139][ T6115] NILFS (loop0): recovery complete
[pid  6115] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6115] close(4)                    = 0
[pid  6115] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6115] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  243.593178][ T6116] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.606190][   T27] audit: type=1800 audit(1676306931.368:522): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6115] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6115] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6115] exit_group(0)               = ?
[pid  6115] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./520", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./520/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./520/binderfs")                = 0
umount2("./520/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./520/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./520/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./520/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./520/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./520/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./520")                          = 0
mkdir("./521", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6117
./strace-static-x86_64: Process 6117 attached
[pid  6117] chdir("./521")              = 0
[pid  6117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6117] setpgid(0, 0)               = 0
[pid  6117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6117] write(3, "1000", 4)         = 4
[pid  6117] close(3)                    = 0
[pid  6117] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6117] memfd_create("syzkaller", 0) = 3
[pid  6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6117] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6117] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6117] close(3)                    = 0
[pid  6117] mkdir("./file0", 0777)      = 0
[  243.890423][ T6117] loop0: detected capacity change from 0 to 4096
[  243.908059][ T6117] NILFS (loop0): invalid segment: Checksum error in segment payload
[  243.916223][ T6117] NILFS (loop0): trying rollback from an earlier position
[  243.930399][ T6117] NILFS (loop0): recovery complete
[pid  6117] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6117] chdir("./file0")            = 0
[pid  6117] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6117] close(4)                    = 0
[pid  6117] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6117] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  243.936523][ T6118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.949899][   T27] audit: type=1800 audit(1676306931.708:523): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6117] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6117] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6117] exit_group(0)               = ?
[pid  6117] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6117, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./521", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./521/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./521/binderfs")                = 0
umount2("./521/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./521/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./521/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./521/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./521/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./521/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./521")                          = 0
mkdir("./522", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6119
./strace-static-x86_64: Process 6119 attached
[pid  6119] chdir("./522")              = 0
[pid  6119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6119] setpgid(0, 0)               = 0
[pid  6119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6119] write(3, "1000", 4)         = 4
[pid  6119] close(3)                    = 0
[pid  6119] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6119] memfd_create("syzkaller", 0) = 3
[pid  6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6119] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6119] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6119] close(3)                    = 0
[pid  6119] mkdir("./file0", 0777)      = 0
[pid  6119] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6119] chdir("./file0")            = 0
[pid  6119] ioctl(4, LOOP_CLR_FD)       = 0
[  244.218502][ T6119] loop0: detected capacity change from 0 to 4096
[  244.234470][ T6119] NILFS (loop0): invalid segment: Checksum error in segment payload
[  244.242624][ T6119] NILFS (loop0): trying rollback from an earlier position
[  244.256716][ T6119] NILFS (loop0): recovery complete
[pid  6119] close(4)                    = 0
[pid  6119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6119] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  244.262475][ T6120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.275799][   T27] audit: type=1800 audit(1676306932.038:524): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6119] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6119] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6119] exit_group(0)               = ?
[pid  6119] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6119, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./522", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./522/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./522/binderfs")                = 0
umount2("./522/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./522/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./522/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./522/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./522/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./522/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./522")                          = 0
mkdir("./523", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6121
./strace-static-x86_64: Process 6121 attached
[pid  6121] chdir("./523")              = 0
[pid  6121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6121] setpgid(0, 0)               = 0
[pid  6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6121] write(3, "1000", 4)         = 4
[pid  6121] close(3)                    = 0
[pid  6121] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6121] memfd_create("syzkaller", 0) = 3
[pid  6121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6121] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6121] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6121] close(3)                    = 0
[pid  6121] mkdir("./file0", 0777)      = 0
[  244.548874][ T6121] loop0: detected capacity change from 0 to 4096
[  244.564775][ T6121] NILFS (loop0): invalid segment: Checksum error in segment payload
[  244.572831][ T6121] NILFS (loop0): trying rollback from an earlier position
[  244.586904][ T6121] NILFS (loop0): recovery complete
[pid  6121] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6121] chdir("./file0")            = 0
[pid  6121] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6121] close(4)                    = 0
[pid  6121] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6121] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  244.593037][ T6122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.605857][   T27] audit: type=1800 audit(1676306932.368:525): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6121] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6121] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6121] exit_group(0)               = ?
[pid  6121] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6121, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./523", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./523/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./523/binderfs")                = 0
umount2("./523/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./523/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./523/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./523/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./523/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./523/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./523")                          = 0
mkdir("./524", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6123
./strace-static-x86_64: Process 6123 attached
[pid  6123] chdir("./524")              = 0
[pid  6123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6123] setpgid(0, 0)               = 0
[pid  6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6123] write(3, "1000", 4)         = 4
[pid  6123] close(3)                    = 0
[pid  6123] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6123] memfd_create("syzkaller", 0) = 3
[pid  6123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6123] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6123] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6123] close(3)                    = 0
[pid  6123] mkdir("./file0", 0777)      = 0
[  244.875619][ T6123] loop0: detected capacity change from 0 to 4096
[  244.889958][ T6123] NILFS (loop0): invalid segment: Checksum error in segment payload
[  244.898011][ T6123] NILFS (loop0): trying rollback from an earlier position
[  244.910598][ T6123] NILFS (loop0): recovery complete
[pid  6123] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6123] chdir("./file0")            = 0
[pid  6123] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6123] close(4)                    = 0
[pid  6123] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6123] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  244.916621][ T6124] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.936169][   T27] audit: type=1800 audit(1676306932.678:526): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6123] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6123] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6123] exit_group(0)               = ?
[pid  6123] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6123, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./524", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./524/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./524/binderfs")                = 0
umount2("./524/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./524/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./524/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./524/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./524/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./524/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./524")                          = 0
mkdir("./525", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6125
./strace-static-x86_64: Process 6125 attached
[pid  6125] chdir("./525")              = 0
[pid  6125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6125] setpgid(0, 0)               = 0
[pid  6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6125] write(3, "1000", 4)         = 4
[pid  6125] close(3)                    = 0
[pid  6125] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6125] memfd_create("syzkaller", 0) = 3
[pid  6125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6125] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6125] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6125] close(3)                    = 0
[pid  6125] mkdir("./file0", 0777)      = 0
[pid  6125] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6125] chdir("./file0")            = 0
[  245.188292][ T6125] loop0: detected capacity change from 0 to 4096
[  245.204557][ T6125] NILFS (loop0): invalid segment: Checksum error in segment payload
[  245.212628][ T6125] NILFS (loop0): trying rollback from an earlier position
[  245.226689][ T6125] NILFS (loop0): recovery complete
[pid  6125] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6125] close(4)                    = 0
[pid  6125] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6125] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  245.232539][ T6126] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.247133][   T27] audit: type=1800 audit(1676306933.008:527): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6125] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6125] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6125] exit_group(0)               = ?
[pid  6125] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6125, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./525", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./525/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./525/binderfs")                = 0
umount2("./525/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./525/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./525/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./525/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./525/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./525/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./525")                          = 0
mkdir("./526", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6127
./strace-static-x86_64: Process 6127 attached
[pid  6127] chdir("./526")              = 0
[pid  6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6127] setpgid(0, 0)               = 0
[pid  6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6127] write(3, "1000", 4)         = 4
[pid  6127] close(3)                    = 0
[pid  6127] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6127] memfd_create("syzkaller", 0) = 3
[pid  6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6127] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6127] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6127] close(3)                    = 0
[pid  6127] mkdir("./file0", 0777)      = 0
[  245.524865][ T6127] loop0: detected capacity change from 0 to 4096
[  245.540085][ T6127] NILFS (loop0): invalid segment: Checksum error in segment payload
[  245.548160][ T6127] NILFS (loop0): trying rollback from an earlier position
[  245.562081][ T6127] NILFS (loop0): recovery complete
[pid  6127] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6127] chdir("./file0")            = 0
[pid  6127] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6127] close(4)                    = 0
[pid  6127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6127] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  245.568154][ T6128] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.586152][   T27] audit: type=1800 audit(1676306933.328:528): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6127] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6127] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6127] exit_group(0)               = ?
[pid  6127] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./526", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./526/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./526/binderfs")                = 0
umount2("./526/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./526/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./526/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./526/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./526/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./526/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./526")                          = 0
mkdir("./527", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6129
./strace-static-x86_64: Process 6129 attached
[pid  6129] chdir("./527")              = 0
[pid  6129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6129] setpgid(0, 0)               = 0
[pid  6129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6129] write(3, "1000", 4)         = 4
[pid  6129] close(3)                    = 0
[pid  6129] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6129] memfd_create("syzkaller", 0) = 3
[pid  6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6129] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6129] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6129] close(3)                    = 0
[pid  6129] mkdir("./file0", 0777)      = 0
[  245.838440][ T6129] loop0: detected capacity change from 0 to 4096
[  245.853004][ T6129] NILFS (loop0): invalid segment: Checksum error in segment payload
[  245.861384][ T6129] NILFS (loop0): trying rollback from an earlier position
[  245.875323][ T6129] NILFS (loop0): recovery complete
[pid  6129] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6129] chdir("./file0")            = 0
[pid  6129] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6129] close(4)                    = 0
[pid  6129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6129] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  245.881716][ T6130] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.895801][   T27] audit: type=1800 audit(1676306933.658:529): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6129] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6129] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6129] exit_group(0)               = ?
[pid  6129] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6129, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./527", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./527/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./527/binderfs")                = 0
umount2("./527/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./527/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./527/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./527/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./527/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./527/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./527")                          = 0
mkdir("./528", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6131
./strace-static-x86_64: Process 6131 attached
[pid  6131] chdir("./528")              = 0
[pid  6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6131] setpgid(0, 0)               = 0
[pid  6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6131] write(3, "1000", 4)         = 4
[pid  6131] close(3)                    = 0
[pid  6131] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6131] memfd_create("syzkaller", 0) = 3
[pid  6131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6131] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6131] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6131] close(3)                    = 0
[pid  6131] mkdir("./file0", 0777)      = 0
[  246.200376][ T6131] loop0: detected capacity change from 0 to 4096
[  246.217372][ T6131] NILFS (loop0): invalid segment: Checksum error in segment payload
[  246.225424][ T6131] NILFS (loop0): trying rollback from an earlier position
[  246.240224][ T6131] NILFS (loop0): recovery complete
[pid  6131] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6131] chdir("./file0")            = 0
[pid  6131] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6131] close(4)                    = 0
[pid  6131] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6131] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  246.246401][ T6132] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6131] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6131] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6131] exit_group(0)               = ?
[pid  6131] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./528", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./528/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./528/binderfs")                = 0
umount2("./528/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./528/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./528/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./528/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./528/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./528/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./528")                          = 0
mkdir("./529", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6133
./strace-static-x86_64: Process 6133 attached
[pid  6133] chdir("./529")              = 0
[pid  6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6133] setpgid(0, 0)               = 0
[pid  6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6133] write(3, "1000", 4)         = 4
[pid  6133] close(3)                    = 0
[pid  6133] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6133] memfd_create("syzkaller", 0) = 3
[pid  6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6133] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6133] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6133] close(3)                    = 0
[pid  6133] mkdir("./file0", 0777)      = 0
[  246.525000][ T6133] loop0: detected capacity change from 0 to 4096
[  246.540433][ T6133] NILFS (loop0): invalid segment: Checksum error in segment payload
[  246.548515][ T6133] NILFS (loop0): trying rollback from an earlier position
[  246.562324][ T6133] NILFS (loop0): recovery complete
[pid  6133] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6133] chdir("./file0")            = 0
[pid  6133] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6133] close(4)                    = 0
[pid  6133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6133] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  246.568510][ T6134] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6133] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6133] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6133] exit_group(0)               = ?
[pid  6133] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./529", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./529/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./529/binderfs")                = 0
umount2("./529/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./529/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./529/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./529/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./529/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./529/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./529")                          = 0
mkdir("./530", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6135
./strace-static-x86_64: Process 6135 attached
[pid  6135] chdir("./530")              = 0
[pid  6135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6135] setpgid(0, 0)               = 0
[pid  6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6135] write(3, "1000", 4)         = 4
[pid  6135] close(3)                    = 0
[pid  6135] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6135] memfd_create("syzkaller", 0) = 3
[pid  6135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6135] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6135] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6135] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6135] close(3)                    = 0
[pid  6135] mkdir("./file0", 0777)      = 0
[  246.854783][ T6135] loop0: detected capacity change from 0 to 4096
[  246.870661][ T6135] NILFS (loop0): invalid segment: Checksum error in segment payload
[  246.878711][ T6135] NILFS (loop0): trying rollback from an earlier position
[  246.892444][ T6135] NILFS (loop0): recovery complete
[pid  6135] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6135] chdir("./file0")            = 0
[pid  6135] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6135] close(4)                    = 0
[pid  6135] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6135] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  246.898699][ T6136] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6135] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6135] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6135] exit_group(0)               = ?
[pid  6135] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./530", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./530/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./530/binderfs")                = 0
umount2("./530/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./530/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./530/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./530/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./530/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./530/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./530")                          = 0
mkdir("./531", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6137
./strace-static-x86_64: Process 6137 attached
[pid  6137] chdir("./531")              = 0
[pid  6137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6137] setpgid(0, 0)               = 0
[pid  6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6137] write(3, "1000", 4)         = 4
[pid  6137] close(3)                    = 0
[pid  6137] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6137] memfd_create("syzkaller", 0) = 3
[pid  6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6137] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6137] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6137] close(3)                    = 0
[pid  6137] mkdir("./file0", 0777)      = 0
[pid  6137] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6137] chdir("./file0")            = 0
[  247.187054][ T6137] loop0: detected capacity change from 0 to 4096
[  247.203310][ T6137] NILFS (loop0): invalid segment: Checksum error in segment payload
[  247.211412][ T6137] NILFS (loop0): trying rollback from an earlier position
[  247.228070][ T6137] NILFS (loop0): recovery complete
[pid  6137] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6137] close(4)                    = 0
[pid  6137] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6137] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  247.234373][ T6138] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6137] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6137] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6137] exit_group(0)               = ?
[pid  6137] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./531", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./531/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./531/binderfs")                = 0
umount2("./531/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./531/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./531/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./531/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./531/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./531/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./531")                          = 0
mkdir("./532", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6139
./strace-static-x86_64: Process 6139 attached
[pid  6139] chdir("./532")              = 0
[pid  6139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6139] setpgid(0, 0)               = 0
[pid  6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6139] write(3, "1000", 4)         = 4
[pid  6139] close(3)                    = 0
[pid  6139] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6139] memfd_create("syzkaller", 0) = 3
[pid  6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6139] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6139] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6139] close(3)                    = 0
[pid  6139] mkdir("./file0", 0777)      = 0
[pid  6139] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  247.508805][ T6139] loop0: detected capacity change from 0 to 4096
[  247.525264][ T6139] NILFS (loop0): invalid segment: Checksum error in segment payload
[  247.533453][ T6139] NILFS (loop0): trying rollback from an earlier position
[  247.547656][ T6139] NILFS (loop0): recovery complete
[pid  6139] chdir("./file0")            = 0
[pid  6139] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6139] close(4)                    = 0
[pid  6139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6139] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  247.553566][ T6140] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6139] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6139] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6139] exit_group(0)               = ?
[pid  6139] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./532", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./532/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./532/binderfs")                = 0
umount2("./532/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./532/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./532/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./532/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./532/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./532/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./532")                          = 0
mkdir("./533", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6141
./strace-static-x86_64: Process 6141 attached
[pid  6141] chdir("./533")              = 0
[pid  6141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6141] setpgid(0, 0)               = 0
[pid  6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6141] write(3, "1000", 4)         = 4
[pid  6141] close(3)                    = 0
[pid  6141] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6141] memfd_create("syzkaller", 0) = 3
[pid  6141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6141] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6141] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6141] close(3)                    = 0
[pid  6141] mkdir("./file0", 0777)      = 0
[pid  6141] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  247.856601][ T6141] loop0: detected capacity change from 0 to 4096
[  247.874351][ T6141] NILFS (loop0): invalid segment: Checksum error in segment payload
[  247.882450][ T6141] NILFS (loop0): trying rollback from an earlier position
[  247.898294][ T6141] NILFS (loop0): recovery complete
[pid  6141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6141] chdir("./file0")            = 0
[pid  6141] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6141] close(4)                    = 0
[pid  6141] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6141] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  247.904264][ T6142] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6141] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6141] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6141] exit_group(0)               = ?
[pid  6141] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./533", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./533/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./533/binderfs")                = 0
umount2("./533/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./533/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./533/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./533/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./533/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./533/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./533")                          = 0
mkdir("./534", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6143
./strace-static-x86_64: Process 6143 attached
[pid  6143] chdir("./534")              = 0
[pid  6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6143] setpgid(0, 0)               = 0
[pid  6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6143] write(3, "1000", 4)         = 4
[pid  6143] close(3)                    = 0
[pid  6143] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6143] memfd_create("syzkaller", 0) = 3
[pid  6143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6143] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6143] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6143] close(3)                    = 0
[pid  6143] mkdir("./file0", 0777)      = 0
[pid  6143] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6143] chdir("./file0")            = 0
[  248.200958][ T6143] loop0: detected capacity change from 0 to 4096
[  248.218523][ T6143] NILFS (loop0): invalid segment: Checksum error in segment payload
[  248.226834][ T6143] NILFS (loop0): trying rollback from an earlier position
[  248.243113][ T6143] NILFS (loop0): recovery complete
[pid  6143] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6143] close(4)                    = 0
[pid  6143] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6143] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  248.251408][ T6144] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  248.254456][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  248.254468][   T27] audit: type=1800 audit(1676306936.008:536): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6143] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6143] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6143] exit_group(0)               = ?
[pid  6143] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./534", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./534/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./534/binderfs")                = 0
umount2("./534/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./534/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./534/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./534/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./534/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./534/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./534")                          = 0
mkdir("./535", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6145
./strace-static-x86_64: Process 6145 attached
[pid  6145] chdir("./535")              = 0
[pid  6145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6145] setpgid(0, 0)               = 0
[pid  6145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6145] write(3, "1000", 4)         = 4
[pid  6145] close(3)                    = 0
[pid  6145] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6145] memfd_create("syzkaller", 0) = 3
[pid  6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6145] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6145] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6145] close(3)                    = 0
[pid  6145] mkdir("./file0", 0777)      = 0
[pid  6145] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6145] chdir("./file0")            = 0
[pid  6145] ioctl(4, LOOP_CLR_FD)       = 0
[  248.537478][ T6145] loop0: detected capacity change from 0 to 4096
[  248.552999][ T6145] NILFS (loop0): invalid segment: Checksum error in segment payload
[  248.561051][ T6145] NILFS (loop0): trying rollback from an earlier position
[  248.575020][ T6145] NILFS (loop0): recovery complete
[pid  6145] close(4)                    = 0
[pid  6145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6145] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  248.580930][ T6146] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  248.594031][   T27] audit: type=1800 audit(1676306936.358:537): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6145] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6145] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6145] exit_group(0)               = ?
[pid  6145] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6145, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./535", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./535", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./535/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./535/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./535/binderfs")                = 0
umount2("./535/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./535/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./535/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./535/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./535/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./535/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./535")                          = 0
mkdir("./536", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6147
./strace-static-x86_64: Process 6147 attached
[pid  6147] chdir("./536")              = 0
[pid  6147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6147] setpgid(0, 0)               = 0
[pid  6147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6147] write(3, "1000", 4)         = 4
[pid  6147] close(3)                    = 0
[pid  6147] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6147] memfd_create("syzkaller", 0) = 3
[pid  6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6147] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6147] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6147] close(3)                    = 0
[pid  6147] mkdir("./file0", 0777)      = 0
[pid  6147] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6147] chdir("./file0")            = 0
[pid  6147] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6147] close(4)                    = 0
[  248.881881][ T6147] loop0: detected capacity change from 0 to 4096
[  248.898064][ T6147] NILFS (loop0): invalid segment: Checksum error in segment payload
[  248.906071][ T6147] NILFS (loop0): trying rollback from an earlier position
[  248.920211][ T6147] NILFS (loop0): recovery complete
[pid  6147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6147] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  248.926688][ T6148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  248.946206][   T27] audit: type=1800 audit(1676306936.688:538): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6147] sendfile(4, 5, NULL, 2147538701) = 65536
[pid  6147] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6147] exit_group(0)               = ?
[pid  6147] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6147, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./536", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./536", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./536/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./536/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./536/binderfs")                = 0
umount2("./536/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./536/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./536/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./536/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./536/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./536/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./536")                          = 0
mkdir("./537", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6149
./strace-static-x86_64: Process 6149 attached
[pid  6149] chdir("./537")              = 0
[  248.976403][ T6148] NILFS (loop0): nilfs_direct_assign (ino=6): invalid key: 130
[  248.984078][ T6148] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=6)
[  248.993724][ T6148] Remounting filesystem read-only
[pid  6149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6149] setpgid(0, 0)               = 0
[pid  6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6149] write(3, "1000", 4)         = 4
[pid  6149] close(3)                    = 0
[pid  6149] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6149] memfd_create("syzkaller", 0) = 3
[pid  6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6149] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6149] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6149] close(3)                    = 0
[pid  6149] mkdir("./file0", 0777)      = 0
[pid  6149] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6149] chdir("./file0")            = 0
[pid  6149] ioctl(4, LOOP_CLR_FD)       = 0
[  249.078108][ T6149] loop0: detected capacity change from 0 to 4096
[  249.092922][ T6149] NILFS (loop0): invalid segment: Checksum error in segment payload
[  249.101041][ T6149] NILFS (loop0): trying rollback from an earlier position
[  249.113613][ T6149] NILFS (loop0): recovery complete
[pid  6149] close(4)                    = 0
[pid  6149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6149] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  249.119420][ T6150] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.139705][   T27] audit: type=1800 audit(1676306936.898:539): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6149] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6149] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6149] exit_group(0)               = ?
[pid  6149] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./537", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./537", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./537/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./537/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./537/binderfs")                = 0
umount2("./537/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./537/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./537/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./537/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./537/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./537/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./537")                          = 0
mkdir("./538", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6151
./strace-static-x86_64: Process 6151 attached
[pid  6151] chdir("./538")              = 0
[pid  6151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6151] setpgid(0, 0)               = 0
[pid  6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6151] write(3, "1000", 4)         = 4
[pid  6151] close(3)                    = 0
[pid  6151] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6151] memfd_create("syzkaller", 0) = 3
[pid  6151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6151] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6151] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6151] close(3)                    = 0
[pid  6151] mkdir("./file0", 0777)      = 0
[  249.415754][ T6151] loop0: detected capacity change from 0 to 4096
[  249.431652][ T6151] NILFS (loop0): invalid segment: Checksum error in segment payload
[  249.439709][ T6151] NILFS (loop0): trying rollback from an earlier position
[  249.453706][ T6151] NILFS (loop0): recovery complete
[pid  6151] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6151] chdir("./file0")            = 0
[pid  6151] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6151] close(4)                    = 0
[pid  6151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6151] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  249.459580][ T6152] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.476262][   T27] audit: type=1800 audit(1676306937.228:540): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6151] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6151] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6151] exit_group(0)               = ?
[pid  6151] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./538", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./538", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./538/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./538/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./538/binderfs")                = 0
umount2("./538/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./538/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./538/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./538/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./538/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./538/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./538")                          = 0
mkdir("./539", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6153
./strace-static-x86_64: Process 6153 attached
[pid  6153] chdir("./539")              = 0
[pid  6153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6153] setpgid(0, 0)               = 0
[pid  6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6153] write(3, "1000", 4)         = 4
[pid  6153] close(3)                    = 0
[pid  6153] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6153] memfd_create("syzkaller", 0) = 3
[pid  6153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6153] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6153] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6153] close(3)                    = 0
[pid  6153] mkdir("./file0", 0777)      = 0
[pid  6153] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6153] chdir("./file0")            = 0
[pid  6153] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6153] close(4)                    = 0
[pid  6153] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[  249.757206][ T6153] loop0: detected capacity change from 0 to 4096
[  249.772117][ T6153] NILFS (loop0): invalid segment: Checksum error in segment payload
[  249.780195][ T6153] NILFS (loop0): trying rollback from an earlier position
[  249.794071][ T6153] NILFS (loop0): recovery complete
[pid  6153] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  249.800081][ T6154] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.816261][   T27] audit: type=1800 audit(1676306937.568:541): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6153] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6153] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6153] exit_group(0)               = ?
[pid  6153] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
umount2("./539", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./539", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./539/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./539/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./539/binderfs")                = 0
umount2("./539/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./539/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./539/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./539/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./539/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./539/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./539")                          = 0
mkdir("./540", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6155
./strace-static-x86_64: Process 6155 attached
[pid  6155] chdir("./540")              = 0
[pid  6155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6155] setpgid(0, 0)               = 0
[pid  6155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6155] write(3, "1000", 4)         = 4
[pid  6155] close(3)                    = 0
[pid  6155] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6155] memfd_create("syzkaller", 0) = 3
[pid  6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6155] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6155] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6155] close(3)                    = 0
[pid  6155] mkdir("./file0", 0777)      = 0
[pid  6155] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  250.097328][ T6155] loop0: detected capacity change from 0 to 4096
[  250.115602][ T6155] NILFS (loop0): invalid segment: Checksum error in segment payload
[  250.123951][ T6155] NILFS (loop0): trying rollback from an earlier position
[  250.138432][ T6155] NILFS (loop0): recovery complete
[pid  6155] chdir("./file0")            = 0
[pid  6155] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6155] close(4)                    = 0
[pid  6155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6155] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  250.144774][ T6156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.167905][   T27] audit: type=1800 audit(1676306937.898:542): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6155] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6155] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6155] exit_group(0)               = ?
[pid  6155] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6155, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./540", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./540", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./540/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./540/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./540/binderfs")                = 0
umount2("./540/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./540/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./540/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./540/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./540/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./540/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./540")                          = 0
mkdir("./541", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6157
./strace-static-x86_64: Process 6157 attached
[pid  6157] chdir("./541")              = 0
[pid  6157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6157] setpgid(0, 0)               = 0
[pid  6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6157] write(3, "1000", 4)         = 4
[pid  6157] close(3)                    = 0
[pid  6157] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6157] memfd_create("syzkaller", 0) = 3
[pid  6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6157] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6157] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6157] close(3)                    = 0
[pid  6157] mkdir("./file0", 0777)      = 0
[pid  6157] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  250.423886][ T6157] loop0: detected capacity change from 0 to 4096
[  250.439916][ T6157] NILFS (loop0): invalid segment: Checksum error in segment payload
[  250.447968][ T6157] NILFS (loop0): trying rollback from an earlier position
[  250.460402][ T6157] NILFS (loop0): recovery complete
[pid  6157] chdir("./file0")            = 0
[pid  6157] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6157] close(4)                    = 0
[pid  6157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6157] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  250.468466][ T6158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.478324][   T27] audit: type=1800 audit(1676306938.228:543): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6157] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6157] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6157] exit_group(0)               = ?
[pid  6157] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./541", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./541", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./541/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./541/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./541/binderfs")                = 0
umount2("./541/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./541/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./541/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./541/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./541/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./541/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./541")                          = 0
mkdir("./542", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6159
./strace-static-x86_64: Process 6159 attached
[pid  6159] chdir("./542")              = 0
[pid  6159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6159] setpgid(0, 0)               = 0
[pid  6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6159] write(3, "1000", 4)         = 4
[pid  6159] close(3)                    = 0
[pid  6159] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6159] memfd_create("syzkaller", 0) = 3
[pid  6159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6159] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6159] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6159] close(3)                    = 0
[pid  6159] mkdir("./file0", 0777)      = 0
[  250.748772][ T6159] loop0: detected capacity change from 0 to 4096
[  250.762573][ T6159] NILFS (loop0): invalid segment: Checksum error in segment payload
[  250.770639][ T6159] NILFS (loop0): trying rollback from an earlier position
[  250.782957][ T6159] NILFS (loop0): recovery complete
[pid  6159] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6159] chdir("./file0")            = 0
[pid  6159] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6159] close(4)                    = 0
[pid  6159] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6159] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  250.788995][ T6160] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.806173][   T27] audit: type=1800 audit(1676306938.558:544): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6159] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6159] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6159] exit_group(0)               = ?
[pid  6159] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./542", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./542", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./542/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./542/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./542/binderfs")                = 0
umount2("./542/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./542/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./542/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./542/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./542/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./542/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./542")                          = 0
mkdir("./543", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6161
./strace-static-x86_64: Process 6161 attached
[pid  6161] chdir("./543")              = 0
[pid  6161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6161] setpgid(0, 0)               = 0
[pid  6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6161] write(3, "1000", 4)         = 4
[pid  6161] close(3)                    = 0
[pid  6161] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6161] memfd_create("syzkaller", 0) = 3
[pid  6161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6161] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6161] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6161] close(3)                    = 0
[pid  6161] mkdir("./file0", 0777)      = 0
[  251.064951][ T6161] loop0: detected capacity change from 0 to 4096
[  251.082465][ T6161] NILFS (loop0): invalid segment: Checksum error in segment payload
[  251.091012][ T6161] NILFS (loop0): trying rollback from an earlier position
[  251.104725][ T6161] NILFS (loop0): recovery complete
[pid  6161] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6161] chdir("./file0")            = 0
[pid  6161] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6161] close(4)                    = 0
[pid  6161] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6161] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  251.111040][ T6162] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.124157][   T27] audit: type=1800 audit(1676306938.878:545): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6161] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6161] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6161] exit_group(0)               = ?
[pid  6161] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./543", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./543", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./543/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./543/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./543/binderfs")                = 0
umount2("./543/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./543/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./543/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./543/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./543/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./543/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./543")                          = 0
mkdir("./544", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6163
./strace-static-x86_64: Process 6163 attached
[pid  6163] chdir("./544")              = 0
[pid  6163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6163] setpgid(0, 0)               = 0
[pid  6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6163] write(3, "1000", 4)         = 4
[pid  6163] close(3)                    = 0
[pid  6163] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6163] memfd_create("syzkaller", 0) = 3
[pid  6163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6163] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6163] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6163] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6163] close(3)                    = 0
[pid  6163] mkdir("./file0", 0777)      = 0
[pid  6163] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  251.390315][ T6163] loop0: detected capacity change from 0 to 4096
[  251.406958][ T6163] NILFS (loop0): invalid segment: Checksum error in segment payload
[  251.414990][ T6163] NILFS (loop0): trying rollback from an earlier position
[  251.429148][ T6163] NILFS (loop0): recovery complete
[pid  6163] chdir("./file0")            = 0
[pid  6163] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6163] close(4)                    = 0
[pid  6163] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6163] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  251.435284][ T6164] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6163] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6163] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6163] exit_group(0)               = ?
[pid  6163] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./544", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./544", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./544/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./544/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./544/binderfs")                = 0
umount2("./544/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./544/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./544/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./544/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./544/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./544/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./544")                          = 0
mkdir("./545", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6165
./strace-static-x86_64: Process 6165 attached
[pid  6165] chdir("./545")              = 0
[pid  6165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6165] setpgid(0, 0)               = 0
[pid  6165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6165] write(3, "1000", 4)         = 4
[pid  6165] close(3)                    = 0
[pid  6165] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6165] memfd_create("syzkaller", 0) = 3
[pid  6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6165] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6165] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6165] close(3)                    = 0
[pid  6165] mkdir("./file0", 0777)      = 0
[pid  6165] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6165] chdir("./file0")            = 0
[pid  6165] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6165] close(4)                    = 0
[pid  6165] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6165] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  251.720371][ T6165] loop0: detected capacity change from 0 to 4096
[  251.735840][ T6165] NILFS (loop0): invalid segment: Checksum error in segment payload
[  251.743938][ T6165] NILFS (loop0): trying rollback from an earlier position
[  251.757589][ T6165] NILFS (loop0): recovery complete
[  251.763411][ T6166] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6165] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6165] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6165] exit_group(0)               = ?
[pid  6165] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6165, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./545", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./545", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./545/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./545/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./545/binderfs")                = 0
umount2("./545/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./545/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./545/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./545/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./545/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./545/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./545")                          = 0
mkdir("./546", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6167
./strace-static-x86_64: Process 6167 attached
[pid  6167] chdir("./546")              = 0
[pid  6167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6167] setpgid(0, 0)               = 0
[pid  6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6167] write(3, "1000", 4)         = 4
[pid  6167] close(3)                    = 0
[pid  6167] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6167] memfd_create("syzkaller", 0) = 3
[pid  6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6167] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6167] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6167] close(3)                    = 0
[pid  6167] mkdir("./file0", 0777)      = 0
[pid  6167] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6167] chdir("./file0")            = 0
[  252.042859][ T6167] loop0: detected capacity change from 0 to 4096
[  252.058871][ T6167] NILFS (loop0): invalid segment: Checksum error in segment payload
[  252.066915][ T6167] NILFS (loop0): trying rollback from an earlier position
[  252.080625][ T6167] NILFS (loop0): recovery complete
[pid  6167] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6167] close(4)                    = 0
[pid  6167] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6167] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  252.086799][ T6168] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6167] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6167] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6167] exit_group(0)               = ?
[pid  6167] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./546", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./546", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./546/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./546/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./546/binderfs")                = 0
umount2("./546/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./546/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./546/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./546/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./546/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./546/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./546")                          = 0
mkdir("./547", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6169
./strace-static-x86_64: Process 6169 attached
[pid  6169] chdir("./547")              = 0
[pid  6169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6169] setpgid(0, 0)               = 0
[pid  6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6169] write(3, "1000", 4)         = 4
[pid  6169] close(3)                    = 0
[pid  6169] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6169] memfd_create("syzkaller", 0) = 3
[pid  6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6169] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6169] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6169] close(3)                    = 0
[pid  6169] mkdir("./file0", 0777)      = 0
[pid  6169] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  252.371414][ T6169] loop0: detected capacity change from 0 to 4096
[  252.389605][ T6169] NILFS (loop0): invalid segment: Checksum error in segment payload
[  252.397709][ T6169] NILFS (loop0): trying rollback from an earlier position
[  252.412058][ T6169] NILFS (loop0): recovery complete
[pid  6169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6169] chdir("./file0")            = 0
[pid  6169] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6169] close(4)                    = 0
[pid  6169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6169] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  252.418199][ T6170] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6169] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6169] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6169] exit_group(0)               = ?
[pid  6169] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./547", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./547", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./547/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./547/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./547/binderfs")                = 0
umount2("./547/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./547/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./547/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./547/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./547/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./547/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./547")                          = 0
mkdir("./548", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6171
./strace-static-x86_64: Process 6171 attached
[pid  6171] chdir("./548")              = 0
[pid  6171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6171] setpgid(0, 0)               = 0
[pid  6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6171] write(3, "1000", 4)         = 4
[pid  6171] close(3)                    = 0
[pid  6171] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6171] memfd_create("syzkaller", 0) = 3
[pid  6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6171] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6171] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6171] close(3)                    = 0
[pid  6171] mkdir("./file0", 0777)      = 0
[  252.692667][ T6171] loop0: detected capacity change from 0 to 4096
[  252.709086][ T6171] NILFS (loop0): invalid segment: Checksum error in segment payload
[  252.717169][ T6171] NILFS (loop0): trying rollback from an earlier position
[  252.731291][ T6171] NILFS (loop0): recovery complete
[pid  6171] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6171] chdir("./file0")            = 0
[pid  6171] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6171] close(4)                    = 0
[pid  6171] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6171] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  252.737462][ T6172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6171] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6171] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6171] exit_group(0)               = ?
[pid  6171] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./548", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./548", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./548/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./548/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./548/binderfs")                = 0
umount2("./548/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./548/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./548/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./548/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./548/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./548/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./548")                          = 0
mkdir("./549", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6173
./strace-static-x86_64: Process 6173 attached
[pid  6173] chdir("./549")              = 0
[pid  6173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6173] setpgid(0, 0)               = 0
[pid  6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6173] write(3, "1000", 4)         = 4
[pid  6173] close(3)                    = 0
[pid  6173] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6173] memfd_create("syzkaller", 0) = 3
[pid  6173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6173] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6173] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6173] close(3)                    = 0
[pid  6173] mkdir("./file0", 0777)      = 0
[  253.014746][ T6173] loop0: detected capacity change from 0 to 4096
[  253.031985][ T6173] NILFS (loop0): invalid segment: Checksum error in segment payload
[  253.040073][ T6173] NILFS (loop0): trying rollback from an earlier position
[  253.053742][ T6173] NILFS (loop0): recovery complete
[pid  6173] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6173] chdir("./file0")            = 0
[pid  6173] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6173] close(4)                    = 0
[pid  6173] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6173] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  253.059629][ T6174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6173] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6173] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6173] exit_group(0)               = ?
[pid  6173] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./549", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./549", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./549/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./549/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./549/binderfs")                = 0
umount2("./549/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./549/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./549/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./549/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./549/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./549/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./549")                          = 0
mkdir("./550", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6175
./strace-static-x86_64: Process 6175 attached
[pid  6175] chdir("./550")              = 0
[pid  6175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6175] setpgid(0, 0)               = 0
[pid  6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6175] write(3, "1000", 4)         = 4
[pid  6175] close(3)                    = 0
[pid  6175] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6175] memfd_create("syzkaller", 0) = 3
[pid  6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6175] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6175] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6175] close(3)                    = 0
[pid  6175] mkdir("./file0", 0777)      = 0
[  253.321825][ T6175] loop0: detected capacity change from 0 to 4096
[  253.339030][ T6175] NILFS (loop0): invalid segment: Checksum error in segment payload
[  253.347101][ T6175] NILFS (loop0): trying rollback from an earlier position
[  253.360573][ T6175] NILFS (loop0): recovery complete
[pid  6175] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6175] chdir("./file0")            = 0
[pid  6175] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6175] close(4)                    = 0
[pid  6175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6175] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  253.366708][ T6176] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.380014][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  253.380026][   T27] audit: type=1800 audit(1676306941.138:552): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6175] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6175] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6175] exit_group(0)               = ?
[pid  6175] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./550", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./550", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./550/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./550/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./550/binderfs")                = 0
umount2("./550/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./550/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./550/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./550/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./550/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./550/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./550")                          = 0
mkdir("./551", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6177
./strace-static-x86_64: Process 6177 attached
[pid  6177] chdir("./551")              = 0
[pid  6177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6177] setpgid(0, 0)               = 0
[pid  6177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6177] write(3, "1000", 4)         = 4
[pid  6177] close(3)                    = 0
[pid  6177] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6177] memfd_create("syzkaller", 0) = 3
[pid  6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6177] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6177] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6177] close(3)                    = 0
[pid  6177] mkdir("./file0", 0777)      = 0
[  253.659138][ T6177] loop0: detected capacity change from 0 to 4096
[  253.675169][ T6177] NILFS (loop0): invalid segment: Checksum error in segment payload
[  253.683235][ T6177] NILFS (loop0): trying rollback from an earlier position
[  253.699367][ T6177] NILFS (loop0): recovery complete
[pid  6177] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6177] chdir("./file0")            = 0
[pid  6177] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6177] close(4)                    = 0
[pid  6177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6177] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  253.705371][ T6178] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.717881][   T27] audit: type=1800 audit(1676306941.478:553): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6177] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6177] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6177] exit_group(0)               = ?
[pid  6177] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6177, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./551", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./551", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./551/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./551/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./551/binderfs")                = 0
umount2("./551/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./551/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./551/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./551/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./551/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./551/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./551")                          = 0
mkdir("./552", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6179
./strace-static-x86_64: Process 6179 attached
[pid  6179] chdir("./552")              = 0
[pid  6179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6179] setpgid(0, 0)               = 0
[pid  6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6179] write(3, "1000", 4)         = 4
[pid  6179] close(3)                    = 0
[pid  6179] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6179] memfd_create("syzkaller", 0) = 3
[pid  6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6179] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6179] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6179] close(3)                    = 0
[pid  6179] mkdir("./file0", 0777)      = 0
[  254.002290][ T6179] loop0: detected capacity change from 0 to 4096
[  254.018876][ T6179] NILFS (loop0): invalid segment: Checksum error in segment payload
[  254.026934][ T6179] NILFS (loop0): trying rollback from an earlier position
[  254.040349][ T6179] NILFS (loop0): recovery complete
[pid  6179] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6179] chdir("./file0")            = 0
[pid  6179] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6179] close(4)                    = 0
[pid  6179] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6179] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  254.046586][ T6180] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.050562][   T27] audit: type=1800 audit(1676306941.808:554): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6179] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6179] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6179] exit_group(0)               = ?
[pid  6179] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./552", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./552", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./552/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./552/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./552/binderfs")                = 0
umount2("./552/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./552/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./552/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./552/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./552/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./552/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./552")                          = 0
mkdir("./553", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6181
./strace-static-x86_64: Process 6181 attached
[pid  6181] chdir("./553")              = 0
[pid  6181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6181] setpgid(0, 0)               = 0
[pid  6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6181] write(3, "1000", 4)         = 4
[pid  6181] close(3)                    = 0
[pid  6181] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6181] memfd_create("syzkaller", 0) = 3
[pid  6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6181] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6181] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6181] close(3)                    = 0
[pid  6181] mkdir("./file0", 0777)      = 0
[pid  6181] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  254.336763][ T6181] loop0: detected capacity change from 0 to 4096
[  254.353100][ T6181] NILFS (loop0): invalid segment: Checksum error in segment payload
[  254.361270][ T6181] NILFS (loop0): trying rollback from an earlier position
[  254.377524][ T6181] NILFS (loop0): recovery complete
[pid  6181] chdir("./file0")            = 0
[pid  6181] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6181] close(4)                    = 0
[pid  6181] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6181] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  254.383391][ T6182] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.406138][   T27] audit: type=1800 audit(1676306942.148:555): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6181] sendfile(4, 5, NULL, 2147538701) = 65536
[pid  6181] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6181] exit_group(0)               = ?
[pid  6181] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./553", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./553", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./553/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./553/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./553/binderfs")                = 0
umount2("./553/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./553/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./553/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./553/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./553/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./553/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./553")                          = 0
mkdir("./554", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6183
./strace-static-x86_64: Process 6183 attached
[pid  6183] chdir("./554")              = 0
[  254.432537][ T6182] NILFS (loop0): nilfs_direct_assign (ino=6): invalid key: 130
[  254.440258][ T6182] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=6)
[  254.450136][ T6182] Remounting filesystem read-only
[pid  6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6183] setpgid(0, 0)               = 0
[pid  6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6183] write(3, "1000", 4)         = 4
[pid  6183] close(3)                    = 0
[pid  6183] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6183] memfd_create("syzkaller", 0) = 3
[pid  6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6183] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6183] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6183] close(3)                    = 0
[pid  6183] mkdir("./file0", 0777)      = 0
[pid  6183] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6183] chdir("./file0")            = 0
[pid  6183] ioctl(4, LOOP_CLR_FD)       = 0
[  254.541485][ T6183] loop0: detected capacity change from 0 to 4096
[  254.557035][ T6183] NILFS (loop0): invalid segment: Checksum error in segment payload
[  254.565032][ T6183] NILFS (loop0): trying rollback from an earlier position
[  254.579840][ T6183] NILFS (loop0): recovery complete
[pid  6183] close(4)                    = 0
[pid  6183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6183] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  254.586589][ T6184] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.599645][   T27] audit: type=1800 audit(1676306942.358:556): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6183] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6183] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6183] exit_group(0)               = ?
[pid  6183] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./554", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./554", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./554/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./554/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./554/binderfs")                = 0
umount2("./554/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./554/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./554/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./554/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./554/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./554/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./554")                          = 0
mkdir("./555", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6185
./strace-static-x86_64: Process 6185 attached
[pid  6185] chdir("./555")              = 0
[pid  6185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6185] setpgid(0, 0)               = 0
[pid  6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6185] write(3, "1000", 4)         = 4
[pid  6185] close(3)                    = 0
[pid  6185] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6185] memfd_create("syzkaller", 0) = 3
[pid  6185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6185] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6185] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6185] close(3)                    = 0
[pid  6185] mkdir("./file0", 0777)      = 0
[pid  6185] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6185] chdir("./file0")            = 0
[pid  6185] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6185] close(4)                    = 0
[  254.862232][ T6185] loop0: detected capacity change from 0 to 4096
[  254.877385][ T6185] NILFS (loop0): invalid segment: Checksum error in segment payload
[  254.885393][ T6185] NILFS (loop0): trying rollback from an earlier position
[  254.898109][ T6185] NILFS (loop0): recovery complete
[pid  6185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6185] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  254.903906][ T6186] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.912410][   T27] audit: type=1800 audit(1676306942.658:557): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6185] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6185] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6185] exit_group(0)               = ?
[pid  6185] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./555", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./555", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./555/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./555/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./555/binderfs")                = 0
umount2("./555/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./555/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./555/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./555/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./555/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./555/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./555")                          = 0
mkdir("./556", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6187
./strace-static-x86_64: Process 6187 attached
[pid  6187] chdir("./556")              = 0
[pid  6187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6187] setpgid(0, 0)               = 0
[pid  6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6187] write(3, "1000", 4)         = 4
[pid  6187] close(3)                    = 0
[pid  6187] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6187] memfd_create("syzkaller", 0) = 3
[pid  6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6187] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6187] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6187] close(3)                    = 0
[pid  6187] mkdir("./file0", 0777)      = 0
[pid  6187] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6187] chdir("./file0")            = 0
[pid  6187] ioctl(4, LOOP_CLR_FD)       = 0
[  255.195431][ T6187] loop0: detected capacity change from 0 to 4096
[  255.212093][ T6187] NILFS (loop0): invalid segment: Checksum error in segment payload
[  255.220192][ T6187] NILFS (loop0): trying rollback from an earlier position
[  255.234258][ T6187] NILFS (loop0): recovery complete
[pid  6187] close(4)                    = 0
[pid  6187] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6187] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  255.241199][ T6188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.249143][   T27] audit: type=1800 audit(1676306943.008:558): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6187] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6187] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6187] exit_group(0)               = ?
[pid  6187] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./556", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./556", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./556/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./556/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./556/binderfs")                = 0
umount2("./556/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./556/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./556/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./556/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./556/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./556/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./556")                          = 0
mkdir("./557", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6189
./strace-static-x86_64: Process 6189 attached
[pid  6189] chdir("./557")              = 0
[pid  6189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6189] setpgid(0, 0)               = 0
[pid  6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6189] write(3, "1000", 4)         = 4
[pid  6189] close(3)                    = 0
[pid  6189] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6189] memfd_create("syzkaller", 0) = 3
[pid  6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6189] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6189] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6189] close(3)                    = 0
[pid  6189] mkdir("./file0", 0777)      = 0
[  255.536010][ T6189] loop0: detected capacity change from 0 to 4096
[  255.552421][ T6189] NILFS (loop0): invalid segment: Checksum error in segment payload
[  255.560532][ T6189] NILFS (loop0): trying rollback from an earlier position
[  255.574510][ T6189] NILFS (loop0): recovery complete
[pid  6189] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6189] chdir("./file0")            = 0
[pid  6189] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6189] close(4)                    = 0
[pid  6189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6189] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  255.580822][ T6190] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.593547][   T27] audit: type=1800 audit(1676306943.358:559): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6189] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6189] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6189] exit_group(0)               = ?
[pid  6189] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6189, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./557", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./557", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./557/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./557/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./557/binderfs")                = 0
umount2("./557/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./557/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./557/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./557/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./557/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./557/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./557")                          = 0
mkdir("./558", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6191
./strace-static-x86_64: Process 6191 attached
[pid  6191] chdir("./558")              = 0
[pid  6191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6191] setpgid(0, 0)               = 0
[pid  6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6191] write(3, "1000", 4)         = 4
[pid  6191] close(3)                    = 0
[pid  6191] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6191] memfd_create("syzkaller", 0) = 3
[pid  6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6191] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6191] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6191] close(3)                    = 0
[pid  6191] mkdir("./file0", 0777)      = 0
[  255.877540][ T6191] loop0: detected capacity change from 0 to 4096
[  255.894672][ T6191] NILFS (loop0): invalid segment: Checksum error in segment payload
[  255.902791][ T6191] NILFS (loop0): trying rollback from an earlier position
[  255.917178][ T6191] NILFS (loop0): recovery complete
[pid  6191] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6191] chdir("./file0")            = 0
[pid  6191] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6191] close(4)                    = 0
[pid  6191] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6191] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  255.922951][ T6192] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.936259][   T27] audit: type=1800 audit(1676306943.688:560): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6191] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6191] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6191] exit_group(0)               = ?
[pid  6191] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./558", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./558", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./558/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./558/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./558/binderfs")                = 0
umount2("./558/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./558/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./558/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./558/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./558/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./558/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./558")                          = 0
mkdir("./559", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6193
./strace-static-x86_64: Process 6193 attached
[pid  6193] chdir("./559")              = 0
[pid  6193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6193] setpgid(0, 0)               = 0
[pid  6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6193] write(3, "1000", 4)         = 4
[pid  6193] close(3)                    = 0
[pid  6193] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6193] memfd_create("syzkaller", 0) = 3
[pid  6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6193] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6193] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6193] close(3)                    = 0
[pid  6193] mkdir("./file0", 0777)      = 0
[pid  6193] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  256.203119][ T6193] loop0: detected capacity change from 0 to 4096
[  256.219392][ T6193] NILFS (loop0): invalid segment: Checksum error in segment payload
[  256.227430][ T6193] NILFS (loop0): trying rollback from an earlier position
[  256.243242][ T6193] NILFS (loop0): recovery complete
[pid  6193] chdir("./file0")            = 0
[pid  6193] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6193] close(4)                    = 0
[pid  6193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6193] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  256.251537][ T6194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.267814][   T27] audit: type=1800 audit(1676306944.028:561): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6193] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6193] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6193] exit_group(0)               = ?
[pid  6193] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./559", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./559", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./559/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./559/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./559/binderfs")                = 0
umount2("./559/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./559/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./559/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./559/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./559/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./559/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./559")                          = 0
mkdir("./560", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6195
./strace-static-x86_64: Process 6195 attached
[pid  6195] chdir("./560")              = 0
[pid  6195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6195] setpgid(0, 0)               = 0
[pid  6195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6195] write(3, "1000", 4)         = 4
[pid  6195] close(3)                    = 0
[pid  6195] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6195] memfd_create("syzkaller", 0) = 3
[pid  6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6195] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6195] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6195] close(3)                    = 0
[pid  6195] mkdir("./file0", 0777)      = 0
[pid  6195] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6195] chdir("./file0")            = 0
[pid  6195] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6195] close(4)                    = 0
[  256.565227][ T6195] loop0: detected capacity change from 0 to 4096
[  256.581641][ T6195] NILFS (loop0): invalid segment: Checksum error in segment payload
[  256.589743][ T6195] NILFS (loop0): trying rollback from an earlier position
[  256.602727][ T6195] NILFS (loop0): recovery complete
[pid  6195] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6195] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  256.608559][ T6196] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6195] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6195] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6195] exit_group(0)               = ?
[pid  6195] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6195, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./560", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./560", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./560/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./560/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./560/binderfs")                = 0
umount2("./560/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./560/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./560/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./560/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./560/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./560/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./560")                          = 0
mkdir("./561", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6197
./strace-static-x86_64: Process 6197 attached
[pid  6197] chdir("./561")              = 0
[pid  6197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6197] setpgid(0, 0)               = 0
[pid  6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6197] write(3, "1000", 4)         = 4
[pid  6197] close(3)                    = 0
[pid  6197] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6197] memfd_create("syzkaller", 0) = 3
[pid  6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6197] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6197] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6197] close(3)                    = 0
[pid  6197] mkdir("./file0", 0777)      = 0
[pid  6197] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  256.889417][ T6197] loop0: detected capacity change from 0 to 4096
[  256.906239][ T6197] NILFS (loop0): invalid segment: Checksum error in segment payload
[  256.914243][ T6197] NILFS (loop0): trying rollback from an earlier position
[  256.928871][ T6197] NILFS (loop0): recovery complete
[pid  6197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6197] chdir("./file0")            = 0
[pid  6197] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6197] close(4)                    = 0
[pid  6197] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6197] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  256.935092][ T6198] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6197] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6197] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6197] exit_group(0)               = ?
[pid  6197] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6197, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./561", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./561", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./561/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./561/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./561/binderfs")                = 0
umount2("./561/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./561/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./561/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./561/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./561/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./561/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./561")                          = 0
mkdir("./562", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6199
./strace-static-x86_64: Process 6199 attached
[pid  6199] chdir("./562")              = 0
[pid  6199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6199] setpgid(0, 0)               = 0
[pid  6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6199] write(3, "1000", 4)         = 4
[pid  6199] close(3)                    = 0
[pid  6199] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6199] memfd_create("syzkaller", 0) = 3
[pid  6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6199] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6199] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6199] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6199] close(3)                    = 0
[pid  6199] mkdir("./file0", 0777)      = 0
[  257.235020][ T6199] loop0: detected capacity change from 0 to 4096
[  257.250924][ T6199] NILFS (loop0): invalid segment: Checksum error in segment payload
[  257.258994][ T6199] NILFS (loop0): trying rollback from an earlier position
[  257.273660][ T6199] NILFS (loop0): recovery complete
[pid  6199] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6199] chdir("./file0")            = 0
[pid  6199] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6199] close(4)                    = 0
[pid  6199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6199] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  257.279624][ T6200] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6199] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6199] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6199] exit_group(0)               = ?
[pid  6199] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./562", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./562", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./562/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./562/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./562/binderfs")                = 0
umount2("./562/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./562/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./562/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./562/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./562/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./562/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./562")                          = 0
mkdir("./563", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6201
./strace-static-x86_64: Process 6201 attached
[pid  6201] chdir("./563")              = 0
[pid  6201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6201] setpgid(0, 0)               = 0
[pid  6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6201] write(3, "1000", 4)         = 4
[pid  6201] close(3)                    = 0
[pid  6201] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6201] memfd_create("syzkaller", 0) = 3
[pid  6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6201] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6201] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6201] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6201] close(3)                    = 0
[pid  6201] mkdir("./file0", 0777)      = 0
[  257.567461][ T6201] loop0: detected capacity change from 0 to 4096
[  257.583906][ T6201] NILFS (loop0): invalid segment: Checksum error in segment payload
[  257.592268][ T6201] NILFS (loop0): trying rollback from an earlier position
[  257.607876][ T6201] NILFS (loop0): recovery complete
[pid  6201] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6201] chdir("./file0")            = 0
[pid  6201] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6201] close(4)                    = 0
[pid  6201] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6201] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  257.613824][ T6202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6201] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6201] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6201] exit_group(0)               = ?
[pid  6201] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./563", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./563", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./563/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./563/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./563/binderfs")                = 0
umount2("./563/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./563/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./563/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./563/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./563/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./563/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./563")                          = 0
mkdir("./564", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6203
./strace-static-x86_64: Process 6203 attached
[pid  6203] chdir("./564")              = 0
[pid  6203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6203] setpgid(0, 0)               = 0
[pid  6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6203] write(3, "1000", 4)         = 4
[pid  6203] close(3)                    = 0
[pid  6203] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6203] memfd_create("syzkaller", 0) = 3
[pid  6203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6203] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6203] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6203] close(3)                    = 0
[pid  6203] mkdir("./file0", 0777)      = 0
[pid  6203] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6203] chdir("./file0")            = 0
[pid  6203] ioctl(4, LOOP_CLR_FD)       = 0
[  257.901713][ T6203] loop0: detected capacity change from 0 to 4096
[  257.917770][ T6203] NILFS (loop0): invalid segment: Checksum error in segment payload
[  257.925873][ T6203] NILFS (loop0): trying rollback from an earlier position
[  257.940187][ T6203] NILFS (loop0): recovery complete
[pid  6203] close(4)                    = 0
[pid  6203] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6203] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  257.945949][ T6204] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6203] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6203] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6203] exit_group(0)               = ?
[pid  6203] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
umount2("./564", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./564", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./564/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./564/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./564/binderfs")                = 0
umount2("./564/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./564/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./564/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./564/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./564/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./564/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./564")                          = 0
mkdir("./565", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6205
./strace-static-x86_64: Process 6205 attached
[pid  6205] chdir("./565")              = 0
[pid  6205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6205] setpgid(0, 0)               = 0
[pid  6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6205] write(3, "1000", 4)         = 4
[pid  6205] close(3)                    = 0
[pid  6205] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6205] memfd_create("syzkaller", 0) = 3
[pid  6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6205] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6205] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6205] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6205] close(3)                    = 0
[pid  6205] mkdir("./file0", 0777)      = 0
[  258.235125][ T6205] loop0: detected capacity change from 0 to 4096
[  258.250116][ T6205] NILFS (loop0): invalid segment: Checksum error in segment payload
[  258.258182][ T6205] NILFS (loop0): trying rollback from an earlier position
[  258.272300][ T6205] NILFS (loop0): recovery complete
[pid  6205] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6205] chdir("./file0")            = 0
[pid  6205] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6205] close(4)                    = 0
[pid  6205] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6205] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  258.278646][ T6206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6205] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6205] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6205] exit_group(0)               = ?
[pid  6205] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./565", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./565", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./565/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./565/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./565/binderfs")                = 0
umount2("./565/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./565/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./565/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./565/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./565/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./565/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./565")                          = 0
mkdir("./566", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6207
./strace-static-x86_64: Process 6207 attached
[pid  6207] chdir("./566")              = 0
[pid  6207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6207] setpgid(0, 0)               = 0
[pid  6207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6207] write(3, "1000", 4)         = 4
[pid  6207] close(3)                    = 0
[pid  6207] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6207] memfd_create("syzkaller", 0) = 3
[pid  6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6207] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6207] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6207] close(3)                    = 0
[pid  6207] mkdir("./file0", 0777)      = 0
[pid  6207] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6207] chdir("./file0")            = 0
[  258.558576][ T6207] loop0: detected capacity change from 0 to 4096
[  258.573207][ T6207] NILFS (loop0): invalid segment: Checksum error in segment payload
[  258.581345][ T6207] NILFS (loop0): trying rollback from an earlier position
[  258.595043][ T6207] NILFS (loop0): recovery complete
[pid  6207] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6207] close(4)                    = 0
[pid  6207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6207] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  258.601586][ T6208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.614113][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  258.614125][   T27] audit: type=1800 audit(1676306946.378:568): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6207] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6207] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6207] exit_group(0)               = ?
[pid  6207] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6207, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./566", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./566", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./566/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./566/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./566/binderfs")                = 0
umount2("./566/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./566/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./566/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./566/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./566/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./566/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./566")                          = 0
mkdir("./567", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6209
./strace-static-x86_64: Process 6209 attached
[pid  6209] chdir("./567")              = 0
[pid  6209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6209] setpgid(0, 0)               = 0
[pid  6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6209] write(3, "1000", 4)         = 4
[pid  6209] close(3)                    = 0
[pid  6209] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6209] memfd_create("syzkaller", 0) = 3
[pid  6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6209] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6209] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6209] close(3)                    = 0
[pid  6209] mkdir("./file0", 0777)      = 0
[pid  6209] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6209] chdir("./file0")            = 0
[pid  6209] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6209] close(4)                    = 0
[  258.887122][ T6209] loop0: detected capacity change from 0 to 4096
[  258.903684][ T6209] NILFS (loop0): invalid segment: Checksum error in segment payload
[  258.911725][ T6209] NILFS (loop0): trying rollback from an earlier position
[  258.925572][ T6209] NILFS (loop0): recovery complete
[pid  6209] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6209] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  258.932031][ T6210] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.945277][   T27] audit: type=1800 audit(1676306946.698:569): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6209] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6209] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6209] exit_group(0)               = ?
[pid  6209] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./567", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./567", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./567/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./567/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./567/binderfs")                = 0
umount2("./567/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./567/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./567/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./567/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./567/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./567/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./567")                          = 0
mkdir("./568", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6211
./strace-static-x86_64: Process 6211 attached
[pid  6211] chdir("./568")              = 0
[pid  6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6211] setpgid(0, 0)               = 0
[pid  6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6211] write(3, "1000", 4)         = 4
[pid  6211] close(3)                    = 0
[pid  6211] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6211] memfd_create("syzkaller", 0) = 3
[pid  6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6211] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6211] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6211] close(3)                    = 0
[pid  6211] mkdir("./file0", 0777)      = 0
[  259.234543][ T6211] loop0: detected capacity change from 0 to 4096
[  259.250578][ T6211] NILFS (loop0): invalid segment: Checksum error in segment payload
[  259.258723][ T6211] NILFS (loop0): trying rollback from an earlier position
[  259.272068][ T6211] NILFS (loop0): recovery complete
[pid  6211] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6211] chdir("./file0")            = 0
[pid  6211] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6211] close(4)                    = 0
[pid  6211] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6211] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  259.278032][ T6212] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.291768][   T27] audit: type=1800 audit(1676306947.048:570): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6211] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6211] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6211] exit_group(0)               = ?
[pid  6211] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./568", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./568", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./568/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./568/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./568/binderfs")                = 0
umount2("./568/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./568/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./568/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./568/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./568/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./568/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./568")                          = 0
mkdir("./569", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6213
./strace-static-x86_64: Process 6213 attached
[pid  6213] chdir("./569")              = 0
[pid  6213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6213] setpgid(0, 0)               = 0
[pid  6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6213] write(3, "1000", 4)         = 4
[pid  6213] close(3)                    = 0
[pid  6213] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6213] memfd_create("syzkaller", 0) = 3
[pid  6213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6213] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6213] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6213] close(3)                    = 0
[pid  6213] mkdir("./file0", 0777)      = 0
[  259.567913][ T6213] loop0: detected capacity change from 0 to 4096
[  259.585862][ T6213] NILFS (loop0): invalid segment: Checksum error in segment payload
[  259.593997][ T6213] NILFS (loop0): trying rollback from an earlier position
[  259.607706][ T6213] NILFS (loop0): recovery complete
[pid  6213] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6213] chdir("./file0")            = 0
[pid  6213] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6213] close(4)                    = 0
[pid  6213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6213] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  259.613532][ T6214] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.637930][   T27] audit: type=1800 audit(1676306947.378:571): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6213] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6213] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6213] exit_group(0)               = ?
[pid  6213] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./569", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./569", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./569/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./569/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./569/binderfs")                = 0
umount2("./569/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./569/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./569/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./569/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./569/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./569/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./569")                          = 0
mkdir("./570", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6215
./strace-static-x86_64: Process 6215 attached
[pid  6215] chdir("./570")              = 0
[pid  6215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6215] setpgid(0, 0)               = 0
[pid  6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6215] write(3, "1000", 4)         = 4
[pid  6215] close(3)                    = 0
[pid  6215] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6215] memfd_create("syzkaller", 0) = 3
[pid  6215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6215] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6215] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6215] close(3)                    = 0
[pid  6215] mkdir("./file0", 0777)      = 0
[  259.923518][ T6215] loop0: detected capacity change from 0 to 4096
[  259.940684][ T6215] NILFS (loop0): invalid segment: Checksum error in segment payload
[  259.948737][ T6215] NILFS (loop0): trying rollback from an earlier position
[  259.963700][ T6215] NILFS (loop0): recovery complete
[pid  6215] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6215] chdir("./file0")            = 0
[pid  6215] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6215] close(4)                    = 0
[pid  6215] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6215] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  259.969527][ T6216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.983805][   T27] audit: type=1800 audit(1676306947.738:572): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6215] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6215] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6215] exit_group(0)               = ?
[pid  6215] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./570", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./570", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./570/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./570/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./570/binderfs")                = 0
umount2("./570/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./570/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./570/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./570/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./570/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./570/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./570")                          = 0
mkdir("./571", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6217
./strace-static-x86_64: Process 6217 attached
[pid  6217] chdir("./571")              = 0
[pid  6217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6217] setpgid(0, 0)               = 0
[pid  6217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6217] write(3, "1000", 4)         = 4
[pid  6217] close(3)                    = 0
[pid  6217] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6217] memfd_create("syzkaller", 0) = 3
[pid  6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6217] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6217] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6217] close(3)                    = 0
[pid  6217] mkdir("./file0", 0777)      = 0
[pid  6217] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6217] chdir("./file0")            = 0
[pid  6217] ioctl(4, LOOP_CLR_FD)       = 0
[  260.273048][ T6217] loop0: detected capacity change from 0 to 4096
[  260.288447][ T6217] NILFS (loop0): invalid segment: Checksum error in segment payload
[  260.296502][ T6217] NILFS (loop0): trying rollback from an earlier position
[  260.309936][ T6217] NILFS (loop0): recovery complete
[pid  6217] close(4)                    = 0
[pid  6217] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6217] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  260.316203][ T6218] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.333418][   T27] audit: type=1800 audit(1676306948.088:573): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6217] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6217] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6217] exit_group(0)               = ?
[pid  6217] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6217, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./571", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./571", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./571/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./571/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./571/binderfs")                = 0
umount2("./571/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./571/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./571/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./571/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./571/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./571/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./571")                          = 0
mkdir("./572", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6219
./strace-static-x86_64: Process 6219 attached
[pid  6219] chdir("./572")              = 0
[pid  6219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6219] setpgid(0, 0)               = 0
[pid  6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6219] write(3, "1000", 4)         = 4
[pid  6219] close(3)                    = 0
[pid  6219] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6219] memfd_create("syzkaller", 0) = 3
[pid  6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6219] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6219] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6219] close(3)                    = 0
[pid  6219] mkdir("./file0", 0777)      = 0
[  260.716735][ T6219] loop0: detected capacity change from 0 to 4096
[  260.735566][ T6219] NILFS (loop0): invalid segment: Checksum error in segment payload
[  260.744107][ T6219] NILFS (loop0): trying rollback from an earlier position
[  260.760652][ T6219] NILFS (loop0): recovery complete
[pid  6219] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6219] chdir("./file0")            = 0
[pid  6219] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6219] close(4)                    = 0
[pid  6219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6219] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  260.767266][ T6220] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.789993][   T27] audit: type=1800 audit(1676306948.548:574): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6219] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6219] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6219] exit_group(0)               = ?
[pid  6219] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./572", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./572", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./572/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./572/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./572/binderfs")                = 0
umount2("./572/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./572/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./572/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./572/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./572/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./572/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./572")                          = 0
mkdir("./573", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6221
./strace-static-x86_64: Process 6221 attached
[pid  6221] chdir("./573")              = 0
[pid  6221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6221] setpgid(0, 0)               = 0
[pid  6221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6221] write(3, "1000", 4)         = 4
[pid  6221] close(3)                    = 0
[pid  6221] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6221] memfd_create("syzkaller", 0) = 3
[pid  6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6221] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6221] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6221] close(3)                    = 0
[pid  6221] mkdir("./file0", 0777)      = 0
[  261.136692][ T6221] loop0: detected capacity change from 0 to 4096
[  261.153210][ T6221] NILFS (loop0): invalid segment: Checksum error in segment payload
[  261.161253][ T6221] NILFS (loop0): trying rollback from an earlier position
[  261.177802][ T6221] NILFS (loop0): recovery complete
[pid  6221] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6221] chdir("./file0")            = 0
[pid  6221] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6221] close(4)                    = 0
[pid  6221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6221] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  261.183593][ T6222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.198699][   T27] audit: type=1800 audit(1676306948.958:575): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6221] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6221] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6221] exit_group(0)               = ?
[pid  6221] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6221, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./573", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./573", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./573/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./573/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./573/binderfs")                = 0
umount2("./573/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./573/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./573/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./573/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./573/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./573/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./573")                          = 0
mkdir("./574", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6223
./strace-static-x86_64: Process 6223 attached
[pid  6223] chdir("./574")              = 0
[pid  6223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6223] setpgid(0, 0)               = 0
[pid  6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6223] write(3, "1000", 4)         = 4
[pid  6223] close(3)                    = 0
[pid  6223] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6223] memfd_create("syzkaller", 0) = 3
[pid  6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6223] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6223] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6223] close(3)                    = 0
[pid  6223] mkdir("./file0", 0777)      = 0
[  261.473583][ T6223] loop0: detected capacity change from 0 to 4096
[  261.489675][ T6223] NILFS (loop0): invalid segment: Checksum error in segment payload
[  261.497707][ T6223] NILFS (loop0): trying rollback from an earlier position
[  261.510881][ T6223] NILFS (loop0): recovery complete
[pid  6223] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6223] chdir("./file0")            = 0
[pid  6223] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6223] close(4)                    = 0
[pid  6223] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6223] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  261.517093][ T6224] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.521723][   T27] audit: type=1800 audit(1676306949.278:576): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6223] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6223] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6223] exit_group(0)               = ?
[pid  6223] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./574", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./574", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./574/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./574/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./574/binderfs")                = 0
umount2("./574/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./574/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./574/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./574/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./574/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./574/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./574")                          = 0
mkdir("./575", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6225
./strace-static-x86_64: Process 6225 attached
[pid  6225] chdir("./575")              = 0
[pid  6225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6225] setpgid(0, 0)               = 0
[pid  6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6225] write(3, "1000", 4)         = 4
[pid  6225] close(3)                    = 0
[pid  6225] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6225] memfd_create("syzkaller", 0) = 3
[pid  6225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6225] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6225] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6225] close(3)                    = 0
[pid  6225] mkdir("./file0", 0777)      = 0
[  261.790216][ T6225] loop0: detected capacity change from 0 to 4096
[  261.805772][ T6225] NILFS (loop0): invalid segment: Checksum error in segment payload
[  261.814045][ T6225] NILFS (loop0): trying rollback from an earlier position
[  261.828054][ T6225] NILFS (loop0): recovery complete
[pid  6225] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6225] chdir("./file0")            = 0
[pid  6225] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6225] close(4)                    = 0
[pid  6225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6225] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  261.834340][ T6226] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.849931][   T27] audit: type=1800 audit(1676306949.608:577): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6225] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6225] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6225] exit_group(0)               = ?
[pid  6225] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./575", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./575", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./575/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./575/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./575/binderfs")                = 0
umount2("./575/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./575/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./575/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./575/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./575/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./575/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./575")                          = 0
mkdir("./576", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6227
./strace-static-x86_64: Process 6227 attached
[pid  6227] chdir("./576")              = 0
[pid  6227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6227] setpgid(0, 0)               = 0
[pid  6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6227] write(3, "1000", 4)         = 4
[pid  6227] close(3)                    = 0
[pid  6227] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6227] memfd_create("syzkaller", 0) = 3
[pid  6227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6227] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6227] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6227] close(3)                    = 0
[pid  6227] mkdir("./file0", 0777)      = 0
[  262.117207][ T6227] loop0: detected capacity change from 0 to 4096
[  262.133929][ T6227] NILFS (loop0): invalid segment: Checksum error in segment payload
[  262.141998][ T6227] NILFS (loop0): trying rollback from an earlier position
[  262.155806][ T6227] NILFS (loop0): recovery complete
[pid  6227] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6227] chdir("./file0")            = 0
[pid  6227] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6227] close(4)                    = 0
[pid  6227] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6227] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  262.161750][ T6228] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6227] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6227] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6227] exit_group(0)               = ?
[pid  6227] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./576", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./576", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./576/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./576/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./576/binderfs")                = 0
umount2("./576/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./576/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./576/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./576/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./576/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./576/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./576")                          = 0
mkdir("./577", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6229
./strace-static-x86_64: Process 6229 attached
[pid  6229] chdir("./577")              = 0
[pid  6229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6229] setpgid(0, 0)               = 0
[pid  6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6229] write(3, "1000", 4)         = 4
[pid  6229] close(3)                    = 0
[pid  6229] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6229] memfd_create("syzkaller", 0) = 3
[pid  6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6229] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6229] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6229] close(3)                    = 0
[pid  6229] mkdir("./file0", 0777)      = 0
[  262.435454][ T6229] loop0: detected capacity change from 0 to 4096
[  262.451356][ T6229] NILFS (loop0): invalid segment: Checksum error in segment payload
[  262.459473][ T6229] NILFS (loop0): trying rollback from an earlier position
[  262.472614][ T6229] NILFS (loop0): recovery complete
[pid  6229] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6229] chdir("./file0")            = 0
[pid  6229] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6229] close(4)                    = 0
[pid  6229] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6229] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  262.478397][ T6230] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6229] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6229] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6229] exit_group(0)               = ?
[pid  6229] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./577", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./577", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./577/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./577/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./577/binderfs")                = 0
umount2("./577/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./577/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./577/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./577/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./577/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./577/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./577")                          = 0
mkdir("./578", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6231
./strace-static-x86_64: Process 6231 attached
[pid  6231] chdir("./578")              = 0
[pid  6231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6231] setpgid(0, 0)               = 0
[pid  6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6231] write(3, "1000", 4)         = 4
[pid  6231] close(3)                    = 0
[pid  6231] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6231] memfd_create("syzkaller", 0) = 3
[pid  6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6231] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6231] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6231] close(3)                    = 0
[pid  6231] mkdir("./file0", 0777)      = 0
[pid  6231] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6231] chdir("./file0")            = 0
[pid  6231] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6231] close(4)                    = 0
[  262.750460][ T6231] loop0: detected capacity change from 0 to 4096
[  262.766556][ T6231] NILFS (loop0): invalid segment: Checksum error in segment payload
[  262.774565][ T6231] NILFS (loop0): trying rollback from an earlier position
[  262.788524][ T6231] NILFS (loop0): recovery complete
[pid  6231] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6231] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  262.794433][ T6232] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6231] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6231] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6231] exit_group(0)               = ?
[pid  6231] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./578", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./578", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./578/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./578/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./578/binderfs")                = 0
umount2("./578/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./578/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./578/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./578/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./578/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./578/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./578")                          = 0
mkdir("./579", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6233
./strace-static-x86_64: Process 6233 attached
[pid  6233] chdir("./579")              = 0
[pid  6233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6233] setpgid(0, 0)               = 0
[pid  6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6233] write(3, "1000", 4)         = 4
[pid  6233] close(3)                    = 0
[pid  6233] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6233] memfd_create("syzkaller", 0) = 3
[pid  6233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6233] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6233] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6233] close(3)                    = 0
[pid  6233] mkdir("./file0", 0777)      = 0
[  263.071529][ T6233] loop0: detected capacity change from 0 to 4096
[  263.087368][ T6233] NILFS (loop0): invalid segment: Checksum error in segment payload
[  263.095383][ T6233] NILFS (loop0): trying rollback from an earlier position
[  263.109015][ T6233] NILFS (loop0): recovery complete
[pid  6233] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6233] chdir("./file0")            = 0
[pid  6233] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6233] close(4)                    = 0
[pid  6233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6233] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  263.115364][ T6234] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6233] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6233] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6233] exit_group(0)               = ?
[pid  6233] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./579", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./579", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./579/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./579/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./579/binderfs")                = 0
umount2("./579/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./579/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./579/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./579/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./579/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./579/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./579")                          = 0
mkdir("./580", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6235
./strace-static-x86_64: Process 6235 attached
[pid  6235] chdir("./580")              = 0
[pid  6235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6235] setpgid(0, 0)               = 0
[pid  6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6235] write(3, "1000", 4)         = 4
[pid  6235] close(3)                    = 0
[pid  6235] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6235] memfd_create("syzkaller", 0) = 3
[pid  6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6235] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6235] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6235] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6235] close(3)                    = 0
[pid  6235] mkdir("./file0", 0777)      = 0
[  263.413437][ T6235] loop0: detected capacity change from 0 to 4096
[  263.430242][ T6235] NILFS (loop0): invalid segment: Checksum error in segment payload
[  263.438286][ T6235] NILFS (loop0): trying rollback from an earlier position
[  263.451629][ T6235] NILFS (loop0): recovery complete
[pid  6235] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6235] chdir("./file0")            = 0
[pid  6235] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6235] close(4)                    = 0
[pid  6235] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6235] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  263.457847][ T6236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6235] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6235] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6235] exit_group(0)               = ?
[pid  6235] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./580", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./580", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./580/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./580/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./580/binderfs")                = 0
umount2("./580/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./580/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./580/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./580/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./580/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./580/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./580")                          = 0
mkdir("./581", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6237
./strace-static-x86_64: Process 6237 attached
[pid  6237] chdir("./581")              = 0
[pid  6237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6237] setpgid(0, 0)               = 0
[pid  6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6237] write(3, "1000", 4)         = 4
[pid  6237] close(3)                    = 0
[pid  6237] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6237] memfd_create("syzkaller", 0) = 3
[pid  6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6237] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6237] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6237] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6237] close(3)                    = 0
[pid  6237] mkdir("./file0", 0777)      = 0
[pid  6237] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  263.736685][ T6237] loop0: detected capacity change from 0 to 4096
[  263.752998][ T6237] NILFS (loop0): invalid segment: Checksum error in segment payload
[  263.761103][ T6237] NILFS (loop0): trying rollback from an earlier position
[  263.778211][ T6237] NILFS (loop0): recovery complete
[pid  6237] chdir("./file0")            = 0
[pid  6237] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6237] close(4)                    = 0
[pid  6237] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6237] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  263.786467][ T6238] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.797982][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  263.797994][   T27] audit: type=1800 audit(1676306951.558:583): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6237] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6237] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6237] exit_group(0)               = ?
[pid  6237] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./581", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./581", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./581/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./581/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./581/binderfs")                = 0
umount2("./581/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./581/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./581/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./581/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./581/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./581/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./581")                          = 0
mkdir("./582", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6239
./strace-static-x86_64: Process 6239 attached
[pid  6239] chdir("./582")              = 0
[pid  6239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6239] setpgid(0, 0)               = 0
[pid  6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6239] write(3, "1000", 4)         = 4
[pid  6239] close(3)                    = 0
[pid  6239] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6239] memfd_create("syzkaller", 0) = 3
[pid  6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6239] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6239] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6239] close(3)                    = 0
[pid  6239] mkdir("./file0", 0777)      = 0
[  264.106917][ T6239] loop0: detected capacity change from 0 to 4096
[  264.122880][ T6239] NILFS (loop0): invalid segment: Checksum error in segment payload
[  264.131007][ T6239] NILFS (loop0): trying rollback from an earlier position
[  264.147769][ T6239] NILFS (loop0): recovery complete
[pid  6239] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6239] chdir("./file0")            = 0
[pid  6239] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6239] close(4)                    = 0
[pid  6239] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6239] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  264.153577][ T6240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.158581][   T27] audit: type=1800 audit(1676306951.918:584): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6239] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6239] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6239] exit_group(0)               = ?
[pid  6239] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6239, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./582", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./582", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./582/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./582/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./582/binderfs")                = 0
umount2("./582/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./582/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./582/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./582/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./582/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./582/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./582")                          = 0
mkdir("./583", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6241
./strace-static-x86_64: Process 6241 attached
[pid  6241] chdir("./583")              = 0
[pid  6241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6241] setpgid(0, 0)               = 0
[pid  6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6241] write(3, "1000", 4)         = 4
[pid  6241] close(3)                    = 0
[pid  6241] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6241] memfd_create("syzkaller", 0) = 3
[pid  6241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6241] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6241] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6241] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6241] close(3)                    = 0
[pid  6241] mkdir("./file0", 0777)      = 0
[pid  6241] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6241] chdir("./file0")            = 0
[pid  6241] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6241] close(4)                    = 0
[  264.448248][ T6241] loop0: detected capacity change from 0 to 4096
[  264.464715][ T6241] NILFS (loop0): invalid segment: Checksum error in segment payload
[  264.472860][ T6241] NILFS (loop0): trying rollback from an earlier position
[  264.487558][ T6241] NILFS (loop0): recovery complete
[pid  6241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6241] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  264.493674][ T6242] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.500291][   T27] audit: type=1800 audit(1676306952.258:585): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6241] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6241] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6241] exit_group(0)               = ?
[pid  6241] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./583", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./583", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./583/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./583/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./583/binderfs")                = 0
umount2("./583/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./583/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./583/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./583/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./583/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./583/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./583")                          = 0
mkdir("./584", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6243
./strace-static-x86_64: Process 6243 attached
[pid  6243] chdir("./584")              = 0
[pid  6243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6243] setpgid(0, 0)               = 0
[pid  6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6243] write(3, "1000", 4)         = 4
[pid  6243] close(3)                    = 0
[pid  6243] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6243] memfd_create("syzkaller", 0) = 3
[pid  6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6243] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6243] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6243] close(3)                    = 0
[pid  6243] mkdir("./file0", 0777)      = 0
[pid  6243] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6243] chdir("./file0")            = 0
[pid  6243] ioctl(4, LOOP_CLR_FD)       = 0
[  264.779170][ T6243] loop0: detected capacity change from 0 to 4096
[  264.795156][ T6243] NILFS (loop0): invalid segment: Checksum error in segment payload
[  264.803399][ T6243] NILFS (loop0): trying rollback from an earlier position
[  264.817584][ T6243] NILFS (loop0): recovery complete
[pid  6243] close(4)                    = 0
[pid  6243] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6243] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  264.823663][ T6244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.836858][   T27] audit: type=1800 audit(1676306952.598:586): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6243] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6243] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6243] exit_group(0)               = ?
[pid  6243] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./584", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./584", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./584/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./584/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./584/binderfs")                = 0
umount2("./584/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./584/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./584/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./584/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./584/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./584/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./584")                          = 0
mkdir("./585", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6245
./strace-static-x86_64: Process 6245 attached
[pid  6245] chdir("./585")              = 0
[pid  6245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6245] setpgid(0, 0)               = 0
[pid  6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6245] write(3, "1000", 4)         = 4
[pid  6245] close(3)                    = 0
[pid  6245] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6245] memfd_create("syzkaller", 0) = 3
[pid  6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6245] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6245] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6245] close(3)                    = 0
[pid  6245] mkdir("./file0", 0777)      = 0
[pid  6245] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6245] chdir("./file0")            = 0
[  265.136228][ T6245] loop0: detected capacity change from 0 to 4096
[  265.154400][ T6245] NILFS (loop0): invalid segment: Checksum error in segment payload
[  265.162707][ T6245] NILFS (loop0): trying rollback from an earlier position
[  265.176626][ T6245] NILFS (loop0): recovery complete
[pid  6245] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6245] close(4)                    = 0
[pid  6245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6245] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  265.182610][ T6246] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.195613][   T27] audit: type=1800 audit(1676306952.948:587): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6245] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6245] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6245] exit_group(0)               = ?
[pid  6245] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./585", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./585", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./585/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./585/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./585/binderfs")                = 0
umount2("./585/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./585/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./585/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./585/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./585/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./585/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./585")                          = 0
mkdir("./586", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6247
./strace-static-x86_64: Process 6247 attached
[pid  6247] chdir("./586")              = 0
[pid  6247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6247] setpgid(0, 0)               = 0
[pid  6247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6247] write(3, "1000", 4)         = 4
[pid  6247] close(3)                    = 0
[pid  6247] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6247] memfd_create("syzkaller", 0) = 3
[pid  6247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6247] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6247] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6247] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6247] close(3)                    = 0
[pid  6247] mkdir("./file0", 0777)      = 0
[pid  6247] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6247] chdir("./file0")            = 0
[pid  6247] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6247] close(4)                    = 0
[  265.477578][ T6247] loop0: detected capacity change from 0 to 4096
[  265.493930][ T6247] NILFS (loop0): invalid segment: Checksum error in segment payload
[  265.502038][ T6247] NILFS (loop0): trying rollback from an earlier position
[  265.516067][ T6247] NILFS (loop0): recovery complete
[pid  6247] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6247] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  265.522461][ T6248] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.529128][   T27] audit: type=1800 audit(1676306953.288:588): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6247] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6247] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6247] exit_group(0)               = ?
[pid  6247] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6247, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./586", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./586", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./586/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./586/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./586/binderfs")                = 0
umount2("./586/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./586/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./586/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./586/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./586/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./586/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./586")                          = 0
mkdir("./587", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6249
./strace-static-x86_64: Process 6249 attached
[pid  6249] chdir("./587")              = 0
[pid  6249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6249] setpgid(0, 0)               = 0
[pid  6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6249] write(3, "1000", 4)         = 4
[pid  6249] close(3)                    = 0
[pid  6249] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6249] memfd_create("syzkaller", 0) = 3
[pid  6249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6249] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6249] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6249] close(3)                    = 0
[pid  6249] mkdir("./file0", 0777)      = 0
[pid  6249] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6249] chdir("./file0")            = 0
[pid  6249] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6249] close(4)                    = 0
[  265.809256][ T6249] loop0: detected capacity change from 0 to 4096
[  265.825043][ T6249] NILFS (loop0): invalid segment: Checksum error in segment payload
[  265.833077][ T6249] NILFS (loop0): trying rollback from an earlier position
[  265.846900][ T6249] NILFS (loop0): recovery complete
[pid  6249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6249] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  265.853001][ T6250] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.859555][   T27] audit: type=1800 audit(1676306953.618:589): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6249] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6249] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6249] exit_group(0)               = ?
[pid  6249] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./587", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./587", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./587/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./587/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./587/binderfs")                = 0
umount2("./587/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./587/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./587/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./587/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./587/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./587/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./587")                          = 0
mkdir("./588", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6251
./strace-static-x86_64: Process 6251 attached
[pid  6251] chdir("./588")              = 0
[pid  6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6251] setpgid(0, 0)               = 0
[pid  6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6251] write(3, "1000", 4)         = 4
[pid  6251] close(3)                    = 0
[pid  6251] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6251] memfd_create("syzkaller", 0) = 3
[pid  6251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6251] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6251] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6251] close(3)                    = 0
[pid  6251] mkdir("./file0", 0777)      = 0
[pid  6251] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  266.147499][ T6251] loop0: detected capacity change from 0 to 4096
[  266.163006][ T6251] NILFS (loop0): invalid segment: Checksum error in segment payload
[  266.171072][ T6251] NILFS (loop0): trying rollback from an earlier position
[  266.184938][ T6251] NILFS (loop0): recovery complete
[pid  6251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6251] chdir("./file0")            = 0
[pid  6251] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6251] close(4)                    = 0
[pid  6251] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6251] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  266.191097][ T6252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.202345][   T27] audit: type=1800 audit(1676306953.958:590): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6251] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6251] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6251] exit_group(0)               = ?
[pid  6251] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./588", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./588", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./588/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./588/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./588/binderfs")                = 0
umount2("./588/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./588/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./588/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./588/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./588/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./588/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./588")                          = 0
mkdir("./589", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6253
./strace-static-x86_64: Process 6253 attached
[pid  6253] chdir("./589")              = 0
[pid  6253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6253] setpgid(0, 0)               = 0
[pid  6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6253] write(3, "1000", 4)         = 4
[pid  6253] close(3)                    = 0
[pid  6253] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6253] memfd_create("syzkaller", 0) = 3
[pid  6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6253] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6253] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6253] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6253] close(3)                    = 0
[pid  6253] mkdir("./file0", 0777)      = 0
[pid  6253] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6253] chdir("./file0")            = 0
[pid  6253] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6253] close(4)                    = 0
[  266.488206][ T6253] loop0: detected capacity change from 0 to 4096
[  266.502777][ T6253] NILFS (loop0): invalid segment: Checksum error in segment payload
[  266.510917][ T6253] NILFS (loop0): trying rollback from an earlier position
[  266.524577][ T6253] NILFS (loop0): recovery complete
[pid  6253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6253] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  266.530540][ T6254] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.538905][   T27] audit: type=1800 audit(1676306954.298:591): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6253] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6253] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6253] exit_group(0)               = ?
[pid  6253] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} ---
umount2("./589", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./589", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./589/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./589/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./589/binderfs")                = 0
umount2("./589/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./589/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./589/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./589/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./589/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./589/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./589")                          = 0
mkdir("./590", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6255
./strace-static-x86_64: Process 6255 attached
[pid  6255] chdir("./590")              = 0
[pid  6255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6255] setpgid(0, 0)               = 0
[pid  6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6255] write(3, "1000", 4)         = 4
[pid  6255] close(3)                    = 0
[pid  6255] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6255] memfd_create("syzkaller", 0) = 3
[pid  6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6255] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6255] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6255] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6255] close(3)                    = 0
[pid  6255] mkdir("./file0", 0777)      = 0
[pid  6255] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6255] chdir("./file0")            = 0
[pid  6255] ioctl(4, LOOP_CLR_FD)       = 0
[  266.822537][ T6255] loop0: detected capacity change from 0 to 4096
[  266.839208][ T6255] NILFS (loop0): invalid segment: Checksum error in segment payload
[  266.847335][ T6255] NILFS (loop0): trying rollback from an earlier position
[  266.860874][ T6255] NILFS (loop0): recovery complete
[pid  6255] close(4)                    = 0
[pid  6255] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6255] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  266.866937][ T6256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.875917][   T27] audit: type=1800 audit(1676306954.628:592): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6255] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6255] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6255] exit_group(0)               = ?
[pid  6255] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6255, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./590", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./590", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./590/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./590/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./590/binderfs")                = 0
umount2("./590/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./590/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./590/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./590/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./590/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./590/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./590")                          = 0
mkdir("./591", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6257
./strace-static-x86_64: Process 6257 attached
[pid  6257] chdir("./591")              = 0
[pid  6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6257] setpgid(0, 0)               = 0
[pid  6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6257] write(3, "1000", 4)         = 4
[pid  6257] close(3)                    = 0
[pid  6257] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6257] memfd_create("syzkaller", 0) = 3
[pid  6257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6257] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6257] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6257] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6257] close(3)                    = 0
[pid  6257] mkdir("./file0", 0777)      = 0
[  267.166812][ T6257] loop0: detected capacity change from 0 to 4096
[  267.183072][ T6257] NILFS (loop0): invalid segment: Checksum error in segment payload
[  267.191127][ T6257] NILFS (loop0): trying rollback from an earlier position
[  267.204702][ T6257] NILFS (loop0): recovery complete
[pid  6257] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6257] chdir("./file0")            = 0
[pid  6257] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6257] close(4)                    = 0
[pid  6257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6257] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  267.210996][ T6258] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6257] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6257] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6257] exit_group(0)               = ?
[pid  6257] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./591", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./591", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./591/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./591/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./591/binderfs")                = 0
umount2("./591/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./591/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./591/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./591/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./591/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./591/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./591")                          = 0
mkdir("./592", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6259
./strace-static-x86_64: Process 6259 attached
[pid  6259] chdir("./592")              = 0
[pid  6259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6259] setpgid(0, 0)               = 0
[pid  6259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6259] write(3, "1000", 4)         = 4
[pid  6259] close(3)                    = 0
[pid  6259] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6259] memfd_create("syzkaller", 0) = 3
[pid  6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6259] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6259] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6259] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6259] close(3)                    = 0
[pid  6259] mkdir("./file0", 0777)      = 0
[pid  6259] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6259] chdir("./file0")            = 0
[pid  6259] ioctl(4, LOOP_CLR_FD)       = 0
[  267.471754][ T6259] loop0: detected capacity change from 0 to 4096
[  267.486971][ T6259] NILFS (loop0): invalid segment: Checksum error in segment payload
[  267.494974][ T6259] NILFS (loop0): trying rollback from an earlier position
[  267.511171][ T6259] NILFS (loop0): recovery complete
[pid  6259] close(4)                    = 0
[pid  6259] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6259] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  267.517238][ T6260] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6259] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6259] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6259] exit_group(0)               = ?
[pid  6259] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6259, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./592", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./592", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./592/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./592/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./592/binderfs")                = 0
umount2("./592/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./592/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./592/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./592/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./592/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./592/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./592")                          = 0
mkdir("./593", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6261
./strace-static-x86_64: Process 6261 attached
[pid  6261] chdir("./593")              = 0
[pid  6261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6261] setpgid(0, 0)               = 0
[pid  6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6261] write(3, "1000", 4)         = 4
[pid  6261] close(3)                    = 0
[pid  6261] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6261] memfd_create("syzkaller", 0) = 3
[pid  6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6261] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6261] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6261] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6261] close(3)                    = 0
[pid  6261] mkdir("./file0", 0777)      = 0
[pid  6261] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6261] chdir("./file0")            = 0
[pid  6261] ioctl(4, LOOP_CLR_FD)       = 0
[  267.780524][ T6261] loop0: detected capacity change from 0 to 4096
[  267.797735][ T6261] NILFS (loop0): invalid segment: Checksum error in segment payload
[  267.805786][ T6261] NILFS (loop0): trying rollback from an earlier position
[  267.819577][ T6261] NILFS (loop0): recovery complete
[pid  6261] close(4)                    = 0
[pid  6261] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6261] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  267.826407][ T6262] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6261] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6261] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6261] exit_group(0)               = ?
[pid  6261] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6261, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./593", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./593", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./593/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./593/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./593/binderfs")                = 0
umount2("./593/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./593/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./593/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./593/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./593/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./593/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./593")                          = 0
mkdir("./594", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6263
./strace-static-x86_64: Process 6263 attached
[pid  6263] chdir("./594")              = 0
[pid  6263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6263] setpgid(0, 0)               = 0
[pid  6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6263] write(3, "1000", 4)         = 4
[pid  6263] close(3)                    = 0
[pid  6263] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6263] memfd_create("syzkaller", 0) = 3
[pid  6263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6263] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6263] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6263] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6263] close(3)                    = 0
[pid  6263] mkdir("./file0", 0777)      = 0
[  268.102351][ T6263] loop0: detected capacity change from 0 to 4096
[  268.118341][ T6263] NILFS (loop0): invalid segment: Checksum error in segment payload
[  268.126381][ T6263] NILFS (loop0): trying rollback from an earlier position
[  268.139992][ T6263] NILFS (loop0): recovery complete
[pid  6263] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6263] chdir("./file0")            = 0
[pid  6263] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6263] close(4)                    = 0
[pid  6263] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6263] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  268.146003][ T6264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6263] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6263] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6263] exit_group(0)               = ?
[pid  6263] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./594", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./594", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./594/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./594/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./594/binderfs")                = 0
umount2("./594/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./594/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./594/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./594/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./594/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./594/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./594")                          = 0
mkdir("./595", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6265
./strace-static-x86_64: Process 6265 attached
[pid  6265] chdir("./595")              = 0
[pid  6265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6265] setpgid(0, 0)               = 0
[pid  6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6265] write(3, "1000", 4)         = 4
[pid  6265] close(3)                    = 0
[pid  6265] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6265] memfd_create("syzkaller", 0) = 3
[pid  6265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6265] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6265] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6265] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6265] close(3)                    = 0
[pid  6265] mkdir("./file0", 0777)      = 0
[pid  6265] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6265] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6265] chdir("./file0")            = 0
[pid  6265] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6265] close(4)                    = 0
[pid  6265] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6265] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  268.429568][ T6265] loop0: detected capacity change from 0 to 4096
[  268.444651][ T6265] NILFS (loop0): invalid segment: Checksum error in segment payload
[  268.452740][ T6265] NILFS (loop0): trying rollback from an earlier position
[  268.465676][ T6265] NILFS (loop0): recovery complete
[  268.486751][ T6266] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6265] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6265] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6265] exit_group(0)               = ?
[pid  6265] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./595", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./595", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./595/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./595/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./595/binderfs")                = 0
umount2("./595/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./595/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./595/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./595/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./595/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./595/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./595")                          = 0
mkdir("./596", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6267
./strace-static-x86_64: Process 6267 attached
[pid  6267] chdir("./596")              = 0
[pid  6267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6267] setpgid(0, 0)               = 0
[pid  6267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6267] write(3, "1000", 4)         = 4
[pid  6267] close(3)                    = 0
[pid  6267] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6267] memfd_create("syzkaller", 0) = 3
[pid  6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6267] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6267] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6267] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6267] close(3)                    = 0
[pid  6267] mkdir("./file0", 0777)      = 0
[pid  6267] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6267] chdir("./file0")            = 0
[  268.752224][ T6267] loop0: detected capacity change from 0 to 4096
[  268.769028][ T6267] NILFS (loop0): invalid segment: Checksum error in segment payload
[  268.777112][ T6267] NILFS (loop0): trying rollback from an earlier position
[  268.790824][ T6267] NILFS (loop0): recovery complete
[pid  6267] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6267] close(4)                    = 0
[pid  6267] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6267] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  268.796757][ T6268] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.810415][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  268.810427][   T27] audit: type=1800 audit(1676306956.568:598): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6267] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6267] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6267] exit_group(0)               = ?
[pid  6267] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6267, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./596", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./596", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./596/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./596/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./596/binderfs")                = 0
umount2("./596/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./596/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./596/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./596/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./596/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./596/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./596")                          = 0
mkdir("./597", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6269
./strace-static-x86_64: Process 6269 attached
[pid  6269] chdir("./597")              = 0
[pid  6269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6269] setpgid(0, 0)               = 0
[pid  6269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6269] write(3, "1000", 4)         = 4
[pid  6269] close(3)                    = 0
[pid  6269] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6269] memfd_create("syzkaller", 0) = 3
[pid  6269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6269] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6269] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6269] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6269] close(3)                    = 0
[pid  6269] mkdir("./file0", 0777)      = 0
[pid  6269] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6269] chdir("./file0")            = 0
[pid  6269] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6269] close(4)                    = 0
[  269.092202][ T6269] loop0: detected capacity change from 0 to 4096
[  269.108443][ T6269] NILFS (loop0): invalid segment: Checksum error in segment payload
[  269.116500][ T6269] NILFS (loop0): trying rollback from an earlier position
[  269.129537][ T6269] NILFS (loop0): recovery complete
[pid  6269] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6269] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  269.135268][ T6270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  269.159243][   T27] audit: type=1800 audit(1676306956.888:599): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6269] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6269] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6269] exit_group(0)               = ?
[pid  6269] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6269, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./597", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./597", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./597/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./597/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./597/binderfs")                = 0
umount2("./597/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./597/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./597/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./597/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./597/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./597/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./597")                          = 0
mkdir("./598", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6271
./strace-static-x86_64: Process 6271 attached
[pid  6271] chdir("./598")              = 0
[pid  6271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6271] setpgid(0, 0)               = 0
[pid  6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6271] write(3, "1000", 4)         = 4
[pid  6271] close(3)                    = 0
[pid  6271] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6271] memfd_create("syzkaller", 0) = 3
[pid  6271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6271] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6271] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6271] close(3)                    = 0
[pid  6271] mkdir("./file0", 0777)      = 0
[pid  6271] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6271] chdir("./file0")            = 0
[pid  6271] ioctl(4, LOOP_CLR_FD)       = 0
[  269.420521][ T6271] loop0: detected capacity change from 0 to 4096
[  269.436840][ T6271] NILFS (loop0): invalid segment: Checksum error in segment payload
[  269.444915][ T6271] NILFS (loop0): trying rollback from an earlier position
[  269.458567][ T6271] NILFS (loop0): recovery complete
[pid  6271] close(4)                    = 0
[pid  6271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6271] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  269.464859][ T6272] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  269.478015][   T27] audit: type=1800 audit(1676306957.238:600): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6271] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6271] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6271] exit_group(0)               = ?
[pid  6271] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./598", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./598", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./598/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./598/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./598/binderfs")                = 0
umount2("./598/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./598/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./598/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./598/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./598/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./598/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./598")                          = 0
mkdir("./599", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6273
./strace-static-x86_64: Process 6273 attached
[pid  6273] chdir("./599")              = 0
[pid  6273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6273] setpgid(0, 0)               = 0
[pid  6273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6273] write(3, "1000", 4)         = 4
[pid  6273] close(3)                    = 0
[pid  6273] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6273] memfd_create("syzkaller", 0) = 3
[pid  6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6273] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6273] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6273] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6273] close(3)                    = 0
[pid  6273] mkdir("./file0", 0777)      = 0
[pid  6273] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6273] chdir("./file0")            = 0
[pid  6273] ioctl(4, LOOP_CLR_FD)       = 0
[  269.740685][ T6273] loop0: detected capacity change from 0 to 4096
[  269.756612][ T6273] NILFS (loop0): invalid segment: Checksum error in segment payload
[  269.764630][ T6273] NILFS (loop0): trying rollback from an earlier position
[  269.778358][ T6273] NILFS (loop0): recovery complete
[pid  6273] close(4)                    = 0
[pid  6273] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6273] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  269.784272][ T6274] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  269.799145][   T27] audit: type=1800 audit(1676306957.558:601): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6273] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6273] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6273] exit_group(0)               = ?
[pid  6273] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6273, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./599", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./599", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./599/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./599/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./599/binderfs")                = 0
umount2("./599/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./599/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./599/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./599/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./599/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./599/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./599")                          = 0
mkdir("./600", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6275
./strace-static-x86_64: Process 6275 attached
[pid  6275] chdir("./600")              = 0
[pid  6275] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6275] setpgid(0, 0)               = 0
[pid  6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6275] write(3, "1000", 4)         = 4
[pid  6275] close(3)                    = 0
[pid  6275] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6275] memfd_create("syzkaller", 0) = 3
[pid  6275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6275] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6275] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6275] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6275] close(3)                    = 0
[pid  6275] mkdir("./file0", 0777)      = 0
[  270.077516][ T6275] loop0: detected capacity change from 0 to 4096
[  270.093442][ T6275] NILFS (loop0): invalid segment: Checksum error in segment payload
[  270.101541][ T6275] NILFS (loop0): trying rollback from an earlier position
[  270.115248][ T6275] NILFS (loop0): recovery complete
[pid  6275] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6275] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6275] chdir("./file0")            = 0
[pid  6275] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6275] close(4)                    = 0
[pid  6275] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6275] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  270.121004][ T6276] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.136262][   T27] audit: type=1800 audit(1676306957.878:602): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6275] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6275] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6275] exit_group(0)               = ?
[pid  6275] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./600", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./600", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./600/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./600/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./600/binderfs")                = 0
umount2("./600/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./600/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./600/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./600/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./600/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./600/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./600")                          = 0
mkdir("./601", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6277
./strace-static-x86_64: Process 6277 attached
[pid  6277] chdir("./601")              = 0
[pid  6277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6277] setpgid(0, 0)               = 0
[pid  6277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6277] write(3, "1000", 4)         = 4
[pid  6277] close(3)                    = 0
[pid  6277] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6277] memfd_create("syzkaller", 0) = 3
[pid  6277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6277] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6277] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6277] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6277] close(3)                    = 0
[pid  6277] mkdir("./file0", 0777)      = 0
[pid  6277] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6277] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6277] chdir("./file0")            = 0
[pid  6277] ioctl(4, LOOP_CLR_FD)       = 0
[  270.387567][ T6277] loop0: detected capacity change from 0 to 4096
[  270.403487][ T6277] NILFS (loop0): invalid segment: Checksum error in segment payload
[  270.411562][ T6277] NILFS (loop0): trying rollback from an earlier position
[  270.424414][ T6277] NILFS (loop0): recovery complete
[pid  6277] close(4)                    = 0
[pid  6277] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6277] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  270.430989][ T6278] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.444312][   T27] audit: type=1800 audit(1676306958.208:603): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6277] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6277] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6277] exit_group(0)               = ?
[pid  6277] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6277, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./601", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./601", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./601/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./601/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./601/binderfs")                = 0
umount2("./601/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./601/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./601/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./601/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./601/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./601/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./601")                          = 0
mkdir("./602", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6279
./strace-static-x86_64: Process 6279 attached
[pid  6279] chdir("./602")              = 0
[pid  6279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6279] setpgid(0, 0)               = 0
[pid  6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6279] write(3, "1000", 4)         = 4
[pid  6279] close(3)                    = 0
[pid  6279] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6279] memfd_create("syzkaller", 0) = 3
[pid  6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6279] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6279] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6279] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6279] close(3)                    = 0
[pid  6279] mkdir("./file0", 0777)      = 0
[pid  6279] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6279] chdir("./file0")            = 0
[pid  6279] ioctl(4, LOOP_CLR_FD)       = 0
[  270.708257][ T6279] loop0: detected capacity change from 0 to 4096
[  270.723580][ T6279] NILFS (loop0): invalid segment: Checksum error in segment payload
[  270.731867][ T6279] NILFS (loop0): trying rollback from an earlier position
[  270.745574][ T6279] NILFS (loop0): recovery complete
[pid  6279] close(4)                    = 0
[pid  6279] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6279] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  270.751563][ T6280] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.765377][   T27] audit: type=1800 audit(1676306958.528:604): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6279] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6279] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6279] exit_group(0)               = ?
[pid  6279] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./602", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./602", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./602/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./602/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./602/binderfs")                = 0
umount2("./602/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./602/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./602/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./602/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./602/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./602/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./602")                          = 0
mkdir("./603", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6281
./strace-static-x86_64: Process 6281 attached
[pid  6281] chdir("./603")              = 0
[pid  6281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6281] setpgid(0, 0)               = 0
[pid  6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6281] write(3, "1000", 4)         = 4
[pid  6281] close(3)                    = 0
[pid  6281] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6281] memfd_create("syzkaller", 0) = 3
[pid  6281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6281] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6281] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6281] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6281] close(3)                    = 0
[pid  6281] mkdir("./file0", 0777)      = 0
[pid  6281] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6281] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6281] chdir("./file0")            = 0
[pid  6281] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6281] close(4)                    = 0
[  271.036876][ T6281] loop0: detected capacity change from 0 to 4096
[  271.052019][ T6281] NILFS (loop0): invalid segment: Checksum error in segment payload
[  271.060099][ T6281] NILFS (loop0): trying rollback from an earlier position
[  271.073588][ T6281] NILFS (loop0): recovery complete
[pid  6281] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6281] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  271.079642][ T6282] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.096395][   T27] audit: type=1800 audit(1676306958.838:605): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6281] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6281] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6281] exit_group(0)               = ?
[pid  6281] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./603", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./603", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./603/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./603/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./603/binderfs")                = 0
umount2("./603/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./603/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./603/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./603/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./603/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./603/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./603")                          = 0
mkdir("./604", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6283
./strace-static-x86_64: Process 6283 attached
[pid  6283] chdir("./604")              = 0
[pid  6283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6283] setpgid(0, 0)               = 0
[pid  6283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6283] write(3, "1000", 4)         = 4
[pid  6283] close(3)                    = 0
[pid  6283] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6283] memfd_create("syzkaller", 0) = 3
[pid  6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6283] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6283] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6283] close(3)                    = 0
[pid  6283] mkdir("./file0", 0777)      = 0
[  271.367587][ T6283] loop0: detected capacity change from 0 to 4096
[  271.384465][ T6283] NILFS (loop0): invalid segment: Checksum error in segment payload
[  271.392524][ T6283] NILFS (loop0): trying rollback from an earlier position
[  271.406335][ T6283] NILFS (loop0): recovery complete
[pid  6283] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6283] chdir("./file0")            = 0
[pid  6283] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6283] close(4)                    = 0
[pid  6283] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6283] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  271.412093][ T6284] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.426240][   T27] audit: type=1800 audit(1676306959.178:606): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6283] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6283] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6283] exit_group(0)               = ?
[pid  6283] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6283, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./604", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./604", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./604/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./604/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./604/binderfs")                = 0
umount2("./604/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./604/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./604/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./604/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./604/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./604/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./604")                          = 0
mkdir("./605", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6285
./strace-static-x86_64: Process 6285 attached
[pid  6285] chdir("./605")              = 0
[pid  6285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6285] setpgid(0, 0)               = 0
[pid  6285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6285] write(3, "1000", 4)         = 4
[pid  6285] close(3)                    = 0
[pid  6285] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6285] memfd_create("syzkaller", 0) = 3
[pid  6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6285] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6285] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6285] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6285] close(3)                    = 0
[pid  6285] mkdir("./file0", 0777)      = 0
[pid  6285] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6285] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6285] chdir("./file0")            = 0
[  271.690374][ T6285] loop0: detected capacity change from 0 to 4096
[  271.705173][ T6285] NILFS (loop0): invalid segment: Checksum error in segment payload
[  271.713265][ T6285] NILFS (loop0): trying rollback from an earlier position
[  271.727093][ T6285] NILFS (loop0): recovery complete
[pid  6285] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6285] close(4)                    = 0
[pid  6285] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6285] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  271.732826][ T6286] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.746197][   T27] audit: type=1800 audit(1676306959.508:607): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6285] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6285] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6285] exit_group(0)               = ?
[pid  6285] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6285, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./605", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./605", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./605/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./605/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./605/binderfs")                = 0
umount2("./605/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./605/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./605/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./605/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./605/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./605/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./605")                          = 0
mkdir("./606", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6287
./strace-static-x86_64: Process 6287 attached
[pid  6287] chdir("./606")              = 0
[pid  6287] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6287] setpgid(0, 0)               = 0
[pid  6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6287] write(3, "1000", 4)         = 4
[pid  6287] close(3)                    = 0
[pid  6287] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6287] memfd_create("syzkaller", 0) = 3
[pid  6287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6287] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6287] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6287] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6287] close(3)                    = 0
[pid  6287] mkdir("./file0", 0777)      = 0
[pid  6287] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6287] chdir("./file0")            = 0
[pid  6287] ioctl(4, LOOP_CLR_FD)       = 0
[  272.030873][ T6287] loop0: detected capacity change from 0 to 4096
[  272.046590][ T6287] NILFS (loop0): invalid segment: Checksum error in segment payload
[  272.054679][ T6287] NILFS (loop0): trying rollback from an earlier position
[  272.068154][ T6287] NILFS (loop0): recovery complete
[pid  6287] close(4)                    = 0
[pid  6287] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6287] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  272.074360][ T6288] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6287] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6287] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6287] exit_group(0)               = ?
[pid  6287] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./606", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./606", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./606/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./606/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./606/binderfs")                = 0
umount2("./606/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./606/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./606/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./606/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./606/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./606/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./606")                          = 0
mkdir("./607", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6289
./strace-static-x86_64: Process 6289 attached
[pid  6289] chdir("./607")              = 0
[pid  6289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6289] setpgid(0, 0)               = 0
[pid  6289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6289] write(3, "1000", 4)         = 4
[pid  6289] close(3)                    = 0
[pid  6289] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6289] memfd_create("syzkaller", 0) = 3
[pid  6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6289] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6289] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6289] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6289] close(3)                    = 0
[pid  6289] mkdir("./file0", 0777)      = 0
[pid  6289] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6289] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6289] chdir("./file0")            = 0
[pid  6289] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6289] close(4)                    = 0
[  272.358411][ T6289] loop0: detected capacity change from 0 to 4096
[  272.374004][ T6289] NILFS (loop0): invalid segment: Checksum error in segment payload
[  272.382068][ T6289] NILFS (loop0): trying rollback from an earlier position
[  272.395885][ T6289] NILFS (loop0): recovery complete
[pid  6289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6289] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  272.406402][ T6290] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6289] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6289] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6289] exit_group(0)               = ?
[pid  6289] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6289, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./607", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./607", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./607/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./607/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./607/binderfs")                = 0
umount2("./607/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./607/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./607/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./607/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./607/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./607/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./607")                          = 0
mkdir("./608", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6291
./strace-static-x86_64: Process 6291 attached
[pid  6291] chdir("./608")              = 0
[pid  6291] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6291] setpgid(0, 0)               = 0
[pid  6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6291] write(3, "1000", 4)         = 4
[pid  6291] close(3)                    = 0
[pid  6291] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6291] memfd_create("syzkaller", 0) = 3
[pid  6291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6291] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6291] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6291] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6291] close(3)                    = 0
[pid  6291] mkdir("./file0", 0777)      = 0
[pid  6291] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6291] chdir("./file0")            = 0
[pid  6291] ioctl(4, LOOP_CLR_FD)       = 0
[  272.681809][ T6291] loop0: detected capacity change from 0 to 4096
[  272.696577][ T6291] NILFS (loop0): invalid segment: Checksum error in segment payload
[  272.704601][ T6291] NILFS (loop0): trying rollback from an earlier position
[  272.718530][ T6291] NILFS (loop0): recovery complete
[pid  6291] close(4)                    = 0
[pid  6291] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6291] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  272.724856][ T6292] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6291] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6291] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6291] exit_group(0)               = ?
[pid  6291] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./608", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./608", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./608/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./608/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./608/binderfs")                = 0
umount2("./608/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./608/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./608/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./608/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./608/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./608/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./608")                          = 0
mkdir("./609", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6293
./strace-static-x86_64: Process 6293 attached
[pid  6293] chdir("./609")              = 0
[pid  6293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6293] setpgid(0, 0)               = 0
[pid  6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6293] write(3, "1000", 4)         = 4
[pid  6293] close(3)                    = 0
[pid  6293] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6293] memfd_create("syzkaller", 0) = 3
[pid  6293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6293] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6293] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6293] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6293] close(3)                    = 0
[pid  6293] mkdir("./file0", 0777)      = 0
[pid  6293] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6293] chdir("./file0")            = 0
[pid  6293] ioctl(4, LOOP_CLR_FD)       = 0
[  272.993612][ T6293] loop0: detected capacity change from 0 to 4096
[  273.010106][ T6293] NILFS (loop0): invalid segment: Checksum error in segment payload
[  273.018192][ T6293] NILFS (loop0): trying rollback from an earlier position
[  273.031633][ T6293] NILFS (loop0): recovery complete
[pid  6293] close(4)                    = 0
[pid  6293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6293] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  273.037947][ T6294] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6293] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6293] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6293] exit_group(0)               = ?
[pid  6293] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./609", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./609", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./609/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./609/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./609/binderfs")                = 0
umount2("./609/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./609/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./609/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./609/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./609/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./609/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./609")                          = 0
mkdir("./610", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6295
./strace-static-x86_64: Process 6295 attached
[pid  6295] chdir("./610")              = 0
[pid  6295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6295] setpgid(0, 0)               = 0
[pid  6295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6295] write(3, "1000", 4)         = 4
[pid  6295] close(3)                    = 0
[pid  6295] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6295] memfd_create("syzkaller", 0) = 3
[pid  6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6295] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6295] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6295] close(3)                    = 0
[pid  6295] mkdir("./file0", 0777)      = 0
[  273.301249][ T6295] loop0: detected capacity change from 0 to 4096
[  273.316423][ T6295] NILFS (loop0): invalid segment: Checksum error in segment payload
[  273.324441][ T6295] NILFS (loop0): trying rollback from an earlier position
[  273.338519][ T6295] NILFS (loop0): recovery complete
[pid  6295] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6295] chdir("./file0")            = 0
[pid  6295] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6295] close(4)                    = 0
[pid  6295] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6295] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  273.344932][ T6296] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6295] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6295] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6295] exit_group(0)               = ?
[pid  6295] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6295, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./610", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./610", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./610/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./610/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./610/binderfs")                = 0
umount2("./610/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./610/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./610/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./610/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./610/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./610/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./610")                          = 0
mkdir("./611", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6297
./strace-static-x86_64: Process 6297 attached
[pid  6297] chdir("./611")              = 0
[pid  6297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6297] setpgid(0, 0)               = 0
[pid  6297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6297] write(3, "1000", 4)         = 4
[pid  6297] close(3)                    = 0
[pid  6297] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6297] memfd_create("syzkaller", 0) = 3
[pid  6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6297] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6297] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6297] close(3)                    = 0
[pid  6297] mkdir("./file0", 0777)      = 0
[  273.617153][ T6297] loop0: detected capacity change from 0 to 4096
[  273.632640][ T6297] NILFS (loop0): invalid segment: Checksum error in segment payload
[  273.640705][ T6297] NILFS (loop0): trying rollback from an earlier position
[  273.654542][ T6297] NILFS (loop0): recovery complete
[pid  6297] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6297] chdir("./file0")            = 0
[pid  6297] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6297] close(4)                    = 0
[pid  6297] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6297] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  273.660487][ T6298] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6297] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6297] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6297] exit_group(0)               = ?
[pid  6297] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6297, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./611", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./611", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./611/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./611/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./611/binderfs")                = 0
umount2("./611/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./611/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./611/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./611/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./611/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./611/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./611")                          = 0
mkdir("./612", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6299
./strace-static-x86_64: Process 6299 attached
[pid  6299] chdir("./612")              = 0
[pid  6299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6299] setpgid(0, 0)               = 0
[pid  6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6299] write(3, "1000", 4)         = 4
[pid  6299] close(3)                    = 0
[pid  6299] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6299] memfd_create("syzkaller", 0) = 3
[pid  6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6299] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6299] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6299] close(3)                    = 0
[pid  6299] mkdir("./file0", 0777)      = 0
[pid  6299] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  273.923916][ T6299] loop0: detected capacity change from 0 to 4096
[  273.940826][ T6299] NILFS (loop0): invalid segment: Checksum error in segment payload
[  273.949140][ T6299] NILFS (loop0): trying rollback from an earlier position
[  273.963173][ T6299] NILFS (loop0): recovery complete
[pid  6299] chdir("./file0")            = 0
[pid  6299] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6299] close(4)                    = 0
[pid  6299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6299] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  273.969444][ T6300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  273.982427][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  273.982440][   T27] audit: type=1800 audit(1676306961.748:614): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6299] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6299] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6299] exit_group(0)               = ?
[pid  6299] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6299, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./612", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./612", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./612/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./612/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./612/binderfs")                = 0
umount2("./612/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./612/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./612/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./612/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./612/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./612/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./612")                          = 0
mkdir("./613", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6301
./strace-static-x86_64: Process 6301 attached
[pid  6301] chdir("./613")              = 0
[pid  6301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6301] setpgid(0, 0)               = 0
[pid  6301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6301] write(3, "1000", 4)         = 4
[pid  6301] close(3)                    = 0
[pid  6301] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6301] memfd_create("syzkaller", 0) = 3
[pid  6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6301] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6301] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6301] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6301] close(3)                    = 0
[pid  6301] mkdir("./file0", 0777)      = 0
[  274.263782][ T6301] loop0: detected capacity change from 0 to 4096
[  274.281208][ T6301] NILFS (loop0): invalid segment: Checksum error in segment payload
[  274.289266][ T6301] NILFS (loop0): trying rollback from an earlier position
[  274.303363][ T6301] NILFS (loop0): recovery complete
[pid  6301] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6301] chdir("./file0")            = 0
[pid  6301] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6301] close(4)                    = 0
[pid  6301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6301] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  274.309434][ T6302] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.322016][   T27] audit: type=1800 audit(1676306962.078:615): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6301] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6301] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6301] exit_group(0)               = ?
[pid  6301] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6301, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./613", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./613", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./613/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./613/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./613/binderfs")                = 0
umount2("./613/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./613/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./613/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./613/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./613/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./613/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./613")                          = 0
mkdir("./614", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6303
./strace-static-x86_64: Process 6303 attached
[pid  6303] chdir("./614")              = 0
[pid  6303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6303] setpgid(0, 0)               = 0
[pid  6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6303] write(3, "1000", 4)         = 4
[pid  6303] close(3)                    = 0
[pid  6303] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6303] memfd_create("syzkaller", 0) = 3
[pid  6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6303] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6303] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6303] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6303] close(3)                    = 0
[pid  6303] mkdir("./file0", 0777)      = 0
[  274.608350][ T6303] loop0: detected capacity change from 0 to 4096
[  274.623969][ T6303] NILFS (loop0): invalid segment: Checksum error in segment payload
[  274.632027][ T6303] NILFS (loop0): trying rollback from an earlier position
[  274.645419][ T6303] NILFS (loop0): recovery complete
[pid  6303] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6303] chdir("./file0")            = 0
[pid  6303] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6303] close(4)                    = 0
[pid  6303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6303] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  274.651526][ T6304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.665438][   T27] audit: type=1800 audit(1676306962.418:616): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6303] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6303] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6303] exit_group(0)               = ?
[pid  6303] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./614", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./614", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./614/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./614/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./614/binderfs")                = 0
umount2("./614/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./614/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./614/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./614/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./614/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./614/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./614")                          = 0
mkdir("./615", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6305
./strace-static-x86_64: Process 6305 attached
[pid  6305] chdir("./615")              = 0
[pid  6305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6305] setpgid(0, 0)               = 0
[pid  6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6305] write(3, "1000", 4)         = 4
[pid  6305] close(3)                    = 0
[pid  6305] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6305] memfd_create("syzkaller", 0) = 3
[pid  6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6305] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6305] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6305] close(3)                    = 0
[pid  6305] mkdir("./file0", 0777)      = 0
[  274.930214][ T6305] loop0: detected capacity change from 0 to 4096
[  274.947030][ T6305] NILFS (loop0): invalid segment: Checksum error in segment payload
[  274.955135][ T6305] NILFS (loop0): trying rollback from an earlier position
[  274.969280][ T6305] NILFS (loop0): recovery complete
[pid  6305] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6305] chdir("./file0")            = 0
[pid  6305] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6305] close(4)                    = 0
[pid  6305] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6305] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  274.975414][ T6306] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.988748][   T27] audit: type=1800 audit(1676306962.748:617): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6305] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6305] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6305] exit_group(0)               = ?
[pid  6305] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6305, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
umount2("./615", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./615", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./615/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./615/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./615/binderfs")                = 0
umount2("./615/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./615/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./615/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./615/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./615/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./615/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./615")                          = 0
mkdir("./616", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6307
./strace-static-x86_64: Process 6307 attached
[pid  6307] chdir("./616")              = 0
[pid  6307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6307] setpgid(0, 0)               = 0
[pid  6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6307] write(3, "1000", 4)         = 4
[pid  6307] close(3)                    = 0
[pid  6307] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6307] memfd_create("syzkaller", 0) = 3
[pid  6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6307] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6307] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6307] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6307] close(3)                    = 0
[pid  6307] mkdir("./file0", 0777)      = 0
[  275.268140][ T6307] loop0: detected capacity change from 0 to 4096
[  275.286588][ T6307] NILFS (loop0): invalid segment: Checksum error in segment payload
[  275.294620][ T6307] NILFS (loop0): trying rollback from an earlier position
[  275.308583][ T6307] NILFS (loop0): recovery complete
[pid  6307] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6307] chdir("./file0")            = 0
[pid  6307] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6307] close(4)                    = 0
[pid  6307] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6307] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  275.314843][ T6308] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.318639][   T27] audit: type=1800 audit(1676306963.078:618): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6307] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6307] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6307] exit_group(0)               = ?
[pid  6307] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./616", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./616", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./616/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./616/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./616/binderfs")                = 0
umount2("./616/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./616/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./616/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./616/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./616/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./616/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./616")                          = 0
mkdir("./617", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6309
./strace-static-x86_64: Process 6309 attached
[pid  6309] chdir("./617")              = 0
[pid  6309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6309] setpgid(0, 0)               = 0
[pid  6309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6309] write(3, "1000", 4)         = 4
[pid  6309] close(3)                    = 0
[pid  6309] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6309] memfd_create("syzkaller", 0) = 3
[pid  6309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6309] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6309] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6309] close(3)                    = 0
[pid  6309] mkdir("./file0", 0777)      = 0
[pid  6309] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  275.602812][ T6309] loop0: detected capacity change from 0 to 4096
[  275.618919][ T6309] NILFS (loop0): invalid segment: Checksum error in segment payload
[  275.626948][ T6309] NILFS (loop0): trying rollback from an earlier position
[  275.642494][ T6309] NILFS (loop0): recovery complete
[pid  6309] chdir("./file0")            = 0
[pid  6309] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6309] close(4)                    = 0
[pid  6309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6309] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  275.650864][ T6310] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.666127][   T27] audit: type=1800 audit(1676306963.408:619): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6309] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6309] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6309] exit_group(0)               = ?
[pid  6309] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6309, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./617", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./617", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./617/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./617/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./617/binderfs")                = 0
umount2("./617/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./617/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./617/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./617/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./617/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./617/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./617")                          = 0
mkdir("./618", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6311
./strace-static-x86_64: Process 6311 attached
[pid  6311] chdir("./618")              = 0
[pid  6311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6311] setpgid(0, 0)               = 0
[pid  6311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6311] write(3, "1000", 4)         = 4
[pid  6311] close(3)                    = 0
[pid  6311] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6311] memfd_create("syzkaller", 0) = 3
[pid  6311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6311] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6311] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6311] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6311] close(3)                    = 0
[pid  6311] mkdir("./file0", 0777)      = 0
[  275.913082][ T6311] loop0: detected capacity change from 0 to 4096
[  275.928946][ T6311] NILFS (loop0): invalid segment: Checksum error in segment payload
[  275.936981][ T6311] NILFS (loop0): trying rollback from an earlier position
[  275.951398][ T6311] NILFS (loop0): recovery complete
[pid  6311] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6311] chdir("./file0")            = 0
[pid  6311] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6311] close(4)                    = 0
[pid  6311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6311] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  275.957437][ T6312] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.976134][   T27] audit: type=1800 audit(1676306963.718:620): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6311] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6311] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6311] exit_group(0)               = ?
[pid  6311] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6311, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./618", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./618", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./618/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./618/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./618/binderfs")                = 0
umount2("./618/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./618/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./618/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./618/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./618/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./618/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./618")                          = 0
mkdir("./619", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6313
./strace-static-x86_64: Process 6313 attached
[pid  6313] chdir("./619")              = 0
[pid  6313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6313] setpgid(0, 0)               = 0
[pid  6313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6313] write(3, "1000", 4)         = 4
[pid  6313] close(3)                    = 0
[pid  6313] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6313] memfd_create("syzkaller", 0) = 3
[pid  6313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6313] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6313] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6313] close(3)                    = 0
[pid  6313] mkdir("./file0", 0777)      = 0
[pid  6313] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6313] chdir("./file0")            = 0
[pid  6313] ioctl(4, LOOP_CLR_FD)       = 0
[  276.232929][ T6313] loop0: detected capacity change from 0 to 4096
[  276.249074][ T6313] NILFS (loop0): invalid segment: Checksum error in segment payload
[  276.257115][ T6313] NILFS (loop0): trying rollback from an earlier position
[  276.271432][ T6313] NILFS (loop0): recovery complete
[pid  6313] close(4)                    = 0
[pid  6313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6313] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  276.277383][ T6314] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.296277][   T27] audit: type=1800 audit(1676306964.048:621): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6313] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6313] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6313] exit_group(0)               = ?
[pid  6313] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6313, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./619", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./619", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./619/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./619/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./619/binderfs")                = 0
umount2("./619/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./619/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./619/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./619/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./619/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./619/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./619")                          = 0
mkdir("./620", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6315
./strace-static-x86_64: Process 6315 attached
[pid  6315] chdir("./620")              = 0
[pid  6315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6315] setpgid(0, 0)               = 0
[pid  6315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6315] write(3, "1000", 4)         = 4
[pid  6315] close(3)                    = 0
[pid  6315] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6315] memfd_create("syzkaller", 0) = 3
[pid  6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6315] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6315] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6315] close(3)                    = 0
[pid  6315] mkdir("./file0", 0777)      = 0
[  276.555674][ T6315] loop0: detected capacity change from 0 to 4096
[  276.573009][ T6315] NILFS (loop0): invalid segment: Checksum error in segment payload
[  276.581196][ T6315] NILFS (loop0): trying rollback from an earlier position
[  276.594774][ T6315] NILFS (loop0): recovery complete
[pid  6315] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6315] chdir("./file0")            = 0
[pid  6315] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6315] close(4)                    = 0
[pid  6315] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6315] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  276.600805][ T6316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.614892][   T27] audit: type=1800 audit(1676306964.378:622): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6315] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6315] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6315] exit_group(0)               = ?
[pid  6315] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6315, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./620", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./620", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./620/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./620/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./620/binderfs")                = 0
umount2("./620/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./620/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./620/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./620/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./620/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./620/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./620")                          = 0
mkdir("./621", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6317
./strace-static-x86_64: Process 6317 attached
[pid  6317] chdir("./621")              = 0
[pid  6317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6317] setpgid(0, 0)               = 0
[pid  6317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6317] write(3, "1000", 4)         = 4
[pid  6317] close(3)                    = 0
[pid  6317] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6317] memfd_create("syzkaller", 0) = 3
[pid  6317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6317] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6317] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6317] close(3)                    = 0
[pid  6317] mkdir("./file0", 0777)      = 0
[  276.886930][ T6317] loop0: detected capacity change from 0 to 4096
[  276.903481][ T6317] NILFS (loop0): invalid segment: Checksum error in segment payload
[  276.911526][ T6317] NILFS (loop0): trying rollback from an earlier position
[  276.925605][ T6317] NILFS (loop0): recovery complete
[pid  6317] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6317] chdir("./file0")            = 0
[pid  6317] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6317] close(4)                    = 0
[pid  6317] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6317] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  276.931583][ T6318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.948486][   T27] audit: type=1800 audit(1676306964.708:623): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6317] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6317] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6317] exit_group(0)               = ?
[pid  6317] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6317, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./621", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./621", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./621/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./621/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./621/binderfs")                = 0
umount2("./621/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./621/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./621/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./621/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./621/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./621/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./621")                          = 0
mkdir("./622", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6319
./strace-static-x86_64: Process 6319 attached
[pid  6319] chdir("./622")              = 0
[pid  6319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6319] setpgid(0, 0)               = 0
[pid  6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6319] write(3, "1000", 4)         = 4
[pid  6319] close(3)                    = 0
[pid  6319] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6319] memfd_create("syzkaller", 0) = 3
[pid  6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6319] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6319] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6319] close(3)                    = 0
[pid  6319] mkdir("./file0", 0777)      = 0
[  277.217760][ T6319] loop0: detected capacity change from 0 to 4096
[  277.234466][ T6319] NILFS (loop0): invalid segment: Checksum error in segment payload
[  277.242517][ T6319] NILFS (loop0): trying rollback from an earlier position
[  277.256445][ T6319] NILFS (loop0): recovery complete
[pid  6319] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6319] chdir("./file0")            = 0
[pid  6319] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6319] close(4)                    = 0
[pid  6319] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6319] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  277.262336][ T6320] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6319] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6319] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6319] exit_group(0)               = ?
[pid  6319] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./622", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./622", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./622/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./622/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./622/binderfs")                = 0
umount2("./622/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./622/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./622/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./622/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./622/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./622/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./622")                          = 0
mkdir("./623", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6321
./strace-static-x86_64: Process 6321 attached
[pid  6321] chdir("./623")              = 0
[pid  6321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6321] setpgid(0, 0)               = 0
[pid  6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6321] write(3, "1000", 4)         = 4
[pid  6321] close(3)                    = 0
[pid  6321] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6321] memfd_create("syzkaller", 0) = 3
[pid  6321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6321] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6321] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6321] close(3)                    = 0
[pid  6321] mkdir("./file0", 0777)      = 0
[pid  6321] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6321] chdir("./file0")            = 0
[pid  6321] ioctl(4, LOOP_CLR_FD)       = 0
[  277.526362][ T6321] loop0: detected capacity change from 0 to 4096
[  277.542026][ T6321] NILFS (loop0): invalid segment: Checksum error in segment payload
[  277.550109][ T6321] NILFS (loop0): trying rollback from an earlier position
[  277.562910][ T6321] NILFS (loop0): recovery complete
[pid  6321] close(4)                    = 0
[pid  6321] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6321] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  277.568861][ T6322] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6321] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6321] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6321] exit_group(0)               = ?
[pid  6321] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./623", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./623", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./623/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./623/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./623/binderfs")                = 0
umount2("./623/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./623/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./623/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./623/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./623/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./623/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./623")                          = 0
mkdir("./624", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6323
./strace-static-x86_64: Process 6323 attached
[pid  6323] chdir("./624")              = 0
[pid  6323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6323] setpgid(0, 0)               = 0
[pid  6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6323] write(3, "1000", 4)         = 4
[pid  6323] close(3)                    = 0
[pid  6323] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6323] memfd_create("syzkaller", 0) = 3
[pid  6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6323] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6323] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6323] close(3)                    = 0
[pid  6323] mkdir("./file0", 0777)      = 0
[pid  6323] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6323] chdir("./file0")            = 0
[pid  6323] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6323] close(4)                    = 0
[pid  6323] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[  277.852037][ T6323] loop0: detected capacity change from 0 to 4096
[  277.868002][ T6323] NILFS (loop0): invalid segment: Checksum error in segment payload
[  277.876025][ T6323] NILFS (loop0): trying rollback from an earlier position
[  277.889746][ T6323] NILFS (loop0): recovery complete
[pid  6323] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  277.895496][ T6324] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6323] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6323] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6323] exit_group(0)               = ?
[pid  6323] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6323, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./624", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./624", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./624/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./624/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./624/binderfs")                = 0
umount2("./624/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./624/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./624/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./624/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./624/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./624/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./624")                          = 0
mkdir("./625", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6325
./strace-static-x86_64: Process 6325 attached
[pid  6325] chdir("./625")              = 0
[pid  6325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6325] setpgid(0, 0)               = 0
[pid  6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6325] write(3, "1000", 4)         = 4
[pid  6325] close(3)                    = 0
[pid  6325] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6325] memfd_create("syzkaller", 0) = 3
[pid  6325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6325] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6325] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6325] close(3)                    = 0
[pid  6325] mkdir("./file0", 0777)      = 0
[pid  6325] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  278.170674][ T6325] loop0: detected capacity change from 0 to 4096
[  278.185639][ T6325] NILFS (loop0): invalid segment: Checksum error in segment payload
[  278.193976][ T6325] NILFS (loop0): trying rollback from an earlier position
[  278.207668][ T6325] NILFS (loop0): recovery complete
[pid  6325] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6325] chdir("./file0")            = 0
[pid  6325] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6325] close(4)                    = 0
[pid  6325] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6325] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  278.213505][ T6326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6325] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6325] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6325] exit_group(0)               = ?
[pid  6325] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6325, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./625", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./625", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./625/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./625/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./625/binderfs")                = 0
umount2("./625/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./625/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./625/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./625/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./625/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./625/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./625")                          = 0
mkdir("./626", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6327
./strace-static-x86_64: Process 6327 attached
[pid  6327] chdir("./626")              = 0
[pid  6327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6327] setpgid(0, 0)               = 0
[pid  6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6327] write(3, "1000", 4)         = 4
[pid  6327] close(3)                    = 0
[pid  6327] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6327] memfd_create("syzkaller", 0) = 3
[pid  6327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6327] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6327] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6327] close(3)                    = 0
[pid  6327] mkdir("./file0", 0777)      = 0
[pid  6327] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6327] chdir("./file0")            = 0
[pid  6327] ioctl(4, LOOP_CLR_FD)       = 0
[  278.499836][ T6327] loop0: detected capacity change from 0 to 4096
[  278.515485][ T6327] NILFS (loop0): invalid segment: Checksum error in segment payload
[  278.523566][ T6327] NILFS (loop0): trying rollback from an earlier position
[  278.537310][ T6327] NILFS (loop0): recovery complete
[pid  6327] close(4)                    = 0
[pid  6327] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6327] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  278.542994][ T6328] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6327] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6327] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6327] exit_group(0)               = ?
[pid  6327] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6327, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./626", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./626", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./626/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./626/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./626/binderfs")                = 0
umount2("./626/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./626/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./626/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./626/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./626/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./626/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./626")                          = 0
mkdir("./627", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6329
./strace-static-x86_64: Process 6329 attached
[pid  6329] chdir("./627")              = 0
[pid  6329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6329] setpgid(0, 0)               = 0
[pid  6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6329] write(3, "1000", 4)         = 4
[pid  6329] close(3)                    = 0
[pid  6329] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6329] memfd_create("syzkaller", 0) = 3
[pid  6329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6329] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6329] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6329] close(3)                    = 0
[pid  6329] mkdir("./file0", 0777)      = 0
[pid  6329] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[  278.818573][ T6329] loop0: detected capacity change from 0 to 4096
[  278.837672][ T6329] NILFS (loop0): invalid segment: Checksum error in segment payload
[  278.845681][ T6329] NILFS (loop0): trying rollback from an earlier position
[  278.859537][ T6329] NILFS (loop0): recovery complete
[pid  6329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6329] chdir("./file0")            = 0
[pid  6329] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6329] close(4)                    = 0
[pid  6329] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6329] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  278.866056][ T6330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[pid  6329] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6329] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6329] exit_group(0)               = ?
[pid  6329] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./627", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./627", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./627/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./627/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./627/binderfs")                = 0
umount2("./627/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./627/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./627/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./627/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./627/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./627/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./627")                          = 0
mkdir("./628", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6331
./strace-static-x86_64: Process 6331 attached
[pid  6331] chdir("./628")              = 0
[pid  6331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6331] setpgid(0, 0)               = 0
[pid  6331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6331] write(3, "1000", 4)         = 4
[pid  6331] close(3)                    = 0
[pid  6331] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6331] memfd_create("syzkaller", 0) = 3
[pid  6331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6331] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6331] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6331] close(3)                    = 0
[pid  6331] mkdir("./file0", 0777)      = 0
[pid  6331] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6331] chdir("./file0")            = 0
[pid  6331] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6331] close(4)                    = 0
[pid  6331] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[  279.157680][ T6331] loop0: detected capacity change from 0 to 4096
[  279.173080][ T6331] NILFS (loop0): invalid segment: Checksum error in segment payload
[  279.181167][ T6331] NILFS (loop0): trying rollback from an earlier position
[  279.194961][ T6331] NILFS (loop0): recovery complete
[pid  6331] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  279.200867][ T6332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.216222][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  279.216233][   T27] audit: type=1800 audit(1676306966.968:630): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6331] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6331] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6331] exit_group(0)               = ?
[pid  6331] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6331, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./628", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./628", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./628/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./628/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./628/binderfs")                = 0
umount2("./628/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./628/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./628/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./628/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./628/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./628/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./628")                          = 0
mkdir("./629", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6333
./strace-static-x86_64: Process 6333 attached
[pid  6333] chdir("./629")              = 0
[pid  6333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6333] setpgid(0, 0)               = 0
[pid  6333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6333] write(3, "1000", 4)         = 4
[pid  6333] close(3)                    = 0
[pid  6333] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6333] memfd_create("syzkaller", 0) = 3
[pid  6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6333] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6333] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6333] close(3)                    = 0
[pid  6333] mkdir("./file0", 0777)      = 0
[pid  6333] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6333] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6333] chdir("./file0")            = 0
[pid  6333] ioctl(4, LOOP_CLR_FD)       = 0
[  279.490929][ T6333] loop0: detected capacity change from 0 to 4096
[  279.506555][ T6333] NILFS (loop0): invalid segment: Checksum error in segment payload
[  279.514565][ T6333] NILFS (loop0): trying rollback from an earlier position
[  279.528417][ T6333] NILFS (loop0): recovery complete
[pid  6333] close(4)                    = 0
[pid  6333] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6333] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  279.534289][ T6334] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.548639][   T27] audit: type=1800 audit(1676306967.308:631): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6333] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6333] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6333] exit_group(0)               = ?
[pid  6333] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6333, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./629", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./629", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./629/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./629/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./629/binderfs")                = 0
umount2("./629/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./629/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./629/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./629/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./629/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./629/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./629")                          = 0
mkdir("./630", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6335
./strace-static-x86_64: Process 6335 attached
[pid  6335] chdir("./630")              = 0
[pid  6335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6335] setpgid(0, 0)               = 0
[pid  6335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6335] write(3, "1000", 4)         = 4
[pid  6335] close(3)                    = 0
[pid  6335] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6335] memfd_create("syzkaller", 0) = 3
[pid  6335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6335] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6335] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6335] close(3)                    = 0
[pid  6335] mkdir("./file0", 0777)      = 0
[pid  6335] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6335] chdir("./file0")            = 0
[pid  6335] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6335] close(4)                    = 0
[  279.825237][ T6335] loop0: detected capacity change from 0 to 4096
[  279.841805][ T6335] NILFS (loop0): invalid segment: Checksum error in segment payload
[  279.849862][ T6335] NILFS (loop0): trying rollback from an earlier position
[  279.863161][ T6335] NILFS (loop0): recovery complete
[pid  6335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6335] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  279.877066][ T6336] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.887714][   T27] audit: type=1800 audit(1676306967.638:632): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6335] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6335] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6335] exit_group(0)               = ?
[pid  6335] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6335, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./630", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./630", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./630/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./630/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./630/binderfs")                = 0
umount2("./630/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./630/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./630/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./630/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./630/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./630/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./630")                          = 0
mkdir("./631", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6337
./strace-static-x86_64: Process 6337 attached
[pid  6337] chdir("./631")              = 0
[pid  6337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6337] setpgid(0, 0)               = 0
[pid  6337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6337] write(3, "1000", 4)         = 4
[pid  6337] close(3)                    = 0
[pid  6337] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6337] memfd_create("syzkaller", 0) = 3
[pid  6337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6337] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6337] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6337] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6337] close(3)                    = 0
[pid  6337] mkdir("./file0", 0777)      = 0
[pid  6337] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6337] chdir("./file0")            = 0
[pid  6337] ioctl(4, LOOP_CLR_FD)       = 0
[  280.158113][ T6337] loop0: detected capacity change from 0 to 4096
[  280.172998][ T6337] NILFS (loop0): invalid segment: Checksum error in segment payload
[  280.181079][ T6337] NILFS (loop0): trying rollback from an earlier position
[  280.194448][ T6337] NILFS (loop0): recovery complete
[pid  6337] close(4)                    = 0
[pid  6337] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6337] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  280.200797][ T6338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.213419][   T27] audit: type=1800 audit(1676306967.978:633): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6337] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6337] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6337] exit_group(0)               = ?
[pid  6337] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6337, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./631", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./631", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./631/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./631/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./631/binderfs")                = 0
umount2("./631/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./631/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./631/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./631/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./631/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./631/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./631")                          = 0
mkdir("./632", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6339
./strace-static-x86_64: Process 6339 attached
[pid  6339] chdir("./632")              = 0
[pid  6339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6339] setpgid(0, 0)               = 0
[pid  6339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6339] write(3, "1000", 4)         = 4
[pid  6339] close(3)                    = 0
[pid  6339] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6339] memfd_create("syzkaller", 0) = 3
[pid  6339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6339] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6339] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6339] close(3)                    = 0
[pid  6339] mkdir("./file0", 0777)      = 0
[  280.476059][ T6339] loop0: detected capacity change from 0 to 4096
[  280.492204][ T6339] NILFS (loop0): invalid segment: Checksum error in segment payload
[  280.500247][ T6339] NILFS (loop0): trying rollback from an earlier position
[  280.514162][ T6339] NILFS (loop0): recovery complete
[pid  6339] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6339] chdir("./file0")            = 0
[pid  6339] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6339] close(4)                    = 0
[pid  6339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6339] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  280.520023][ T6340] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.535982][   T27] audit: type=1800 audit(1676306968.288:634): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6339] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6339] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6339] exit_group(0)               = ?
[pid  6339] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6339, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./632", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./632", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./632/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./632/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./632/binderfs")                = 0
umount2("./632/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./632/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./632/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./632/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./632/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./632/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./632")                          = 0
mkdir("./633", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6341
./strace-static-x86_64: Process 6341 attached
[pid  6341] chdir("./633")              = 0
[pid  6341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6341] setpgid(0, 0)               = 0
[pid  6341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6341] write(3, "1000", 4)         = 4
[pid  6341] close(3)                    = 0
[pid  6341] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6341] memfd_create("syzkaller", 0) = 3
[pid  6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6341] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6341] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6341] close(3)                    = 0
[pid  6341] mkdir("./file0", 0777)      = 0
[  280.795675][ T6341] loop0: detected capacity change from 0 to 4096
[  280.811667][ T6341] NILFS (loop0): invalid segment: Checksum error in segment payload
[  280.819794][ T6341] NILFS (loop0): trying rollback from an earlier position
[  280.833553][ T6341] NILFS (loop0): recovery complete
[pid  6341] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6341] chdir("./file0")            = 0
[pid  6341] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6341] close(4)                    = 0
[pid  6341] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6341] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  280.839280][ T6342] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.856426][   T27] audit: type=1800 audit(1676306968.618:635): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[pid  6341] sendfile(4, 5, NULL, 2147538701) = 899872
[pid  6341] ioctl(-1, F2FS_IOC_FLUSH_DEVICE, 0) = -1 EBADF (Bad file descriptor)
[pid  6341] exit_group(0)               = ?
[pid  6341] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6341, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./633", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./633", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555db7620 /* 4 entries */, 32768) = 112
umount2("./633/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./633/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./633/binderfs")                = 0
umount2("./633/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./633/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./633/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./633/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./633/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555dbf660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555dbf660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./633/file0")                    = 0
getdents64(3, 0x555555db7620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./633")                          = 0
mkdir("./634", 0777)                    = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555db65d0) = 6343
./strace-static-x86_64: Process 6343 attached
[pid  6343] chdir("./634")              = 0
[pid  6343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  6343] setpgid(0, 0)               = 0
[pid  6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  6343] write(3, "1000", 4)         = 4
[pid  6343] close(3)                    = 0
[pid  6343] symlink("/dev/binderfs", "./binderfs") = 0
[pid  6343] memfd_create("syzkaller", 0) = 3
[pid  6343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2ef2e77000
[pid  6343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  6343] munmap(0x7f2ef2e77000, 2097152) = 0
[pid  6343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  6343] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  6343] close(3)                    = 0
[pid  6343] mkdir("./file0", 0777)      = 0
[pid  6343] mount("/dev/loop0", "./file0", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0
[pid  6343] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  6343] chdir("./file0")            = 0
[  281.124757][ T6343] loop0: detected capacity change from 0 to 4096
[  281.141098][ T6343] NILFS (loop0): invalid segment: Checksum error in segment payload
[  281.149173][ T6343] NILFS (loop0): trying rollback from an earlier position
[  281.163003][ T6343] NILFS (loop0): recovery complete
[pid  6343] ioctl(4, LOOP_CLR_FD)       = 0
[pid  6343] close(4)                    = 0
[pid  6343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_DIRECT|O_NOATIME|O_CLOEXEC, 000) = 4
[pid  6343] openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 5
[  281.169024][ T6344] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.187110][   T27] audit: type=1800 audit(1676306968.938:636): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor137" name="bus" dev="loop0" ino=12 res=0 errno=0
[  281.222874][ T6344] ------------[ cut here ]------------
[  281.229077][ T6344] WARNING: CPU: 1 PID: 6344 at fs/nilfs2/btree.c:2282 nilfs_btree_assign+0xa9f/0xd10
[  281.238789][ T6344] Modules linked in:
[  281.242714][ T6344] CPU: 1 PID: 6344 Comm: segctord Not tainted 6.2.0-rc8-syzkaller #0
[  281.251299][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[  281.261438][ T6344] RIP: 0010:nilfs_btree_assign+0xa9f/0xd10
[  281.267316][ T6344] Code: 00 0f 85 81 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7d 8b 3b fe 4c 8b 7c 24 38 eb a6 e8 71 8b 3b fe <0f> 0b 41 be fe ff ff ff eb 97 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  281.286973][ T6344] RSP: 0018:ffffc9000577f580 EFLAGS: 00010293
[  281.293068][ T6344] RAX: ffffffff835046df RBX: ffff888073975360 RCX: ffff88801fc3d7c0
[  281.301172][ T6344] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 00000000fffffffe
[  281.309242][ T6344] RBP: ffffc9000577f6b0 R08: ffffffff8350403b R09: ffffed100d45c740
[  281.317411][ T6344] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  281.325395][ T6344] R13: ffff888020414b00 R14: 00000000fffffffe R15: 1ffff92000aefec0
[  281.333446][ T6344] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  281.342439][ T6344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.349086][ T6344] CR2: 00007f2ef304b000 CR3: 000000001c713000 CR4: 00000000003506e0
[  281.357096][ T6344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  281.365081][ T6344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  281.373117][ T6344] Call Trace:
[  281.376443][ T6344]  <TASK>
[  281.379395][ T6344]  ? read_lock_is_recursive+0x20/0x20
[  281.384848][ T6344]  ? nilfs_btree_lookup_dirty_buffers+0xfd0/0xfd0
[  281.391350][ T6344]  ? __up_read+0x670/0x670
[  281.395786][ T6344]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  281.401879][ T6344]  nilfs_bmap_assign+0x8b/0x160
[  281.406806][ T6344]  nilfs_segctor_do_construct+0x3a11/0x6f70
[  281.412835][ T6344]  ? nilfs_transaction_unlock+0x210/0x210
[  281.418607][ T6344]  ? nilfs_segctor_confirm+0x24c/0x2d0
[  281.424106][ T6344]  ? rcu_read_lock_sched_held+0x8d/0x130
[  281.429892][ T6344]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  281.435929][ T6344]  ? nilfs_segctor_confirm+0x24c/0x2d0
[  281.441441][ T6344]  ? __lock_acquire+0x1f80/0x1f80
[  281.446537][ T6344]  ? do_raw_spin_unlock+0x13b/0x8b0
[  281.451740][ T6344]  ? _raw_spin_unlock+0x28/0x40
[  281.456712][ T6344]  ? nilfs_segctor_confirm+0x24c/0x2d0
[  281.462199][ T6344]  nilfs_segctor_construct+0x145/0x8c0
[  281.467718][ T6344]  nilfs_segctor_thread+0x53a/0x1140
[  281.473050][ T6344]  ? nilfs_construction_timeout+0x40/0x40
[  281.478818][ T6344]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  281.484735][ T6344]  ? _raw_spin_unlock+0x40/0x40
[  281.489629][ T6344]  ? wake_bit_function+0x220/0x220
[  281.494813][ T6344]  ? _raw_spin_unlock+0x40/0x40
[  281.499735][ T6344]  ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[  281.505744][ T6344]  ? __kthread_parkme+0x164/0x1c0
[  281.510900][ T6344]  kthread+0x270/0x300
[  281.515031][ T6344]  ? nilfs_construction_timeout+0x40/0x40
[  281.520870][ T6344]  ? kthread_blkcg+0xd0/0xd0
[  281.525496][ T6344]  ret_from_fork+0x1f/0x30
[  281.530022][ T6344]  </TASK>
[  281.533082][ T6344] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  281.540370][ T6344] CPU: 1 PID: 6344 Comm: segctord Not tainted 6.2.0-rc8-syzkaller #0
[  281.548428][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[  281.558480][ T6344] Call Trace:
[  281.561754][ T6344]  <TASK>
[  281.564686][ T6344]  dump_stack_lvl+0x1e7/0x2d0
[  281.569414][ T6344]  ? nf_tcp_handle_invalid+0x640/0x640
[  281.574876][ T6344]  ? panic+0x770/0x770
[  281.578955][ T6344]  ? vscnprintf+0x5d/0x80
[  281.583286][ T6344]  panic+0x31c/0x770
[  281.587183][ T6344]  ? __warn+0x16c/0x5f0
[  281.591365][ T6344]  ? memcpy_page_flushcache+0x100/0x100
[  281.596921][ T6344]  ? ret_from_fork+0x1f/0x30
[  281.601520][ T6344]  __warn+0x419/0x5f0
[  281.605504][ T6344]  ? nilfs_btree_assign+0xa9f/0xd10
[  281.610722][ T6344]  ? nilfs_btree_assign+0xa9f/0xd10
[  281.615926][ T6344]  report_bug+0x1bd/0x2d0
[  281.620308][ T6344]  handle_bug+0x3d/0x70
[  281.624469][ T6344]  exc_invalid_op+0x1a/0x50
[  281.628985][ T6344]  asm_exc_invalid_op+0x1a/0x20
[  281.633889][ T6344] RIP: 0010:nilfs_btree_assign+0xa9f/0xd10
[  281.639712][ T6344] Code: 00 0f 85 81 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7d 8b 3b fe 4c 8b 7c 24 38 eb a6 e8 71 8b 3b fe <0f> 0b 41 be fe ff ff ff eb 97 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  281.659334][ T6344] RSP: 0018:ffffc9000577f580 EFLAGS: 00010293
[  281.665403][ T6344] RAX: ffffffff835046df RBX: ffff888073975360 RCX: ffff88801fc3d7c0
[  281.673385][ T6344] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 00000000fffffffe
[  281.681359][ T6344] RBP: ffffc9000577f6b0 R08: ffffffff8350403b R09: ffffed100d45c740
[  281.689333][ T6344] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  281.697303][ T6344] R13: ffff888020414b00 R14: 00000000fffffffe R15: 1ffff92000aefec0
[  281.705279][ T6344]  ? nilfs_btree_assign+0x3fb/0xd10
[  281.710479][ T6344]  ? nilfs_btree_assign+0xa9f/0xd10
[  281.715685][ T6344]  ? read_lock_is_recursive+0x20/0x20
[  281.721078][ T6344]  ? nilfs_btree_lookup_dirty_buffers+0xfd0/0xfd0
[  281.727496][ T6344]  ? __up_read+0x670/0x670
[  281.731932][ T6344]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  281.737929][ T6344]  nilfs_bmap_assign+0x8b/0x160
[  281.742783][ T6344]  nilfs_segctor_do_construct+0x3a11/0x6f70
[  281.748732][ T6344]  ? nilfs_transaction_unlock+0x210/0x210
[  281.754454][ T6344]  ? nilfs_segctor_confirm+0x24c/0x2d0
[  281.759916][ T6344]  ? rcu_read_lock_sched_held+0x8d/0x130
[  281.765553][ T6344]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  281.771557][ T6344]  ? nilfs_segctor_confirm+0x24c/0x2d0
[  281.777013][ T6344]  ? __lock_acquire+0x1f80/0x1f80
[  281.782078][ T6344]  ? do_raw_spin_unlock+0x13b/0x8b0
[  281.787278][ T6344]  ? _raw_spin_unlock+0x28/0x40
[  281.792126][ T6344]  ? nilfs_segctor_confirm+0x24c/0x2d0
[  281.797584][ T6344]  nilfs_segctor_construct+0x145/0x8c0
[  281.803057][ T6344]  nilfs_segctor_thread+0x53a/0x1140
[  281.808393][ T6344]  ? nilfs_construction_timeout+0x40/0x40
[  281.814120][ T6344]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  281.820022][ T6344]  ? _raw_spin_unlock+0x40/0x40
[  281.824882][ T6344]  ? wake_bit_function+0x220/0x220
[  281.830000][ T6344]  ? _raw_spin_unlock+0x40/0x40
[  281.834868][ T6344]  ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[  281.840867][ T6344]  ? __kthread_parkme+0x164/0x1c0
[  281.845917][ T6344]  kthread+0x270/0x300
[  281.849992][ T6344]  ? nilfs_construction_timeout+0x40/0x40
[  281.855713][ T6344]  ? kthread_blkcg+0xd0/0xd0
[  281.860307][ T6344]  ret_from_fork+0x1f/0x30
[  281.864743][ T6344]  </TASK>
[  281.868031][ T6344] Kernel Offset: disabled
[  281.872458][ T6344] Rebooting in 86400 seconds..